27 lines
630 B
Markdown
27 lines
630 B
Markdown
# Security Analysis
|
|
|
|
<!-- guide: Threat model of this change only. Reference security NFR rows by id;
|
|
do not restate them. No generic checklist. Remove guides before G3. -->
|
|
|
|
## Scope
|
|
|
|
## Assets
|
|
|
|
## Trust Boundaries
|
|
|
|
## Threats
|
|
|
|
| ID | Threat (STRIDE) | Attack scenario | Asset / boundary | Existing control | Likelihood / impact |
|
|
| --- | --- | --- | --- | --- | --- |
|
|
|
|
## Recommended Mitigations
|
|
|
|
| Threat | Mitigation | Owner artifact (specs / system-analysis / design) |
|
|
| --- | --- | --- |
|
|
|
|
## Residual Risks
|
|
|
|
## Validation Requirements
|
|
|
|
<!-- guide: Evidence needed before G4: review focus, negative tests, tooling. -->
|