Add a minimal SECURITY.md at repo root with: (1) one sentence saying security reports should go to security@wopr.bot, (2) a link to our responsible-disclosure policy page (even if the page doesn't exist yet — use https://wopr.bot/security as the URL). Under 10 lines. Strictly additive, no other repo changes.
Add a minimal
SECURITY.mdat repo root with: (1) one sentence saying security reports should go to security@wopr.bot, (2) a link to our responsible-disclosure policy page (even if the page doesn't exist yet — use https://wopr.bot/security as the URL). Under 10 lines. Strictly additive, no other repo changes.