Document trust boundaries, secrets handling, dependency risk, and security review requirements here.