[security] First draft of tree