securityMap.generated.ts

/* AUTO-GENERATED by utils/generate-security-map.cjs. Do not edit. */
import type { SecurityMapGraph } from './types'

export const securityMapGraph = {
  "schemaVersion": "1.0.0",
  "title": "SEAL Security Map",
  "license": "CC-BY-SA-4.0",
  "sourceRepository": "https://github.com/security-alliance/frameworks",
  "nodes": [
    {
      "id": "asset-community-trust",
      "type": "asset",
      "title": "Community trust",
      "summary": "Willingness of users and partners to believe official announcements and click official links. Social engineering spends this asset first.",
      "domains": [
        "community-communications",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "community",
        "trust"
      ],
      "roles": [
        "community-manager",
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "asset-deployment-authority",
      "type": "asset",
      "title": "Deployment authority",
      "summary": "Permission to publish frontend builds, ship packages, or upgrade on-chain code. Whoever holds it can change what users run.",
      "domains": [
        "development-supply-chain",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "deploy",
        "release"
      ],
      "roles": [
        "engineer-developer",
        "infrastructure-operator"
      ],
      "lifecycle": [
        "development",
        "pre-launch",
        "upgrade"
      ]
    },
    {
      "id": "asset-domain-control",
      "type": "asset",
      "title": "Domain control",
      "summary": "Registrar, DNS, and names that users type. Losing it lets an attacker present a convincing drain site as the real product.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "dns",
        "domain",
        "registrar"
      ],
      "roles": [
        "infrastructure-operator"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "asset-governance-authority",
      "type": "asset",
      "title": "Governance authority",
      "summary": "Power to pass proposals, change parameters, or upgrade contracts. Capture here rewrites the rest of the system.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "governance",
        "upgrades"
      ],
      "roles": [
        "governance-participant"
      ],
      "lifecycle": [
        "normal-operations",
        "upgrade"
      ]
    },
    {
      "id": "asset-key-holder-safety",
      "type": "asset",
      "title": "Key-holder safety",
      "summary": "The bodily safety of people who can move funds, and of their families. Coercion spends this asset to bypass cryptography.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "safety",
        "duress",
        "people"
      ],
      "roles": [
        "multisig-signer",
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations",
        "incident-response"
      ],
      "framework": "physical-security"
    },
    {
      "id": "asset-personal-identifying-data",
      "type": "asset",
      "title": "Personal identifying data",
      "summary": "Home, travel, family, and holdings traces that attackers use to phish, coerce, or show up in person. Distinct from account passwords and signing keys.",
      "domains": [
        "people",
        "community-communications"
      ],
      "status": "proposed",
      "tags": [
        "osint",
        "footprint",
        "pii"
      ],
      "roles": [
        "founder-executive",
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "privacy"
    },
    {
      "id": "asset-secrets-credentials",
      "type": "asset",
      "title": "Secrets and credentials",
      "summary": "API keys, cloud roles, CI secrets, and account passwords. One leak often becomes infrastructure takeover.",
      "domains": [
        "devices-identity",
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "secrets",
        "credentials"
      ],
      "roles": [
        "engineer-developer",
        "infrastructure-operator"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "asset-seed-secrets",
      "type": "asset",
      "title": "Seed phrase and recovery secrets",
      "summary": "The mnemonic or recovery material that reconstructs signing keys. Anyone who sees it can take the wallet.",
      "domains": [
        "devices-identity",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "seed-phrase",
        "recovery",
        "keys"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations",
        "incident-response"
      ],
      "framework": "wallet-security"
    },
    {
      "id": "asset-signer-keys",
      "type": "asset",
      "title": "Signer keys",
      "summary": "Private keys and devices that approve multisig or privileged transactions. Compromise is equivalent to authorized theft.",
      "domains": [
        "governance-treasury",
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "keys",
        "signers",
        "hardware-wallet"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations",
        "incident-response"
      ]
    },
    {
      "id": "asset-source-code",
      "type": "asset",
      "title": "Source code",
      "summary": "Repositories that define contracts, off-chain services, and the frontend. Integrity failures become production failures.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "source",
        "repository"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "development",
        "upgrade"
      ]
    },
    {
      "id": "asset-treasury-funds",
      "type": "asset",
      "title": "Treasury funds",
      "summary": "Protocol or organization funds held under privileged control. Confidentiality of keys and integrity of spend authority both matter.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "treasury",
        "funds"
      ],
      "roles": [
        "multisig-signer",
        "governance-participant"
      ],
      "lifecycle": [
        "normal-operations",
        "incident-response"
      ]
    },
    {
      "id": "asset-user-funds",
      "type": "asset",
      "title": "User funds",
      "summary": "Value users hold in the protocol or send through its interface. A compromised frontend or contract can drain it without touching the treasury.",
      "domains": [
        "onchain-systems",
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "users",
        "funds"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "component-ai-agent",
      "type": "component",
      "title": "AI agent",
      "summary": "A model that reads untrusted text and can call tools, write files, or construct transactions. Prompt templates do not bound what it does next.",
      "domains": [
        "development-supply-chain",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "ai",
        "agent",
        "llm"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "development",
        "normal-operations"
      ],
      "framework": "ai-security"
    },
    {
      "id": "component-ci-cd",
      "type": "component",
      "title": "CI/CD pipeline",
      "summary": "Build and release automation that can inject code, leak secrets, or publish a malicious artifact as a trusted release.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "ci",
        "cd",
        "build"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "development",
        "upgrade"
      ],
      "framework": "devsecops"
    },
    {
      "id": "component-cloud-infrastructure",
      "type": "component",
      "title": "Cloud infrastructure",
      "summary": "Accounts, servers, and admin consoles that host backends, build agents, and operational tooling.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "cloud",
        "aws"
      ],
      "roles": [
        "infrastructure-operator"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "infrastructure"
    },
    {
      "id": "component-community-channels",
      "type": "component",
      "title": "Community channels",
      "summary": "Discord, Telegram, support inboxes, and social accounts that attackers impersonate or hijack.",
      "domains": [
        "community-communications"
      ],
      "status": "proposed",
      "tags": [
        "discord",
        "social"
      ],
      "roles": [
        "community-manager"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "community-management"
    },
    {
      "id": "component-custodial-treasury",
      "type": "component",
      "title": "Custodial treasury",
      "summary": "Third-party or co-managed custody that holds organizational funds. Not the protocol governance multisig.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "custody",
        "treasury",
        "custodian"
      ],
      "roles": [
        "governance-participant",
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations",
        "incident-response"
      ],
      "framework": "treasury-operations"
    },
    {
      "id": "component-dependency-graph",
      "type": "component",
      "title": "Dependency graph",
      "summary": "Third-party packages, lockfiles, and registries the build consumes. A poisoned package becomes your code.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "dependencies",
        "npm",
        "supply-chain"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "development"
      ],
      "framework": "supply-chain"
    },
    {
      "id": "component-developer-devices",
      "type": "component",
      "title": "Developer and signer devices",
      "summary": "Laptops, phones, and browsers used to write code, approve CI, or sign transactions.",
      "domains": [
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "endpoint",
        "devices"
      ],
      "roles": [
        "engineer-developer",
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "opsec"
    },
    {
      "id": "component-dns-registrar",
      "type": "component",
      "title": "DNS and registrar accounts",
      "summary": "Registrar logins, DNS panels, and nameserver configuration that decide where a domain points.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "dns",
        "registrar"
      ],
      "roles": [
        "infrastructure-operator"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "infrastructure"
    },
    {
      "id": "component-family-household",
      "type": "component",
      "title": "Family and household",
      "summary": "People and staff close to a key-holder. Attackers coerce them to reach keys the target will not surrender for themselves.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "family",
        "household"
      ],
      "roles": [
        "founder-executive",
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations",
        "incident-response"
      ],
      "framework": "physical-security"
    },
    {
      "id": "component-founders-executives",
      "type": "component",
      "title": "Founders and executives",
      "summary": "High-authority people who are attractive phishing and coercion targets and often also hold signer or admin roles.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "leadership",
        "executives"
      ],
      "roles": [
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "component-frontend",
      "type": "component",
      "title": "Web frontend",
      "summary": "The site or app users load before connecting a wallet. Integrity failures here steal user funds without touching contracts.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "frontend",
        "ui"
      ],
      "roles": [
        "engineer-developer",
        "infrastructure-operator"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "front-end-web-app"
    },
    {
      "id": "component-governance-module",
      "type": "component",
      "title": "Governance module",
      "summary": "On-chain or off-chain proposal machinery that can move treasury or change protocol rules.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "governance",
        "proposals"
      ],
      "roles": [
        "governance-participant"
      ],
      "lifecycle": [
        "normal-operations",
        "upgrade"
      ],
      "framework": "governance"
    },
    {
      "id": "component-hardware-wallet",
      "type": "component",
      "title": "Hardware wallet",
      "summary": "A dedicated signing device that keeps keys offline and shows destination and amount on its own screen.",
      "domains": [
        "devices-identity",
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "hardware-wallet",
        "cold-wallet"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "wallet-security"
    },
    {
      "id": "component-hiring-pipeline",
      "type": "component",
      "title": "Hiring pipeline",
      "summary": "Recruiting, contracting, and access-granting steps that can admit a planted operator into code or infrastructure.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "hiring",
        "contractors",
        "dprk"
      ],
      "roles": [
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "opsec"
    },
    {
      "id": "component-identity-accounts",
      "type": "component",
      "title": "Identity and admin accounts",
      "summary": "Cloud, GitHub, registrar, and SaaS identities that grant privileged access when taken over.",
      "domains": [
        "devices-identity",
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "iam",
        "accounts"
      ],
      "roles": [
        "infrastructure-operator"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "iam"
    },
    {
      "id": "component-monitoring-stack",
      "type": "component",
      "title": "Monitoring stack",
      "summary": "On-chain watchers, logs, and alerting that decide whether an attack is noticed in time to contain it.",
      "domains": [
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "monitoring",
        "alerting"
      ],
      "roles": [
        "security-engineer",
        "incident-responder"
      ],
      "lifecycle": [
        "normal-operations",
        "incident-response"
      ],
      "framework": "monitoring"
    },
    {
      "id": "component-multisig",
      "type": "component",
      "title": "Protocol multisig",
      "summary": "The multi-signature account that holds treasury, upgrade, or pause authority for the protocol.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "multisig",
        "safe"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations",
        "upgrade"
      ],
      "framework": "multisig-for-protocols"
    },
    {
      "id": "component-rpc-endpoints",
      "type": "component",
      "title": "RPC endpoints",
      "summary": "JSON-RPC or similar nodes the product trusts for chain state and transaction broadcast.",
      "domains": [
        "infrastructure",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "rpc",
        "nodes"
      ],
      "roles": [
        "infrastructure-operator",
        "engineer-developer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "infrastructure"
    },
    {
      "id": "component-seed-backup",
      "type": "component",
      "title": "Seed backup",
      "summary": "Offline copies of the seed phrase: paper, metal, or split shares. Physical access here is wallet takeover.",
      "domains": [
        "devices-identity",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "seed-phrase",
        "backup"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations",
        "recovery"
      ],
      "framework": "wallet-security"
    },
    {
      "id": "component-signers",
      "type": "component",
      "title": "Signers",
      "summary": "People and devices that hold shares of a privileged multisig. Their laptops and judgment are part of the control system.",
      "domains": [
        "people",
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "signers",
        "people"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "component-smart-contracts",
      "type": "component",
      "title": "Smart contracts",
      "summary": "On-chain programs that custody funds or enforce protocol rules, including proxies and upgrade modules.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "contracts",
        "evm"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "design",
        "development",
        "upgrade"
      ],
      "framework": "external-security-reviews"
    },
    {
      "id": "component-software-wallet",
      "type": "component",
      "title": "Software wallet",
      "summary": "A hot wallet on a phone or browser that signs from an internet-connected device. Convenience with a larger remote attack surface.",
      "domains": [
        "devices-identity",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "software-wallet",
        "hot-wallet"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "wallet-security"
    },
    {
      "id": "control-branch-protection",
      "type": "control",
      "title": "Repository branch protection",
      "summary": "Required reviews, signed commits or equivalent, and restricted who can push to release branches.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "github",
        "branch-protection"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "development"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "devsecops"
    },
    {
      "id": "control-bug-bounty-program",
      "type": "control",
      "title": "Bug bounty program",
      "summary": "Pay independent researchers under clear scope, rewards, and triage capacity. Pair it with a durable security contact. This is not Safe Harbor for live exploits.",
      "domains": [
        "development-supply-chain",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "bounty",
        "disclosure"
      ],
      "roles": [
        "security-engineer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "detective",
      "assessmentEligible": true,
      "framework": "vulnerability-disclosure"
    },
    {
      "id": "control-cloud-hardening",
      "type": "control",
      "title": "Cloud account hardening",
      "summary": "Root protection, scoped IAM, logging, and configuration baselines on the cloud accounts that host the product.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "cloud",
        "iam"
      ],
      "roles": [
        "infrastructure-operator"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "infrastructure"
    },
    {
      "id": "control-cloud-kms-custody",
      "type": "control",
      "title": "Cloud KMS key custody",
      "summary": "Encrypt cloud data at rest with a KMS or BYOK design. Do not leave keys in the same breach domain as the ciphertext.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "kms",
        "cloud",
        "at-rest"
      ],
      "roles": [
        "infrastructure-operator"
      ],
      "lifecycle": [
        "design",
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "encryption"
    },
    {
      "id": "control-cold-wallet-separation",
      "type": "control",
      "title": "Cold and hot wallet separation",
      "summary": "Keep high-value keys on offline or hardware signers. Use a hot wallet only for amounts you can afford to lose.",
      "domains": [
        "devices-identity",
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "cold-wallet",
        "isolation"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "wallet-security"
    },
    {
      "id": "control-continuous-remote-identity-review",
      "type": "control",
      "title": "Continuous remote identity review",
      "summary": "Keep checking remote workers after hire: camera-on presence, identity consistency, and access that still matches the role.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "hiring",
        "identity",
        "dprk"
      ],
      "roles": [
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "detective",
      "assessmentEligible": true,
      "framework": "dprk-it-workers"
    },
    {
      "id": "control-controlled-surrender",
      "type": "control",
      "title": "Controlled-surrender wallet",
      "summary": "A believable low-value path an attacker can take immediately. Core reserves stay behind delay and extra approvals the victim cannot skip.",
      "domains": [
        "people",
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "duress",
        "decoy",
        "surrender"
      ],
      "roles": [
        "multisig-signer",
        "founder-executive"
      ],
      "lifecycle": [
        "design",
        "normal-operations",
        "incident-response"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "physical-security"
    },
    {
      "id": "control-default-e2ee-messaging",
      "type": "control",
      "title": "Default end-to-end encrypted messaging",
      "summary": "Put sensitive ops on messengers with E2EE on by default and verified safety numbers. Cloud backups and metadata still leak. Discord is not this control.",
      "domains": [
        "community-communications"
      ],
      "status": "proposed",
      "tags": [
        "e2ee",
        "messaging"
      ],
      "roles": [
        "founder-executive",
        "engineer-developer",
        "community-manager"
      ],
      "lifecycle": [
        "normal-operations",
        "incident-response"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "privacy"
    },
    {
      "id": "control-dependency-pinning-provenance",
      "type": "control",
      "title": "Dependency pinning and provenance",
      "summary": "Lockfiles, pinned versions, and provenance or signature checks so installs cannot silently float to a malicious release.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "lockfile",
        "provenance"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "development"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "supply-chain"
    },
    {
      "id": "control-device-hardening",
      "type": "control",
      "title": "Device hardening",
      "summary": "OS baselines, disk encryption, auto-update, and browser isolation on devices that touch code or keys.",
      "domains": [
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "endpoint",
        "hardening"
      ],
      "roles": [
        "engineer-developer",
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "opsec"
    },
    {
      "id": "control-digital-footprint-reduction",
      "type": "control",
      "title": "Digital footprint reduction",
      "summary": "Audit public presence, cut what you share, lock down privacy settings, and delete unused accounts on a cadence.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "osint",
        "footprint"
      ],
      "roles": [
        "founder-executive",
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "privacy"
    },
    {
      "id": "control-dns-change-monitoring",
      "type": "control",
      "title": "DNS change monitoring",
      "summary": "Alerting on nameserver, record, and registrar changes so hijacks are visible in minutes rather than after user reports.",
      "domains": [
        "infrastructure",
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "dns",
        "monitoring"
      ],
      "roles": [
        "infrastructure-operator",
        "incident-responder"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "detective",
      "assessmentEligible": true,
      "framework": "infrastructure"
    },
    {
      "id": "control-duress-signing-limits",
      "type": "control",
      "title": "Duress signing limits",
      "summary": "Per-transaction and daily caps, extra approvals above a threshold, and time delays so a coerced sitting cannot drain reserves.",
      "domains": [
        "governance-treasury",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "limits",
        "timelock",
        "duress"
      ],
      "roles": [
        "multisig-signer",
        "governance-participant"
      ],
      "lifecycle": [
        "normal-operations",
        "incident-response"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "physical-security"
    },
    {
      "id": "control-duress-travel-protocol",
      "type": "control",
      "title": "Duress and travel protocol",
      "summary": "Travel rules, reduced signing power on the road, and a way to signal duress without completing a forced transaction.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "travel",
        "duress"
      ],
      "roles": [
        "multisig-signer",
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "opsec"
    },
    {
      "id": "control-emergency-pause",
      "type": "control",
      "title": "Emergency pause and containment",
      "summary": "A tested ability to pause, throttle, or otherwise contain privileged actions when an incident is underway.",
      "domains": [
        "governance-treasury",
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "pause",
        "containment"
      ],
      "roles": [
        "multisig-signer",
        "incident-responder"
      ],
      "lifecycle": [
        "incident-response"
      ],
      "controlClass": "corrective",
      "assessmentEligible": true,
      "framework": "multisig-for-protocols"
    },
    {
      "id": "control-ensip15-normalization",
      "type": "control",
      "title": "ENSIP-15 name normalization",
      "summary": "Normalize names with ENSIP-15 before any namehash, and warn on confusable scripts. Homographs survive if the UI skips this.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "ens",
        "normalization",
        "homograph"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "design",
        "development"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "ens"
    },
    {
      "id": "control-execution-path-enforcement",
      "type": "control",
      "title": "Execution-path enforcement",
      "summary": "Allow, warn, or block where the agent is about to act. Monitoring after the fact is too late for irreversible tool calls and transactions.",
      "domains": [
        "development-supply-chain",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "ai",
        "runtime",
        "allowlist"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "design",
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "ai-security"
    },
    {
      "id": "control-external-security-review",
      "type": "control",
      "title": "External security review",
      "summary": "Independent review of contract and critical off-chain logic before deploy or upgrade, including a scoped re-review after material changes.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "audit",
        "review"
      ],
      "roles": [
        "security-engineer",
        "engineer-developer"
      ],
      "lifecycle": [
        "development",
        "pre-launch",
        "upgrade"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "external-security-reviews"
    },
    {
      "id": "control-frontend-integrity-monitoring",
      "type": "control",
