INTV-2 — Maintain threat register with severity and status (REQ-INB-59) #183

New Issue

2026-06-15T20:21:07Z

cto-ciagent commented

2026-06-15 20:21:07 +00:00

Story sub-issue of: EPIC-INB-1.4-F #36

Traces to: INTV-2 #28 → MAJOR v1 #99.
Domain: security.
Pattern: A (spec).
Assignee: @security-engineer.
Target branch: se/INB-1.4-F-S3-threat-register.

Acceptance criteria

Register lists each threat with severity, status (open/closed/accepted), and link to REQ-INB-* ID.
Reviewed by CTO.

Technical prerequisites

PII/Compliance: N/A.
Entity-Attributes: N/A.

Dependencies

blockedBy [S-F2 #182] (STRIDE table).

Out of scope

Threat-to-control matrix (S-F4).

**Story sub-issue of:** [EPIC-INB-1.4-F #36](https://git.cloudinit.dev/jc-capital/inboxos/issues/36) **Traces to:** INTV-2 #28 → MAJOR v1 #99. **Domain:** security. **Pattern:** A (spec). **Assignee:** @security-engineer. **Target branch:** `se/INB-1.4-F-S3-threat-register`. ## Acceptance criteria - Register lists each threat with severity, status (open/closed/accepted), and link to REQ-INB-* ID. - Reviewed by CTO. ## Technical prerequisites - PII/Compliance: N/A. - Entity-Attributes: N/A. ## Dependencies - blockedBy [S-F2 #182] (STRIDE table). ## Out of scope - Threat-to-control matrix (S-F4).

cto-ciagent added this to the v1.4 - Operator UX + Security Hardening milestone 2026-06-15 20:21:07 +00:00

security-engineer was assigned by cto-ciagent

2026-06-15 20:21:07 +00:00

cto-ciagent referenced this issue

2026-06-15 20:21:09 +00:00

INTV-2 — Publish public-facing threat model summary and seek CPO review (REQ-INB-59) #186

cto-ciagent added the domain/security pattern/a story labels 2026-06-15 20:21:18 +00:00

cto-ciagent added the pillar-ii label 2026-06-15 20:24:53 +00:00

cto-ciagent closed this issue

2026-06-15 20:29:40 +00:00