Security Policy Report to security@csoai.org. Read-only parsing + governance; no autonomous external action.