diff --git a/core/_download/WebAssembly.pdf b/core/_download/WebAssembly.pdf
index f108e2193d..6c15d51b74 100644
Binary files a/core/_download/WebAssembly.pdf and b/core/_download/WebAssembly.pdf differ
diff --git a/core/bikeshed/index.html b/core/bikeshed/index.html
index c510fd12d1..d9a22445ec 100644
--- a/core/bikeshed/index.html
+++ b/core/bikeshed/index.html
@@ -6,7 +6,7 @@
   <meta content="ED" name="w3c-status">
   <meta content="Bikeshed version 6270e4735, updated Tue Aug 6 12:12:30 2024 -0700" name="generator">
   <link href="https://www.w3.org/TR/wasm-core-2/" rel="canonical">
-  <meta content="12bf474e2443df28dd208ba627b8bce077f3a6cb" name="revision">
+  <meta content="f1e8a19b947452fd4e9c451ba52da9144107e012" name="revision">
   <meta content="dark light" name="color-scheme">
   <meta charset="utf-8">
 <style>/* mathjax2katex fixes */
diff --git a/js-api/index.html b/js-api/index.html
index 079e3a26c8..5e946a0d0f 100644
--- a/js-api/index.html
+++ b/js-api/index.html
@@ -6,7 +6,7 @@
   <meta content="ED" name="w3c-status">
   <meta content="Bikeshed version 6270e4735, updated Tue Aug 6 12:12:30 2024 -0700" name="generator">
   <link href="https://www.w3.org/TR/wasm-js-api-2/" rel="canonical">
-  <meta content="12bf474e2443df28dd208ba627b8bce077f3a6cb" name="revision">
+  <meta content="f1e8a19b947452fd4e9c451ba52da9144107e012" name="revision">
   <meta content="dark light" name="color-scheme">
 <style>
 emu-const {
diff --git a/web-api/index.html b/web-api/index.html
index 6fff9fb49a..5fcb74f919 100644
--- a/web-api/index.html
+++ b/web-api/index.html
@@ -6,7 +6,7 @@
   <meta content="ED" name="w3c-status">
   <meta content="Bikeshed version 6270e4735, updated Tue Aug 6 12:12:30 2024 -0700" name="generator">
   <link href="https://www.w3.org/TR/wasm-web-api-2/" rel="canonical">
-  <meta content="12bf474e2443df28dd208ba627b8bce077f3a6cb" name="revision">
+  <meta content="f1e8a19b947452fd4e9c451ba52da9144107e012" name="revision">
   <meta content="dark light" name="color-scheme">
 <style>/* Boilerplate: style-autolinks */
 .css.css, .property.property, .descriptor.descriptor {
@@ -796,10 +796,11 @@ <h2 class="no-num no-toc no-ref" id="contents">Table of Contents</h2>
     <li><a href="#serialization"><span class="secno">3</span> <span class="content">Serialization</span></a>
     <li><a href="#conventions"><span class="secno">4</span> <span class="content">Developer-Facing Display Conventions</span></a>
     <li><a href="#mediaType"><span class="secno">5</span> <span class="content">Media-type Registration</span></a>
+    <li><a href="#security-considerations"><span class="secno">6</span> <span class="content">Security and Privacy Considerations</span></a>
     <li>
-     <a href="#change-history"><span class="secno">6</span> <span class="content">Change History</span></a>
+     <a href="#change-history"><span class="secno">7</span> <span class="content">Change History</span></a>
      <ol class="toc">
-      <li><a href="#release-20"><span class="secno">6.1</span> <span class="content">Release 2.0</span></a>
+      <li><a href="#release-20"><span class="secno">7.1</span> <span class="content">Release 2.0</span></a>
      </ol>
     <li>
      <a href="#w3c-conformance"><span class="secno"></span> <span class="content">Conformance</span></a>
@@ -1065,11 +1066,20 @@ <h2 class="heading settled" data-level="5" id="mediaType"><span class="secno">5.
       <dd>W3C
      </dl>
    </dl>
-   <h2 class="heading settled" data-level="6" id="change-history"><span class="secno">6. </span><span class="content">Change History</span><a class="self-link" href="#change-history"></a></h2>
+   <h2 class="heading settled" data-level="6" id="security-considerations"><span class="secno">6. </span><span class="content">Security and Privacy Considerations</span><a class="self-link" href="#security-considerations"></a></h2>
+   <p><em>This section is non-normative.</em></p>
+    WebAssembly provides no access to the surrounding environment other than via the JavaScript API described in the <a data-link-type="biblio" href="#biblio-wasmjs" title="WebAssembly JS Integration Specification">JS API</a> specification.
+Therefore, WebAssembly cannot collect or expose any information (personal, sensitive or otherwise) to Web sites or other parties beyond what can be collected, exposed or processed with JavaScript.
+WebAssembly memory has the same lifetime as the objects in the surrounding JavaScript environment and is not persisted or serialized (other than by copying it out to JavaScript and using existing serialization APIs).
+No access is provided to the underlying platform or hardware, or to other devices, or to the user agent’s native UI. 
+   <p>WebAssembly is an additional program execution mechanism, and can be executed wherever JavaScript can be executed.
+Therefore the threat model is essentially the same as for JavaScript code, and has similar considerations for delivery (e.g. WebAssembly code should be protected in transit from active and passive network attackers)
+and policy (e.g. some loading mechanisms or execution are restricted via mechanisms such as the same-origin policy or Content Security Policy).</p>
+   <h2 class="heading settled" data-level="7" id="change-history"><span class="secno">7. </span><span class="content">Change History</span><a class="self-link" href="#change-history"></a></h2>
    <p><em>This section is non-normative.</em></p>
    <p>Since the original release 1.0 of the WebAssembly specification, a number of proposals for extensions have been integrated.
 The following sections provide an overview of what has changed.</p>
-   <h3 class="heading settled" data-level="6.1" id="release-20"><span class="secno">6.1. </span><span class="content">Release 2.0</span><a class="self-link" href="#release-20"></a></h3>
+   <h3 class="heading settled" data-level="7.1" id="release-20"><span class="secno">7.1. </span><span class="content">Release 2.0</span><a class="self-link" href="#release-20"></a></h3>
    <h4 class="no-toc heading settled" id="changes-registration">Media-type Registraton Completed<a class="self-link" href="#changes-registration"></a></h4>
     The registration for the <code>application/wasm</code> media type has been successfully completed. 
   </main>