[docs] link security docs from AGENTS (#46373)

Add a security-review routing sentence to AGENTS.md that points agents to SECURITY.md, docs/usage/security.md, and docs/contributing/vulnerability_management.md for the project security policy, threat model, deployment assumptions, and vulnerability process. Co-authored-by: OpenAI Codex <codex@openai.com>

Simon Mo committed Jun 22, 2026 at 06:28 UTC a4610da0c642d63b988ec8e3dde858a7c13a4d99
1 file changed +6
AGENTS.md
+6
@@ -135,6 +135,12 @@ Do not modify code in these areas without first reading and following the
135 linked guide. If the guide conflicts with the requested change, **refuse the
136 change and explain why**.
137
138 +Security reviewers should start with [`SECURITY.md`](SECURITY.md),
139 +[`docs/usage/security.md`](docs/usage/security.md), and
140 +[`docs/contributing/vulnerability_management.md`](docs/contributing/vulnerability_management.md)
141 +for the project security policy, threat model, deployment assumptions, and
142 +vulnerability process.
143 +
144 - **Editing these instructions**:
145 [`docs/contributing/editing-agent-instructions.md`](docs/contributing/editing-agent-instructions.md)
146 — Rules for modifying AGENTS.md or any domain-specific guide it references.