      "title": "Frontend deployment integrity monitoring",
      "summary": "Detect unauthorized frontend publishes, CDN changes, or script injection on the sites users load.",
      "domains": [
        "infrastructure",
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "frontend",
        "integrity"
      ],
      "roles": [
        "engineer-developer",
        "infrastructure-operator"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "detective",
      "assessmentEligible": true,
      "framework": "front-end-web-app"
    },
    {
      "id": "control-full-disk-encryption",
      "type": "control",
      "title": "Full-disk encryption",
      "summary": "Confirm FDE is on for every work endpoint, with a strong algorithm and recovery keys stored off the device.",
      "domains": [
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "fde",
        "endpoint"
      ],
      "roles": [
        "engineer-developer",
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "encryption"
    },
    {
      "id": "control-geographic-key-separation",
      "type": "control",
      "title": "Geographic key separation",
      "summary": "Do not keep cold keys or seeds at the primary residence. Split signers and hardware across places so a local incident cannot collect a threshold.",
      "domains": [
        "people",
        "devices-identity",
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "geography",
        "keys",
        "duress"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "design",
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "physical-security"
    },
    {
      "id": "control-hardware-backed-encryption",
      "type": "control",
      "title": "Hardware-backed encryption keys",
      "summary": "Keep encryption keys in TPM, a self-encrypting drive, or an HSM so host memory and malware see less key material. This is not a hardware wallet.",
      "domains": [
        "devices-identity",
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "tpm",
        "hsm",
        "hardware"
      ],
      "roles": [
        "engineer-developer",
        "infrastructure-operator"
      ],
      "lifecycle": [
        "design",
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "encryption"
    },
    {
      "id": "control-hiring-identity-verification",
      "type": "control",
      "title": "Hiring identity verification",
      "summary": "Identity, work-authorization, and video-presence checks before contractors receive code or infrastructure access.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "hiring",
        "identity"
      ],
      "roles": [
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "opsec"
    },
    {
      "id": "control-identity-separation",
      "type": "control",
      "title": "Public and signer identity separation",
      "summary": "Keep the public persona off the devices and profiles that sign. Family and staff are trained not to discuss holdings or routines.",
      "domains": [
        "people",
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "identity",
        "osint",
        "family"
      ],
      "roles": [
        "founder-executive",
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "physical-security"
    },
    {
      "id": "control-independent-tx-verification",
      "type": "control",
      "title": "Independent transaction verification",
      "summary": "Each signer verifies destination, asset, and calldata on a trusted display instead of approving a hash from chat.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "calldata",
        "verification"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "multisig-for-protocols"
    },
    {
      "id": "control-insider-threat-mitigation",
      "type": "control",
      "title": "Insider threat mitigation",
      "summary": "Least privilege, access reviews, and monitoring for people who already have internal access.",
      "domains": [
        "people",
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "insider",
        "least-privilege"
      ],
      "roles": [
        "security-engineer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "detective",
      "assessmentEligible": true,
      "framework": "opsec"
    },
    {
      "id": "control-isolated-reproducible-builds",
      "type": "control",
      "title": "Isolated and reproducible builds",
      "summary": "Builds run in isolated pipelines and can be reproduced so a compromised laptop is not the sole source of a release.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "reproducible-builds",
        "isolation"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "development",
        "upgrade"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "devsecops"
    },
    {
      "id": "control-l1-ens-resolution",
      "type": "control",
      "title": "L1-backed ENS resolution",
      "summary": "For fund movement, resolve from Ethereum L1, not a stale indexer. Verify reverse records with a matching forward lookup before the send.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "ens",
        "l1",
        "reverse-record"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "design",
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "ens"
    },
    {
      "id": "control-least-privilege-review",
      "type": "control",
      "title": "Least privilege and privileged-access review",
      "summary": "Periodic review of who can deploy, sign, or administer production, with unused access removed.",
      "domains": [
        "devices-identity",
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "iam",
        "access-review"
      ],
      "roles": [
        "infrastructure-operator",
        "security-engineer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "governance",
      "assessmentEligible": true,
      "framework": "iam"
    },
    {
      "id": "control-limited-token-approvals",
      "type": "control",
      "title": "Limited token approvals",
      "summary": "Approve only the amount needed for this transaction. Revoke leftover allowances. Avoid permit and infinite approve by default.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "approvals",
        "allowance"
      ],
      "roles": [
        "engineer-developer",
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "wallet-security"
    },
    {
      "id": "control-living-threat-model",
      "type": "control",
      "title": "Living threat model",
      "summary": "Name assets, threats, and mitigations before build, then update the model when architecture or value at risk changes. A one-time workshop is not this control.",
      "domains": [
        "development-supply-chain",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "threat-model",
        "stride"
      ],
      "roles": [
        "engineer-developer",
        "security-engineer"
      ],
      "lifecycle": [
        "design",
        "development",
        "upgrade"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "threat-modeling"
    },
    {
      "id": "control-multi-channel-transfer-confirm",
      "type": "control",
      "title": "Multi-channel transfer confirmation",
      "summary": "Request on one channel, approve on another, with a second person checking destination and amount. Treat urgency as a social-engineering signal.",
      "domains": [
        "governance-treasury",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "confirmation",
        "ceremony"
      ],
      "roles": [
        "governance-participant",
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "treasury-operations"
    },
    {
      "id": "control-multisig-threshold-policy",
      "type": "control",
      "title": "Multisig threshold policy",
      "summary": "Thresholds and wallet separation matched to blast radius, so one lost or coerced signer cannot move the whole treasury.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "threshold",
        "multisig"
      ],
      "roles": [
        "multisig-signer",
        "governance-participant"
      ],
      "lifecycle": [
        "design",
        "normal-operations"
      ],
      "controlClass": "governance",
      "assessmentEligible": true,
      "framework": "multisig-for-protocols"
    },
    {
      "id": "control-network-segmentation",
      "type": "control",
      "title": "Network segmentation",
      "summary": "Production, build, and corporate networks are separated so a laptop compromise does not equal cloud root.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "segmentation",
        "network"
      ],
      "roles": [
        "infrastructure-operator"
      ],
      "lifecycle": [
        "design",
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "infrastructure"
    },
    {
      "id": "control-offline-seed-custody",
      "type": "control",
      "title": "Offline seed custody",
      "summary": "Keep the seed offline, preferably durable and split. Treat any screen, photo, or cloud copy as compromise and rotate.",
      "domains": [
        "devices-identity",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "seed-phrase",
        "offline"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations",
        "recovery"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "wallet-security"
    },
    {
      "id": "control-onchain-anomaly-detection",
      "type": "control",
      "title": "On-chain anomaly detection",
      "summary": "Monitors for unexpected drains, admin calls, or signer behavior with an owner who will act on the alert.",
      "domains": [
        "detection-incident-response",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "on-chain",
        "alerting"
      ],
      "roles": [
        "security-engineer",
        "incident-responder"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "detective",
      "assessmentEligible": true,
      "framework": "monitoring"
    },
    {
      "id": "control-peer-code-review",
      "type": "control",
      "title": "Peer code review",
      "summary": "Required human review of production changes, with a checklist that covers authz, input handling, and irreversible Web3 paths. Branch rules without actual review are theater.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "review",
        "sdlc"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "development"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "secure-software-development"
    },
    {
      "id": "control-phishing-resistant-mfa",
      "type": "control",
      "title": "Phishing-resistant multi-factor authentication",
      "summary": "Hardware-backed or passkey MFA on email, cloud, GitHub, registrar, and other privileged accounts. SMS and phishable OTP are not sufficient.",
      "domains": [
        "devices-identity",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "mfa",
        "passkeys",
        "phishing"
      ],
      "roles": [
        "founder-executive",
        "engineer-developer",
        "infrastructure-operator"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "iam"
    },
    {
      "id": "control-prompt-input-constraint",
      "type": "control",
      "title": "Prompt input constraint",
      "summary": "Classify and constrain model inputs at the execution boundary. Do not rely on boilerplate system prompts. Treat on-chain data and retrieved documents as untrusted.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "ai",
        "prompt-injection"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "design",
        "development"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "ai-security"
    },
    {
      "id": "control-published-recovery-address",
      "type": "control",
      "title": "Published recovery address",
      "summary": "Name a hardened multisig or governance address in the Safe Harbor scope so rescued funds have a legal destination. Keep it able to receive a large inflow.",
      "domains": [
        "onchain-systems",
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "recovery",
        "multisig",
        "safe-harbor"
      ],
      "roles": [
        "governance-participant",
        "multisig-signer"
      ],
      "lifecycle": [
        "design",
        "normal-operations"
      ],
      "controlClass": "recovery",
      "assessmentEligible": true,
      "framework": "safe-harbor"
    },
    {
      "id": "control-published-security-contact",
      "type": "control",
      "title": "Published security contact",
      "summary": "SECURITY.md, a monitored security mailbox, and .well-known/security.txt. Someone skilled acknowledges reports quickly and keeps them confidential until a fix ships.",
      "domains": [
        "development-supply-chain",
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "security.txt",
        "contact"
      ],
      "roles": [
        "security-engineer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "detective",
      "assessmentEligible": true,
      "framework": "vulnerability-disclosure"
    },
    {
      "id": "control-registrar-hardening",
      "type": "control",
      "title": "Registrar account hardening",
      "summary": "Registrar locks, unique credentials, phishing-resistant MFA, and restricted users on domain accounts.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "registrar",
        "domain-lock"
      ],
      "roles": [
        "infrastructure-operator"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "infrastructure"
    },
    {
      "id": "control-safe-harbor-adoption",
      "type": "control",
      "title": "Safe Harbor adoption",
      "summary": "Publish scope, register on-chain, and pre-authorize independent whitehats for active exploits only. This is not a bug bounty and does not replace pause or review.",
      "domains": [
        "onchain-systems",
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "safe-harbor",
        "whitehat",
        "governance"
      ],
      "roles": [
        "governance-participant",
        "incident-responder"
      ],
      "lifecycle": [
        "design",
        "normal-operations"
      ],
      "controlClass": "governance",
      "assessmentEligible": true,
      "framework": "safe-harbor"
    },
    {
      "id": "control-secure-sdlc-testing",
      "type": "control",
      "title": "Secure SDLC testing",
      "summary": "Static analysis, fuzzing, invariant tests, and regression tests wired into development so logic bugs are cheaper to find than in production.",
      "domains": [
        "onchain-systems",
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "testing",
        "fuzzing"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "development"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "security-testing"
    },
    {
      "id": "control-security-awareness-training",
      "type": "control",
      "title": "Security awareness training",
      "summary": "Role-specific practice against spearphishing, fake meetings, and impersonation, especially for signers and executives.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "training",
        "phishing"
      ],
      "roles": [
        "founder-executive",
        "community-manager"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "user-team-security"
    },
    {
      "id": "control-security-council-process",
      "type": "control",
      "title": "Security council process",
      "summary": "A defined council or emergency path for upgrades and pauses, with constraints so it cannot silently become a shadow admin.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "council",
        "governance"
      ],
      "roles": [
        "governance-participant"
      ],
      "lifecycle": [
        "upgrade",
        "incident-response"
      ],
      "controlClass": "governance",
      "assessmentEligible": true,
      "framework": "governance"
    },
    {
      "id": "control-signer-isolation",
      "type": "control",
      "title": "Hardware-backed signer isolation",
      "summary": "Signing keys live on dedicated hardware, separated from daily browsing and development machines.",
      "domains": [
        "devices-identity",
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "hardware-wallet",
        "isolation"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "multisig-for-protocols"
    },
    {
      "id": "control-signer-lifecycle",
      "type": "control",
      "title": "Signer onboarding, rotation, and offboarding",
      "summary": "Documented join, rotate, and leave procedures so keys are not left with former signers and replacements are available.",
      "domains": [
        "governance-treasury",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "rotation",
        "onboarding"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "governance",
      "assessmentEligible": true,
      "framework": "multisig-for-protocols"
    },
    {
      "id": "control-simulate-before-sign",
      "type": "control",
      "title": "Simulate and decode before signing",
      "summary": "Independently simulate the transaction and read destination, asset, and calldata on a trusted display. Do not sign because a website said it was safe.",
      "domains": [
        "devices-identity",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "simulation",
        "verification"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "wallet-security"
    },
    {
      "id": "control-test-transfer",
      "type": "control",
      "title": "Test transfer before full send",
      "summary": "Send a small test to a new address and confirm receipt on an independent channel before the irreversible full amount.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "test-transaction",
        "verification"
      ],
      "roles": [
        "governance-participant"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "treasury-operations"
    },
    {
      "id": "control-tested-incident-runbooks",
      "type": "control",
      "title": "Tested incident runbooks",
      "summary": "Written, rehearsed procedures for key classes of incident, with contacts and first actions that work under pressure.",
      "domains": [
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "runbooks",
        "ir"
      ],
      "roles": [
        "incident-responder"
      ],
      "lifecycle": [
        "incident-response"
      ],
      "controlClass": "recovery",
      "assessmentEligible": true,
      "framework": "incident-management"
    },
    {
      "id": "control-tls-ssh-transit",
      "type": "control",
      "title": "TLS and SSH in transit",
      "summary": "Use modern TLS for internet traffic and SSH for remote admin. Cleartext HTTP and unencrypted remote shells are not acceptable on sensitive systems.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "tls",
        "ssh",
        "transit"
      ],
      "roles": [
        "engineer-developer",
        "infrastructure-operator"
      ],
      "lifecycle": [
        "design",
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "encryption"
    },
    {
      "id": "control-treasury-classification",
      "type": "control",
      "title": "Treasury account classification",
      "summary": "Classify each custodial account by financial impact and access urgency, then match approvers, MFA, and delays to that bar.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "classification",
        "impact"
      ],
      "roles": [
        "governance-participant"
      ],
      "lifecycle": [
        "design",
        "normal-operations"
      ],
      "controlClass": "governance",
      "assessmentEligible": true,
      "framework": "treasury-operations"
    },
    {
      "id": "control-treasury-registration",
      "type": "control",
      "title": "Custodial account registration",
      "summary": "Register every account, log access changes, snapshot security settings, and review quarterly so classification matches reality.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "registration",
        "audit"
      ],
      "roles": [
        "governance-participant"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "detective",
      "assessmentEligible": true,
      "framework": "treasury-operations"
    },
    {
      "id": "control-vpn-on-untrusted-networks",
      "type": "control",
      "title": "VPN on untrusted networks",
      "summary": "Tunnel traffic on public Wi-Fi so the local network cannot read or alter it. A VPN is not anonymity, malware defense, or a substitute for HTTPS.",
      "domains": [
        "infrastructure",
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "vpn",
        "wifi"
      ],
      "roles": [
        "engineer-developer",
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "privacy"
    },
    {
      "id": "control-whitelist-and-delay",
      "type": "control",
      "title": "Whitelist and delay policy",
      "summary": "Policy-engine gates, address allowlists, and time delays on High and Critical accounts so a stolen session cannot drain immediately.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "whitelist",
        "delay",
        "policy-engine"
      ],
      "roles": [
        "governance-participant"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "controlClass": "preventive",
      "assessmentEligible": true,
      "framework": "treasury-operations"
    },
    {
      "id": "guidance-account-management",
      "type": "guidance",
      "title": "Account management guides",
      "summary": "High-value SaaS and community accounts need strong MFA, session hygiene, least privilege, and admin separation.",
      "domains": [
        "devices-identity",
        "community-communications"
      ],
      "status": "proposed",
      "tags": [
        "accounts",
        "mfa"
      ],
      "href": "/guides/account-management/overview",
      "framework": "guides"
    },
    {
      "id": "guidance-ai-security",
      "type": "guidance",
      "title": "AI Security",
      "summary": "Agentic AI turns instruction-following into irreversible actions. Prefer runtime execution-path controls and isolation over prompt templates alone.",
      "domains": [
        "development-supply-chain",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "ai"
      ],
      "href": "/ai-security/overview",
      "framework": "ai-security"
    },
    {
      "id": "guidance-awareness",
      "type": "guidance",
      "title": "Awareness",
      "summary": "Security awareness framework for people-facing threats.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "awareness"
      ],
      "href": "/awareness/overview",
      "framework": "awareness"
    },
    {
      "id": "guidance-bug-bounties",
      "type": "guidance",
      "title": "Bug bounties",
      "summary": "Bug bounties work when scope, rewards, and triage capacity match the asset risk, and researchers can report under explicit safe harbor and disclosure rules.",
      "domains": [
        "development-supply-chain",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "bounty"
      ],
      "href": "/vulnerability-disclosure/bug-bounties",
      "framework": "vulnerability-disclosure"
    },
    {
      "id": "guidance-certs",
      "type": "guidance",
      "title": "SEAL certifications",
      "summary": "Operational security certifications. A module evaluates whether practices exist. It is not the implementation guide and it is not a map control.",
      "domains": [
        "governance-treasury",
        "detection-incident-response",
        "infrastructure",
        "development-supply-chain",
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "sfc",
        "certification"
      ],
      "href": "/certs/overview",
      "framework": "certs"
    },
    {
      "id": "guidance-cicd",
      "type": "guidance",
      "title": "CI/CD security",
      "summary": "Hardening continuous integration and deployment pipelines.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "ci",
        "cd"
      ],
      "href": "/devsecops/continuous-integration-continuous-deployment",
      "framework": "devsecops"
    },
    {
      "id": "guidance-cloud",
      "type": "guidance",
      "title": "Cloud security",
      "summary": "Hardening cloud accounts and workloads that host the product.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "cloud"
      ],
      "href": "/infrastructure/cloud",
      "framework": "infrastructure"
    },
    {
      "id": "guidance-cloud-data-encryption",
      "type": "guidance",
      "title": "Cloud data encryption",
      "summary": "Encrypt cloud data in transit and at rest, with keys in a KMS or BYOK design, not default storage alone.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "cloud",
        "kms"
      ],
      "href": "/encryption/cloud-data-encryption",
      "framework": "encryption"
    },
    {
      "id": "guidance-code-reviews",
      "type": "guidance",
      "title": "Code reviews and peer audits",
      "summary": "Review cadence, checklists, automation assist, and a culture that treats unreviewed production merges as a defect.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "review"
      ],
      "href": "/secure-software-development/code-reviews-peer-audits",
      "framework": "secure-software-development"
    },
    {
      "id": "guidance-code-signing",
      "type": "guidance",
      "title": "Code signing",
      "summary": "Signing and verifying build artifacts.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "code-signing"
      ],
      "href": "/devsecops/code-signing",
      "framework": "devsecops"
    },
    {
      "id": "guidance-coercion-duress",
      "type": "guidance",
      "title": "Coercion and duress",
      "summary": "Wrench attacks coerce the people who hold keys. Cryptography does not stop a physically present attacker.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "duress",
        "wrench-attack"
      ],
      "href": "/physical-security/coercion-and-duress/overview",
      "framework": "physical-security"
    },
    {
      "id": "guidance-cold-vs-hot",
      "type": "guidance",
      "title": "Cold vs hot wallets",
      "summary": "Match fund tier to connectivity. Cold and hardware signers cut remote theft; hot wallets stay for operational amounts.",
      "domains": [
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "cold-wallet",
        "hot-wallet"
      ],
      "href": "/wallet-security/cold-vs-hot-wallet",
      "framework": "wallet-security"
    },
    {
      "id": "guidance-community",
      "type": "guidance",
      "title": "Community management",
      "summary": "Operating community channels without handing attackers a trusted megaphone.",
      "domains": [
        "community-communications"
      ],
      "status": "proposed",
      "tags": [
        "community"
