Merge pull request #192 from anonimal/VRP

VRP: add bounty eligibility to preamble

VULNERABILITY_RESPONSE_PROCESS.md

@@ -15,6 +15,10 @@
 
 4. Bounty will be released for all projects in Monero XMR only. For more information on how to use Monero, visit the [Monero website](https://getmonero.org)
 
+5. Bounty is not eligible to those who:
+   - do not abide by the VRP for responsible disclosure
+   - do not allow the completion of VRP points I through IV
+
 ## Preamble (Kovri)
 
 1. While Kovri is in a pre-Alpha release state, do not use HackerOne for disclosure. All Kovri issues MUST be directed to either [GitHub](https://github.com/monero-project/kovri) or Email