This file is read by automated agents (security scanners, code analyzers, AI assistants) operating on this repository.
Security model: SECURITY.md -> THREAT_MODEL.md
Agents that scan this repository should consult SECURITY.md and the linked THREAT_MODEL.md before reporting issues. Synapse is a mediation engine / ESB: the untrusted message sender is the adversary, while the integration configuration (sequences, scripts, XSLT/XQuery bodies, endpoint addresses) is trusted operator input. The model covers transports, XSLT/XQuery transforms (XXE/SSRF), dynamic endpoint routing (SSRF), and message DoS.