Security model: SECURITY.md