This file is read by automated agents (security scanners, code analyzers, AI assistants) operating on this repository.
Security model: SECURITY.md -> THREAT_MODEL.md
Agents that scan this repository should consult SECURITY.md and the linked
THREAT_MODEL.md before reporting issues. Tapestry is a component-based web
framework: the untrusted web client is the adversary, while application
pages/components/handlers and configuration are trusted. The single most
load-bearing mechanism is the HMAC-protected serialized client state
(deserialization is gated by tapestry.hmac-passphrase); the model also covers
default output escaping, asset access control, client whitelisting, and
secure-link enforcement.