Map legal accessibility obligations across markets — ADA, Section 508, EAA, UK and Canadian law — with WCAG level, exposure, remediation and a draft accessibility statement. Use when the user sells in several countries and asks which accessibility laws apply in each. Not for one law or the audit; see /compliance:ada-wcag, /compliance:eaa-en301549 or /accessibility:scope.
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.