Skip to content

docs(security): extension execution mediation threat model #451

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Xuepoo merged 1 commit into from
Oct 12, 2026
Merged

docs(security): extension execution mediation threat model #451

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 8 additions & 7 deletions docs/security/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,13 +16,14 @@ precedence over source summaries and non-security design suggestions. Status
framing per control is owned by CTX-0218 (issue #332); this index routes only
and states no control status of its own.

| Document | Authority |
| --------------------------------------------------- | ------------------------------------------------------------------------------------------ |
| [Security overview](overview.md) | Normative security contract and capability taxonomy. |
| [Threat model](threat-model.md) | Normative trust boundaries, threats, and required controls. |
| [P0 acceptance criteria](p0-acceptance-criteria.md) | Testable acceptance criteria for every normative P0 control. |
| [Risk register](risk-register.md) | Security risks and evidence-based closure criteria. |
| [Evidence matrix](evidence-matrix.md) | Risk-to-P0-AC traceability with implementation, test, CI, adversarial, and audit evidence. |
| Document | Authority |
| ----------------------------------------------------------------- | -------------------------------------------------------------------------------------------------- |
| [Security overview](overview.md) | Normative security contract and capability taxonomy. |
| [Threat model](threat-model.md) | Normative trust boundaries, threats, and required controls. |
| [Extension execution mediation](extension-execution-mediation.md) | Normative tool-allowlist, inherited-confinement, spawn-audit, and extension supply-chain contract. |
| [P0 acceptance criteria](p0-acceptance-criteria.md) | Testable acceptance criteria for every normative P0 control. |
| [Risk register](risk-register.md) | Security risks and evidence-based closure criteria. |
| [Evidence matrix](evidence-matrix.md) | Risk-to-P0-AC traceability with implementation, test, CI, adversarial, and audit evidence. |

## Related

Expand Down
Loading
Loading