If a guy who I already know works for a warcrime-as-a-service company offers me money or asks me how to use my open source project, I will not respond to his email. I will take no further action. I will make absolutely no effort to be proactive, or to set any kind of policy.