      ],
      "href": "/community-management/overview",
      "framework": "community-management"
    },
    {
      "id": "guidance-council",
      "type": "guidance",
      "title": "Security council best practices",
      "summary": "How a security council should be designed and constrained.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "council"
      ],
      "href": "/governance/council-best-practices",
      "framework": "governance"
    },
    {
      "id": "guidance-create-maintain-threat-models",
      "type": "guidance",
      "title": "Create and maintain threat models",
      "summary": "A useful threat model is a maintained artifact. Redefine scope and mitigations when architecture or value at risk changes.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "threat-model",
        "maintenance"
      ],
      "href": "/threat-modeling/create-maintain-threat-models",
      "framework": "threat-modeling"
    },
    {
      "id": "guidance-dependency-runbook",
      "type": "guidance",
      "title": "Dependency attack runbook",
      "summary": "Runbook for compromised dependencies and build artifacts.",
      "domains": [
        "detection-incident-response",
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "dependencies",
        "runbook"
      ],
      "href": "/incident-management/incident-response-template/runbooks/dependency-attack",
      "framework": "incident-management"
    },
    {
      "id": "guidance-device-hardening",
      "type": "guidance",
      "title": "Device hardening",
      "summary": "Endpoint hardening practices for high-risk roles.",
      "domains": [
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "endpoint"
      ],
      "href": "/opsec/control-domains/technical/device-hardening",
      "framework": "opsec"
    },
    {
      "id": "guidance-devsecops",
      "type": "guidance",
      "title": "DevSecOps",
      "summary": "Security controls in development, CI/CD, and repository workflows.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "devsecops"
      ],
      "href": "/devsecops/overview",
      "framework": "devsecops"
    },
    {
      "id": "guidance-digital-footprint",
      "type": "guidance",
      "title": "Digital footprint",
      "summary": "Active posts and passive tracking both form a footprint attackers use for targeting. Audit, minimize sharing, and delete unused accounts.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "osint",
        "footprint"
      ],
      "href": "/privacy/digital-footprint",
      "framework": "privacy"
    },
    {
      "id": "guidance-dns-cert",
      "type": "guidance",
      "title": "SFC: DNS and registrar",
      "summary": "Certification criteria for domain inventory, registrar hardening, DNS change control, and email authentication.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "sfc",
        "dns",
        "certification"
      ],
      "href": "/certs/sfc-dns-registrar",
      "aliases": [
        "guidance-sfc-dns-registrar"
      ],
      "framework": "certs"
    },
    {
      "id": "guidance-dns-hijack-runbook",
      "type": "guidance",
      "title": "DNS hijack runbook",
      "summary": "Runbook for DNS and domain hijack incidents.",
      "domains": [
        "detection-incident-response",
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "dns",
        "runbook"
      ],
      "href": "/incident-management/incident-response-template/runbooks/dns-hijack",
      "framework": "incident-management"
    },
    {
      "id": "guidance-dns-monitoring",
      "type": "guidance",
      "title": "DNS monitoring and alerting",
      "summary": "How to detect domain and DNS changes that indicate hijack.",
      "domains": [
        "infrastructure",
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "dns",
        "monitoring"
      ],
      "href": "/infrastructure/domain-and-dns-security/monitoring-and-alerting",
      "framework": "infrastructure"
    },
    {
      "id": "guidance-dns-security-overview",
      "type": "guidance",
      "title": "Domain & DNS Security",
      "summary": "Protect Web3 domains from hijacking and wallet drainer attacks, with lessons from the Curve Finance and Galxe incidents and the DNS controls that stop them.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [],
      "roles": [
        "infrastructure-operator"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "href": "/infrastructure/domain-and-dns-security/overview"
    },
    {
      "id": "guidance-dprk-general-information",
      "type": "guidance",
      "title": "DPRK IT workers: general information",
      "summary": "False-identity remote IT work that funds a sanctioned regime. Treat it as high-impact insider and sanctions risk, not ordinary freelance noise.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "dprk",
        "sanctions"
      ],
      "href": "/dprk-it-workers/general-information",
      "framework": "dprk-it-workers"
    },
    {
      "id": "guidance-dprk-it-workers",
      "type": "guidance",
      "title": "Insider threats (DPRK)",
      "summary": "Fraudulently hired remote workers who fund a sanctioned regime and can pivot to theft, extortion, or sabotage. Hiring and access control are the primary defenses.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "dprk",
        "insider"
      ],
      "href": "/dprk-it-workers/overview",
      "framework": "dprk-it-workers"
    },
    {
      "id": "guidance-dprk-mitigation",
      "type": "guidance",
      "title": "Mitigating DPRK IT workers",
      "summary": "Hiring verification plus least privilege before a hit. After discovery, revoke access, preserve evidence, and treat sanctions and supply-chain exposure as incidents.",
      "domains": [
        "people",
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "dprk",
        "hiring",
        "least-privilege"
      ],
      "href": "/dprk-it-workers/mitigating-dprk-it-workers",
      "framework": "dprk-it-workers"
    },
    {
      "id": "guidance-dprk-playbook",
      "type": "guidance",
      "title": "North Korea (DPRK) attack response",
      "summary": "Response steps when a DPRK compromise is suspected or confirmed.",
      "domains": [
        "detection-incident-response",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "dprk"
      ],
      "href": "/incident-management/playbooks/hacked-dprk",
      "framework": "incident-management"
    },
    {
      "id": "guidance-dprk-ttps",
      "type": "guidance",
      "title": "DPRK IT worker TTPs",
      "summary": "Spot fraud and inconsistency across identity, code history, and interviews. Do not rely on stereotypes. Tactics change.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "dprk",
        "hiring",
        "ttps"
      ],
      "href": "/dprk-it-workers/techniques-tactics-and-procedures",
      "framework": "dprk-it-workers"
    },
    {
      "id": "guidance-duress-defensive-principles",
      "type": "guidance",
      "title": "Defensive design principles",
      "summary": "Minimize what one coerced person can move, compartmentalize keys, offer controlled surrender, recover without reused secrets, and put human safety first.",
      "domains": [
        "people",
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "duress",
        "design"
      ],
      "href": "/physical-security/coercion-and-duress/defensive-design-principles",
      "framework": "physical-security"
    },
    {
      "id": "guidance-duress-incident-response",
      "type": "guidance",
      "title": "Wrench-attack incident response",
      "summary": "Life safety first, then contain signing power. Do not treat a coerced signature as an ordinary key-compromise drill.",
      "domains": [
        "detection-incident-response",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "duress",
        "incident-response"
      ],
      "href": "/physical-security/coercion-and-duress/incident-response",
      "framework": "physical-security"
    },
    {
      "id": "guidance-duress-personal-safety",
      "type": "guidance",
      "title": "Personal and family safety",
      "summary": "Cut OSINT, separate public and signer identities, train family and staff, and harden routines so a wrench attack has less to aim at.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "family",
        "osint",
        "duress"
      ],
      "href": "/physical-security/coercion-and-duress/personal-and-family-safety",
      "framework": "physical-security"
    },
    {
      "id": "guidance-duress-transaction-flows",
      "type": "guidance",
      "title": "Transaction flows under duress",
      "summary": "Hard limits, delayed approvals, separated channels, and a plausible low-value compliance path with no upgrade to core funds.",
      "domains": [
        "governance-treasury",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "limits",
        "duress"
      ],
      "href": "/physical-security/coercion-and-duress/transaction-flows-under-duress",
      "framework": "physical-security"
    },
    {
      "id": "guidance-duress-wallet-architecture",
      "type": "guidance",
      "title": "Wallet and key architecture under duress",
      "summary": "Tiered hot-to-deep-cold wallets, multisig or MPC, geographic key storage, and controlled-surrender paths.",
      "domains": [
        "governance-treasury",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "wallet",
        "multisig",
        "duress"
      ],
      "href": "/physical-security/coercion-and-duress/wallet-and-key-architecture",
      "framework": "physical-security"
    },
    {
      "id": "guidance-encrypted-communication",
      "type": "guidance",
      "title": "Encrypted communication tools",
      "summary": "Prefer apps with default end-to-end encryption and verifiable safety numbers. Metadata and backup settings still leak.",
      "domains": [
        "community-communications"
      ],
      "status": "proposed",
      "tags": [
        "e2ee",
        "messaging"
      ],
      "href": "/privacy/encrypted-communication-tools",
      "framework": "privacy"
    },
    {
      "id": "guidance-encryption",
      "type": "guidance",
      "title": "Encryption",
      "summary": "Protect confidentiality when keys are managed on purpose across data at rest and in transit. Algorithms do not fix weak custody or cleartext channels.",
      "domains": [
        "devices-identity",
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "encryption"
      ],
      "href": "/encryption/overview",
      "framework": "encryption"
    },
    {
      "id": "guidance-encryption-in-transit",
      "type": "guidance",
      "title": "Encryption in transit",
      "summary": "Data crossing networks uses TLS, SSH, or a VPN as appropriate. Cleartext remote admin and bulk HTTP are unacceptable for sensitive systems.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "tls",
        "transit"
      ],
      "href": "/encryption/encryption-in-transit",
      "framework": "encryption"
    },
    {
      "id": "guidance-ens",
      "type": "guidance",
      "title": "ENS best practices",
      "summary": "Secure ENS use means fresh L1-backed resolution for funds moves, correct name normalization, and verified bidirectional records.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "ens"
      ],
      "href": "/ens/overview",
      "framework": "ens"
    },
    {
      "id": "guidance-ens-integrity",
      "type": "guidance",
      "title": "ENS data integrity",
      "summary": "For fund movement, resolve from Ethereum L1 and always verify reverse records with a matching forward lookup.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "ens",
        "integrity"
      ],
      "href": "/ens/data-integrity-verification",
      "framework": "ens"
    },
    {
      "id": "guidance-ens-normalization",
      "type": "guidance",
      "title": "ENS name handling",
      "summary": "Normalize with ENSIP-15 before any namehash, and warn on confusable scripts that enable homograph phishing.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "ens",
        "normalization"
      ],
      "href": "/ens/name-handling-normalization",
      "framework": "ens"
    },
    {
      "id": "guidance-execution-path",
      "type": "guidance",
      "title": "Execution-path enforcement",
      "summary": "Enforce allow, warn, or block where the agent is about to act. Monitoring after the fact is too late for irreversible actions.",
      "domains": [
        "development-supply-chain",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "ai",
        "runtime"
      ],
      "href": "/ai-security/execution-path-enforcement",
      "framework": "ai-security"
    },
    {
      "id": "guidance-exploit-runbook",
      "type": "guidance",
      "title": "Smart contract exploit runbook",
      "summary": "Runbook for active smart contract exploitation.",
      "domains": [
        "detection-incident-response",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "exploit",
        "runbook"
      ],
      "href": "/incident-management/incident-response-template/runbooks/smart-contract-exploit",
      "framework": "incident-management"
    },
    {
      "id": "guidance-external-security-reviews",
      "type": "guidance",
      "title": "External security reviews",
      "summary": "How to scope, run, and follow up independent security reviews of smart contracts and related systems.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "reviews",
        "audit"
      ],
      "href": "/external-security-reviews/overview",
      "framework": "external-security-reviews"
    },
    {
      "id": "guidance-frontend",
      "type": "guidance",
      "title": "Front-end web application security",
      "summary": "Controls for the web application users load before they connect a wallet.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "frontend"
      ],
      "href": "/front-end-web-app/overview",
      "framework": "front-end-web-app"
    },
    {
      "id": "guidance-full-disk-encryption",
      "type": "guidance",
      "title": "Full-disk encryption",
      "summary": "Enable FDE on endpoints that store work data so lost or stolen devices do not expose plaintext at rest.",
      "domains": [
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "fde"
      ],
      "href": "/encryption/full-disk-encryption",
      "framework": "encryption"
    },
    {
      "id": "guidance-governance",
      "type": "guidance",
      "title": "Governance",
      "summary": "Governance framework covering councils, risk, and protocol change.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "governance"
      ],
      "href": "/governance/overview",
      "framework": "governance"
    },
    {
      "id": "guidance-guides",
      "type": "guidance",
      "title": "Guides",
      "summary": "Product-specific checklists for account management and endpoint controls. Follow the steps for each tool, then review settings when vendors change defaults.",
      "domains": [
        "devices-identity",
        "community-communications"
      ],
      "status": "proposed",
      "tags": [
        "guides",
        "checklists"
      ],
      "href": "/guides/overview",
      "framework": "guides"
    },
    {
      "id": "guidance-hardware-encryption",
      "type": "guidance",
      "title": "Hardware encryption",
      "summary": "TPM, self-encrypting drives, and HSMs keep encryption keys out of host memory when they are deployed and managed correctly.",
      "domains": [
        "devices-identity",
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "tpm",
        "hsm"
      ],
      "href": "/encryption/hardware-encryption",
      "framework": "encryption"
    },
    {
      "id": "guidance-hardware-security-keys",
      "type": "guidance",
      "title": "Hardware security keys",
      "summary": "Use FIDO2/WebAuthn keys on high-value accounts, register at least two keys, disable SMS fallback where possible, and test recovery before you need it.",
      "domains": [
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "fido2",
        "webauthn",
        "mfa"
      ],
      "href": "/guides/endpoint-security/hardware-security-keys",
      "framework": "guides"
    },
    {
      "id": "guidance-iam",
      "type": "guidance",
      "title": "Identity and access management",
      "summary": "IAM, authentication, and access-review guidance.",
      "domains": [
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "iam"
      ],
      "href": "/iam/overview",
      "framework": "iam"
    },
    {
      "id": "guidance-identify-mitigate-threats",
      "type": "guidance",
      "title": "Identify and mitigate threats",
      "summary": "STRIDE-oriented enumeration, attack surface analysis, and mitigation patterns for the system under review.",
      "domains": [
        "development-supply-chain",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "stride",
        "mitigation"
      ],
      "href": "/threat-modeling/identity-mitigate-threats",
      "framework": "threat-modeling"
    },
    {
      "id": "guidance-incident-playbooks",
      "type": "guidance",
      "title": "Incident playbooks",
      "summary": "Playbooks for live incidents, including malware, drainers, and nation-state cases.",
      "domains": [
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "playbooks",
        "ir"
      ],
      "href": "/incident-management/playbooks/overview",
      "framework": "incident-management"
    },
    {
      "id": "guidance-infrastructure",
      "type": "guidance",
      "title": "Infrastructure framework",
      "summary": "Cloud, network, DNS, and related operational infrastructure guidance.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "infrastructure"
      ],
      "href": "/infrastructure/overview",
      "framework": "infrastructure"
    },
    {
      "id": "guidance-insider-threat",
      "type": "guidance",
      "title": "Insider threat mitigation",
      "summary": "People-domain controls for detecting and limiting insider abuse.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "insider"
      ],
      "href": "/opsec/control-domains/people/insider-threat-mitigation",
      "framework": "opsec"
    },
    {
      "id": "guidance-ir-detection",
      "type": "guidance",
      "title": "Incident detection and response",
      "summary": "How to detect incidents and run response.",
      "domains": [
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "ir"
      ],
      "href": "/incident-management/incident-detection-and-response",
      "framework": "incident-management"
    },
    {
      "id": "guidance-key-compromise-runbook",
      "type": "guidance",
      "title": "Key compromise runbook",
      "summary": "Runbook for suspected or confirmed key compromise.",
      "domains": [
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "keys",
        "runbook"
      ],
      "href": "/incident-management/incident-response-template/runbooks/key-compromise",
      "framework": "incident-management"
    },
    {
      "id": "guidance-monitoring",
      "type": "guidance",
      "title": "Monitoring",
      "summary": "Monitoring framework for detecting security-relevant events.",
      "domains": [
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "monitoring"
      ],
      "href": "/monitoring/overview",
      "framework": "monitoring"
    },
    {
      "id": "guidance-multisig-emergency",
      "type": "guidance",
      "title": "Multisig emergency procedures",
      "summary": "Emergency paths for protocol multisigs when keys, channels, or signers fail.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "emergency",
        "multisig"
      ],
      "href": "/multisig-for-protocols/emergency-procedures",
      "framework": "multisig-for-protocols"
    },
    {
      "id": "guidance-multisig-joining",
      "type": "guidance",
      "title": "Joining a protocol multisig",
      "summary": "How a new signer joins a protocol multisig without weakening the set.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "onboarding",
        "signers"
      ],
      "href": "/multisig-for-protocols/joining-a-multisig",
      "framework": "multisig-for-protocols"
    },
    {
      "id": "guidance-multisig-overview",
      "type": "guidance",
      "title": "Multisig Security Framework",
      "summary": "Multisig security for protocols: plan and classify risk, configure Safe/Squads, onboard signers, run operational runbooks, and prepare emergency and backup signing paths.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "href": "/multisig-for-protocols/overview"
    },
    {
      "id": "guidance-multisig-runbooks",
      "type": "guidance",
      "title": "Multisig runbooks",
      "summary": "Operational runbooks for pause, rotation, threshold change, and transfers.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "runbooks",
        "multisig"
      ],
      "href": "/multisig-for-protocols/runbooks/overview",
      "framework": "multisig-for-protocols"
    },
    {
      "id": "guidance-network",
      "type": "guidance",
      "title": "Network security",
      "summary": "Segmentation and network controls for production systems.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "network"
      ],
      "href": "/infrastructure/network-security",
      "framework": "infrastructure"
    },
    {
      "id": "guidance-opsec",
      "type": "guidance",
      "title": "Operational security",
      "summary": "OpSec cycle and control domains for people, devices, and process.",
      "domains": [
        "people",
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "opsec"
      ],
      "href": "/opsec/overview",
      "framework": "opsec"
    },
    {
      "id": "guidance-people-controls",
      "type": "guidance",
      "title": "People controls",
      "summary": "OpSec controls that apply to personnel, hiring, and insider risk.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "people",
        "opsec"
      ],
      "href": "/opsec/control-domains/people/overview",
      "framework": "opsec"
    },
    {
      "id": "guidance-phishing",
      "type": "guidance",
      "title": "Phishing and social engineering",
      "summary": "Team practices for recognizing and resisting phishing and pretexting.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "phishing"
      ],
      "href": "/user-team-security/phishing-social-engineering",
      "framework": "user-team-security"
    },
    {
      "id": "guidance-physical",
      "type": "guidance",
      "title": "Physical and environmental controls",
      "summary": "Physical OpSec controls around devices, spaces, and presence.",
      "domains": [
        "people",
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "physical"
      ],
      "href": "/opsec/control-domains/physical-environmental/overview",
      "framework": "opsec"
    },
    {
      "id": "guidance-physical-security",
      "type": "guidance",
      "title": "Physical Security",
      "summary": "Protect people and hardware from coercion, theft, surveillance, and tampering. Distinct from OpSec, which reduces what an adversary can learn.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "physical",
        "duress"
      ],
      "href": "/physical-security/overview",
      "framework": "physical-security"
    },
    {
      "id": "guidance-privacy",
      "type": "guidance",
      "title": "Privacy",
      "summary": "Shrink personal and team data exposure first. Encryption and network tools then reduce what remains.",
      "domains": [
        "people",
        "community-communications",
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "privacy"
      ],
      "href": "/privacy/overview",
      "framework": "privacy"
    },
    {
      "id": "guidance-prompt-injection",
      "type": "guidance",
      "title": "Prompt injection defenses",
      "summary": "Prompt injection succeeds because models treat text as instructions. Constrain and classify inputs at the execution boundary.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "ai",
        "prompt-injection"
      ],
      "href": "/ai-security/prompt-injection-defenses",
      "framework": "ai-security"
    },
    {
      "id": "guidance-public-networks",
      "type": "guidance",
      "title": "Attack surfaces on public networks",
      "summary": "Open Wi-Fi multiplies rogue AP, captive-portal, and local scanning risk. Assume the LAN is adversarial.",
      "domains": [
        "infrastructure",
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "wifi",
        "vpn"
      ],
      "href": "/privacy/vpns/attack-surfaces-public-networks",
      "framework": "privacy"
    },
    {
      "id": "guidance-safe-harbor",
      "type": "guidance",
      "title": "SEAL Whitehat Safe Harbor",
      "summary": "Pre-authorize whitehats to rescue funds during active exploits under defined scope and rules. Not a substitute for bug bounties or pre-exploit disclosure.",
      "domains": [
        "onchain-systems",
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "safe-harbor",
        "whitehat"
      ],
      "href": "/safe-harbor/overview",
      "framework": "safe-harbor"
    },
    {
      "id": "guidance-safe-harbor-adoption",
      "type": "guidance",
      "title": "Safe Harbor self-adoption",
      "summary": "Define scope, complete governance when required, register on-chain, update public terms, and announce so whitehats can rely on the rules.",
      "domains": [
        "governance-treasury",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "safe-harbor",
        "adoption"
      ],
      "href": "/safe-harbor/self-adoption-guide",
      "framework": "safe-harbor"
    },
    {
      "id": "guidance-safe-harbor-scope",
      "type": "guidance",
      "title": "Safe Harbor scope terms",
      "summary": "Recovery address, contacts, covered assets, bounty, and identity rules that tell whitehats how a rescue must work.",
      "domains": [
        "onchain-systems",
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "safe-harbor",
        "scope"
      ],
      "href": "/safe-harbor/scope-terms",
      "framework": "safe-harbor"
    },
    {
      "id": "guidance-safe-harbor-whitehat",
      "type": "guidance",
      "title": "Safe Harbor for whitehats",
      "summary": "Coverage applies only when the rescuer is independent of the attacker, returns funds on time, and follows the protocol's published rules.",
      "domains": [
        "detection-incident-response",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "whitehat",
        "rescue"
      ],
      "href": "/safe-harbor/whitehat",
      "framework": "safe-harbor"
    },
    {
      "id": "guidance-secure-browsing",
      "type": "guidance",
