NRCL-28 Prepare neural-sdk 0.4.2 contact hotfix

.bumpversion.cfg

@@ -1,5 +1,5 @@
 [bumpversion]
-current_version = 0.4.1
+current_version = 0.4.2
 commit = True
 tag = True
 tag_name = v{new_version}
@@ -9,6 +9,6 @@ message = Bump version: {current_version} → {new_version}
 search = version = "{current_version}"
 replace = version = "{new_version}"
 
-[bumpversion:file:neural/__init__.py]
+[bumpversion:file:neural/_version.py]
 search = __version__ = "{current_version}"
 replace = __version__ = "{new_version}"

.github/workflows/publish.yml

@@ -17,6 +17,17 @@ jobs:
         with:
           python-version: "3.11"
 
+      - name: Classify release tag
+        id: release
+        env:
+          RELEASE_TAG: ${{ github.ref_name }}
+        run: |
+          python scripts/validate_release.py classify-tag "${RELEASE_TAG}" >> "${GITHUB_OUTPUT}"
+
+      - name: Validate public contact surfaces
+        run: |
+          python scripts/validate_release.py validate-source .
+
       - name: Install build tools
         run: |
           python -m pip install --upgrade pip
@@ -26,6 +37,11 @@ jobs:
         run: |
           python -m build --no-isolation
 
+      - name: Validate release artifacts
+        run: |
+          twine check dist/*
+          python scripts/validate_release.py validate-artifacts dist/*
+
       - name: Verify source distribution installs cleanly
         run: |
           python -m venv /tmp/neural-publish-sdist-venv
@@ -36,47 +52,17 @@ jobs:
           /tmp/neural-publish-sdist-venv/bin/python "${GITHUB_WORKSPACE}/scripts/package_smoke.py"
 
       - name: Publish to PyPI
+        if: steps.release.outputs.channel == 'pypi'
         env:
           TWINE_USERNAME: __token__
           TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
         run: |
-          twine check dist/*
           twine upload --non-interactive --skip-existing dist/*
 
-  publish-testpypi:
-    runs-on: ubuntu-latest
-    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && contains(github.ref, '-')
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Set up Python
-        uses: actions/setup-python@v5
-        with:
-          python-version: "3.11"
-
-      - name: Install build tools
-        run: |
-          python -m pip install --upgrade pip
-          pip install build twine wheel "setuptools>=77"
-
-      - name: Build package
-        run: |
-          python -m build --no-isolation
-
-      - name: Verify source distribution installs cleanly
-        run: |
-          python -m venv /tmp/neural-testpypi-sdist-venv
-          /tmp/neural-testpypi-sdist-venv/bin/python -m pip install --upgrade pip
-          /tmp/neural-testpypi-sdist-venv/bin/python -m pip install "setuptools>=77" wheel
-          /tmp/neural-testpypi-sdist-venv/bin/python -m pip install --no-build-isolation dist/*.tar.gz
-          cd /tmp
-          /tmp/neural-testpypi-sdist-venv/bin/python "${GITHUB_WORKSPACE}/scripts/package_smoke.py"
-
       - name: Publish to TestPyPI
+        if: steps.release.outputs.channel == 'testpypi'
         env:
           TWINE_USERNAME: __token__
           TWINE_PASSWORD: ${{ secrets.TESTPYPI_API_TOKEN }}
         run: |
-          twine check dist/*
           twine upload --repository testpypi --non-interactive --skip-existing dist/*

.github/workflows/release-dry-run.yml

@@ -19,6 +19,10 @@ jobs:
         with:
           python-version: "3.11"
 
+      - name: Validate public contact surfaces
+        run: |
+          python scripts/validate_release.py validate-source .
+
       - name: Install build tools
         run: |
           python -m pip install --upgrade pip
@@ -31,6 +35,7 @@ jobs:
       - name: Check package metadata
         run: |
           twine check dist/*
+          python scripts/validate_release.py validate-artifacts dist/*
 
