feat: refactor sgclaw around zeroclaw compat runtime

third_party/zeroclaw/docs/security/README.md

@@ -0,0 +1,22 @@
+# Security Docs
+
+This section mixes current hardening guidance and proposal/roadmap documents.
+
+## Current-Behavior First
+
+For current runtime behavior, start here:
+
+- Config reference: [../reference/api/config-reference.md](../reference/api/config-reference.md)
+- Operations runbook: [../ops/operations-runbook.md](../ops/operations-runbook.md)
+- Troubleshooting: [../ops/troubleshooting.md](../ops/troubleshooting.md)
+
+## Proposal / Roadmap Docs
+
+The following docs are explicitly proposal-oriented and may include hypothetical CLI/config examples:
+
+- [agnostic-security.md](agnostic-security.md)
+- [frictionless-security.md](frictionless-security.md)
+- [sandboxing.md](sandboxing.md)
+- [../ops/resource-limits.md](../ops/resource-limits.md)
+- [audit-logging.md](audit-logging.md)
+- [security-roadmap.md](security-roadmap.md)