# Security — <feature> (/docs/maintain/_templates/security)

- **Status:** Draft
- **Last updated:** YYYY-MM-DD
- **Related ADRs:** ADR-NNNN

> Snapshot of the system as it stands today. Edit in place; never record what changed.

## Attack surface introduced [#attack-surface-introduced]

What this feature adds that did not exist before: routes, inputs, published surfaces, stored
data, secrets, integrations, build steps.

## Data handled [#data-handled]

| Data | Classification | Stored where | Sent where |
|---|---|---|---|

Classification per [`data-classification.mdx`](../security/data-classification.mdx). If a level is unclear,
**ask** — never assign one by assumption (ADR-0004).

## Threats and controls [#threats-and-controls]

| # | Threat | How it would be exploited | Control |
|---|---|---|---|
| T1 | | | |

## Authorization [#authorization]

Who may do what, and **where the check happens server-side**. Cross-reference
`content/docs/maintain/rbac/<slug>.mdx` rather than restating it.

## What is logged [#what-is-logged]

Which actions produce a log or audit record, and confirmation that none carries a secret or
private content.

## Residual risk [#residual-risk]

What is knowingly not defended against, and why that is acceptable. Accepted by whom.