threat-model

Structured threat model for security-relevant features (auth, payments, file upload, multi-tenant, LLM/AI). Enumerate assets, STRIDE threats, mitigations. Do NOT use to write code (use security-and-hardening).