diff --git a/AGENTS.md b/AGENTS.md
index c0b0db0..9b78cd5 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -52,4 +52,12 @@ Guidance for AI coding agents working in this repository.
 
 ### Commits
 
-- Use the `Assisted-By:` trailer (not `Co-Authored-By:`).
\ No newline at end of file
+- Use the `Assisted-By:` trailer (not `Co-Authored-By:`).
+
+## Security
+
+Security model: [SECURITY.md](./SECURITY.md)
+
+Agents that scan this repository should consult `SECURITY.md` for the
+project's threat model, in-scope / out-of-scope declarations, and known
+non-findings before reporting issues.