diff --git a/README.md b/README.md
index 75a4726..add74c3 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,6 @@
 # TTPx
 
-_This is an experiment in creating something useful with AI coding agents. It is a personal hobby project, with no commitments and no promises._
+_This is an experiment in creating something useful with AI coding agents. The initial version was made with Claude Code, but it has since been largely re-written by GPT-5 Codex. It is a personal hobby project, with no commitments and no promises._
 
 TTPx is a platform for internal Red Teams to plan and analyze their operations. The features and functionality are designed with their specific needs in mind, such as:
 
@@ -24,10 +24,14 @@ Development Docs:
 
 ## Contributing
 
-Not currently accepting pull requests - still just an experiment.
+This is still an early experiment, and I'm not ready for big contributions. If you have an idea, please open an issue first. I'd like to play around with it a bit more before deciding if it's useful and what shape it should take.
 
 See [AGENTS.md](AGENTS.md) for engineering standards.
 
+## Security
+
+If you see something scary, please open an issue to let me know.
+
 ## Tech Stack
 
 Initially based on the T3 Stack - Next.js, tRPC, Prisma, TypeScript. Type-safe APIs, server-side rendering, and component-driven design.
diff --git a/docs/roadmap.md b/docs/roadmap.md
new file mode 100644
index 0000000..848156d
--- /dev/null
+++ b/docs/roadmap.md
@@ -0,0 +1,10 @@
+# Roadmap
+
+Maybe nothing. Maybe things like:
+
+- REST API (probably by adding `trpc-openapi` as everything is already defined as tRPC)
+- Import STIX bundles from filesystem (it already imports them from the repo, not a big lift)
+- AI integration via either:
+  - Bundled MCP (can speak to tRPC endpoints)
+  - Integrated chat
+  
\ No newline at end of file