docs(readme): shorter, concrete value proposition, antivirus alerts for organizations

README goes from 825 to 227 lines. The value proposition comes first
(three concrete outcomes), then install, a first-five-minutes table,
compact hook and command tables, and one section for teams and CI.

New section "Antivirus and EDR alerts": a warning at the top tells
organizations that products such as Microsoft Defender can raise
alerts, what v8.1.0 did about it (and that v8.1.1/v8.1.2 did not touch
it), that nothing has been measured on Windows, what still sits on
disk as readable text, how to report to Microsoft (managed devices via
the Defender portal, single machines via wdsi), and to email
security@fromaitochitta.com so the file can be fixed in a patch.

Corrected claims found by an independent fact-check: the standalone
CLI is not offline (npm audit, pip-audit, DNS, OSV.dev), the secrets
hook has 19 patterns not 30+, /security deep-scan takes no CI flags,
look-alike package names warn rather than block, the Linux bwrap
caveat, and the demo's 85 findings need the LLM half too. Moved to
links: scanner tables, knowledge list, playground, version history.

SECURITY.md: 8.1.x is the active line; antivirus alerts are in scope,
also on knowledge files; the dead README section references fixed.
CLAUDE.md: README section name updated.

repo-standard 22/22, doc-consistency + av-surface 51/0, full suite
2328 / 2322 pass / 0 fail / 6 skipped. Self-scan: README 1 -> 0
findings.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

SECURITY.md

@@ -9,8 +9,9 @@ need stronger guarantees (see [`CONTRIBUTING.md`](CONTRIBUTING.md)).
 
 | Version       | Status                                         |
 |---------------|------------------------------------------------|
-| 8.0.x         | **Active.** Bug + security fixes. Stabilization line. |
-| 7.0.x – 7.8.x | Best-effort security fixes only. Upgrade to 8.0.x recommended. |
+| 8.1.x         | **Active.** Bug + security fixes. Stabilization line. |
+| 8.0.x         | Best-effort security fixes only. Upgrade to 8.1.x recommended. |
+| 7.0.x – 7.8.x | Best-effort security fixes only. Upgrade to 8.1.x recommended. |
 | < 7.0         | End of life. No fixes. |
 
 The project is in **stabilization mode** as of 2026-05-01. New features are
@@ -65,8 +66,9 @@ responsibly.
 - Fix or documented mitigation within 30 days for confirmed High/Critical findings; Medium and Low scheduled into the next regular release
 
 If the report touches a vulnerability the project explicitly cannot defend
-against (see "Defense philosophy" and "What this plugin does NOT cover" in
-the README — e.g., adaptive ML-based prompt injection bypass), the response
+against (see "Known limitations" in the README and
+[`docs/defense-philosophy.md`](docs/defense-philosophy.md) — e.g., adaptive
+ML-based prompt injection bypass), the response
 will explain why it is out of scope rather than leaving the report open.
 
 ## Scope
@@ -79,11 +81,16 @@ This policy covers:
 - Agent definitions (`agents/*.md`)
 - Command definitions (`commands/*.md`)
 - CLI entry point (`bin/llm-security.mjs`)
+- Antivirus or EDR alerts on any tracked file, including knowledge files and
+  examples (see "Antivirus and EDR alerts" in the README). Include the file
+  path, the detection name, the plugin version or commit, and the product and
+  its signature version.
 
 Out of scope:
 
 - The malicious-skill-demo fixture (`examples/malicious-skill-demo/`) — intentionally vulnerable for testing
-- Knowledge base content (derived from published OWASP standards and cited research)
+- Knowledge base content (derived from published OWASP standards and cited research),
+  except antivirus or EDR alerts on it, which are in scope above
 - Template files (output formatting only, not part of the security boundary)
 - Forks under other names — please report there, not here