Contact: mailto:security@example.com
Expires: 2030-01-01T00:00:00Z
Policy: https://example.com/security
# Stub for D-SEC-011. TODO: update contact domain & policy URL before production.