we created a simple plan for pen testing, see
https://github.com/w3c/wot-security-testing-plan/blob/master/pentest/README.md
next action is for McCool to update system description, although some documentation already exists in the form of TDs at
https://github.com/w3c/wot/tree/master/testfest/2019-03-online/inputs/Intel
we were going to review the best practices document but McCool's changes did not get pushed up to the repo; will do soon
McCool is also still working on architecture and cleaning up the definition of "runtime" and the security section there
McCool will talk to Victoria Fenwick and Sven Schrecker again, try to get a committment for a date upon which to deliver a review
Elena will do likewise for Terri Oda