Reduce release package false positives

docs/release-security.md

@@ -0,0 +1,10 @@
+# Security Notes
+
+Ehwrj is a local War Thunder map companion.
+
+- Network access is limited to the local War Thunder API on loopback.
+- Settings are saved under the current user's local application data folder.
+- The overlay uses standard Windows window styles so mouse input can pass through it.
+- The release package contains the rebuilt application and runtime dependencies only.
+
+Report unexpected behavior with the exact release file hash and reproduction steps.