ferrox-secure-phase

name	ferrox-secure-phase
description	You want to confirm a finished step's threats were actually mitigated in the code
argument-hint	[phase number]
allowed-tools	["Read","Write","Edit","Bash","Glob","Grep","Agent","AskUserQuestion"]

Verify threat mitigations for a completed phase. Three states: - (A) SECURITY.md exists — audit and verify mitigations - (B) No SECURITY.md, PLAN.md with threat model exists — run from artifacts - (C) Phase not executed — exit with guidance

Output: updated SECURITY.md.

<execution_context> @~/.claude/ferrox-core/workflows/secure-phase.md </execution_context>

Phase: $ARGUMENTS — optional, defaults to last completed phase. Execute end-to-end. Preserve all workflow gates.