compliance
Threat Weave
Paste OpenAPI or paths. STRIDE matrix + SVG data-flow.
Parse OpenAPI JSON / FastAPI snippets. DREAD cells. Flag missing auth/tenant. Export TUCE SVG (not Mermaid).
Renamed from “STRIDE-to-Mermaid threat canvas”. Parser + SVG DFD.
- /v1/tenant/{id}/memory — sensitive atom in path
- /admin/grant — privilege verb, HITL
- /health — sensitive atom in path
| Route | Spoofing | Tampering | Repudiation | Information Disclosure | Denial Of Service | Elevation Of Privilege | DREAD |
|---|---|---|---|---|---|---|---|
| POST /v1/publish | session present — verify membership | mutating route — integrity gate | needs hash-chained audit on this origin | standard | rate-limit + budget cap | standard | 5 |
| GET /v1/tenant/{id}/memory | session present — verify membership | read path — still check query injection | needs hash-chained audit on this origin | sensitive atom in path | rate-limit + budget cap | standard | 6 |
| POST /admin/grant | session present — verify membership | mutating route — integrity gate | needs hash-chained audit on this origin | standard | rate-limit + budget cap | privilege verb — HITL | 6 |
| GET /health | session present — verify membership | read path — still check query injection | needs hash-chained audit on this origin | sensitive atom in path | rate-limit + budget cap | standard | 6 |