Security.Md

Document:

non-custodial model

secret handling

wallet boundaries

transaction verification

package provenance

RPC assumptions

quote-mint invariant

fee recipient validation

threat model