docs: add a Built-with-rlm-kit showcase; neutral maintainer contact

- README: new "Built with rlm-kit" adopters section (lists the first public
  consumer + a PR invite so it can grow); fix the doubled author link in the
  license byline (name is now plain text, handle linked once).
- CLAUDE.md: carve out a narrow exception to the vendor-neutral invariant for a
  single public "Built with rlm-kit" adopters list; mechanics/API docs stay generic.
- pyproject / SECURITY / CODE_OF_CONDUCT: replace the work-email contact with the
  maintainer's public handle (Boik Su / @boik_su), keeping the public surface neutral.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: qazbnm456

CLAUDE.md

@@ -115,7 +115,12 @@ One companion rule ships under `.claude/rules/`:
   refer to downstream consumers GENERICALLY ("a consumer", "a downstream UI") — never by a specific
   project name, and never reproducing a consumer's product domain. A consumer's own concrete values
   (model names, schemas, product terms, paths) live in the consumer, not here. This keeps the kit
-  decoupled from any one user and the published artifact free of third-party specifics.
+  decoupled from any one user and the published artifact free of third-party specifics. The ONE
+  exception is a single, clearly-delimited **"Built with rlm-kit"** adopters section in the README: it
+  MAY list real, PUBLIC downstream projects by name + link + a one-line description. That is an adopters
+  list, not design coupling — the kit's mechanics, examples, API docs, and commit messages still describe
+  consumers generically, and a consumer's domain specifics still never appear anywhere else. Only list a
+  consumer that is public and whose maintainer wants the association; never a private or internal one.
 
 ## Versioning
 

CODE_OF_CONDUCT.md

@@ -37,7 +37,7 @@ This Code of Conduct applies within all community spaces, and also applies when
 
 ## Enforcement
 
-Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community leaders responsible for enforcement at boik.su@cycraft.com. All complaints will be reviewed and investigated promptly and fairly.
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community leaders responsible for enforcement, Boik Su ([@boik_su](https://x.com/boik_su)). All complaints will be reviewed and investigated promptly and fairly.
 
 All community leaders are obligated to respect the privacy and security of the reporter of any incident.
 

README.md

@@ -360,6 +360,15 @@ SEPARATE downstream project that installs the trainer. A prompt/policy rule that
 BETTER is in scope; a reward or penalty is not. Keep the trace clean training data and let the
 trainer score it.
 
+## Built with rlm-kit
+
+Real projects using rlm-kit as their RLM scaffold:
+
+- **[cve-reverser](https://github.com/qazbnm456/cve-reverser)**: reverses publicly disclosed CVEs from
+  their patches into local-lab PoCs and Nuclei detection templates. A traced, trainable RLM harness.
+
+Built something on rlm-kit? Open a PR to add it here.
+
 ## Security note — the sandbox is the boundary
 
 RLM executes model-written code. When that code processes untrusted scraped
@@ -454,4 +463,4 @@ GEPA-compile tasks (currently a documented stub).
 
 ## License
 
-MIT © [Boik Su](https://x.com/boik_su) ([@boik_su](https://x.com/boik_su)). See [`LICENSE`](https://github.com/qazbnm456/rlm-kit/blob/main/LICENSE).
+MIT © Boik Su ([@boik_su](https://x.com/boik_su)). See [`LICENSE`](https://github.com/qazbnm456/rlm-kit/blob/main/LICENSE).

SECURITY.md

@@ -2,8 +2,7 @@
 
 ## Reporting a vulnerability
 
-Please do **not** open a public issue for a security vulnerability. Instead, email
-**boik.su@cycraft.com** with:
+Please do **not** open a public issue for a security vulnerability. Instead, DM **Boik Su ([@boik_su](https://x.com/boik_su))** on X with:
 
 - a description of the issue and its impact,
 - steps to reproduce (or a proof of concept), and

pyproject.toml

@@ -6,7 +6,7 @@ readme = "README.md"
 requires-python = ">=3.11"
 license = "MIT"
 license-files = ["LICENSE"]
-authors = [{ name = "Boik Su", email = "boik.su@cycraft.com" }]
+authors = [{ name = "Boik Su" }]
 keywords = [
     "dspy",
     "rlm",