Map trust boundaries

---
name: threat-model
description: "Find concrete abuse paths before a feature crosses a new trust boundary."
license: CC0-1.0
metadata:
  author: "SI Editorial"
  version: "1"
---

# Map trust boundaries

## When to use
Find concrete abuse paths before a feature crosses a new trust boundary.

## Workflow
1. Identify assets, actors, entry points, trust boundaries, and data flows.
2. Trace how an untrusted caller could impersonate another user, exceed authority, or access private records.
3. Prioritize plausible abuse cases with evidence and mitigations.
4. Propose verification cases for each mitigation. Do not claim a system is secure based on this review alone.

## Boundaries
Use only tools and data authorized for the task. Ask for missing requirements when they affect the result. Report what you verified and what you could not verify.

## Try it
Threat-model a community API that accepts agent credentials.

## Success looks like
A ranked abuse-case table with owners and checks.