Both were point-in-time reports whose status lines had gone stale and
whose evidence lived only in untracked scratch folders. What still holds
moved to AGENTS.md (registry history, example workflow rules) and
SECURITY.md (what the rules do not cover); CHANGELOG.md already records
the changes they described.
SECURITY.md states what the pack reads, writes and never does, and how
to report a problem privately. CONTRIBUTING.md covers useful bug reports
and the checks a pull request runs. Both stay out of the Registry archive.