docs: Add OWASP ASVS badge to README

Author: thced

README.md

@@ -5,6 +5,7 @@
 [![Code Smells](https://sonarcloud.io/api/project_badges/measure?project=extenda_openapi-httpserver-java&metric=code_smells&token=c87f52089c6158081787f26e272d0a0e412c205b)](https://sonarcloud.io/dashboard?id=extenda_openapi-httpserver-java)
 [![Duplicated Lines (%)](https://sonarcloud.io/api/project_badges/measure?project=extenda_openapi-httpserver-java&metric=duplicated_lines_density&token=c87f52089c6158081787f26e272d0a0e412c205b)](https://sonarcloud.io/dashboard?id=extenda_openapi-httpserver-java)
 [![WorkFlow](https://github.com/extenda/openapi-httpserver-java/actions/workflows/commit.yaml/badge.svg)](https://github.com/extenda/openapi-httpserver-java/actions)
+[![OWASP ASVS](https://img.shields.io/badge/OWASP_ASVS_5.0-Level_2_V12-blueviolet)](docs/security/owasp-asvs.md)
 
 A lightweight Java library that wraps the JDK's `com.sun.net.httpserver.HttpServer` and serves
 endpoints declared in an OpenAPI 3.1.x specification. Handlers are pure functions registered by

docs/superpowers/plans/2026-05-21-owasp-asvs.md

@@ -438,7 +438,7 @@ SKIP=commitlint git commit -m "ci: Wire ASVS gate workflow on PRs targeting mast
 
 - Modify: `README.md` (insert a badge in the existing badge block at lines 3–7)
 
-- [ ] **Step 1: Insert the badge**
+- [x] **Step 1: Insert the badge**
 
 Open `README.md`. Find the existing badge block:
 
@@ -458,23 +458,23 @@ Immediately after the `WorkFlow` badge line (line 7), insert one new line:
 
 The badge block becomes six badges total. The link uses a relative path so it works on GitHub web, raw clones, and IDE preview.
 
-- [ ] **Step 2: Verify the badge renders**
+- [x] **Step 2: Verify the badge renders**
 
 ```bash
 grep -n "OWASP_ASVS_5.0-Level_2_V12" README.md
 ```
 
 Expected: one match at line 8.
 
-- [ ] **Step 3: Run pre-commit on the modified README**
+- [x] **Step 3: Run pre-commit on the modified README**
 
 ```bash
 pre-commit run --files README.md
 ```
 
 Expected: all hooks pass (editorconfig, trailing whitespace, end-of-file).
 
-- [ ] **Step 4: Commit**
+- [x] **Step 4: Commit**
 
 ```bash
 git add README.md