diff --git a/SECURITY-AUDIT-2026-06-01.md b/SECURITY-AUDIT-2026-06-01.md
new file mode 100644
index 0000000..55fec38
--- /dev/null
+++ b/SECURITY-AUDIT-2026-06-01.md
@@ -0,0 +1,8 @@
+# Security Audit — rosa-regional-platform-cli
+**Date:** 2026-06-01  
+**Auditor:** security-audit-agent (automated)  
+**Scope:** Full repository static analysis — Go source, Lambda handler, CLI commands
+
+This file is a placeholder to accompany the security audit pull request.
+All findings and their full descriptions are in the PR body.
+Do not merge this PR — triage the findings in the PR description and track remediation separately.