diff --git a/docs/templates/threat-register-template.md b/docs/templates/threat-register-template.md
new file mode 100644
index 0000000..dfee1e1
--- /dev/null
+++ b/docs/templates/threat-register-template.md
@@ -0,0 +1,51 @@
+# Threat Register – [Client Name]
+
+**Status:** Draft / Human Review / Locked  
+**Last Updated:** YYYY-MM-DD  
+**Reviewed by:**  
+**Source Inventory:** Link to locked Data Inventory
+
+## Purpose
+Identify specific customer-acquisition and retention failures grounded only in data from the locked Data Inventory.  
+No speculation. No invented gaps.
+
+## Threat Entries
+
+### Threat ID: T-001
+- **Title:** 
+- **Signal Source:** (e.g. GMB reviews, Instagram comments, booking system, website)
+- **Evidence Snippet:** (direct quote or observable fact from the data)
+- **Data Recency:** (Snapshot Date from inventory)
+- **Estimated Severity:** Critical / Major / Minor
+- **Verification Tier:** Tier 1 / Tier 2
+- **Notes / Context:**
+- **Human Decision:** Verified / Downgraded to Tier 2 / Rejected
+
+### Threat ID: T-002
+- **Title:** 
+- **Signal Source:** 
+- **Evidence Snippet:** 
+- **Data Recency:** 
+- **Estimated Severity:** Critical / Major / Minor
+- **Verification Tier:** Tier 1 / Tier 2
+- **Notes / Context:**
+- **Human Decision:** Verified / Downgraded to Tier 2 / Rejected
+
+*(Add additional Threat ID blocks as needed)*
+
+## Summary
+- Total threats drafted: 
+- Tier 1 (Verified): 
+- Tier 2 (Indicative): 
+- Rejected / removed: 
+
+## Human Review Gate
+- [ ] Every entry is backed by real data from the locked inventory
+- [ ] Every entry has a Data Recency date
+- [ ] Every entry has a Verification Tier
+- [ ] Human has reviewed each entry and recorded a decision (Verified / Downgraded / Rejected)
+- [ ] No invented or speculative threats remain
+
+Once this gate is signed off, the Threat Register is **Locked** and Layer 3 (Economics) or Layer 4 (Requirements) may begin.
+
+**Reviewer sign-off:** _________________ Date: _________