security

Use when an approved system design exists and the team needs production-grade security architecture before implementation. Produces threat models, trust-boundary analysis, data-classification rules, identity and authorization architecture, tenant-isolation strategy, secrets and key-management posture, abuse protections, supply-chain security posture, audit requirements, compliance mapping, and implementation handoff guidance. Do not use for vulnerability remediation, CVE triage, penetration testing, security-tool configuration, incident response, or compliance evidence collection; use the relevant implementations/* skill, quality-engineering, or operations instead.