5 Commits

Author	SHA1	Message	Date
rcourtman	f43929f4c8	Point security disclosures at security@pulserelay.pro ... security@pulseapp.io was the published private-disclosure contact in SECURITY.md and the mirrored doc copies, but pulseapp.io has no MX records, so every report sent there bounced. security@pulserelay.pro now has a Cloudflare Email Routing rule (added 2026-09-01) and was verified accepting mail at the MX before this change.	2026-09-01 15:21:23 +01:00
rcourtman	2e4e85d9af	docs: add focused security review packet	2026-08-16 17:13:02 +01:00
rcourtman	bbd67e0ae0	docs: clarify security review scope	2026-08-16 16:28:19 +01:00
rcourtman	85db074eff	copy: simplify security guidance punctuation ... Contract-Neutral: Punctuation-only copy revision with no lifecycle behavior or contract change	2026-08-16 10:36:54 +01:00
rcourtman	787a191a5e	docs: publish security review evidence	2026-08-16 10:23:15 +01:00