This file is read by automated agents (security scanners, code analyzers, AI assistants) operating on this repository.
Security model: SECURITY.md -> the Apache CXF umbrella threat model at https://github.com/apache/cxf/blob/main/THREAT_MODEL.md
This repository is shared build utilities for the Apache CXF project — build-time tooling, not a runtime service. It is placed out of the runtime threat model by the Apache CXF umbrella model linked above; agents should consult that document before reporting issues.