README.md

@@ -16,18 +16,6 @@ unicode-carrier smuggling or active content in untrusted text, on any runtime.
 
 **It holds no runnable code.** Data, specifications and fixtures only.
 
-## Table of Contents
-
-- [Install](#install)
-- [Requirements](#requirements)
-- [What it does](#what-it-does)
-- [Non-goals](#non-goals)
-- [Known limitations](#known-limitations)
-- [Contributing](#contributing)
-- [Reporting a wrong entry](#reporting-a-wrong-entry)
-- [Changelog](#changelog)
-- [License](#license)
-
 ## Install
 
 Nothing to install — this repository is **vendored into consumers**, not installed.

SECURITY.md

@@ -18,7 +18,7 @@ detector, and that is a working bypass against every consumer until it is closed
 
 Report privately by email:
 
-- **security@fromaitochitta.com**, with `SECURITY` at the start of the subject.
+- **hello@fromaitochitta.com**, with `SECURITY` at the start of the subject.
 
 Pull requests are not the channel either — they are switched off on the canonical
 repository, and not as an oversight. This repository is vendored into independent runtimes