From 8342b0608705df13af6e48693c8853e74e07405a Mon Sep 17 00:00:00 2001
From: Yuqiang Wang <10815391+schchit@users.noreply.github.com>
Date: Wed, 30 Sep 2026 21:10:52 -0500
Subject: [PATCH] Link shared contribution and private security-report routes

---
 CONTRIBUTING.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 10c9477..98feb3a 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -18,4 +18,6 @@ jep --help
 
 Keep each pull request focused. Test changed behavior and update CLI documentation. The command is `jep`; `jep-agent` belongs to the separate local Agent SDK. `jep-runtime` is a retired experiment, retained for historical reproduction. Follow the [repository directory](https://github.com/hjs-spec/.github/blob/main/PROJECTS.md) for maintenance ownership. Protocol requirements stay in [Core](https://github.com/hjs-spec/jep-core).
 
-Contact: signal@humanjudgment.org.
+Use the [shared contribution routes](https://github.com/hjs-spec/.github/blob/main/CONTRIBUTING.md)
+for independent implementations and interoperability reports. Report security-sensitive
+findings [privately](https://github.com/hjs-spec/.github/blob/main/SECURITY.md).