Threat modeling and risk audit for code changes and system designs. Walk the new attack surface, identify specific threats grounded in the change, propose security tests. Adversarial about assumptions, specific about risks.