A Complete Mental Model for Securing Software Factories at Scale