Introduction

This document provides a high-level overview of the security posture for the Mall on Rails project, including an overview of the identified threat model, references to security-related requirements, and links to any available reviews or audits.

Threat Model Overview

This document contains an overview of the threat model, including identified risks and mitigations. A full threat model with illustrations, data flow diagrams, and more extensive documentation can be found in the code repository where this document originated.

Security Requirements Reference

This document contains references to other documents where security requirements for the Mall on Rails system can be found. To ensure a single source of truth, these requirements are not duplicated in this document directly.

Reviews and Audits

This document provides links to any external security reviews and/or audits that have been performed against the system. This can include both automated and manual scans.