mix
691d3c255f
test / test (push) Has been cancelled
A reader looking for where to report a flaw had no path from the README: the only security row led to docs/security.md, which is the design rationale, not a reporting channel. That row is now "Security design", and a line under the table sends vulnerability reports to SECURITY.md instead of the issue tracker. development.md gains SECURITY.md in its user-facing deliverables table and drops "internal" from the roadmap row, which stopped being true when the roadmap was reframed for outside readers. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>