diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..4d128ef
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,21 @@
+# Security Policy
+
+## Supported Versions
+
+Only the latest release is supported with security updates.
+
+## Reporting a Vulnerability
+
+Please report security vulnerabilities through GitHub's private vulnerability reporting:
+
+1. Go to the [Security tab](https://github.com/baudsmithstudios/vigil/security)
+2. Click **"Report a vulnerability"**
+3. Fill out the advisory form with a description, severity, and affected versions
+
+This creates a private advisory visible only to you and the maintainers. Please do not open a public issue for security vulnerabilities.
+
+## What to Expect
+
+- Acknowledgment within 72 hours
+- A fix or mitigation plan within 14 days for confirmed vulnerabilities
+- Credit in the advisory and changelog unless you prefer to remain anonymous
diff --git a/assets/social-preview-minimal.png b/assets/social-preview-minimal.png
new file mode 100644
index 0000000..cc13351
Binary files /dev/null and b/assets/social-preview-minimal.png differ
diff --git a/assets/social-preview-minimal.svg b/assets/social-preview-minimal.svg
new file mode 100644
index 0000000..49acca8
--- /dev/null
+++ b/assets/social-preview-minimal.svg
@@ -0,0 +1,56 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1280 640" width="1280" height="640">
+  <defs>
+    <style>
+      @font-face {
+        font-family: 'Cinzel';
+        src: url('data:font/truetype;base64,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') format('truetype');
+        font-weight: normal;
+        font-style: normal;
+      }
+    </style>
+  </defs>
+
+  <!-- background -->
+  <rect width="1280" height="640" fill="#0C1117"/>
+
+  <!-- corner tick marks -->
+  <line x1="24" y1="24" x2="56" y2="24" stroke="#005f5f" stroke-width="1.5"/>
+  <line x1="24" y1="24" x2="24" y2="56" stroke="#005f5f" stroke-width="1.5"/>
+  <line x1="1224" y1="24" x2="1256" y2="24" stroke="#005f5f" stroke-width="1.5"/>
+  <line x1="1256" y1="24" x2="1256" y2="56" stroke="#005f5f" stroke-width="1.5"/>
+  <line x1="24" y1="616" x2="56" y2="616" stroke="#005f5f" stroke-width="1.5"/>
+  <line x1="24" y1="584" x2="24" y2="616" stroke="#005f5f" stroke-width="1.5"/>
+  <line x1="1224" y1="616" x2="1256" y2="616" stroke="#005f5f" stroke-width="1.5"/>
+  <line x1="1256" y1="584" x2="1256" y2="616" stroke="#005f5f" stroke-width="1.5"/>
+
+  <!-- flanking rules with end brackets -->
+  <line x1="72" y1="300" x2="420" y2="300" stroke="#005f5f" stroke-width="1.5"/>
+  <line x1="420" y1="288" x2="420" y2="312" stroke="#005f5f" stroke-width="1.5"/>
+  <line x1="860" y1="300" x2="1208" y2="300" stroke="#005f5f" stroke-width="1.5"/>
+  <line x1="860" y1="288" x2="860" y2="312" stroke="#005f5f" stroke-width="1.5"/>
+
+  <!-- title -->
+  <text
+    x="640"
+    y="300"
+    font-family="Cinzel, serif"
+    font-size="96"
+    font-weight="400"
+    text-anchor="middle"
+    dominant-baseline="central"
+    letter-spacing="20"
+    fill="#5faf87"
+  >VIGIL</text>
+
+  <!-- tagline -->
+  <text
+    x="640"
+    y="385"
+    font-family="'SF Mono', 'Fira Code', 'JetBrains Mono', monospace"
+    font-size="20"
+    text-anchor="middle"
+    dominant-baseline="central"
+    fill="#8b949e"
+    letter-spacing="1"
+  >A single binary that watches your Pi around the clock. No stack, no agents, no noise.</text>
+</svg>