Seven families, chosen to describe where the failure sits structurally — not by the attacker’s technique.