start security model
update specification
add spec status