Security & Privacy

Threat model: client-side SPA whose primary untrusted input is uploaded .xer content.

• No v-html with untrusted schedule strings
• No eval / dynamic code execution
• Logs never include raw ParsedXER payloads
• Auth-gated upload boundary (ADR 0054)

Continue: STRIDE · Auth Boundary