docs: align published and security guidance

README.md

@@ -14,6 +14,8 @@ Lildra is a small Chrome and Edge Manifest V3 extension that gives Canvas/QLearn
 
 Lildra requests only `activeTab` and `scripting`. It has no analytics, remote code, settings, popup, or persistent site access.
 
+Lildra is intended to be requested for use by Queensland Department of Education school staff. It is an independent Napper.au project and is not approved or endorsed by the Queensland Department of Education or any educational institution.
+
 ## Install locally
 
 1. Open `chrome://extensions` in Chrome or `edge://extensions` in Edge.
@@ -29,4 +31,8 @@ Follow the manual checklist in [AGENTS.md](AGENTS.md). There is no build step an
 
 ## Privacy and security
 
-Lildra runs only after an explicit toolbar click or keyboard command. It processes the active supported page locally to provide its focused layout, but does not store or transmit page content. The package contains no analytics or remote scripts.
+Lildra runs only after an explicit toolbar click or keyboard command. It processes the selected supported lesson locally to validate the route and Canvas structure, apply its focused layout, and display the lesson title. It does not retain or transmit lesson content, titles, addresses, or usage information.
+
+The extension has no persistent site access, storage, analytics, telemetry, advertising, tracking, remote code, or extension-initiated network requests. Canvas, QLearn, and embedded lesson resources continue communicating with their existing providers independently of Lildra.
+
+See the [privacy policy](docs/PRIVACY.md), [security policy](SECURITY.md), and [security review summary](docs/SECURITY_REVIEW.md).