TR-D-1 — Flood /evaluation endpoint to deny trust decisions

Component: Trust Evaluation. Mitigations: Per-IP token bucket rate limiting (configurable RPS + burst). Action: None required.

Property	Value
Section	Denial of Service
Owner	platform

Mapped Controls

Control	Title
SID-HARD-02	Input Validation and Injection Prevention

---

Source: STRIDE analysis (April 2026), architecture/stride-threat-model.md