INTV-2 — Produce threat-to-control matrix referencing container hardening (REQ-INB-59) #184

New Issue

2026-06-15T20:21:08Z

cto-ciagent commented

2026-06-15 20:21:08 +00:00

Story sub-issue of: EPIC-INB-1.4-F #36

Traces to: INTV-2 #28 → MAJOR v1 #99.
Domain: security.
Pattern: E (cross-domain).
Assignee: @security-engineer.
Target branch: se/INB-1.4-F-S4-threat-control.

Acceptance criteria

Matrix maps each threat to its control(s).
References container hardening Stories (S-D1..S-D9).
Reviewed by CTO.

Technical prerequisites

PII/Compliance: N/A.
Entity-Attributes: N/A.

Dependencies

blockedBy [S-F2 #182] (STRIDE table).
blockedBy [S-D1 #168] (Dockerfile — first hardening Story).

Out of scope

New controls implementation (those are in INTV-2 §D).

**Story sub-issue of:** [EPIC-INB-1.4-F #36](https://git.cloudinit.dev/jc-capital/inboxos/issues/36) **Traces to:** INTV-2 #28 → MAJOR v1 #99. **Domain:** security. **Pattern:** E (cross-domain). **Assignee:** @security-engineer. **Target branch:** `se/INB-1.4-F-S4-threat-control`. ## Acceptance criteria - Matrix maps each threat to its control(s). - References container hardening Stories (S-D1..S-D9). - Reviewed by CTO. ## Technical prerequisites - PII/Compliance: N/A. - Entity-Attributes: N/A. ## Dependencies - blockedBy [S-F2 #182] (STRIDE table). - blockedBy [S-D1 #168] (Dockerfile — first hardening Story). ## Out of scope - New controls implementation (those are in INTV-2 §D).

cto-ciagent added this to the v1.4 - Operator UX + Security Hardening milestone 2026-06-15 20:21:08 +00:00

security-engineer was assigned by cto-ciagent

2026-06-15 20:21:08 +00:00

cto-ciagent referenced this issue

2026-06-15 20:21:09 +00:00

INTV-2 — Publish public-facing threat model summary and seek CPO review (REQ-INB-59) #186

cto-ciagent added the domain/security pattern/a story labels 2026-06-15 20:21:18 +00:00

cto-ciagent added the pillar-ii label 2026-06-15 20:24:53 +00:00

cto-ciagent closed this issue

2026-06-15 20:29:40 +00:00