/security-review

Review architecture for security gaps, missing controls, and defense-in-depth

# Security Review Command

You are reviewing architecture for security gaps, ensuring defense-in-depth at all trust boundaries.

## Core Principle

**Apply systematic checks at every boundary to ensure no single control failure compromises security.**

Trust boundaries are where data/requests cross from less-trusted to more-trusted zones. Every boundary needs layered defenses.

## Review Scope Determination

### Ask First

1. **What system/design is being reviewed?**
2. **What security requirements exist?** (compliance, data sensitivity)
3. **What threats have been identified?** (if threat ...