      "title": "Secure browsing",
      "summary": "Prefer HTTPS end to end, cut trackers, and treat public Wi-Fi as hostile unless traffic is also tunneled.",
      "domains": [
        "devices-identity",
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "https",
        "browser"
      ],
      "href": "/privacy/secure-browsing",
      "framework": "privacy"
    },
    {
      "id": "guidance-secure-coding",
      "type": "guidance",
      "title": "Secure coding standards",
      "summary": "Input validation, encoding, authz checks, error handling, least privilege in code, and secure data handling.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "coding",
        "standards"
      ],
      "href": "/secure-software-development/secure-coding-standards-guidelines",
      "framework": "secure-software-development"
    },
    {
      "id": "guidance-secure-repos",
      "type": "guidance",
      "title": "Secure code repositories",
      "summary": "Repository compromise is supply-chain compromise. Enforce least privilege, strong authentication, protected branches, and review-required merges.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "github",
        "branch-protection"
      ],
      "href": "/secure-software-development/secure-code-repositories-version-control",
      "framework": "secure-software-development"
    },
    {
      "id": "guidance-security-contact",
      "type": "guidance",
      "title": "Security contact",
      "summary": "A security contact is useless unless someone skilled monitors it, acknowledges reports quickly, and keeps findings confidential until fixes ship.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "contact",
        "security.txt"
      ],
      "href": "/vulnerability-disclosure/security-contact",
      "framework": "vulnerability-disclosure"
    },
    {
      "id": "guidance-security-culture",
      "type": "guidance",
      "title": "Security-aware culture",
      "summary": "Building a culture that treats social engineering as a first-class risk.",
      "domains": [
        "people",
        "community-communications"
      ],
      "status": "proposed",
      "tags": [
        "culture"
      ],
      "href": "/user-team-security/security-aware-culture",
      "framework": "user-team-security"
    },
    {
      "id": "guidance-security-testing",
      "type": "guidance",
      "title": "Security testing",
      "summary": "Testing techniques for finding vulnerabilities before production.",
      "domains": [
        "onchain-systems",
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "testing"
      ],
      "href": "/security-testing/overview",
      "framework": "security-testing"
    },
    {
      "id": "guidance-security-training",
      "type": "guidance",
      "title": "Security training",
      "summary": "Building role-relevant security training for the team.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "training"
      ],
      "href": "/user-team-security/security-training",
      "framework": "user-team-security"
    },
    {
      "id": "guidance-seed-phrase-management",
      "type": "guidance",
      "title": "Seed phrase management",
      "summary": "Offline backup, metal and split-share options, and the rule that suspected exposure means rotate immediately.",
      "domains": [
        "devices-identity",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "seed-phrase"
      ],
      "href": "/wallet-security/seed-phrase-management",
      "framework": "wallet-security"
    },
    {
      "id": "guidance-sfc-devops-infrastructure",
      "type": "guidance",
      "title": "SFC: DevOps and infrastructure",
      "summary": "Certification criteria for development isolation, source control, CI/CD, cloud admin, and supply chain.",
      "domains": [
        "development-supply-chain",
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "sfc",
        "devsecops",
        "certification"
      ],
      "href": "/certs/sfc-devops-infrastructure",
      "framework": "certs"
    },
    {
      "id": "guidance-sfc-identity-accounts",
      "type": "guidance",
      "title": "SFC: Identity and accounts",
      "summary": "Certification criteria for org account inventory, phishing-resistant MFA, recovery, and takeover monitoring.",
      "domains": [
        "devices-identity",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "sfc",
        "iam",
        "certification"
      ],
      "href": "/certs/sfc-identity-accounts",
      "framework": "certs"
    },
    {
      "id": "guidance-sfc-incident-response",
      "type": "guidance",
      "title": "SFC: Incident response",
      "summary": "Certification criteria for IR roles, monitoring, playbooks, drills, and whitehat coordination.",
      "domains": [
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "sfc",
        "incident-response",
        "certification"
      ],
      "href": "/certs/sfc-incident-response",
      "framework": "certs"
    },
    {
      "id": "guidance-sfc-multisig-ops",
      "type": "guidance",
      "title": "SFC: Multisig operations",
      "summary": "Certification criteria for multisig governance, signer security, transaction verification, and emergency paging.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "sfc",
        "multisig",
        "certification"
      ],
      "href": "/certs/sfc-multisig-ops",
      "framework": "certs"
    },
    {
      "id": "guidance-sfc-treasury-ops",
      "type": "guidance",
      "title": "SFC: Treasury operations",
      "summary": "Certification criteria for treasury architecture, custody, large transfers, and vendor access.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "sfc",
        "treasury",
        "certification"
      ],
      "href": "/certs/sfc-treasury-ops",
      "framework": "certs"
    },
    {
      "id": "guidance-signing-verification",
      "type": "guidance",
      "title": "Signing and verification",
      "summary": "Never sign blindly. Prefer the hardware screen and independently verified calldata over any web UI claim.",
      "domains": [
        "devices-identity",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "signing",
        "verification"
      ],
      "href": "/wallet-security/signing-and-verification/signing-verification",
      "framework": "wallet-security"
    },
    {
      "id": "guidance-smart-contract-interaction",
      "type": "guidance",
      "title": "Smart contract interaction security",
      "summary": "Verify the contract, simulate, and limit approvals before interacting. Most losses here are interaction mistakes, not stolen keys.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "approvals",
        "simulation"
      ],
      "href": "/wallet-security/smart-contract-interaction-security",
      "framework": "wallet-security"
    },
    {
      "id": "guidance-ssdlc",
      "type": "guidance",
      "title": "Secure software development",
      "summary": "Security in the SDLC is continuous: design, code, review, and repository controls. It is not a final gate before ship.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "sdlc"
      ],
      "href": "/secure-software-development/overview",
      "framework": "secure-software-development"
    },
    {
      "id": "guidance-ssdlc-threat-design",
      "type": "guidance",
      "title": "Threat modeling and secure design",
      "summary": "Threat modeling before build chooses which controls matter. Secure design principles keep residual risk from depending on a single check.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "threat-model",
        "design"
      ],
      "href": "/secure-software-development/threat-modeling-secure-design-principles",
      "framework": "secure-software-development"
    },
    {
      "id": "guidance-supply-chain-overview",
      "type": "guidance",
      "title": "Supply Chain Security",
      "summary": "Secure the dependencies, front-end delivery, infrastructure providers, and build artifacts that sit between your source code and your users in Web3.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "development"
      ],
      "href": "/supply-chain/overview"
    },
    {
      "id": "guidance-technical-controls",
      "type": "guidance",
      "title": "Technical OpSec controls",
      "summary": "Technical control domain covering devices, accounts, and related hygiene.",
      "domains": [
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "opsec",
        "technical"
      ],
      "href": "/opsec/control-domains/technical/overview",
      "framework": "opsec"
    },
    {
      "id": "guidance-third-party-scripts",
      "type": "guidance",
      "title": "Third-party script security",
      "summary": "Every third-party script shares the page origin and can call wallet APIs. CSP, SRI, and Trusted Types constrain what executes.",
      "domains": [
        "infrastructure",
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "csp",
        "sri",
        "supply-chain"
      ],
      "href": "/front-end-web-app/third-party-script-security",
      "framework": "front-end-web-app"
    },
    {
      "id": "guidance-threat-detection",
      "type": "guidance",
      "title": "Threat detection and response",
      "summary": "Automation and detection guidance for security events.",
      "domains": [
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "detection"
      ],
      "href": "/security-automation/threat-detection-response",
      "framework": "security-automation"
    },
    {
      "id": "guidance-threat-modeling",
      "type": "guidance",
      "title": "Threat modeling",
      "summary": "A structured way to decide which abuses matter before they happen. Name assets, threats, and mitigations, then keep the model current as the system changes.",
      "domains": [
        "development-supply-chain",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "threat-model"
      ],
      "href": "/threat-modeling/overview",
      "framework": "threat-modeling"
    },
    {
      "id": "guidance-threat-vectors",
      "type": "guidance",
      "title": "Understanding threat vectors",
      "summary": "How common Web3 threat vectors actually reach people and systems.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "awareness",
        "phishing"
      ],
      "href": "/awareness/understanding-threat-vectors",
      "framework": "awareness"
    },
    {
      "id": "guidance-travel",
      "type": "guidance",
      "title": "Travel security",
      "summary": "Travel guidance for people who hold keys or privileged access.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "travel"
      ],
      "href": "/opsec/travel/guide",
      "framework": "opsec"
    },
    {
      "id": "guidance-treasury-classification",
      "type": "guidance",
      "title": "Treasury account classification",
      "summary": "Dual impact and operational classification plus a control matrix for approvers, MFA, and whitelist delays.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "classification"
      ],
      "href": "/treasury-operations/classification",
      "framework": "treasury-operations"
    },
    {
      "id": "guidance-treasury-enhanced-controls",
      "type": "guidance",
      "title": "Enhanced controls for high-risk accounts",
      "summary": "Dedicated devices, stronger quorum or MPC, policy-engine gates, and monitored access for High and Critical impact accounts.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "enhanced-controls",
        "mpc"
      ],
      "href": "/treasury-operations/enhanced-controls",
      "framework": "treasury-operations"
    },
    {
      "id": "guidance-treasury-operations",
      "type": "guidance",
      "title": "Treasury Operations Security",
      "summary": "Classify custodial accounts like cash vaults, document who can move funds, and verify every large transfer before it is irreversible.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "treasury",
        "custody"
      ],
      "href": "/treasury-operations/overview",
      "framework": "treasury-operations"
    },
    {
      "id": "guidance-treasury-registration",
      "type": "guidance",
      "title": "Custodial account registration",
      "summary": "Templates for account registration, access-change logs, security snapshots, and quarterly review.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "registration"
      ],
      "href": "/treasury-operations/registration-documents",
      "framework": "treasury-operations"
    },
    {
      "id": "guidance-treasury-transaction-verification",
      "type": "guidance",
      "title": "Large cryptocurrency transfers",
      "summary": "Receive and send protocols: independent address checks, test transactions, multi-party confirmation, and no rush.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "transfer",
        "verification"
      ],
      "href": "/treasury-operations/transaction-verification",
      "framework": "treasury-operations"
    },
    {
      "id": "guidance-vpns",
      "type": "guidance",
      "title": "VPN services",
      "summary": "A VPN encrypts and relocates network egress for specific threat models. It is not anonymity, malware defense, or a substitute for HTTPS.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "vpn"
      ],
      "href": "/privacy/vpns/overview",
      "framework": "privacy"
    },
    {
      "id": "guidance-vulnerability-disclosure",
      "type": "guidance",
      "title": "Vulnerability disclosure",
      "summary": "Make fixed issues public on a deliberate timeline. Before that, teams need inbound reporting paths, triage, and a plan when quiet disclosure is no longer safe.",
      "domains": [
        "development-supply-chain",
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "disclosure"
      ],
      "href": "/vulnerability-disclosure/overview",
      "framework": "vulnerability-disclosure"
    },
    {
      "id": "guidance-wallet-security",
      "type": "guidance",
      "title": "Wallet Security",
      "summary": "Custody models, hot versus cold tradeoffs, signing verification, seed custody, and safer contract interaction.",
      "domains": [
        "devices-identity",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "wallet"
      ],
      "href": "/wallet-security/overview",
      "framework": "wallet-security"
    },
    {
      "id": "guidance-zero-trust",
      "type": "guidance",
      "title": "Zero trust principles",
      "summary": "Zero-trust design principles for infrastructure and access.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "zero-trust"
      ],
      "href": "/infrastructure/zero-trust-principles",
      "framework": "infrastructure"
    },
    {
      "id": "response-dns-hijack",
      "type": "response",
      "title": "DNS hijack response",
      "summary": "Regain registrar and DNS control, restore records, warn users, and treat the frontend as untrusted until integrity is proven.",
      "domains": [
        "detection-incident-response",
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "dns",
        "hijack"
      ],
      "roles": [
        "incident-responder",
        "infrastructure-operator"
      ],
      "lifecycle": [
        "incident-response"
      ],
      "framework": "incident-management"
    },
    {
      "id": "response-dprk-it-worker",
      "type": "response",
      "title": "DPRK IT worker response",
      "summary": "Assume credential and key theft from the infected or planted identity, follow malware containment, and rotate everything that identity could reach.",
      "domains": [
        "detection-incident-response",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "dprk",
        "insider"
      ],
      "roles": [
        "incident-responder"
      ],
      "lifecycle": [
        "incident-response"
      ],
      "framework": "incident-management"
    },
    {
      "id": "response-duress-event",
      "type": "response",
      "title": "Duress event response",
      "summary": "Protect the person first, then contain signing power, and do not treat a coerced signature as an ordinary key-compromise drill.",
      "domains": [
        "detection-incident-response",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "duress"
      ],
      "roles": [
        "incident-responder",
        "founder-executive"
      ],
      "lifecycle": [
        "incident-response"
      ],
      "framework": "opsec"
    },
    {
      "id": "response-signer-compromise",
      "type": "response",
      "title": "Signer compromise response",
      "summary": "Rotate or freeze affected keys, raise thresholds if needed, and treat remaining signers as potentially targeted.",
      "domains": [
        "detection-incident-response",
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "keys",
        "rotation"
      ],
      "roles": [
        "incident-responder",
        "multisig-signer"
      ],
      "lifecycle": [
        "incident-response"
      ],
      "framework": "incident-management"
    },
    {
      "id": "response-smart-contract-exploit",
      "type": "response",
      "title": "Smart contract exploit response",
      "summary": "Containment, war-room, and recovery steps when on-chain logic is being actively abused.",
      "domains": [
        "detection-incident-response",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "exploit",
        "war-room"
      ],
      "roles": [
        "incident-responder"
      ],
      "lifecycle": [
        "incident-response"
      ],
      "framework": "incident-management"
    },
    {
      "id": "response-supply-chain-incident",
      "type": "response",
      "title": "Supply chain incident response",
      "summary": "Identify the poisoned artifact, stop distribution, rotate CI secrets, and rebuild from a known-good source.",
      "domains": [
        "detection-incident-response",
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "supply-chain",
        "ci"
      ],
      "roles": [
        "incident-responder",
        "engineer-developer"
      ],
      "lifecycle": [
        "incident-response"
      ],
      "framework": "incident-management"
    },
    {
      "id": "response-whitehat-rescue",
      "type": "response",
      "title": "Whitehat fund rescue",
      "summary": "Independent of the attacker, move at-risk funds to the published recovery address, notify the security contact, and involve SEAL 911. Coverage dies if those rules are skipped.",
      "domains": [
        "detection-incident-response",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "whitehat",
        "rescue",
        "seal911"
      ],
      "roles": [
        "incident-responder",
        "security-engineer"
      ],
      "lifecycle": [
        "incident-response"
      ],
      "framework": "safe-harbor"
    },
    {
      "id": "surface-active-exploit-window",
      "type": "attack-surface",
      "title": "Active exploit window",
      "summary": "The minutes after a drain starts or a malicious transaction sits in the mempool. Responsible disclosure is too slow. Pause and whitehat rescue are the remaining moves.",
      "domains": [
        "onchain-systems",
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "exploit",
        "mempool",
        "rescue"
      ],
      "roles": [
        "incident-responder",
        "security-engineer"
      ],
      "lifecycle": [
        "incident-response"
      ],
      "framework": "safe-harbor"
    },
    {
      "id": "surface-agent-tool-path",
      "type": "attack-surface",
      "title": "Agent tool path",
      "summary": "The moment an agent is about to call a tool, write a file, or build a transaction. After-the-fact monitoring is too late if the action is irreversible.",
      "domains": [
        "development-supply-chain",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "ai",
        "tools",
        "runtime"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "development",
        "normal-operations"
      ],
      "framework": "ai-security"
    },
    {
      "id": "surface-ci-cd-secrets",
      "type": "attack-surface",
      "title": "CI/CD secrets and runners",
      "summary": "Pipeline secrets, deploy keys, and self-hosted runners that turn a workflow change into production access.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "ci",
        "secrets"
      ],
      "lifecycle": [
        "development",
        "upgrade"
      ]
    },
    {
      "id": "surface-cloud-admin-console",
      "type": "attack-surface",
      "title": "Cloud admin console",
      "summary": "Root and IAM planes that can mint keys, change network paths, or seize running systems.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "iam",
        "cloud-admin"
      ],
      "roles": [
        "infrastructure-operator"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "surface-cloud-data-at-rest",
      "type": "attack-surface",
      "title": "Cloud data at rest",
      "summary": "Object stores, managed disks, and backups. Default storage encryption without separate key custody still fails with the account.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "cloud",
        "kms",
        "at-rest"
      ],
      "roles": [
        "infrastructure-operator"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "encryption"
    },
    {
      "id": "surface-contract-external-calls",
      "type": "attack-surface",
      "title": "Contract external calls and value flow",
      "summary": "Reentrancy, callback, oracle, and flash-loan paths where untrusted input meets privileged state.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "reentrancy",
        "flash-loan",
        "oracle"
      ],
      "lifecycle": [
        "design",
        "development"
      ]
    },
    {
      "id": "surface-contract-upgrade-path",
      "type": "attack-surface",
      "title": "Contract upgrade path",
      "summary": "Proxy admin, timelock, and implementation slots that can replace running logic.",
      "domains": [
        "onchain-systems",
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "proxy",
        "upgrade"
      ],
      "lifecycle": [
        "upgrade"
      ]
    },
    {
      "id": "surface-contributor-hire-path",
      "type": "attack-surface",
      "title": "Contributor-to-hire path",
      "summary": "Valid pull requests and open-source help used to skip ordinary hiring checks and request repository or infrastructure access.",
      "domains": [
        "people",
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "hiring",
        "oss",
        "dprk"
      ],
      "roles": [
        "founder-executive",
        "engineer-developer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "dprk-it-workers"
    },
    {
      "id": "surface-custodial-admin-access",
      "type": "attack-surface",
      "title": "Custodial admin access",
      "summary": "Logins, approvers, and policy-engine roles on the custodian platform. Takeover here spends treasury without touching protocol keys.",
      "domains": [
        "governance-treasury",
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "custody",
        "iam",
        "approvers"
      ],
      "roles": [
        "governance-participant",
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "treasury-operations"
    },
    {
      "id": "surface-data-in-transit",
      "type": "attack-surface",
      "title": "Data in transit",
      "summary": "Traffic across the internet, public Wi-Fi, and remote-admin paths. An on-path observer can read or alter cleartext.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "tls",
        "ssh",
        "transit"
      ],
      "roles": [
        "engineer-developer",
        "infrastructure-operator"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "encryption"
    },
    {
      "id": "surface-device-endpoint",
      "type": "attack-surface",
      "title": "Endpoint and browser",
      "summary": "The local device, OS, and browser profile where malware, extensions, and weak hygiene steal keys.",
      "domains": [
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "endpoint",
        "browser"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "surface-dns-records",
      "type": "attack-surface",
      "title": "DNS records and nameservers",
      "summary": "A, AAAA, NS, and related records that can redirect users or mail to an attacker.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "dns"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "surface-endpoint-at-rest",
      "type": "attack-surface",
      "title": "Endpoint storage at rest",
      "summary": "Disks on laptops, desktops, and phones. A lost or stolen powered-off device exposes plaintext unless the volume is encrypted.",
      "domains": [
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "fde",
        "endpoint",
        "at-rest"
      ],
      "roles": [
        "engineer-developer",
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "encryption"
    },
    {
      "id": "surface-ens-resolution",
      "type": "attack-surface",
      "title": "ENS name resolution",
      "summary": "Turning a human-readable name into an address before a send. Stale indexers, skipped reverse checks, and confusable scripts all produce a valid-looking wrong destination.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "ens",
        "resolution"
      ],
      "roles": [
        "engineer-developer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "ens"
    },
    {
      "id": "surface-executive-communications",
      "type": "attack-surface",
      "title": "Executive communications",
      "summary": "Email, chat, calendar, and video-call paths used to phish founders, executives, and signers.",
      "domains": [
        "people",
        "community-communications"
      ],
      "status": "proposed",
      "tags": [
        "email",
        "phishing"
      ],
      "roles": [
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "surface-family-and-household",
      "type": "attack-surface",
      "title": "Family and household coercion",
      "summary": "Home routines, joint public profiles, and staff who know where devices live. Pressure here is a wrench attack on someone else.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "family",
        "duress"
      ],
      "roles": [
        "founder-executive",
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "physical-security"
    },
    {
      "id": "surface-frontend-deployment",
      "type": "attack-surface",
      "title": "Frontend deployment pipeline",
      "summary": "Hosting, CDN, and release credentials that publish the JavaScript users actually run.",
      "domains": [
        "infrastructure",
