Add draft security threat model (THREAT_MODEL.md + SECURITY.md + AGENTS.md)#3052

Merged

cgivre merged 3 commits into

apache:masterfrom

potiuk:asf-security/threat-model-2026-06-18

Jun 26, 2026

Commits on Jun 19, 2026

Add draft security threat model (THREAT_MODEL.md + SECURITY.md + AGENTS.md)
potiuk
committed

Commits on Jun 21, 2026

Drop .ratignore — drill's apache-rat-plugin uses pom <excludes> (which already covers **/*.md), so .ratignore is unread here and is itself the lone unapproved-license file failing RAT
potiuk
committed

Commits on Jun 24, 2026

Fold Drill PMC review (cgivre, PR #3052): contrib/ plugins in scope; storage-enumeration is by-design
potiuk
committed