Security

Read security/THREAT_MODEL.md in the protocol repository. The table names the mitigation that exists today. Rows that say a later milestone are not implemented.

No audit report exists. security/AUDIT_SCOPE.md is a future scope, not a conclusion.

Report issues using .github/SECURITY.md in the repository that contains the code.