Security Policy — pending final legal review.