Trust boundary worksheet
Connect an actor, a protected asset and a trust decision to an abuse scenario, a control and a verification owner.
Purpose, output & limits Boundary model + verification register
When reviewing an architecture or authority change.
Boundary model + verification register
No automatically inferred threats or verified controls.
Processed in this page’s memory. No tool-input uploads, target requests or persistent input storage. Clear or reload to discard this draft. Downloads are saved only when you request them. Keep secrets and confidential records out.
A scenario before a claim.
Describe the system, then record specific scenarios. Connect each one to a control, a bounded verification step and an accountable owner.
Understand the result.
All technical guides
Retrieved text should not acquire authority.
Design AI-enabled workflows so documents, tool output and other untrusted content cannot decide their own access or actions.
Read article
Designing for system resilience
Key principles for building systems that withstand real-world pressure.
Read article
The role of infrastructure in defence
Why infrastructure decisions determine your security posture.
Read article