timmy 29ea045671 docs: add end-to-end photo data-flow threat model (#20) ...

- docs/PHOTO-DATAFLOW-THREAT-MODEL.md: browser, API ingress, model worker,
  transient buffers, training opt-in store, logs, exports, and deletion,
  with trust boundaries and a numbered threat register
- every named abuse case (replay, oversized input, metadata leakage,
  poisoning, unauthorized training, operator access) carries a mitigation,
  an owner, a tracked follow-up ticket, and the artifact that will prove it
- tests/threat-model.test.js enforces diagram coverage, owner/follow-up
  presence against ROADMAP ticket numbers, and the non-diagnostic boundary
  with synthetic-only fixtures
- link the model from the accepted product decision record

2026-10-10 08:03:31 +00:00

..

PHOTO-DATAFLOW-THREAT-MODEL.md

docs: add end-to-end photo data-flow threat model (#20)

2026-10-10 08:03:31 +00:00

PRODUCT-DECISIONS.md

docs: add end-to-end photo data-flow threat model (#20)

2026-10-10 08:03:31 +00:00

STAGING-RUNBOOK.md

feat: add hardened atomic staging deployment

2026-08-21 14:49:28 +00:00

TIMMY-AGENT-POLICY.md

feat: simplify Timmy and add secure Hermes chat

2026-08-20 16:21:00 +00:00