2.0 dev threatmodeling#678

Open

stevespringett wants to merge 53 commits into

2.0-dev-threatmodeling

Commits on Jul 9, 2025

Initial commit
stevespringett
committed

Commits on Jul 23, 2025

Added requirement prototype
stevespringett
committed

Commits on Sep 3, 2025

Initial checkin of blueprint and threat model support
stevespringett
committed

Commits on Oct 29, 2025

Adding threat models
steve.springett
committed

Commits on Nov 11, 2025

Commits on Nov 23, 2025

Modified risk and model schemas
petra-dv
committed

Commits on Dec 7, 2025

Commits on Dec 10, 2025

Commits on Dec 15, 2025

Initial checkin of behavior model. Should satisfy goals outlined in #670. Blueprints working group will continue to iterate and validate.
stevespringett
committed

Commits on Jan 8, 2026

Extend cryptography-related behaviors
bhess
committed

Commits on Jan 14, 2026

A few extensions to the crypto behaviors
bhess
committed

Commits on Jan 22, 2026

Commits on Mar 4, 2026

Commits on May 7, 2026

Added mockups
stevespringett
committed

Commits on May 27, 2026

Major updates to threatmodeling and bluepring schemas and their related schemas. Supersedes and closes #777.
stevespringett
committed

Commits on Jun 5, 2026

WIP 2.0 threat-modeling schema set
stevespringett
committed

Commits on Jun 7, 2026

Commits on Jun 11, 2026

Added control as first-class citizen and expanded use of controls to related areas in the spec.
stevespringett
committed

Commits on Jun 16, 2026

Added test cases, comment to schema, and corrected space issue with behavior schema.
stevespringett
committed

Commits on Jun 18, 2026

Changed risk type to align with the kind of risk assessment performed - and updated it to be an array. Added cadence (previously was risk assessment type) to be a noun representing temporal data. U…
stevespringett
committed

Commits on Jun 19, 2026

Commits on Jun 28, 2026