@whitequark @feld @sun
>> cite any UK regulation to me that prevents me from accepting patches from someone on the OFAC sanctions list

In the United Kingdom, the Regulation of Investigatory Powers Act gives UK police the powers to force suspects to decrypt files or hand over passwords that protect encryption keys. Failure to comply is an offense in its own right, punishable on conviction by a two-year jail sentence or up to five years in cases involving national security.