       - name: Validate wheel install path
         run: |

CHANGELOG.md

@@ -6,6 +6,12 @@ The format is based on Keep a Changelog and this project adheres to Semantic Ver
 
 ## [Unreleased]
 
+## [0.4.2] - 2026-07-23
+
+### Security
+- Replaced public contact addresses on domains not controlled by the maintainers with the accountable maintainer address.
+- Removed the uncontrolled contributor-domain address from package author and maintainer metadata.
+
 ## [0.4.1] - 2026-04-12
 
 ### Added

CODE_OF_CONDUCT.md

@@ -27,7 +27,7 @@ Community leaders are responsible for clarifying and enforcing our standards of
 This Code of Conduct applies within all community spaces, and also applies when an individual is officially representing the community in public spaces.
 
 ## Enforcement
-Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the project team at contributors@neural-sdk.dev. All complaints will be reviewed and investigated promptly and fairly.
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the project team at hudson@intelip.co. All complaints will be reviewed and investigated promptly and fairly.
 
 All community leaders are obligated to respect the privacy and security of the reporter of any incident.
 
@@ -42,4 +42,4 @@ Community leaders will follow these Community Impact Guidelines in determining t
 ## Attribution
 This Code of Conduct is adapted from the Contributor Covenant, version 2.1, available at https://www.contributor-covenant.org/version/2/1/code_of_conduct.html
 
-For answers to common questions about this code of conduct, see https://www.contributor-covenant.org/faq.
+For answers to common questions about this code of conduct, see https://www.contributor-covenant.org/faq.

CONTRIBUTING.md

@@ -15,7 +15,7 @@ This document provides guidelines and instructions for contributing to Neural SD
 
 ## Code of Conduct
 
-This project adheres to a [Code of Conduct](CODE_OF_CONDUCT.md). By participating, you are expected to uphold this code. Please report unacceptable behavior to contributors@neural-sdk.dev.
+This project adheres to a [Code of Conduct](CODE_OF_CONDUCT.md). By participating, you are expected to uphold this code. Please report unacceptable behavior to hudson@intelip.co.
 
 ## Getting Started
 
@@ -430,6 +430,6 @@ Contributors are recognized in:
 
 - **Documentation**: https://neural-sdk.mintlify.app
 - **Discussions**: https://github.com/IntelIP/Neural/discussions
-- **Email**: contributors@neural-sdk.dev
+- **Email**: hudson@intelip.co
 
-Thank you for contributing to Neural SDK!
+Thank you for contributing to Neural SDK!

MANIFEST.in

@@ -4,4 +4,6 @@ include CHANGELOG.md
 recursive-include docs *
 recursive-include neural *.py
 include neural/py.typed
-global-exclude *.py[cod] __pycache__ *.so *.dylib
+exclude tests/test_contact_security.py
+exclude tests/test_release_validation.py
+global-exclude *.py[cod] __pycache__ *.so *.dylib

docs/mint.json

@@ -19,7 +19,7 @@
   "topbarLinks": [
     {
       "name": "Support",
-      "url": "mailto:support@neural-sdk.com"
+      "url": "mailto:hudson@intelip.co"
     }
   ],
   "topbarCtaButton": {

docs/openapi/authentication-schemes.yaml

@@ -30,7 +30,7 @@ info:
   version: 1.0.0
   contact:
     name: Neural SDK Support
-    email: support@neural-sdk.com
+    email: hudson@intelip.co
     url: https://github.com/IntelIP/Neural
   license:
     name: MIT
@@ -495,4 +495,4 @@ tags:
   - name: Authorization
     description: Authorization flows and permissions
   - name: Security
-    description: Security best practices and error handling
+    description: Security best practices and error handling

