fix: add sec, priv, a11y, i18n review

Signed-off-by: Evan Prodromou <[email protected]>

Author: evanp

draft-extensions-policy.html

@@ -232,7 +232,7 @@ <h2>Process</h2>
     </section>
     <section>
       <h2>Criteria</h2>
-      <p>To be included in the Activity Streams 2.0, extensions should meet these requirements.</p>
+      <p>To be included in the Activity Streams 2.0, extensions SHOULD meet these requirements.</p>
       <ul>
           <li>
               A unique namespace, distinct from the Activity Streams 2.0 namespace.
@@ -252,6 +252,21 @@ <h2>Criteria</h2>
               Demonstrated implementation by at least two (2) independent consumers.
           </li>
       </ul>
+      <p>Extensions to be included MAY meet these criteria:</p>
+      <ul>
+        <li>
+          A security review, either by the submitter, members of the SocialCG, or by the [SecurityIG](https://www.w3.org/Security/wiki/IG/W3C_spec_review).
+        </li>
+        <li>
+          A privacy review, either by the submitter, members of the SocialCG, or others.
+        </li>
+        <li>
+          An accessibility (A11Y) review.
+        </li>
+        <li>
+          An internationalisation (I18N) review.
+        </li>
+      </ul>
     </section>
     <section id='history'>
       <h2>Previous Work</h2>