Update notes for submitted changes

* m7-common: Don't allow insecure allocations from MM heap