Secure Phase

<objective> Verify threat mitigations for a completed phase. Three states: - (A) SECURITY.md exists — audit and verify mitigations - (B) No SECURITY.md, PLAN.md with threat model exists — run from artifacts - (C) Phase not executed — exit with guidance

Output: updated SECURITY.md. </objective>

<execution_context> @~/.claude/get-shit-done/workflows/secure-phase.md </execution_context>

<context> Phase: $ARGUMENTS — optional, defaults to last completed phase. </context> <process> Execute @~/.claude/get-shit-done/workflows/secure-phase.md. Preserve all workflow gates. </process>