Your question is Threat Modeling for Feature Releases. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
How do you approach threat modeling for a new feature release?
Explain how you identify assets, trust boundaries, abuse cases, threats, mitigations, and residual risk before release. Cover the method you use, how you validate assumptions with engineers, and how findings affect implementation and security review. Scope your answer to application and service features, including REST APIs and their dependencies.
