Submission instructions
All requests are evaluated based on a written summary brief. The brief establishes fit, scope, and confidentiality needs.
Required summary brief (2–4 pages)
- System context — what is being reviewed
- Decision pending — the decision and timeline
- What is at risk — capital, regulatory, operational, reputational
- Threat model — plausible failure modes
- Assumptions — trust boundaries and dependencies
- Constraints — regulatory or operational limits
- Closure definition — success criteria
- Confidentiality — NDA requirements
- Supporting materials — diagrams, specs, prior reviews
Format and handling
- PDF preferred
- Internal-facing tone
- Secure or encrypted delivery acceptable
- State NDA needs before sharing sensitive material