{{FRONTMATTER}}

# {{PROJECT_NAME}} — Security
<!-- generated by /signum init --harness, review and edit before committing -->

## Trust Boundaries
- TODO: External inputs and untrusted data sources.
- TODO: Internal privileged systems and admin surfaces.
- TODO: Third-party services and what data they receive.

## Secrets and Sensitive Data
- TODO: Where secrets live and how they are rotated.
- TODO: Sensitive data classes handled by the system.
- TODO: Logging / redaction rules.

## Auth and Access Control
- TODO: Authentication methods in use.
- TODO: Authorization model and the most sensitive actions.
- TODO: Break-glass or emergency access procedures.

## Security Review Triggers
- TODO: Changes that require security review.
- TODO: High-risk paths/files/modules.
- TODO: Required evidence before merge for sensitive changes.
