FT-D-2 — 10 MB selfie upload consumes bandwidth

Component: Biometric Verification. Mitigations: Hard 10 MB cap enforced. Action: None required.

Property	Value
Section	Denial of Service
Owner	platform

Mapped Controls

Control	Title
SID-HARD-07	Resource Upload Constraints

---

Source: STRIDE analysis (April 2026), architecture/stride-threat-model.md