2154e6bb07
Adds /gsd:secure-phase command and gsd-security-auditor agent as a threat-model-anchored security gate parallel to Nyquist validation. New files: - agents/gsd-security-auditor.md — verifies PLAN.md threat mitigations exist in implemented code; SECURED/OPEN_THREATS/ESCALATE returns - commands/gsd/secure-phase.md — retroactive command, mirrors validate-phase - get-shit-done/workflows/secure-phase.md — enforcing gate: threats_open > 0 blocks phase advancement; accepted risks log prevents resurface - get-shit-done/templates/SECURITY.md — per-phase threat register artifact Modified: - config.json — security_enforcement (absent=enabled), security_asvs_level, security_block_on parallel to nyquist_validation pattern - VALIDATION.md — Threat Ref + Secure Behavior columns in verification map - gsd-planner.md — <threat_model> block in PLAN.md format + quality gate - gsd-executor.md — Rule 2 threat model reference + ## Threat Flags scan - gsd-phase-researcher.md — ## Security Domain mandatory research section - plan-phase.md — step 5.55 Security Threat Model Gate - execute-phase.md — security gate announcement in aggregate step - verify-work.md — /gsd:secure-phase surfaced in completion routing Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
62 lines
1.5 KiB
Markdown
62 lines
1.5 KiB
Markdown
---
|
|
phase: {N}
|
|
slug: {phase-slug}
|
|
status: draft
|
|
threats_open: 0
|
|
asvs_level: 1
|
|
created: {date}
|
|
---
|
|
|
|
# Phase {N} — Security
|
|
|
|
> Per-phase security contract: threat register, accepted risks, and audit trail.
|
|
|
|
---
|
|
|
|
## Trust Boundaries
|
|
|
|
| Boundary | Description | Data Crossing |
|
|
|----------|-------------|---------------|
|
|
| {boundary} | {description} | {data type / sensitivity} |
|
|
|
|
---
|
|
|
|
## Threat Register
|
|
|
|
| Threat ID | Category | Component | Disposition | Mitigation | Status |
|
|
|-----------|----------|-----------|-------------|------------|--------|
|
|
| T-{N}-01 | {STRIDE category} | {component} | {mitigate / accept / transfer} | {control or reference} | open |
|
|
|
|
*Status: open · closed*
|
|
*Disposition: mitigate (implementation required) · accept (documented risk) · transfer (third-party)*
|
|
|
|
---
|
|
|
|
## Accepted Risks Log
|
|
|
|
| Risk ID | Threat Ref | Rationale | Accepted By | Date |
|
|
|---------|------------|-----------|-------------|------|
|
|
|
|
*Accepted risks do not resurface in future audit runs.*
|
|
|
|
*If none: "No accepted risks."*
|
|
|
|
---
|
|
|
|
## Security Audit Trail
|
|
|
|
| Audit Date | Threats Total | Closed | Open | Run By |
|
|
|------------|---------------|--------|------|--------|
|
|
| {YYYY-MM-DD} | {N} | {N} | {N} | {name / agent} |
|
|
|
|
---
|
|
|
|
## Sign-Off
|
|
|
|
- [ ] All threats have a disposition (mitigate / accept / transfer)
|
|
- [ ] Accepted risks documented in Accepted Risks Log
|
|
- [ ] `threats_open: 0` confirmed
|
|
- [ ] `status: verified` set in frontmatter
|
|
|
|
**Approval:** {pending / verified YYYY-MM-DD}
|