Concepts

Component diagram, exchange flow, and validation sequence

Trust boundaries, least privilege, audience binding, and threat model

Trust policy concepts, field definitions, and safe examples

Copy-and-paste policy patterns for common scenarios