SECURITY.md is a policy, not a threat model: what executes here and what holds it, in a surface table that check 10 holds to a word budget. The shared design - hardening, the human: attribution gate, the prompt-injection guards - moves to docs/threat-model.md, which the sibling repositories link instead of restating; check 9 records the path.
The README is shorter, and its repository tree is now docs/repository-layout.md. The README, docs/ and the skills’ prose no longer quote how many classes and relations LOKF has; the two enumerations check 7 compares stay the only places it is counted.
Three LOKF repositories, not four. The shared pages and this bundle count lokf-agent-skills, LOKF Registrar and LOKF Curator; a host that installs the skills is not one of them.
