3 Commits

Author SHA1 Message Date
rcourtman f43929f4c8 Point security disclosures at security@pulserelay.pro
security@pulseapp.io was the published private-disclosure contact in
SECURITY.md and the mirrored doc copies, but pulseapp.io has no MX
records, so every report sent there bounced. security@pulserelay.pro
now has a Cloudflare Email Routing rule (added 2026-09-01) and was
verified accepting mail at the MX before this change.
2026-09-01 15:21:23 +01:00
pulse-triage[bot] 2222c5ce37 Make security review baseline fail closed 2026-09-01 01:02:17 +01:00
rcourtman 2e4e85d9af docs: add focused security review packet 2026-08-16 17:13:02 +01:00