# Threat Register – [Client Name]

**Status:** Draft / Human Review / Locked  
**Last Updated:** YYYY-MM-DD  
**Reviewed by:**  
**Source Inventory:** Link to locked Data Inventory

## Purpose
Identify specific customer-acquisition and retention failures grounded only in data from the locked Data Inventory.  
No speculation. No invented gaps.

## Threat Entries

### Threat ID: T-001
- **Title:** 
- **Signal Source:** (e.g. GMB reviews, Instagram comments, booking system, website)
- **Evidence Snippet:** (direct quote or observable fact from the data)
- **Data Recency:** (Snapshot Date from inventory)
- **Estimated Severity:** Critical / Major / Minor
- **Verification Tier:** Tier 1 / Tier 2
- **Notes / Context:**
- **Human Decision:** Verified / Downgraded to Tier 2 / Rejected

### Threat ID: T-002
- **Title:** 
- **Signal Source:** 
- **Evidence Snippet:** 
- **Data Recency:** 
- **Estimated Severity:** Critical / Major / Minor
- **Verification Tier:** Tier 1 / Tier 2
- **Notes / Context:**
- **Human Decision:** Verified / Downgraded to Tier 2 / Rejected

*(Add additional Threat ID blocks as needed)*

## Summary
- Total threats drafted: 
- Tier 1 (Verified): 
- Tier 2 (Indicative): 
- Rejected / removed: 

## Human Review Gate
- [ ] Every entry is backed by real data from the locked inventory
- [ ] Every entry has a Data Recency date
- [ ] Every entry has a Verification Tier
- [ ] Human has reviewed each entry and recorded a decision (Verified / Downgraded / Rejected)
- [ ] No invented or speculative threats remain

Once this gate is signed off, the Threat Register is **Locked** and Layer 3 (Economics) or Layer 4 (Requirements) may begin.

**Reviewer sign-off:** _________________ Date: _________