Explicitely mention that the requirements are meant to change and strengthen over time (thanks gmaxwell)
Add a bug reporting policy as an optional criteria (thanks gmaxwell)