diff --git a/docs/HARDENING.md b/docs/HARDENING.md
new file mode 100644
index 0000000..ce5b364
--- /dev/null
+++ b/docs/HARDENING.md
@@ -0,0 +1,10 @@
+# Hardening Notes (Beta23)
+
+## File loading safety
+Claro now reads source lines dynamically (no 4KB truncation).
+
+Safety caps (to prevent memory abuse):
+- Maximum single line length: 65,535 characters
+- Maximum program lines: 500,000
+
+If a file exceeds these limits, the loader fails cleanly.