doc: remove self from security contacts.
What changed, and why it matters
This commit simply removes one email address (Rusty Russell's personal address) from the project's public security contact list, leaving only the Blockstream security address. It is a documentation-only administrative change with no code changes and no security vulnerability.
No action required; treat as routine documentation maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
A single line deletion in doc/contribute-to-core-lightning/security-policy.md removes rusty@rustcorp.com.au from the vulnerability reporting contacts. No source code, build scripts, tests, or cryptographic material is modified.
Changed components
doc/contribute-to-core-lightning/security-policy.mdInspect captured patch +1 / −2
diff --git a/doc/contribute-to-core-lightning/security-policy.md b/doc/contribute-to-core-lightning/security-policy.md
index 6f950bc6..4c45c189 100644
--- a/doc/contribute-to-core-lightning/security-policy.md
+++ b/doc/contribute-to-core-lightning/security-policy.md
@@ -12,8 +12,7 @@ We have a 3 month release cycle, and the last two versions are supported.
## Reporting a Vulnerability
-To report security vulnerabilities, please send an email to one of the following addresses:
-- `rusty@rustcorp.com.au`
+To report security vulnerabilities, please send an email to:
- `security@blockstream.com`
Note: These email addresses are exclusively for vulnerability reporting.
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.