# Security Model

> **Status: stub — Phase 1 (structure).** Content to be written in Phase 2.
>
> **Scope:** Trust boundaries, authentication, authorization, and known security properties. Vulnerability reporting stays in root SECURITY.md.

## Outline

- Trust model and boundaries
- Identity and key handling
- AuthN/AuthZ (channel membership, admin)
- Multi-tenant isolation (links to formal specs)
- Reporting vulnerabilities → ../../SECURITY.md

## Source material

- `ARCHITECTURE.md` §7 Security Model
- `SECURITY.md` (stays at root; link only)
- `docs/multi-tenant-relay.md`, `docs/spec/` (linked)