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "cdn",
        "hosting"
      ],
      "lifecycle": [
        "normal-operations",
        "upgrade"
      ]
    },
    {
      "id": "surface-governance-proposal",
      "type": "attack-surface",
      "title": "Governance proposal path",
      "summary": "Drafting, voting, and execution of proposals that can move funds or upgrade contracts.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "proposals",
        "voting"
      ],
      "lifecycle": [
        "upgrade",
        "normal-operations"
      ]
    },
    {
      "id": "surface-hiring-contractor-access",
      "type": "attack-surface",
      "title": "Contractor access grant",
      "summary": "The moment a new hire or contractor receives repository, cloud, or signing-adjacent access.",
      "domains": [
        "people",
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "hiring",
        "access"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "surface-large-transfer",
      "type": "attack-surface",
      "title": "Large transfer ceremony",
      "summary": "Receive and send of irreversible amounts. Address substitution and fake urgency are the usual failure, not cryptography.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "transfer",
        "verification",
        "ceremony"
      ],
      "roles": [
        "governance-participant",
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "treasury-operations"
    },
    {
      "id": "surface-multisig-signing-workflow",
      "type": "attack-surface",
      "title": "Multisig signing workflow",
      "summary": "How a transaction is proposed, verified, signed, and executed, including what each signer actually sees.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "signing",
        "calldata"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "surface-onchain-activity",
      "type": "attack-surface",
      "title": "On-chain activity window",
      "summary": "The live transaction stream where drains, rogue upgrades, and anomalous signer behavior appear if anyone is watching.",
      "domains": [
        "detection-incident-response",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "monitoring",
        "on-chain"
      ],
      "lifecycle": [
        "normal-operations",
        "incident-response"
      ]
    },
    {
      "id": "surface-operator-messaging",
      "type": "attack-surface",
      "title": "Operator messaging",
      "summary": "Team chat used for ops, keys-adjacent work, and incident coordination. A server-readable default turns a platform breach into plaintext.",
      "domains": [
        "community-communications",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "e2ee",
        "messaging"
      ],
      "roles": [
        "founder-executive",
        "engineer-developer",
        "community-manager"
      ],
      "lifecycle": [
        "normal-operations",
        "incident-response"
      ],
      "framework": "privacy"
    },
    {
      "id": "surface-package-install",
      "type": "attack-surface",
      "title": "Package install and update",
      "summary": "npm, crates, and similar install steps, including typosquatting and compromised maintainer releases.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "npm",
        "typosquatting"
      ],
      "lifecycle": [
        "development"
      ]
    },
    {
      "id": "surface-physical-presence",
      "type": "attack-surface",
      "title": "Physical presence and travel",
      "summary": "Travel, events, and home or office access where coercion or device theft can force a signature.",
      "domains": [
        "people",
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "travel",
        "duress",
        "physical"
      ],
      "roles": [
        "multisig-signer",
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "surface-public-wifi",
      "type": "attack-surface",
      "title": "Public Wi-Fi",
      "summary": "Open hotel, airport, and cafe networks. Rogue APs, captive portals, and local scanning sit on the path before any website TLS.",
      "domains": [
        "infrastructure",
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "wifi",
        "vpn",
        "transit"
      ],
      "roles": [
        "engineer-developer",
        "founder-executive"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "privacy"
    },
    {
      "id": "surface-researcher-inbound",
      "type": "attack-surface",
      "title": "Researcher inbound path",
      "summary": "How an external researcher reaches the team with a vulnerability. Public issues, social DMs, or a dead mailbox all leak the finding before a fix exists.",
      "domains": [
        "development-supply-chain",
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "disclosure",
        "contact"
      ],
      "roles": [
        "security-engineer",
        "engineer-developer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "vulnerability-disclosure"
    },
    {
      "id": "surface-rpc-trust-boundary",
      "type": "attack-surface",
      "title": "RPC trust boundary",
      "summary": "Where the product accepts chain data or broadcasts transactions through a node it does not fully control.",
      "domains": [
        "infrastructure",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "rpc"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "surface-seed-custody",
      "type": "attack-surface",
      "title": "Seed custody",
      "summary": "How the seed is written, stored, split, and retrieved. Digital copies and casual physical access both count as exposure.",
      "domains": [
        "devices-identity",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "seed-phrase",
        "custody"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations",
        "recovery"
      ],
      "framework": "wallet-security"
    },
    {
      "id": "surface-signer-lifecycle",
      "type": "attack-surface",
      "title": "Signer onboarding and offboarding",
      "summary": "Adding, rotating, and removing signers, where stale keys and weak onboarding create lasting exposure.",
      "domains": [
        "governance-treasury",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "rotation",
        "onboarding"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ]
    },
    {
      "id": "surface-token-approvals",
      "type": "attack-surface",
      "title": "Token approvals",
      "summary": "ERC-20 approve and permit grants that let a spender move tokens later. Unlimited allowance outlives the original swap.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "approvals",
        "permit",
        "erc20"
      ],
      "roles": [
        "engineer-developer",
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "wallet-security"
    },
    {
      "id": "surface-transaction-signing",
      "type": "attack-surface",
      "title": "Transaction signing",
      "summary": "The moment a wallet approves calldata. A hostile UI or unread payload turns a good key into an authorized drain.",
      "domains": [
        "devices-identity",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "signing",
        "calldata"
      ],
      "roles": [
        "multisig-signer"
      ],
      "lifecycle": [
        "normal-operations"
      ],
      "framework": "wallet-security"
    },
    {
      "id": "threat-blind-signing",
      "type": "threat",
      "title": "Blind signing",
      "summary": "The signer approves attacker-controlled calldata because a website, chat, or wallet UI was trusted instead of the raw transaction.",
      "domains": [
        "devices-identity",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "signing",
        "phishing",
        "calldata"
      ],
      "severity": "critical",
      "severityBasis": "Default triage is critical because a valid signature spends funds without stealing the key. Impact scales with what the wallet can move.",
      "framework": "wallet-security"
    },
    {
      "id": "threat-cloud-plaintext-at-rest",
      "type": "threat",
      "title": "Cloud plaintext at rest",
      "summary": "Object stores, disks, or backups keep data readable, or encryption keys sit in the same account as the ciphertext, so a stolen volume or hijacked role yields the data.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "cloud",
        "kms",
        "at-rest"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because cloud disks and buckets outlive any one server. Blast radius is the classified data in that store, not the compute instance.",
      "framework": "encryption"
    },
    {
      "id": "threat-custody-access-abuse",
      "type": "threat",
      "title": "Custody access abuse",
      "summary": "An attacker or insider uses custodian logins, weak quorum, or an unregistered access change to move High or Critical balances.",
      "domains": [
        "governance-treasury",
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "custody",
        "insider",
        "iam"
      ],
      "severity": "critical",
      "severityBasis": "Default triage is critical because platform approval is authorized spend. Blast radius is the classified impact of the account.",
      "framework": "treasury-operations"
    },
    {
      "id": "threat-dprk-it-worker-infiltration",
      "type": "threat",
      "title": "DPRK or threat-actor hiring",
      "summary": "A planted contractor or employee who obtains code, infrastructure, or key-adjacent access under a false identity.",
      "domains": [
        "people",
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "dprk",
        "insider",
        "hiring"
      ],
      "severity": "critical",
      "severityBasis": "Default triage is critical because insider access bypasses many perimeter controls. Likelihood and blast radius depend on how hiring and access grants work.",
      "aliases": [
        "dprk-threat-actors"
      ],
      "framework": "opsec"
    },
    {
      "id": "threat-duress-coercion",
      "type": "threat",
      "title": "Duress and coercion",
      "summary": "Physical threat, kidnapping, or extortion used to force a signature or credential disclosure.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "duress",
        "physical",
        "extortion"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because coercion bypasses technical signer controls. Likelihood depends on public profile, travel, and whether a single person can move funds.",
      "aliases": [
        "duress-situations"
      ],
      "framework": "opsec"
    },
    {
      "id": "threat-frontend-dns-hijacking",
      "type": "threat",
      "title": "Frontend or DNS hijacking",
      "summary": "Takeover of DNS, registrar, or frontend hosting so users load a malicious interface that drains wallets.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "dns",
        "frontend",
        "drainer"
      ],
      "severity": "critical",
      "severityBasis": "Default triage is critical because users cannot distinguish a hijacked official domain from the real product. Impact scales with traffic and wallet connectors used.",
      "aliases": [
        "frontend-dns-hijacking"
      ],
      "framework": "infrastructure"
    },
    {
      "id": "threat-governance-manipulation",
      "type": "threat",
      "title": "Governance attacks",
      "summary": "Malicious proposals, vote buying, flash-loan voting, or unauthorized upgrades that change protocol behavior or drain treasuries.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "proposals",
        "vote-buying",
        "upgrades"
      ],
      "severity": "medium",
      "severityBasis": "Default triage is medium because successful governance capture is severe but depends on token distribution, timelocks, and council design. Treat it as critical when those brakes are missing.",
      "aliases": [
        "governance-attacks"
      ],
      "framework": "governance"
    },
    {
      "id": "threat-infrastructure-compromise",
      "type": "threat",
      "title": "Infrastructure compromise",
      "summary": "Cloud misconfiguration, leaked admin keys, weak segmentation, or server takeover that yields control of backends, RPC, or deploy paths.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "cloud",
        "rpc",
        "api"
      ],
      "severity": "critical",
      "severityBasis": "Default triage is critical because infrastructure takeover often includes secrets and deploy authority. Exposure depends on how production is partitioned.",
      "aliases": [
        "infrastructure-compromise"
      ],
      "framework": "infrastructure"
    },
    {
      "id": "threat-leadership-phishing",
      "type": "threat",
      "title": "Leadership phishing",
      "summary": "Spearphishing of founders, executives, or signers to steal credentials, seed signing malware, or trick them into approving a malicious transaction.",
      "domains": [
        "people",
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "spearphishing",
        "credential-theft"
      ],
      "severity": "critical",
      "severityBasis": "Default triage is critical because a single successful phish against a signer or admin can unlock treasury or infrastructure. Targeting is highly contextual.",
      "aliases": [
        "leadership-phishing"
      ],
      "framework": "awareness"
    },
    {
      "id": "threat-misdirected-transfer",
      "type": "threat",
      "title": "Misdirected transfer",
      "summary": "Funds go to an attacker address because destination or amount was taken from chat, a rushed UI, or a lookalike site. The send is valid and irreversible.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "transfer",
        "address",
        "social-engineering"
      ],
      "severity": "critical",
      "severityBasis": "Default triage is critical because a confirmed send cannot be reversed. Impact is the full transfer, not a later exploit.",
      "framework": "treasury-operations"
    },
    {
      "id": "threat-monitoring-gaps",
      "type": "threat",
      "title": "Monitoring and alerting gaps",
      "summary": "Missing or slow detection of on-chain drains, DNS changes, or privileged actions, so an attacker operates without a response.",
      "domains": [
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "monitoring",
        "detection"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because detection failure turns a containable incident into an unbounded one. It is a multiplier on other threats, not a standalone exploit.",
      "aliases": [
        "monitoring-gaps"
      ],
      "framework": "monitoring"
    },
    {
      "id": "threat-multisig-operational-failure",
      "type": "threat",
      "title": "Multisig operational failure",
      "summary": "Signer unavailability, lost keys, weak thresholds, missing rotation, or skipped verification that leaves privileged funds exposed or frozen.",
      "domains": [
        "governance-treasury"
      ],
      "status": "proposed",
      "tags": [
        "threshold",
        "key-loss",
        "rotation"
      ],
      "severity": "critical",
      "severityBasis": "Default triage is critical because the multisig is often the last control over treasury and upgrades. Impact is contextual to what the wallet can do.",
      "aliases": [
        "multisig-failures"
      ],
      "framework": "multisig-for-protocols"
    },
    {
      "id": "threat-on-path-interception",
      "type": "threat",
      "title": "On-path interception",
      "summary": "An observer on the network path reads or alters traffic that used HTTP, cleartext admin, or a broken TLS setup.",
      "domains": [
        "infrastructure"
      ],
      "status": "proposed",
      "tags": [
        "mitm",
        "tls",
        "transit"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because cleartext remote admin and bulk HTTP expose credentials and change commands. Impact tracks what the channel carries.",
      "framework": "encryption"
    },
    {
      "id": "threat-opsec-hygiene-failure",
      "type": "threat",
      "title": "Operational security failures",
      "summary": "Weak device hygiene, reused credentials, missing phishing-resistant MFA, or unprotected comms that make routine access easy to steal.",
      "domains": [
        "devices-identity",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "opsec",
        "mfa",
        "credentials"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because hygiene failures are a common path into other, more severe compromises. They are not themselves a fund drain.",
      "aliases": [
        "opsec-failures"
      ],
      "framework": "opsec"
    },
    {
      "id": "threat-osint-targeting",
      "type": "threat",
      "title": "OSINT targeting",
      "summary": "Public posts, old accounts, and tracker trails give an attacker a home, a family member, a travel plan, or a pretext for phishing.",
      "domains": [
        "people"
      ],
      "status": "proposed",
      "tags": [
        "osint",
        "footprint"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because the same traces feed spearphishing and wrench attacks. The leak itself is not theft. The follow-on is.",
      "framework": "privacy"
    },
    {
      "id": "threat-plaintext-lost-device",
      "type": "threat",
      "title": "Plaintext on a lost device",
      "summary": "A lost or stolen endpoint yields work data, secrets, or key-adjacent files because the disk was unencrypted or the recovery key sat beside the device.",
      "domains": [
        "devices-identity"
      ],
      "status": "proposed",
      "tags": [
        "fde",
        "theft",
        "endpoint"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because a stolen laptop is common and the disk holds whatever the operator used. FDE does not stop a logged-in malware session.",
      "framework": "encryption"
    },
    {
      "id": "threat-prompt-injection",
      "type": "threat",
      "title": "Prompt injection",
      "summary": "Untrusted text, including on-chain data or retrieved documents, is treated as instructions. The agent then leaks secrets or takes an action the operator did not intend.",
      "domains": [
        "development-supply-chain",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "ai",
        "prompt-injection"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because injection rides the model's instruction-following. Blast radius is whatever the agent can sign, send, or read. Prompt templates are not a control.",
      "framework": "ai-security"
    },
    {
      "id": "threat-seed-phrase-compromise",
      "type": "threat",
      "title": "Seed phrase compromise",
      "summary": "The seed is photographed, typed into a connected device, stored in cloud notes, or read by someone with physical access.",
      "domains": [
        "devices-identity",
        "people"
      ],
      "status": "proposed",
      "tags": [
        "seed-phrase",
        "theft"
      ],
      "severity": "critical",
      "severityBasis": "Default triage is critical because the seed reconstructs every derived key. Treat any suspected exposure as full compromise.",
      "framework": "wallet-security"
    },
    {
      "id": "threat-server-readable-chat",
      "type": "threat",
      "title": "Server-readable operational chat",
      "summary": "Ops traffic lives in Discord, default Telegram, Slack, or similar. The provider, a seized server, or a hijacked admin can read it.",
      "domains": [
        "community-communications"
      ],
      "status": "proposed",
      "tags": [
        "e2ee",
        "messaging",
        "discord"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because teams paste credentials, wallet addresses, and incident detail into everyday chat. E2EE does not hide metadata.",
      "framework": "privacy"
    },
    {
      "id": "threat-smart-contract-exploits",
      "type": "threat",
      "title": "Smart contract exploits",
      "summary": "Adversarial use of reentrancy, logic bugs, oracle manipulation, flash loans, or unsafe upgrade paths to drain or freeze on-chain value.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "reentrancy",
        "flash-loan",
        "oracle",
        "logic-bug"
      ],
      "severity": "critical",
      "severityBasis": "Default triage is critical because a single contract bug can drain user or treasury funds without further access. Actual impact depends on what the contract controls.",
      "aliases": [
        "smart-contract-exploits"
      ],
      "framework": "external-security-reviews"
    },
    {
      "id": "threat-social-engineering",
      "type": "threat",
      "title": "Social engineering",
      "summary": "Impersonation of partners, fake collaboration asks, or community manipulation that gains access or influences a privileged decision.",
      "domains": [
        "people",
        "community-communications"
      ],
      "status": "proposed",
      "tags": [
        "impersonation",
        "pretexting"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because trust abuse often precedes phishing, hiring fraud, or malicious signing. Direct fund impact is contextual.",
      "aliases": [
        "social-engineering"
      ],
      "framework": "awareness"
    },
    {
      "id": "threat-spoofed-ens-resolution",
      "type": "threat",
      "title": "Spoofed ENS resolution",
      "summary": "The UI shows a trusted name while the resolved address is attacker-controlled, from a stale indexer, a reverse record that does not loop, or a homograph.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "ens",
        "homograph",
        "spoofing"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because the send is valid and irreversible. The bug is in resolution, not in the signature.",
      "framework": "ens"
    },
    {
      "id": "threat-stale-threat-model",
      "type": "threat",
      "title": "Stale threat model",
      "summary": "Architecture or value at risk changed and the model did not. New trust boundaries, admin paths, or bridges ship without named abuses or owners.",
      "domains": [
        "development-supply-chain",
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "threat-model",
        "design"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because Web3 design misses become irreversible production loss. The failure is skipped analysis, not a missing scanner.",
      "framework": "threat-modeling"
    },
    {
      "id": "threat-supply-chain-compromise",
      "type": "threat",
      "title": "Supply chain attacks",
      "summary": "Poisoned dependencies, typosquatting, compromised CI, or malicious maintainer releases that inject code into what you ship.",
      "domains": [
        "development-supply-chain"
      ],
      "status": "proposed",
      "tags": [
        "dependencies",
        "ci",
        "typosquatting"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because a trusted package or pipeline can reach every user. Blast radius depends on what the dependency can execute and where it ships.",
      "aliases": [
        "supply-chain-attacks"
      ],
      "framework": "supply-chain"
    },
    {
      "id": "threat-uncontactable-disclosure",
      "type": "threat",
      "title": "Uncontactable disclosure",
      "summary": "A researcher finds a bug and cannot reach a monitored security contact. The report goes public, gets sold, or sits unread while the bug stays live.",
      "domains": [
        "development-supply-chain",
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "disclosure",
        "contact"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because inbound silence turns a fixable finding into an uncoordinated release. A bounty platform does not replace a monitored contact.",
      "framework": "vulnerability-disclosure"
    },
    {
      "id": "threat-unlimited-token-approval",
      "type": "threat",
      "title": "Unlimited token approval",
      "summary": "A spender keeps uint256 allowance or a permit grant after the intended swap. A later exploit or hostile spender drains the wallet.",
      "domains": [
        "onchain-systems"
      ],
      "status": "proposed",
      "tags": [
        "approvals",
        "permit"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because the drain does not need the key, but it is limited to the approved token and spender. Treat as critical when the spender is unaudited or the allowance is protocol-wide.",
      "framework": "wallet-security"
    },
    {
      "id": "threat-whitehat-legal-freeze",
      "type": "threat",
      "title": "Whitehat legal freeze",
      "summary": "Independent researchers watch a live drain and do not intervene because the protocol never pre-authorized a rescue. Funds keep leaving.",
      "domains": [
        "onchain-systems",
        "detection-incident-response"
      ],
      "status": "proposed",
      "tags": [
        "whitehat",
        "legal",
        "exploit"
      ],
      "severity": "high",
      "severityBasis": "Default triage is high because the exploit is already in progress and delay is measured in drained TVL. Safe Harbor does not stop the bug. It removes the legal reason not to help.",
      "framework": "safe-harbor"
    }
  ],
  "edges": [
    {
      "id": "contains:asset-governance-authority:component-governance-module",
      "source": "asset-governance-authority",
      "target": "component-governance-module",
      "type": "contains",
      "status": "proposed"
    },
    {
      "id": "contains:asset-governance-authority:component-multisig",
      "source": "asset-governance-authority",
      "target": "component-multisig",
      "type": "contains",
      "rationale": "Upgrade and pause authority often sit on the same privileged multisig as treasury.",
      "status": "proposed"
    },
    {
      "id": "contains:asset-treasury-funds:component-custodial-treasury",
      "source": "asset-treasury-funds",
      "target": "component-custodial-treasury",
      "type": "contains",
      "rationale": "Organizational funds also sit in third-party or co-managed custody, separate from the protocol multisig.",
      "status": "proposed"
    },
    {
      "id": "contains:asset-treasury-funds:component-multisig",
      "source": "asset-treasury-funds",
      "target": "component-multisig",
      "type": "contains",
      "rationale": "Protocol treasuries in this model are held by the protocol multisig.",
      "status": "proposed"
    },
    {
      "id": "contains:component-multisig:component-signers",
      "source": "component-multisig",
      "target": "component-signers",
      "type": "contains",
      "status": "proposed"
