ARCH-4: Document LLM/code-generation threat boundaries #63

Merged

jwilger merged 1 commit from issue-4-llm-threat-boundaries into main

2026-05-07 10:11:21 -07:00

jwilger commented

2026-05-07 09:54:05 -07:00

Owner

Summary

Expands docs/THREAT-MODEL.md to cover LLM/code-generation trust boundaries.
Documents Phoenix baseline security boundaries and command/read authorization expectations.
Records production-hardening follow-ups for secure cookies, SSL/header assumptions, health checks, remote Postgres TLS, provider retention, and generated-code sandboxing.

Verification

mix format --check-formatted
MIX_ENV=test mix compile --warnings-as-errors --force
MIX_ENV=prod mix compile --warnings-as-errors --force
mix test --warnings-as-errors
Docs/security reviewer passes: no findings

Closes #4

## Summary - Expands `docs/THREAT-MODEL.md` to cover LLM/code-generation trust boundaries. - Documents Phoenix baseline security boundaries and command/read authorization expectations. - Records production-hardening follow-ups for secure cookies, SSL/header assumptions, health checks, remote Postgres TLS, provider retention, and generated-code sandboxing. ## Verification - `mix format --check-formatted` - `MIX_ENV=test mix compile --warnings-as-errors --force` - `MIX_ENV=prod mix compile --warnings-as-errors --force` - `mix test --warnings-as-errors` - Docs/security reviewer passes: no findings Closes #4

jwilger added 1 commit

2026-05-07 09:54:05 -07:00

arch: document LLM threat boundaries 30eb2a0a46