- Change model from sonnet to opus for all three security coder agents
- Add clear differentiation from security-auditor with use-case boundaries
- Implement environment-specific clickjacking protection guidance
- Add WebView data cleanup recommendations for mobile security
- Standardize terminology to use 'allowlist' consistently
- Complete cross-platform security examples for mobile development
- Fix repetitive phrasing in behavioral traits
- Align all security practices with reference material requirements
