update security posture

Author: anaef

NEWS.md

@@ -1,6 +1,11 @@
 # Lua Template Release Notes
 
 
+## Release 1.1.1
+
+- Update security posture.
+
+
 ## Release 1.1.0 (2026-07-31)
 
 - Add Lua 5.5 to the tested versions.

SECURITY.md

@@ -4,6 +4,6 @@
 
 Lua Template trusts callers, template sources, the Lua runtime, and capabilities exposed by render
 environments. Templates execute Lua expressions with those capabilities. Applications are
-responsible for sandboxing, access control, resource limits, and context-appropriate escaping.
-Issues requiring these assumptions to be violated are outside the project's security scope, but may
-remain robustness or correctness issues.
+responsible for sandboxing, access control, process isolation, resource limits, and
+context-appropriate escaping. Issues requiring these assumptions to be violated are outside the
+project's security scope, but may remain robustness or correctness issues.