Security review output template

Scope
- requested scope:
- files/modules inspected:

Architecture summary
- main entrypoints:
- trust boundaries:
- sensitive assets:

Findings

1. <title>
- severity:
- affected files:
- exploit path:
- root cause:
- remediation:
- tests:

2. <title>
- severity:
- affected files:
- exploit path:
- root cause:
- remediation:
- tests:

Design assessment
- cohesion:
- coupling:
- ownership of security logic:
- hidden/duplicated security rules:

Residual risks
- ...

Priority actions
1.
2.
3.