    },
    {
      "id": "depends-on:component-ai-agent:component-developer-devices",
      "source": "component-ai-agent",
      "target": "component-developer-devices",
      "type": "depends-on",
      "status": "proposed"
    },
    {
      "id": "depends-on:component-ci-cd:component-dependency-graph",
      "source": "component-ci-cd",
      "target": "component-dependency-graph",
      "type": "depends-on",
      "status": "proposed"
    },
    {
      "id": "depends-on:component-ci-cd:component-identity-accounts",
      "source": "component-ci-cd",
      "target": "component-identity-accounts",
      "type": "depends-on",
      "status": "proposed"
    },
    {
      "id": "depends-on:component-cloud-infrastructure:component-identity-accounts",
      "source": "component-cloud-infrastructure",
      "target": "component-identity-accounts",
      "type": "depends-on",
      "status": "proposed"
    },
    {
      "id": "depends-on:component-custodial-treasury:component-identity-accounts",
      "source": "component-custodial-treasury",
      "target": "component-identity-accounts",
      "type": "depends-on",
      "status": "proposed"
    },
    {
      "id": "depends-on:component-frontend:component-ci-cd",
      "source": "component-frontend",
      "target": "component-ci-cd",
      "type": "depends-on",
      "status": "proposed"
    },
    {
      "id": "depends-on:component-frontend:component-dns-registrar",
      "source": "component-frontend",
      "target": "component-dns-registrar",
      "type": "depends-on",
      "status": "proposed"
    },
    {
      "id": "depends-on:component-monitoring-stack:component-rpc-endpoints",
      "source": "component-monitoring-stack",
      "target": "component-rpc-endpoints",
      "type": "depends-on",
      "status": "proposed"
    },
    {
      "id": "depends-on:component-multisig:component-hardware-wallet",
      "source": "component-multisig",
      "target": "component-hardware-wallet",
      "type": "depends-on",
      "status": "proposed"
    },
    {
      "id": "depends-on:component-multisig:component-signers",
      "source": "component-multisig",
      "target": "component-signers",
      "type": "depends-on",
      "status": "proposed"
    },
    {
      "id": "depends-on:component-signers:component-hardware-wallet",
      "source": "component-signers",
      "target": "component-hardware-wallet",
      "type": "depends-on",
      "status": "proposed"
    },
    {
      "id": "depends-on:component-smart-contracts:component-multisig",
      "source": "component-smart-contracts",
      "target": "component-multisig",
      "type": "depends-on",
      "rationale": "Upgradeable contracts typically grant admin to a protocol multisig.",
      "status": "proposed"
    },
    {
      "id": "depends-on:component-software-wallet:component-frontend",
      "source": "component-software-wallet",
      "target": "component-frontend",
      "type": "depends-on",
      "status": "proposed"
    },
    {
      "id": "detects:control-continuous-remote-identity-review:threat-dprk-it-worker-infiltration",
      "source": "control-continuous-remote-identity-review",
      "target": "threat-dprk-it-worker-infiltration",
      "type": "detects",
      "status": "proposed"
    },
    {
      "id": "detects:control-dns-change-monitoring:threat-frontend-dns-hijacking",
      "source": "control-dns-change-monitoring",
      "target": "threat-frontend-dns-hijacking",
      "type": "detects",
      "status": "proposed"
    },
    {
      "id": "detects:control-frontend-integrity-monitoring:threat-frontend-dns-hijacking",
      "source": "control-frontend-integrity-monitoring",
      "target": "threat-frontend-dns-hijacking",
      "type": "detects",
      "status": "proposed"
    },
    {
      "id": "detects:control-insider-threat-mitigation:threat-dprk-it-worker-infiltration",
      "source": "control-insider-threat-mitigation",
      "target": "threat-dprk-it-worker-infiltration",
      "type": "detects",
      "status": "proposed"
    },
    {
      "id": "detects:control-onchain-anomaly-detection:threat-monitoring-gaps",
      "source": "control-onchain-anomaly-detection",
      "target": "threat-monitoring-gaps",
      "type": "detects",
      "status": "proposed"
    },
    {
      "id": "detects:control-onchain-anomaly-detection:threat-smart-contract-exploits",
      "source": "control-onchain-anomaly-detection",
      "target": "threat-smart-contract-exploits",
      "type": "detects",
      "status": "proposed"
    },
    {
      "id": "documented-by:asset-key-holder-safety:guidance-incident-playbooks",
      "source": "asset-key-holder-safety",
      "target": "guidance-incident-playbooks",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:asset-key-holder-safety:guidance-physical-security",
      "source": "asset-key-holder-safety",
      "target": "guidance-physical-security",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:asset-seed-secrets:guidance-seed-phrase-management",
      "source": "asset-seed-secrets",
      "target": "guidance-seed-phrase-management",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-ai-agent:guidance-ai-security",
      "source": "component-ai-agent",
      "target": "guidance-ai-security",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-ci-cd:guidance-secure-repos",
      "source": "component-ci-cd",
      "target": "guidance-secure-repos",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-community-channels:guidance-account-management",
      "source": "component-community-channels",
      "target": "guidance-account-management",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-community-channels:guidance-encrypted-communication",
      "source": "component-community-channels",
      "target": "guidance-encrypted-communication",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-custodial-treasury:guidance-incident-playbooks",
      "source": "component-custodial-treasury",
      "target": "guidance-incident-playbooks",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-custodial-treasury:guidance-treasury-operations",
      "source": "component-custodial-treasury",
      "target": "guidance-treasury-operations",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-developer-devices:guidance-encryption",
      "source": "component-developer-devices",
      "target": "guidance-encryption",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-family-household:guidance-duress-personal-safety",
      "source": "component-family-household",
      "target": "guidance-duress-personal-safety",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-frontend:guidance-ens",
      "source": "component-frontend",
      "target": "guidance-ens",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-governance-module:guidance-safe-harbor-adoption",
      "source": "component-governance-module",
      "target": "guidance-safe-harbor-adoption",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-hardware-wallet:guidance-cold-vs-hot",
      "source": "component-hardware-wallet",
      "target": "guidance-cold-vs-hot",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-hardware-wallet:guidance-key-compromise-runbook",
      "source": "component-hardware-wallet",
      "target": "guidance-key-compromise-runbook",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-hiring-pipeline:guidance-dprk-it-workers",
      "source": "component-hiring-pipeline",
      "target": "guidance-dprk-it-workers",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-identity-accounts:guidance-account-management",
      "source": "component-identity-accounts",
      "target": "guidance-account-management",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-identity-accounts:guidance-guides",
      "source": "component-identity-accounts",
      "target": "guidance-guides",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-multisig:guidance-safe-harbor-scope",
      "source": "component-multisig",
      "target": "guidance-safe-harbor-scope",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:component-software-wallet:guidance-wallet-security",
      "source": "component-software-wallet",
      "target": "guidance-wallet-security",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-branch-protection:guidance-devsecops",
      "source": "control-branch-protection",
      "target": "guidance-devsecops",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-branch-protection:guidance-secure-repos",
      "source": "control-branch-protection",
      "target": "guidance-secure-repos",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-bug-bounty-program:guidance-bug-bounties",
      "source": "control-bug-bounty-program",
      "target": "guidance-bug-bounties",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-cloud-hardening:guidance-cloud",
      "source": "control-cloud-hardening",
      "target": "guidance-cloud",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-cloud-kms-custody:guidance-cloud-data-encryption",
      "source": "control-cloud-kms-custody",
      "target": "guidance-cloud-data-encryption",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-cold-wallet-separation:guidance-cold-vs-hot",
      "source": "control-cold-wallet-separation",
      "target": "guidance-cold-vs-hot",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-cold-wallet-separation:guidance-duress-wallet-architecture",
      "source": "control-cold-wallet-separation",
      "target": "guidance-duress-wallet-architecture",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-continuous-remote-identity-review:guidance-dprk-mitigation",
      "source": "control-continuous-remote-identity-review",
      "target": "guidance-dprk-mitigation",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-controlled-surrender:guidance-duress-defensive-principles",
      "source": "control-controlled-surrender",
      "target": "guidance-duress-defensive-principles",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-controlled-surrender:guidance-duress-wallet-architecture",
      "source": "control-controlled-surrender",
      "target": "guidance-duress-wallet-architecture",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-default-e2ee-messaging:guidance-encrypted-communication",
      "source": "control-default-e2ee-messaging",
      "target": "guidance-encrypted-communication",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-dependency-pinning-provenance:guidance-supply-chain-overview",
      "source": "control-dependency-pinning-provenance",
      "target": "guidance-supply-chain-overview",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-device-hardening:guidance-device-hardening",
      "source": "control-device-hardening",
      "target": "guidance-device-hardening",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-device-hardening:guidance-full-disk-encryption",
      "source": "control-device-hardening",
      "target": "guidance-full-disk-encryption",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-device-hardening:guidance-technical-controls",
      "source": "control-device-hardening",
      "target": "guidance-technical-controls",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-digital-footprint-reduction:guidance-digital-footprint",
      "source": "control-digital-footprint-reduction",
      "target": "guidance-digital-footprint",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-dns-change-monitoring:guidance-dns-monitoring",
      "source": "control-dns-change-monitoring",
      "target": "guidance-dns-monitoring",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-duress-signing-limits:guidance-duress-transaction-flows",
      "source": "control-duress-signing-limits",
      "target": "guidance-duress-transaction-flows",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-duress-travel-protocol:guidance-duress-personal-safety",
      "source": "control-duress-travel-protocol",
      "target": "guidance-duress-personal-safety",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-duress-travel-protocol:guidance-physical",
      "source": "control-duress-travel-protocol",
      "target": "guidance-physical",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-duress-travel-protocol:guidance-travel",
      "source": "control-duress-travel-protocol",
      "target": "guidance-travel",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-emergency-pause:guidance-duress-incident-response",
      "source": "control-emergency-pause",
      "target": "guidance-duress-incident-response",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-emergency-pause:guidance-multisig-emergency",
      "source": "control-emergency-pause",
      "target": "guidance-multisig-emergency",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-emergency-pause:guidance-multisig-runbooks",
      "source": "control-emergency-pause",
      "target": "guidance-multisig-runbooks",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-ensip15-normalization:guidance-ens-normalization",
      "source": "control-ensip15-normalization",
      "target": "guidance-ens-normalization",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-execution-path-enforcement:guidance-execution-path",
      "source": "control-execution-path-enforcement",
      "target": "guidance-execution-path",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-external-security-review:guidance-bug-bounties",
      "source": "control-external-security-review",
      "target": "guidance-bug-bounties",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-external-security-review:guidance-external-security-reviews",
      "source": "control-external-security-review",
      "target": "guidance-external-security-reviews",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-external-security-review:guidance-ssdlc",
      "source": "control-external-security-review",
      "target": "guidance-ssdlc",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-frontend-integrity-monitoring:guidance-frontend",
      "source": "control-frontend-integrity-monitoring",
      "target": "guidance-frontend",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-frontend-integrity-monitoring:guidance-third-party-scripts",
      "source": "control-frontend-integrity-monitoring",
      "target": "guidance-third-party-scripts",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-full-disk-encryption:guidance-full-disk-encryption",
      "source": "control-full-disk-encryption",
      "target": "guidance-full-disk-encryption",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-geographic-key-separation:guidance-duress-wallet-architecture",
      "source": "control-geographic-key-separation",
      "target": "guidance-duress-wallet-architecture",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-hardware-backed-encryption:guidance-hardware-encryption",
      "source": "control-hardware-backed-encryption",
      "target": "guidance-hardware-encryption",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-hiring-identity-verification:guidance-dprk-mitigation",
      "source": "control-hiring-identity-verification",
      "target": "guidance-dprk-mitigation",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-hiring-identity-verification:guidance-dprk-ttps",
      "source": "control-hiring-identity-verification",
      "target": "guidance-dprk-ttps",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-hiring-identity-verification:guidance-people-controls",
      "source": "control-hiring-identity-verification",
      "target": "guidance-people-controls",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-identity-separation:guidance-digital-footprint",
      "source": "control-identity-separation",
      "target": "guidance-digital-footprint",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-identity-separation:guidance-duress-personal-safety",
      "source": "control-identity-separation",
      "target": "guidance-duress-personal-safety",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-independent-tx-verification:guidance-multisig-joining",
      "source": "control-independent-tx-verification",
      "target": "guidance-multisig-joining",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-independent-tx-verification:guidance-signing-verification",
      "source": "control-independent-tx-verification",
      "target": "guidance-signing-verification",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-independent-tx-verification:guidance-treasury-transaction-verification",
      "source": "control-independent-tx-verification",
      "target": "guidance-treasury-transaction-verification",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-insider-threat-mitigation:guidance-dprk-mitigation",
      "source": "control-insider-threat-mitigation",
      "target": "guidance-dprk-mitigation",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-insider-threat-mitigation:guidance-insider-threat",
      "source": "control-insider-threat-mitigation",
      "target": "guidance-insider-threat",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-isolated-reproducible-builds:guidance-cicd",
      "source": "control-isolated-reproducible-builds",
      "target": "guidance-cicd",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-isolated-reproducible-builds:guidance-code-signing",
      "source": "control-isolated-reproducible-builds",
      "target": "guidance-code-signing",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-l1-ens-resolution:guidance-ens-integrity",
      "source": "control-l1-ens-resolution",
      "target": "guidance-ens-integrity",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-least-privilege-review:guidance-dprk-mitigation",
      "source": "control-least-privilege-review",
      "target": "guidance-dprk-mitigation",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-least-privilege-review:guidance-iam",
      "source": "control-least-privilege-review",
      "target": "guidance-iam",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-limited-token-approvals:guidance-smart-contract-interaction",
      "source": "control-limited-token-approvals",
      "target": "guidance-smart-contract-interaction",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-living-threat-model:guidance-create-maintain-threat-models",
      "source": "control-living-threat-model",
      "target": "guidance-create-maintain-threat-models",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-living-threat-model:guidance-identify-mitigate-threats",
      "source": "control-living-threat-model",
      "target": "guidance-identify-mitigate-threats",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-living-threat-model:guidance-ssdlc-threat-design",
      "source": "control-living-threat-model",
      "target": "guidance-ssdlc-threat-design",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-living-threat-model:guidance-threat-modeling",
      "source": "control-living-threat-model",
      "target": "guidance-threat-modeling",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-multi-channel-transfer-confirm:guidance-treasury-transaction-verification",
      "source": "control-multi-channel-transfer-confirm",
      "target": "guidance-treasury-transaction-verification",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-multisig-threshold-policy:guidance-duress-wallet-architecture",
      "source": "control-multisig-threshold-policy",
      "target": "guidance-duress-wallet-architecture",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-multisig-threshold-policy:guidance-multisig-overview",
      "source": "control-multisig-threshold-policy",
      "target": "guidance-multisig-overview",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-network-segmentation:guidance-network",
      "source": "control-network-segmentation",
      "target": "guidance-network",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-network-segmentation:guidance-zero-trust",
      "source": "control-network-segmentation",
      "target": "guidance-zero-trust",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-offline-seed-custody:guidance-seed-phrase-management",
      "source": "control-offline-seed-custody",
      "target": "guidance-seed-phrase-management",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-onchain-anomaly-detection:guidance-threat-detection",
      "source": "control-onchain-anomaly-detection",
      "target": "guidance-threat-detection",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-peer-code-review:guidance-code-reviews",
      "source": "control-peer-code-review",
      "target": "guidance-code-reviews",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-phishing-resistant-mfa:guidance-account-management",
      "source": "control-phishing-resistant-mfa",
      "target": "guidance-account-management",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-phishing-resistant-mfa:guidance-hardware-security-keys",
      "source": "control-phishing-resistant-mfa",
      "target": "guidance-hardware-security-keys",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-phishing-resistant-mfa:guidance-iam",
      "source": "control-phishing-resistant-mfa",
      "target": "guidance-iam",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-phishing-resistant-mfa:guidance-phishing",
      "source": "control-phishing-resistant-mfa",
      "target": "guidance-phishing",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-phishing-resistant-mfa:guidance-treasury-enhanced-controls",
      "source": "control-phishing-resistant-mfa",
      "target": "guidance-treasury-enhanced-controls",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-prompt-input-constraint:guidance-prompt-injection",
      "source": "control-prompt-input-constraint",
      "target": "guidance-prompt-injection",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-published-recovery-address:guidance-safe-harbor-scope",
      "source": "control-published-recovery-address",
      "target": "guidance-safe-harbor-scope",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-published-security-contact:guidance-safe-harbor-scope",
      "source": "control-published-security-contact",
      "target": "guidance-safe-harbor-scope",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-published-security-contact:guidance-security-contact",
      "source": "control-published-security-contact",
      "target": "guidance-security-contact",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-registrar-hardening:guidance-dns-security-overview",
      "source": "control-registrar-hardening",
      "target": "guidance-dns-security-overview",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-safe-harbor-adoption:guidance-safe-harbor",
      "source": "control-safe-harbor-adoption",
      "target": "guidance-safe-harbor",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-safe-harbor-adoption:guidance-safe-harbor-adoption",
      "source": "control-safe-harbor-adoption",
      "target": "guidance-safe-harbor-adoption",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-safe-harbor-adoption:guidance-vulnerability-disclosure",
      "source": "control-safe-harbor-adoption",
      "target": "guidance-vulnerability-disclosure",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-secure-sdlc-testing:guidance-secure-coding",
      "source": "control-secure-sdlc-testing",
      "target": "guidance-secure-coding",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-secure-sdlc-testing:guidance-security-testing",
      "source": "control-secure-sdlc-testing",
      "target": "guidance-security-testing",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-secure-sdlc-testing:guidance-ssdlc",
      "source": "control-secure-sdlc-testing",
      "target": "guidance-ssdlc",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-security-awareness-training:guidance-security-culture",
      "source": "control-security-awareness-training",
      "target": "guidance-security-culture",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-security-awareness-training:guidance-security-training",
      "source": "control-security-awareness-training",
      "target": "guidance-security-training",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-security-council-process:guidance-council",
      "source": "control-security-council-process",
      "target": "guidance-council",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-signer-isolation:guidance-cold-vs-hot",
      "source": "control-signer-isolation",
      "target": "guidance-cold-vs-hot",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-signer-isolation:guidance-opsec",
      "source": "control-signer-isolation",
      "target": "guidance-opsec",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-signer-lifecycle:guidance-multisig-joining",
      "source": "control-signer-lifecycle",
      "target": "guidance-multisig-joining",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-simulate-before-sign:guidance-ens-integrity",
      "source": "control-simulate-before-sign",
      "target": "guidance-ens-integrity",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-simulate-before-sign:guidance-signing-verification",
      "source": "control-simulate-before-sign",
      "target": "guidance-signing-verification",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-simulate-before-sign:guidance-treasury-transaction-verification",
      "source": "control-simulate-before-sign",
      "target": "guidance-treasury-transaction-verification",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-test-transfer:guidance-treasury-transaction-verification",
      "source": "control-test-transfer",
      "target": "guidance-treasury-transaction-verification",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-tested-incident-runbooks:guidance-incident-playbooks",
      "source": "control-tested-incident-runbooks",
      "target": "guidance-incident-playbooks",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-tested-incident-runbooks:guidance-ir-detection",
      "source": "control-tested-incident-runbooks",
      "target": "guidance-ir-detection",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-tls-ssh-transit:guidance-cloud-data-encryption",
      "source": "control-tls-ssh-transit",
      "target": "guidance-cloud-data-encryption",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-tls-ssh-transit:guidance-encryption-in-transit",
      "source": "control-tls-ssh-transit",
      "target": "guidance-encryption-in-transit",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-tls-ssh-transit:guidance-secure-browsing",
      "source": "control-tls-ssh-transit",
