diff --git a/.actrc b/.actrc
new file mode 100644
index 000000000..9a588c32f
--- /dev/null
+++ b/.actrc
@@ -0,0 +1,3 @@
+-P ubuntu-latest=catthehacker/ubuntu:act-latest
+--env ACT=true
+-v
diff --git a/.github/COPILOT_SDLC_SUMMARY.md b/.github/COPILOT_SDLC_SUMMARY.md
index 7e9338604..c6f52ac92 100644
--- a/.github/COPILOT_SDLC_SUMMARY.md
+++ b/.github/COPILOT_SDLC_SUMMARY.md
@@ -343,9 +343,8 @@ Copilot generates:
 **Files:**
 - `.github/workflows/README.md` - Workflow documentation
 - `docs/getting-started/PRD.md` - Product requirements
-TODO: SECURITY.md lives at docs/security/SECURITY.md and project overview is docs/README.md; update paths here.
-- `SECURITY.md` - Security policies
-- `README.md` - Project overview
+- `docs/security/SECURITY.md` - Security policies
+- `docs/README.md` - Project overview
 
 ---