# PEAC Security

The top-level security operations are documented in
[`docs/SECURITY-OPERATIONS.md`](../SECURITY-OPERATIONS.md) and the security policy in
[`SECURITY.md`](../../SECURITY.md).

This directory contains transport- and surface-specific security notes:

- [HTTP Transport Security](HTTP-TRANSPORT-SECURITY.md)
- [MCP Compliance Matrix](MCP-COMPLIANCE-MATRIX.md)
- [OWASP ASI Mapping](OWASP-ASI-MAPPING.md)

For normative security considerations on the protocol itself, see
[`docs/specs/SECURITY-CONSIDERATIONS.md`](../specs/SECURITY-CONSIDERATIONS.md)
and [`docs/specs/VERIFIER-SECURITY-MODEL.md`](../specs/VERIFIER-SECURITY-MODEL.md).
