# Security Analysis

<!-- guide: Threat model of this change only. Reference security NFR rows by id;
     do not restate them. No generic checklist. Remove guides before G3. -->

## Scope

## Assets

## Trust Boundaries

## Threats

| ID | Threat (STRIDE) | Attack scenario | Asset / boundary | Existing control | Likelihood / impact |
| --- | --- | --- | --- | --- | --- |

## Recommended Mitigations

| Threat | Mitigation | Owner artifact (specs / system-analysis / design) |
| --- | --- | --- |

## Residual Risks

## Validation Requirements

<!-- guide: Evidence needed before G4: review focus, negative tests, tooling. -->