Independent assessment of the threat model, trust boundaries, key management, data handling, attestation artifacts, and evidence supporting specified privacy and security claims. Reports findings, limitations, and required remediation for partner and investor review. Planned twice: at design stage and at program close.