      "target": "guidance-secure-browsing",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-treasury-classification:guidance-treasury-classification",
      "source": "control-treasury-classification",
      "target": "guidance-treasury-classification",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-treasury-registration:guidance-treasury-registration",
      "source": "control-treasury-registration",
      "target": "guidance-treasury-registration",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-vpn-on-untrusted-networks:guidance-public-networks",
      "source": "control-vpn-on-untrusted-networks",
      "target": "guidance-public-networks",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-vpn-on-untrusted-networks:guidance-vpns",
      "source": "control-vpn-on-untrusted-networks",
      "target": "guidance-vpns",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:control-whitelist-and-delay:guidance-treasury-enhanced-controls",
      "source": "control-whitelist-and-delay",
      "target": "guidance-treasury-enhanced-controls",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:response-dns-hijack:guidance-dns-hijack-runbook",
      "source": "response-dns-hijack",
      "target": "guidance-dns-hijack-runbook",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:response-dprk-it-worker:guidance-dprk-mitigation",
      "source": "response-dprk-it-worker",
      "target": "guidance-dprk-mitigation",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:response-dprk-it-worker:guidance-dprk-playbook",
      "source": "response-dprk-it-worker",
      "target": "guidance-dprk-playbook",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:response-duress-event:guidance-duress-incident-response",
      "source": "response-duress-event",
      "target": "guidance-duress-incident-response",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:response-duress-event:guidance-incident-playbooks",
      "source": "response-duress-event",
      "target": "guidance-incident-playbooks",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:response-duress-event:guidance-travel",
      "source": "response-duress-event",
      "target": "guidance-travel",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:response-signer-compromise:guidance-incident-playbooks",
      "source": "response-signer-compromise",
      "target": "guidance-incident-playbooks",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:response-signer-compromise:guidance-key-compromise-runbook",
      "source": "response-signer-compromise",
      "target": "guidance-key-compromise-runbook",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:response-smart-contract-exploit:guidance-exploit-runbook",
      "source": "response-smart-contract-exploit",
      "target": "guidance-exploit-runbook",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:response-smart-contract-exploit:guidance-safe-harbor-whitehat",
      "source": "response-smart-contract-exploit",
      "target": "guidance-safe-harbor-whitehat",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:response-supply-chain-incident:guidance-dependency-runbook",
      "source": "response-supply-chain-incident",
      "target": "guidance-dependency-runbook",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:response-whitehat-rescue:guidance-safe-harbor-whitehat",
      "source": "response-whitehat-rescue",
      "target": "guidance-safe-harbor-whitehat",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:response-whitehat-rescue:guidance-wallet-security",
      "source": "response-whitehat-rescue",
      "target": "guidance-wallet-security",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:surface-physical-presence:guidance-coercion-duress",
      "source": "surface-physical-presence",
      "target": "guidance-coercion-duress",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-blind-signing:guidance-signing-verification",
      "source": "threat-blind-signing",
      "target": "guidance-signing-verification",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-cloud-plaintext-at-rest:guidance-cloud-data-encryption",
      "source": "threat-cloud-plaintext-at-rest",
      "target": "guidance-cloud-data-encryption",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-custody-access-abuse:guidance-treasury-classification",
      "source": "threat-custody-access-abuse",
      "target": "guidance-treasury-classification",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-dprk-it-worker-infiltration:guidance-dprk-general-information",
      "source": "threat-dprk-it-worker-infiltration",
      "target": "guidance-dprk-general-information",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-dprk-it-worker-infiltration:guidance-dprk-it-workers",
      "source": "threat-dprk-it-worker-infiltration",
      "target": "guidance-dprk-it-workers",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-dprk-it-worker-infiltration:guidance-dprk-playbook",
      "source": "threat-dprk-it-worker-infiltration",
      "target": "guidance-dprk-playbook",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-dprk-it-worker-infiltration:guidance-dprk-ttps",
      "source": "threat-dprk-it-worker-infiltration",
      "target": "guidance-dprk-ttps",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-duress-coercion:guidance-coercion-duress",
      "source": "threat-duress-coercion",
      "target": "guidance-coercion-duress",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-governance-manipulation:guidance-governance",
      "source": "threat-governance-manipulation",
      "target": "guidance-governance",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-infrastructure-compromise:guidance-infrastructure",
      "source": "threat-infrastructure-compromise",
      "target": "guidance-infrastructure",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-leadership-phishing:guidance-threat-vectors",
      "source": "threat-leadership-phishing",
      "target": "guidance-threat-vectors",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-misdirected-transfer:guidance-treasury-transaction-verification",
      "source": "threat-misdirected-transfer",
      "target": "guidance-treasury-transaction-verification",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-monitoring-gaps:guidance-monitoring",
      "source": "threat-monitoring-gaps",
      "target": "guidance-monitoring",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-on-path-interception:guidance-encryption-in-transit",
      "source": "threat-on-path-interception",
      "target": "guidance-encryption-in-transit",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-on-path-interception:guidance-public-networks",
      "source": "threat-on-path-interception",
      "target": "guidance-public-networks",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-opsec-hygiene-failure:guidance-opsec",
      "source": "threat-opsec-hygiene-failure",
      "target": "guidance-opsec",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-osint-targeting:guidance-digital-footprint",
      "source": "threat-osint-targeting",
      "target": "guidance-digital-footprint",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-plaintext-lost-device:guidance-full-disk-encryption",
      "source": "threat-plaintext-lost-device",
      "target": "guidance-full-disk-encryption",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-prompt-injection:guidance-prompt-injection",
      "source": "threat-prompt-injection",
      "target": "guidance-prompt-injection",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-seed-phrase-compromise:guidance-seed-phrase-management",
      "source": "threat-seed-phrase-compromise",
      "target": "guidance-seed-phrase-management",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-server-readable-chat:guidance-encrypted-communication",
      "source": "threat-server-readable-chat",
      "target": "guidance-encrypted-communication",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-smart-contract-exploits:guidance-external-security-reviews",
      "source": "threat-smart-contract-exploits",
      "target": "guidance-external-security-reviews",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-social-engineering:guidance-awareness",
      "source": "threat-social-engineering",
      "target": "guidance-awareness",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-social-engineering:guidance-community",
      "source": "threat-social-engineering",
      "target": "guidance-community",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-spoofed-ens-resolution:guidance-ens-integrity",
      "source": "threat-spoofed-ens-resolution",
      "target": "guidance-ens-integrity",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-stale-threat-model:guidance-create-maintain-threat-models",
      "source": "threat-stale-threat-model",
      "target": "guidance-create-maintain-threat-models",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-supply-chain-compromise:guidance-third-party-scripts",
      "source": "threat-supply-chain-compromise",
      "target": "guidance-third-party-scripts",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-uncontactable-disclosure:guidance-vulnerability-disclosure",
      "source": "threat-uncontactable-disclosure",
      "target": "guidance-vulnerability-disclosure",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-unlimited-token-approval:guidance-smart-contract-interaction",
      "source": "threat-unlimited-token-approval",
      "target": "guidance-smart-contract-interaction",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "documented-by:threat-whitehat-legal-freeze:guidance-safe-harbor",
      "source": "threat-whitehat-legal-freeze",
      "target": "guidance-safe-harbor",
      "type": "documented-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:asset-domain-control:guidance-dns-cert",
      "source": "asset-domain-control",
      "target": "guidance-dns-cert",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:asset-treasury-funds:guidance-sfc-treasury-ops",
      "source": "asset-treasury-funds",
      "target": "guidance-sfc-treasury-ops",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:component-ci-cd:guidance-certs",
      "source": "component-ci-cd",
      "target": "guidance-certs",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:component-ci-cd:guidance-sfc-devops-infrastructure",
      "source": "component-ci-cd",
      "target": "guidance-sfc-devops-infrastructure",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:component-cloud-infrastructure:guidance-sfc-devops-infrastructure",
      "source": "component-cloud-infrastructure",
      "target": "guidance-sfc-devops-infrastructure",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:component-custodial-treasury:guidance-sfc-treasury-ops",
      "source": "component-custodial-treasury",
      "target": "guidance-sfc-treasury-ops",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:component-dns-registrar:guidance-dns-cert",
      "source": "component-dns-registrar",
      "target": "guidance-dns-cert",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:component-identity-accounts:guidance-sfc-identity-accounts",
      "source": "component-identity-accounts",
      "target": "guidance-sfc-identity-accounts",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:component-monitoring-stack:guidance-certs",
      "source": "component-monitoring-stack",
      "target": "guidance-certs",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:component-monitoring-stack:guidance-sfc-incident-response",
      "source": "component-monitoring-stack",
      "target": "guidance-sfc-incident-response",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:component-multisig:guidance-certs",
      "source": "component-multisig",
      "target": "guidance-certs",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:component-multisig:guidance-sfc-multisig-ops",
      "source": "component-multisig",
      "target": "guidance-sfc-multisig-ops",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:control-branch-protection:guidance-sfc-devops-infrastructure",
      "source": "control-branch-protection",
      "target": "guidance-sfc-devops-infrastructure",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:control-living-threat-model:guidance-sfc-incident-response",
      "source": "control-living-threat-model",
      "target": "guidance-sfc-incident-response",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:control-multisig-threshold-policy:guidance-sfc-multisig-ops",
      "source": "control-multisig-threshold-policy",
      "target": "guidance-sfc-multisig-ops",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:control-onchain-anomaly-detection:guidance-sfc-incident-response",
      "source": "control-onchain-anomaly-detection",
      "target": "guidance-sfc-incident-response",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:control-phishing-resistant-mfa:guidance-sfc-identity-accounts",
      "source": "control-phishing-resistant-mfa",
      "target": "guidance-sfc-identity-accounts",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:control-registrar-hardening:guidance-dns-cert",
      "source": "control-registrar-hardening",
      "target": "guidance-dns-cert",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:control-signer-isolation:guidance-sfc-multisig-ops",
      "source": "control-signer-isolation",
      "target": "guidance-sfc-multisig-ops",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:control-simulate-before-sign:guidance-sfc-multisig-ops",
      "source": "control-simulate-before-sign",
      "target": "guidance-sfc-multisig-ops",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:control-tested-incident-runbooks:guidance-sfc-incident-response",
      "source": "control-tested-incident-runbooks",
      "target": "guidance-sfc-incident-response",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:response-smart-contract-exploit:guidance-sfc-incident-response",
      "source": "response-smart-contract-exploit",
      "target": "guidance-sfc-incident-response",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:response-whitehat-rescue:guidance-sfc-incident-response",
      "source": "response-whitehat-rescue",
      "target": "guidance-sfc-incident-response",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:surface-ci-cd-secrets:guidance-sfc-devops-infrastructure",
      "source": "surface-ci-cd-secrets",
      "target": "guidance-sfc-devops-infrastructure",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:surface-dns-records:guidance-dns-cert",
      "source": "surface-dns-records",
      "target": "guidance-dns-cert",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:surface-executive-communications:guidance-sfc-identity-accounts",
      "source": "surface-executive-communications",
      "target": "guidance-sfc-identity-accounts",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:surface-large-transfer:guidance-sfc-treasury-ops",
      "source": "surface-large-transfer",
      "target": "guidance-sfc-treasury-ops",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:surface-multisig-signing-workflow:guidance-sfc-multisig-ops",
      "source": "surface-multisig-signing-workflow",
      "target": "guidance-sfc-multisig-ops",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:surface-signer-lifecycle:guidance-sfc-multisig-ops",
      "source": "surface-signer-lifecycle",
      "target": "guidance-sfc-multisig-ops",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:threat-frontend-dns-hijacking:guidance-dns-cert",
      "source": "threat-frontend-dns-hijacking",
      "target": "guidance-dns-cert",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:threat-misdirected-transfer:guidance-sfc-treasury-ops",
      "source": "threat-misdirected-transfer",
      "target": "guidance-sfc-treasury-ops",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "evaluated-by:threat-supply-chain-compromise:guidance-sfc-devops-infrastructure",
      "source": "threat-supply-chain-compromise",
      "target": "guidance-sfc-devops-infrastructure",
      "type": "evaluated-by",
      "status": "proposed"
    },
    {
      "id": "exposes:component-ai-agent:surface-agent-tool-path",
      "source": "component-ai-agent",
      "target": "surface-agent-tool-path",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-ci-cd:surface-ci-cd-secrets",
      "source": "component-ci-cd",
      "target": "surface-ci-cd-secrets",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-cloud-infrastructure:surface-cloud-admin-console",
      "source": "component-cloud-infrastructure",
      "target": "surface-cloud-admin-console",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-cloud-infrastructure:surface-cloud-data-at-rest",
      "source": "component-cloud-infrastructure",
      "target": "surface-cloud-data-at-rest",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-cloud-infrastructure:surface-data-in-transit",
      "source": "component-cloud-infrastructure",
      "target": "surface-data-in-transit",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-community-channels:surface-operator-messaging",
      "source": "component-community-channels",
      "target": "surface-operator-messaging",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-custodial-treasury:surface-custodial-admin-access",
      "source": "component-custodial-treasury",
      "target": "surface-custodial-admin-access",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-custodial-treasury:surface-large-transfer",
      "source": "component-custodial-treasury",
      "target": "surface-large-transfer",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-dependency-graph:surface-package-install",
      "source": "component-dependency-graph",
      "target": "surface-package-install",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-developer-devices:surface-device-endpoint",
      "source": "component-developer-devices",
      "target": "surface-device-endpoint",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-developer-devices:surface-endpoint-at-rest",
      "source": "component-developer-devices",
      "target": "surface-endpoint-at-rest",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-developer-devices:surface-public-wifi",
      "source": "component-developer-devices",
      "target": "surface-public-wifi",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-dns-registrar:surface-dns-records",
      "source": "component-dns-registrar",
      "target": "surface-dns-records",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-family-household:surface-family-and-household",
      "source": "component-family-household",
      "target": "surface-family-and-household",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-founders-executives:surface-executive-communications",
      "source": "component-founders-executives",
      "target": "surface-executive-communications",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-founders-executives:surface-operator-messaging",
      "source": "component-founders-executives",
      "target": "surface-operator-messaging",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-founders-executives:surface-physical-presence",
      "source": "component-founders-executives",
      "target": "surface-physical-presence",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-frontend:surface-ens-resolution",
      "source": "component-frontend",
      "target": "surface-ens-resolution",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-frontend:surface-frontend-deployment",
      "source": "component-frontend",
      "target": "surface-frontend-deployment",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-governance-module:surface-governance-proposal",
      "source": "component-governance-module",
      "target": "surface-governance-proposal",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-hardware-wallet:surface-transaction-signing",
      "source": "component-hardware-wallet",
      "target": "surface-transaction-signing",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-hiring-pipeline:surface-contributor-hire-path",
      "source": "component-hiring-pipeline",
      "target": "surface-contributor-hire-path",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-hiring-pipeline:surface-hiring-contractor-access",
      "source": "component-hiring-pipeline",
      "target": "surface-hiring-contractor-access",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-monitoring-stack:surface-onchain-activity",
      "source": "component-monitoring-stack",
      "target": "surface-onchain-activity",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-multisig:surface-multisig-signing-workflow",
      "source": "component-multisig",
      "target": "surface-multisig-signing-workflow",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-rpc-endpoints:surface-ens-resolution",
      "source": "component-rpc-endpoints",
      "target": "surface-ens-resolution",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-rpc-endpoints:surface-rpc-trust-boundary",
      "source": "component-rpc-endpoints",
      "target": "surface-rpc-trust-boundary",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-seed-backup:surface-seed-custody",
      "source": "component-seed-backup",
      "target": "surface-seed-custody",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-signers:surface-physical-presence",
      "source": "component-signers",
      "target": "surface-physical-presence",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-signers:surface-signer-lifecycle",
      "source": "component-signers",
      "target": "surface-signer-lifecycle",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-smart-contracts:surface-active-exploit-window",
      "source": "component-smart-contracts",
      "target": "surface-active-exploit-window",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-smart-contracts:surface-contract-external-calls",
      "source": "component-smart-contracts",
      "target": "surface-contract-external-calls",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-smart-contracts:surface-contract-upgrade-path",
      "source": "component-smart-contracts",
      "target": "surface-contract-upgrade-path",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-smart-contracts:surface-researcher-inbound",
      "source": "component-smart-contracts",
      "target": "surface-researcher-inbound",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-software-wallet:surface-token-approvals",
      "source": "component-software-wallet",
      "target": "surface-token-approvals",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "exposes:component-software-wallet:surface-transaction-signing",
      "source": "component-software-wallet",
      "target": "surface-transaction-signing",
      "type": "exposes",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-branch-protection:threat-supply-chain-compromise",
      "source": "control-branch-protection",
      "target": "threat-supply-chain-compromise",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-bug-bounty-program:threat-uncontactable-disclosure",
      "source": "control-bug-bounty-program",
      "target": "threat-uncontactable-disclosure",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-cloud-hardening:threat-infrastructure-compromise",
      "source": "control-cloud-hardening",
      "target": "threat-infrastructure-compromise",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-cloud-kms-custody:threat-cloud-plaintext-at-rest",
      "source": "control-cloud-kms-custody",
      "target": "threat-cloud-plaintext-at-rest",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-cold-wallet-separation:threat-blind-signing",
      "source": "control-cold-wallet-separation",
      "target": "threat-blind-signing",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-continuous-remote-identity-review:threat-dprk-it-worker-infiltration",
      "source": "control-continuous-remote-identity-review",
      "target": "threat-dprk-it-worker-infiltration",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-continuous-remote-identity-review:threat-supply-chain-compromise",
      "source": "control-continuous-remote-identity-review",
      "target": "threat-supply-chain-compromise",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-controlled-surrender:threat-duress-coercion",
      "source": "control-controlled-surrender",
      "target": "threat-duress-coercion",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-default-e2ee-messaging:threat-server-readable-chat",
      "source": "control-default-e2ee-messaging",
      "target": "threat-server-readable-chat",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-dependency-pinning-provenance:threat-supply-chain-compromise",
      "source": "control-dependency-pinning-provenance",
      "target": "threat-supply-chain-compromise",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-device-hardening:threat-opsec-hygiene-failure",
      "source": "control-device-hardening",
      "target": "threat-opsec-hygiene-failure",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-device-hardening:threat-plaintext-lost-device",
      "source": "control-device-hardening",
      "target": "threat-plaintext-lost-device",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-digital-footprint-reduction:threat-osint-targeting",
      "source": "control-digital-footprint-reduction",
      "target": "threat-osint-targeting",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-duress-signing-limits:threat-duress-coercion",
      "source": "control-duress-signing-limits",
      "target": "threat-duress-coercion",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-duress-travel-protocol:threat-duress-coercion",
      "source": "control-duress-travel-protocol",
      "target": "threat-duress-coercion",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-emergency-pause:threat-multisig-operational-failure",
      "source": "control-emergency-pause",
      "target": "threat-multisig-operational-failure",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-emergency-pause:threat-smart-contract-exploits",
      "source": "control-emergency-pause",
      "target": "threat-smart-contract-exploits",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-ensip15-normalization:threat-spoofed-ens-resolution",
      "source": "control-ensip15-normalization",
      "target": "threat-spoofed-ens-resolution",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-execution-path-enforcement:threat-prompt-injection",
      "source": "control-execution-path-enforcement",
