Prepare to go public as a read-only project

README.md

@@ -363,3 +363,9 @@ the agentloop versions each release supports.
 release may change the public API exposed through `agentloop.__all__`.
 
 Licensed under the Apache License 2.0.
+
+## Contributions
+
+This project is open source but does not accept external contributions or pull requests.
+To report a security vulnerability, see the
+[security policy](https://github.com/based-models/agent-loop/security/policy).

SECURITY.md

@@ -0,0 +1,14 @@
+# Security policy
+
+## Reporting a vulnerability
+
+Please report vulnerabilities privately through GitHub: open the
+[Security tab](https://github.com/based-models/agent-loop/security) and choose
+**Report a vulnerability**. Do not post details publicly.
+
+You can expect an acknowledgement, and a fix or an explanation, as time allows. This project is
+maintained by a small team and does not accept external contributions.
+
+## Supported versions
+
+Only the latest release on PyPI receives fixes.

pyproject.toml

@@ -37,6 +37,7 @@ dev           = [
 
 [project.urls]
 Repository = "https://github.com/based-models/agent-loop"
+Documentation = "https://www.basedmodels.com/docs/agent-loop"
 Changelog = "https://github.com/based-models/agent-loop/blob/main/CHANGELOG.md"
 
 # No [project.scripts]: agentloop is a library and has no command.