Add functional spec and security policy