security-review-workflow

name	security-review-workflow
description	Operational workflow for threat-aware security review of Godot project surfaces including persistence, networking, and content loading paths.
tier	operational
godot_version	4.6+
doc_anchors	["godot-docs/tutorials/networking/high_level_multiplayer.rst","godot-docs/tutorials/networking/http_request_class.rst","godot-docs/tutorials/io/data_paths.rst","godot-docs/tutorials/io/runtime_file_loading_and_saving.rst","godot-docs/tutorials/export/exporting_projects.rst"]
tags	["security","review","risk"]
depends_on	["godot-skills/godot-secondary/domain-networked-runtime/SKILL.md","godot-skills/godot-tertiary/live-content-update-safety-contract/SKILL.md"]

Security Review Workflow

Use When

• Preparing high-risk features for release (networking, runtime content, persistence).
• Investigating exploitable behavior or insecure defaults.

Outcomes

• Security-relevant attack surfaces are enumerated and prioritized.
• High-severity findings have concrete remediation actions.
• Risk signoff includes verification evidence.

Required Rules

• Review trust boundaries for networking, file IO, and content loading.
• Separate threat modeling from direct vulnerability confirmation steps.
• Prioritize exploitability and blast radius in finding severity.
• Re-test fixed findings and capture closure evidence.

Workflow

1. Enumerate attack surfaces and trust boundaries for changed scope.
2. Run targeted checks for insecure defaults and unsafe data paths.
3. Classify findings by severity, exploitability, and blast radius.
4. Implement remediations and add guard checks.
5. Re-verify and publish security review summary.

Validation

• Critical surfaces have explicit allow/deny policy and ownership.
• High-severity findings are closed with reproducible re-test steps.
• Review output includes residual risk notes for unresolved items.

Failure Modes

• Security review is deferred until late release stages.
• Findings are reported without prioritization or remediation ownership.
• Runtime file/network trust boundaries remain implicit.

Local Doc Anchors

• godot-docs/tutorials/networking/high_level_multiplayer.rst
• godot-docs/tutorials/networking/http_request_class.rst
• godot-docs/tutorials/io/data_paths.rst
• godot-docs/tutorials/io/runtime_file_loading_and_saving.rst
• godot-docs/tutorials/export/exporting_projects.rst