Repository navigation
STPA-Sec: product-level hazards of warte as software - #61
Merged
Merged
Conversation
What any deployment of warte has to defend, independent of where it runs: - SL-006/SL-008: agents steered into changes their maintainers did not intend. - SH-010: content reaching agents' context is shaped by an attacker (traces to the safety hazard H-006, same control action); SH-011: the fleet layout is readable without authentication (CORS *). - UCAs on warte (CTRL-001): attacker-shaped answers, stale answers, unauthenticated parsing of UDP/HTTP input, cross-origin reads; with scenarios SS-003, SS-006, SS-011. - Constraints SC-SEC-004/005 name their enforcement points; SC-SEC-008.. 013 give the older hazards SH-001..006 their constraints (mirrors of CG-001..006; SC-SEC-008 records that agent identity is not implemented yet, #60/#12). rivet: sec-hazard V-closure 100% (8/8), was 0/6 for sec-hazard-has-constraint. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KEjmjacA37doyazDSdB8ez
Closed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What any deployment of warte has to defend, independent of where it runs:
Losses: agents steered into changes their maintainers didn't intend (SL-006/SL-008).
Hazards:
*.UCAs on warte:
Scenarios SS-003, SS-006 and SS-011 cover them.
Constraints: SC-SEC-004/005 name their enforcement points. SC-SEC-008..013 give the older hazards SH-001..006 their constraints for the first time. SC-SEC-008 records that agent identity isn't implemented yet (Remove the unmounted src/server/auth.rs placeholder; issue tokens so agents can register #60, Feature: agent registry (agents register themselves with warte) #12).
rivet validatePASS; sec-hazard V-closure 100% (8/8), up from 0/6.🤖 Generated with Claude Code