disclosure: add security@undefect.com contact to whitepaper §16 and gumyum minecraft page

whitepaper/MD5SUMS

@@ -6,4 +6,5 @@ f076f22e9e70a94f51884562aad6fdc5  undefect-cwe407-2026-03-25.pdf
 ff52abf9f47a7e6bb25e4519b1325090  undefect-minecraft-enterprise-java-2026-03-24.pdf
 c7fe499eb004271b384a31ac01b38852  undefect-minecraft-enterprise-java-2026-03-25.pdf
 818d29731df88333d29cfdd3eefeb3a2  undefect-minecraft-enterprise-java-2026-03-26.pdf
-a10aed2e5e846290cbe61120d8ef7520  undefect-cwe407-2026-03-27.pdf
+0d40ee31fabc080e713520d2bb528719  undefect-cwe407-2026-03-27.pdf
+247fe2afd56be7dabda54875bc60d77f  undefect-minecraft-enterprise-java-2026-03-27.pdf

whitepaper/full-paper.md

@@ -1666,6 +1666,9 @@ is constant. This confirms the thesis: CWE-407 concentrates in core algorithmic
 
 ## 16. Disclosure Plan
 
+**Contact:** `security@undefect.com` — for maintainers, researchers, or vendors responding
+to this disclosure. All coordinated disclosure communication goes through this address.
+
 1. All 42 patched sites have patches, unit tests with operation counts, and integration
    tests. solc-0001/0002 and frrouting-0002 patches pending.
 2. This white paper completes the proof record for each site.

whitepaper/gumyum/gumyum-minecraft-enterprize-java-edition.md

@@ -484,6 +484,9 @@ Remaining paths not yet scanned:
 
 ## 9. Disclosure
 
+**Contact:** `security@undefect.com` — coordinated disclosure inquiries, vendor responses,
+and patch coordination.
+
 **minecraft-0001 / minecraft-0002:** bugs.mojang.com (public bug tracker, "Performance"
 category). Minecraft is not open source; disclosure is from decompiled bytecode.