عرض عملي: رسم حدود الثقة في Shop

خطوة بخطوة

1. Sketch actors: anonymous visitor, customer, admin.
2. Add Shop API, database, and the payment provider; draw boundary lines.
3. Label each flow with the data it carries (credentials, orders, card tokens).
4. Planned mistake: drawing the browser inside the trusted zone. Fix: move the boundary so the browser is outside.
5. For each boundary crossing, write one threat and one control.
6. Save the diagram and list in the repo as the seed for the security controls document.