SAMPLE EVIDENCE for SC-01 (made-up app Tidyhaus; not a real review)

GET https://tidyhaus.example/.well-known/security.txt -> HTTP 200
Contact: mailto:security@tidyhaus.example
Expires: 2028-01-31T00:00:00Z