9.3AI Feature Threat Model Template

Use this template for every AI feature before it reaches production:

## Threat Model: [Feature Name]

### System Description
- [What the AI feature does]
- [What data it has access to]
- [What data it does NOT have access to]
- [Which tools/plugins it can invoke]

### Assets (What are we protecting?)
1. [Customer PII]
2. [System prompt and business logic]
3. [Internal API credentials]
4. [Financial data]

### Trust Boundaries
- User input -> AI processing (untrusted -> trusted)
- AI output -> downstream systems (trusted -> varies)
- Retrieved documents -> AI context (varies -> trusted)

### Threat Scenarios

| ID | Threat | STRIDE | Likelihood | Impact | Mitigation | Test |
|----|--------|--------|------------|--------|------------|------|
| T1 | ... | ... | ... | ... | ... | ... |
| T2 | ... | ... | ... | ... | ... | ... |


### Example: AI Customer Support Chatbot

```markdown