Merge "docs(threat-model): provide PSR specification reference" into integration