docs/openapi/data-collection-apis.yaml

@@ -27,7 +27,7 @@ info:
   version: 1.0.0
   contact:
     name: Neural SDK Support
-    email: support@neural-sdk.com
+    email: hudson@intelip.co
     url: https://github.com/IntelIP/Neural
   license:
     name: MIT
@@ -806,4 +806,4 @@ tags:
   - name: ESPN Sports Data
     description: Real-time sports scores and team information from ESPN API
   - name: Twitter API
-    description: Social media data and sentiment analysis from Twitter API
+    description: Social media data and sentiment analysis from Twitter API

docs/openapi/data-models.yaml

@@ -25,7 +25,7 @@ info:
   version: 1.0.0
   contact:
     name: Neural SDK Support
-    email: support@neural-sdk.com
+    email: hudson@intelip.co
     url: https://github.com/IntelIP/Neural
   license:
     name: MIT
@@ -1022,4 +1022,4 @@ components:
     ErrorCategory:
       type: string
       enum: [validation, authentication, authorization, rate_limit, server, network]
-      description: Error category enumeration
+      description: Error category enumeration

docs/openapi/fix-protocol.yaml

@@ -33,7 +33,7 @@ info:
   version: 5.0.2
   contact:
     name: Neural SDK Support
-    email: support@neural-sdk.com
+    email: hudson@intelip.co
     url: https://github.com/IntelIP/Neural
   license:
     name: MIT
@@ -889,4 +889,4 @@ tags:
   - name: Market Data
     description: Real-time market data subscriptions and updates
   - name: System Messages
-    description: System-level messages and error handling
+    description: System-level messages and error handling

docs/openapi/kalshi-trading-api.yaml

@@ -18,7 +18,7 @@ info:
   version: 2.0.0
   contact:
     name: Neural SDK Support
-    email: support@neural-sdk.com
+    email: hudson@intelip.co
     url: https://github.com/IntelIP/Neural
   license:
     name: MIT
@@ -922,4 +922,4 @@ tags:
   - name: Order Management
     description: Order creation, modification, and cancellation
   - name: Historical Data
-    description: Historical market data for analysis
+    description: Historical market data for analysis

docs/openapi/websocket-api.yaml

@@ -26,7 +26,7 @@ info:
   version: 2.0.0
   contact:
     name: Neural SDK Support
-    email: support@neural-sdk.com
+    email: hudson@intelip.co
     url: https://github.com/IntelIP/Neural
 
 servers:
@@ -615,4 +615,4 @@ tags:
   - name: Trading
     description: Order and position update channels
   - name: System
-    description: System messages and errors
+    description: System messages and errors

neural/_version.py

@@ -1,3 +1,3 @@
 """Single-source package version metadata."""
 
-__version__ = "0.4.1"
+__version__ = "0.4.2"

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "neural-sdk"
-version = "0.4.1"
+version = "0.4.2"
 description = "Professional-grade SDK for algorithmic trading on prediction markets (Beta - Core features stable, advanced modules experimental)"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -19,11 +19,10 @@ keywords = [
 ]
 authors = [
     { name = "Hudson Aikins", email = "hudson@intelip.co" },
-    { name = "Neural Contributors", email = "contributors@neural-sdk.dev" }
+    { name = "Neural Contributors" }
 ]
 maintainers = [
-    { name = "Advanced Intellectual Labs LLC", email = "hudson@intelip.co" },
-    { name = "Neural Contributors", email = "contributors@neural-sdk.dev" }
+    { name = "Advanced Intellectual Labs LLC", email = "hudson@intelip.co" }
 ]
 classifiers = [
     "Development Status :: 4 - Beta",

scripts/generate_openapi_specs.py

@@ -19,7 +19,7 @@ def __init__(self, output_dir: Path = Path("docs/openapi")):
                 "title": "Neural SDK API",
                 "version": "0.3.0",
                 "description": "REST API for Neural SDK trading and data collection functionality",
-                "contact": {"name": "Neural SDK Team", "email": "support@neural-sdk.com"},
+                "contact": {"name": "Neural SDK Team", "email": "hudson@intelip.co"},
                 "license": {
                     "name": "MIT",
                     "url": "https://github.com/IntelIP/Neural/blob/main/LICENSE",