I previously read the security guide-- and your commitment to security gets us most of the way there. However, it does not go deep into precisely which services are utilized, which ports, how they are connected, points of vulnerability, etc. I am trying to surmise this myself but as I did not develop Discourse, it will be easy for me to overlook the entirety of the architecture and possible injection points in regard to overall security. If nothing is readily available, I’ll attempt to reconstruct the architecture myself. But if someone in the user base has already done this work, please share.