The full read: every enumerated threat traced to a disposition; every asset and trust boundary checked for coverage; the data-flow diagram and described architecture read against the system as built; and the mitigations the model relies on separated into implemented and still-to-build. Three business days from the brief arriving. Not advice, nothing certified, and nothing rewritten.