SECURITY
Report a security issue
How to tell the office about a security problem on this surface.
- Contact: mk@agent-kg.ai — the machine contact in /.well-known/security.txt.
- In scope: the door, the receipts, the keyring, the kit files, the export. Out of scope: Cloudflare's own services and the writers' own doors.
- Keys: the office signing key is rco-office-2026-10. A receipt that does not verify against the keyring is not the office's.
- The office acknowledges a report and says what it did.