Defines assets, threats, trust boundaries, required controls, secure defaults, and implementation guidance for supply-chain attacks. It fixes adoption boundaries and observable failure evidence while keeping environment-specific limits configurable.
This Block has no declared dependencies.