      "target": "threat-prompt-injection",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-external-security-review:threat-smart-contract-exploits",
      "source": "control-external-security-review",
      "target": "threat-smart-contract-exploits",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-frontend-integrity-monitoring:threat-supply-chain-compromise",
      "source": "control-frontend-integrity-monitoring",
      "target": "threat-supply-chain-compromise",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-full-disk-encryption:threat-plaintext-lost-device",
      "source": "control-full-disk-encryption",
      "target": "threat-plaintext-lost-device",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-geographic-key-separation:threat-duress-coercion",
      "source": "control-geographic-key-separation",
      "target": "threat-duress-coercion",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-hardware-backed-encryption:threat-plaintext-lost-device",
      "source": "control-hardware-backed-encryption",
      "target": "threat-plaintext-lost-device",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-hiring-identity-verification:threat-dprk-it-worker-infiltration",
      "source": "control-hiring-identity-verification",
      "target": "threat-dprk-it-worker-infiltration",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-identity-separation:threat-duress-coercion",
      "source": "control-identity-separation",
      "target": "threat-duress-coercion",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-identity-separation:threat-osint-targeting",
      "source": "control-identity-separation",
      "target": "threat-osint-targeting",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-independent-tx-verification:threat-blind-signing",
      "source": "control-independent-tx-verification",
      "target": "threat-blind-signing",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-independent-tx-verification:threat-governance-manipulation",
      "source": "control-independent-tx-verification",
      "target": "threat-governance-manipulation",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-independent-tx-verification:threat-leadership-phishing",
      "source": "control-independent-tx-verification",
      "target": "threat-leadership-phishing",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-independent-tx-verification:threat-misdirected-transfer",
      "source": "control-independent-tx-verification",
      "target": "threat-misdirected-transfer",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-independent-tx-verification:threat-multisig-operational-failure",
      "source": "control-independent-tx-verification",
      "target": "threat-multisig-operational-failure",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-insider-threat-mitigation:threat-dprk-it-worker-infiltration",
      "source": "control-insider-threat-mitigation",
      "target": "threat-dprk-it-worker-infiltration",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-isolated-reproducible-builds:threat-supply-chain-compromise",
      "source": "control-isolated-reproducible-builds",
      "target": "threat-supply-chain-compromise",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-l1-ens-resolution:threat-misdirected-transfer",
      "source": "control-l1-ens-resolution",
      "target": "threat-misdirected-transfer",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-l1-ens-resolution:threat-spoofed-ens-resolution",
      "source": "control-l1-ens-resolution",
      "target": "threat-spoofed-ens-resolution",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-least-privilege-review:threat-dprk-it-worker-infiltration",
      "source": "control-least-privilege-review",
      "target": "threat-dprk-it-worker-infiltration",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-least-privilege-review:threat-infrastructure-compromise",
      "source": "control-least-privilege-review",
      "target": "threat-infrastructure-compromise",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-limited-token-approvals:threat-unlimited-token-approval",
      "source": "control-limited-token-approvals",
      "target": "threat-unlimited-token-approval",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-living-threat-model:threat-smart-contract-exploits",
      "source": "control-living-threat-model",
      "target": "threat-smart-contract-exploits",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-living-threat-model:threat-stale-threat-model",
      "source": "control-living-threat-model",
      "target": "threat-stale-threat-model",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-multi-channel-transfer-confirm:threat-misdirected-transfer",
      "source": "control-multi-channel-transfer-confirm",
      "target": "threat-misdirected-transfer",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-multisig-threshold-policy:threat-duress-coercion",
      "source": "control-multisig-threshold-policy",
      "target": "threat-duress-coercion",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-multisig-threshold-policy:threat-multisig-operational-failure",
      "source": "control-multisig-threshold-policy",
      "target": "threat-multisig-operational-failure",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-network-segmentation:threat-infrastructure-compromise",
      "source": "control-network-segmentation",
      "target": "threat-infrastructure-compromise",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-offline-seed-custody:threat-duress-coercion",
      "source": "control-offline-seed-custody",
      "target": "threat-duress-coercion",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-offline-seed-custody:threat-seed-phrase-compromise",
      "source": "control-offline-seed-custody",
      "target": "threat-seed-phrase-compromise",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-peer-code-review:threat-smart-contract-exploits",
      "source": "control-peer-code-review",
      "target": "threat-smart-contract-exploits",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-peer-code-review:threat-supply-chain-compromise",
      "source": "control-peer-code-review",
      "target": "threat-supply-chain-compromise",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-phishing-resistant-mfa:threat-custody-access-abuse",
      "source": "control-phishing-resistant-mfa",
      "target": "threat-custody-access-abuse",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-phishing-resistant-mfa:threat-leadership-phishing",
      "source": "control-phishing-resistant-mfa",
      "target": "threat-leadership-phishing",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-phishing-resistant-mfa:threat-opsec-hygiene-failure",
      "source": "control-phishing-resistant-mfa",
      "target": "threat-opsec-hygiene-failure",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-prompt-input-constraint:threat-prompt-injection",
      "source": "control-prompt-input-constraint",
      "target": "threat-prompt-injection",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-published-recovery-address:threat-whitehat-legal-freeze",
      "source": "control-published-recovery-address",
      "target": "threat-whitehat-legal-freeze",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-published-security-contact:threat-uncontactable-disclosure",
      "source": "control-published-security-contact",
      "target": "threat-uncontactable-disclosure",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-registrar-hardening:threat-frontend-dns-hijacking",
      "source": "control-registrar-hardening",
      "target": "threat-frontend-dns-hijacking",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-safe-harbor-adoption:threat-whitehat-legal-freeze",
      "source": "control-safe-harbor-adoption",
      "target": "threat-whitehat-legal-freeze",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-secure-sdlc-testing:threat-smart-contract-exploits",
      "source": "control-secure-sdlc-testing",
      "target": "threat-smart-contract-exploits",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-security-awareness-training:threat-leadership-phishing",
      "source": "control-security-awareness-training",
      "target": "threat-leadership-phishing",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-security-awareness-training:threat-social-engineering",
      "source": "control-security-awareness-training",
      "target": "threat-social-engineering",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-security-council-process:threat-governance-manipulation",
      "source": "control-security-council-process",
      "target": "threat-governance-manipulation",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-signer-isolation:threat-blind-signing",
      "source": "control-signer-isolation",
      "target": "threat-blind-signing",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-signer-isolation:threat-leadership-phishing",
      "source": "control-signer-isolation",
      "target": "threat-leadership-phishing",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-signer-isolation:threat-opsec-hygiene-failure",
      "source": "control-signer-isolation",
      "target": "threat-opsec-hygiene-failure",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-signer-lifecycle:threat-multisig-operational-failure",
      "source": "control-signer-lifecycle",
      "target": "threat-multisig-operational-failure",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-simulate-before-sign:threat-blind-signing",
      "source": "control-simulate-before-sign",
      "target": "threat-blind-signing",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-simulate-before-sign:threat-misdirected-transfer",
      "source": "control-simulate-before-sign",
      "target": "threat-misdirected-transfer",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-simulate-before-sign:threat-spoofed-ens-resolution",
      "source": "control-simulate-before-sign",
      "target": "threat-spoofed-ens-resolution",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-test-transfer:threat-misdirected-transfer",
      "source": "control-test-transfer",
      "target": "threat-misdirected-transfer",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-tested-incident-runbooks:threat-monitoring-gaps",
      "source": "control-tested-incident-runbooks",
      "target": "threat-monitoring-gaps",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-tls-ssh-transit:threat-on-path-interception",
      "source": "control-tls-ssh-transit",
      "target": "threat-on-path-interception",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-treasury-classification:threat-custody-access-abuse",
      "source": "control-treasury-classification",
      "target": "threat-custody-access-abuse",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-treasury-registration:threat-custody-access-abuse",
      "source": "control-treasury-registration",
      "target": "threat-custody-access-abuse",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-vpn-on-untrusted-networks:threat-on-path-interception",
      "source": "control-vpn-on-untrusted-networks",
      "target": "threat-on-path-interception",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-whitelist-and-delay:threat-custody-access-abuse",
      "source": "control-whitelist-and-delay",
      "target": "threat-custody-access-abuse",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "mitigates:control-whitelist-and-delay:threat-misdirected-transfer",
      "source": "control-whitelist-and-delay",
      "target": "threat-misdirected-transfer",
      "type": "mitigates",
      "status": "proposed"
    },
    {
      "id": "protects:control-branch-protection:asset-source-code",
      "source": "control-branch-protection",
      "target": "asset-source-code",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-bug-bounty-program:asset-user-funds",
      "source": "control-bug-bounty-program",
      "target": "asset-user-funds",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-cloud-hardening:component-cloud-infrastructure",
      "source": "control-cloud-hardening",
      "target": "component-cloud-infrastructure",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-cloud-kms-custody:component-cloud-infrastructure",
      "source": "control-cloud-kms-custody",
      "target": "component-cloud-infrastructure",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-cloud-kms-custody:surface-cloud-data-at-rest",
      "source": "control-cloud-kms-custody",
      "target": "surface-cloud-data-at-rest",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-cold-wallet-separation:asset-signer-keys",
      "source": "control-cold-wallet-separation",
      "target": "asset-signer-keys",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-cold-wallet-separation:component-hardware-wallet",
      "source": "control-cold-wallet-separation",
      "target": "component-hardware-wallet",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-continuous-remote-identity-review:component-hiring-pipeline",
      "source": "control-continuous-remote-identity-review",
      "target": "component-hiring-pipeline",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-controlled-surrender:asset-key-holder-safety",
      "source": "control-controlled-surrender",
      "target": "asset-key-holder-safety",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-controlled-surrender:asset-treasury-funds",
      "source": "control-controlled-surrender",
      "target": "asset-treasury-funds",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-default-e2ee-messaging:surface-operator-messaging",
      "source": "control-default-e2ee-messaging",
      "target": "surface-operator-messaging",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-digital-footprint-reduction:asset-personal-identifying-data",
      "source": "control-digital-footprint-reduction",
      "target": "asset-personal-identifying-data",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-duress-signing-limits:asset-treasury-funds",
      "source": "control-duress-signing-limits",
      "target": "asset-treasury-funds",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-duress-signing-limits:surface-transaction-signing",
      "source": "control-duress-signing-limits",
      "target": "surface-transaction-signing",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-ensip15-normalization:surface-ens-resolution",
      "source": "control-ensip15-normalization",
      "target": "surface-ens-resolution",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-execution-path-enforcement:surface-agent-tool-path",
      "source": "control-execution-path-enforcement",
      "target": "surface-agent-tool-path",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-external-security-review:component-smart-contracts",
      "source": "control-external-security-review",
      "target": "component-smart-contracts",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-frontend-integrity-monitoring:component-frontend",
      "source": "control-frontend-integrity-monitoring",
      "target": "component-frontend",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-full-disk-encryption:asset-secrets-credentials",
      "source": "control-full-disk-encryption",
      "target": "asset-secrets-credentials",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-full-disk-encryption:surface-endpoint-at-rest",
      "source": "control-full-disk-encryption",
      "target": "surface-endpoint-at-rest",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-geographic-key-separation:asset-signer-keys",
      "source": "control-geographic-key-separation",
      "target": "asset-signer-keys",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-geographic-key-separation:component-hardware-wallet",
      "source": "control-geographic-key-separation",
      "target": "component-hardware-wallet",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-hardware-backed-encryption:surface-endpoint-at-rest",
      "source": "control-hardware-backed-encryption",
      "target": "surface-endpoint-at-rest",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-hiring-identity-verification:surface-contributor-hire-path",
      "source": "control-hiring-identity-verification",
      "target": "surface-contributor-hire-path",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-identity-separation:asset-key-holder-safety",
      "source": "control-identity-separation",
      "target": "asset-key-holder-safety",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-identity-separation:asset-personal-identifying-data",
      "source": "control-identity-separation",
      "target": "asset-personal-identifying-data",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-identity-separation:component-family-household",
      "source": "control-identity-separation",
      "target": "component-family-household",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-identity-separation:surface-family-and-household",
      "source": "control-identity-separation",
      "target": "surface-family-and-household",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-independent-tx-verification:surface-multisig-signing-workflow",
      "source": "control-independent-tx-verification",
      "target": "surface-multisig-signing-workflow",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-independent-tx-verification:surface-transaction-signing",
      "source": "control-independent-tx-verification",
      "target": "surface-transaction-signing",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-isolated-reproducible-builds:asset-deployment-authority",
      "source": "control-isolated-reproducible-builds",
      "target": "asset-deployment-authority",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-l1-ens-resolution:asset-user-funds",
      "source": "control-l1-ens-resolution",
      "target": "asset-user-funds",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-l1-ens-resolution:surface-ens-resolution",
      "source": "control-l1-ens-resolution",
      "target": "surface-ens-resolution",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-limited-token-approvals:surface-token-approvals",
      "source": "control-limited-token-approvals",
      "target": "surface-token-approvals",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-living-threat-model:asset-source-code",
      "source": "control-living-threat-model",
      "target": "asset-source-code",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-multi-channel-transfer-confirm:surface-large-transfer",
      "source": "control-multi-channel-transfer-confirm",
      "target": "surface-large-transfer",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-multisig-threshold-policy:asset-treasury-funds",
      "source": "control-multisig-threshold-policy",
      "target": "asset-treasury-funds",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-offline-seed-custody:asset-seed-secrets",
      "source": "control-offline-seed-custody",
      "target": "asset-seed-secrets",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-offline-seed-custody:surface-seed-custody",
      "source": "control-offline-seed-custody",
      "target": "surface-seed-custody",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-peer-code-review:asset-source-code",
      "source": "control-peer-code-review",
      "target": "asset-source-code",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-phishing-resistant-mfa:component-identity-accounts",
      "source": "control-phishing-resistant-mfa",
      "target": "component-identity-accounts",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-phishing-resistant-mfa:surface-custodial-admin-access",
      "source": "control-phishing-resistant-mfa",
      "target": "surface-custodial-admin-access",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-prompt-input-constraint:component-ai-agent",
      "source": "control-prompt-input-constraint",
      "target": "component-ai-agent",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-published-recovery-address:asset-user-funds",
      "source": "control-published-recovery-address",
      "target": "asset-user-funds",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-published-recovery-address:component-multisig",
      "source": "control-published-recovery-address",
      "target": "component-multisig",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-published-security-contact:surface-researcher-inbound",
      "source": "control-published-security-contact",
      "target": "surface-researcher-inbound",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-registrar-hardening:asset-domain-control",
      "source": "control-registrar-hardening",
      "target": "asset-domain-control",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-safe-harbor-adoption:asset-user-funds",
      "source": "control-safe-harbor-adoption",
      "target": "asset-user-funds",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-signer-isolation:asset-signer-keys",
      "source": "control-signer-isolation",
      "target": "asset-signer-keys",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-signer-isolation:component-hardware-wallet",
      "source": "control-signer-isolation",
      "target": "component-hardware-wallet",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-simulate-before-sign:surface-transaction-signing",
      "source": "control-simulate-before-sign",
      "target": "surface-transaction-signing",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-test-transfer:surface-large-transfer",
      "source": "control-test-transfer",
      "target": "surface-large-transfer",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-tls-ssh-transit:surface-data-in-transit",
      "source": "control-tls-ssh-transit",
      "target": "surface-data-in-transit",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-tls-ssh-transit:surface-public-wifi",
      "source": "control-tls-ssh-transit",
      "target": "surface-public-wifi",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-treasury-classification:component-custodial-treasury",
      "source": "control-treasury-classification",
      "target": "component-custodial-treasury",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-treasury-registration:component-custodial-treasury",
      "source": "control-treasury-registration",
      "target": "component-custodial-treasury",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-vpn-on-untrusted-networks:surface-public-wifi",
      "source": "control-vpn-on-untrusted-networks",
      "target": "surface-public-wifi",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "protects:control-whitelist-and-delay:asset-treasury-funds",
      "source": "control-whitelist-and-delay",
      "target": "asset-treasury-funds",
      "type": "protects",
      "status": "proposed"
    },
    {
      "id": "responds-to:response-dns-hijack:threat-frontend-dns-hijacking",
      "source": "response-dns-hijack",
      "target": "threat-frontend-dns-hijacking",
      "type": "responds-to",
      "status": "proposed"
    },
    {
      "id": "responds-to:response-dprk-it-worker:threat-dprk-it-worker-infiltration",
      "source": "response-dprk-it-worker",
      "target": "threat-dprk-it-worker-infiltration",
      "type": "responds-to",
      "status": "proposed"
    },
    {
      "id": "responds-to:response-duress-event:threat-duress-coercion",
      "source": "response-duress-event",
      "target": "threat-duress-coercion",
      "type": "responds-to",
      "status": "proposed"
    },
    {
      "id": "responds-to:response-signer-compromise:threat-leadership-phishing",
      "source": "response-signer-compromise",
      "target": "threat-leadership-phishing",
      "type": "responds-to",
      "status": "proposed"
    },
    {
      "id": "responds-to:response-signer-compromise:threat-multisig-operational-failure",
      "source": "response-signer-compromise",
      "target": "threat-multisig-operational-failure",
      "type": "responds-to",
      "status": "proposed"
    },
    {
      "id": "responds-to:response-smart-contract-exploit:threat-smart-contract-exploits",
      "source": "response-smart-contract-exploit",
      "target": "threat-smart-contract-exploits",
      "type": "responds-to",
      "status": "proposed"
    },
    {
      "id": "responds-to:response-supply-chain-incident:threat-supply-chain-compromise",
      "source": "response-supply-chain-incident",
      "target": "threat-supply-chain-compromise",
      "type": "responds-to",
      "status": "proposed"
    },
    {
      "id": "responds-to:response-whitehat-rescue:threat-smart-contract-exploits",
      "source": "response-whitehat-rescue",
      "target": "threat-smart-contract-exploits",
      "type": "responds-to",
      "status": "proposed"
    },
    {
      "id": "responds-to:response-whitehat-rescue:threat-whitehat-legal-freeze",
      "source": "response-whitehat-rescue",
      "target": "threat-whitehat-legal-freeze",
      "type": "responds-to",
      "status": "proposed"
    },
    {
      "id": "targets:threat-blind-signing:asset-signer-keys",
      "source": "threat-blind-signing",
      "target": "asset-signer-keys",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-blind-signing:asset-treasury-funds",
      "source": "threat-blind-signing",
      "target": "asset-treasury-funds",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-blind-signing:asset-user-funds",
      "source": "threat-blind-signing",
      "target": "asset-user-funds",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-blind-signing:surface-transaction-signing",
      "source": "threat-blind-signing",
      "target": "surface-transaction-signing",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-cloud-plaintext-at-rest:asset-secrets-credentials",
      "source": "threat-cloud-plaintext-at-rest",
      "target": "asset-secrets-credentials",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-cloud-plaintext-at-rest:surface-cloud-data-at-rest",
      "source": "threat-cloud-plaintext-at-rest",
      "target": "surface-cloud-data-at-rest",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-custody-access-abuse:asset-treasury-funds",
      "source": "threat-custody-access-abuse",
      "target": "asset-treasury-funds",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-custody-access-abuse:component-custodial-treasury",
      "source": "threat-custody-access-abuse",
      "target": "component-custodial-treasury",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-custody-access-abuse:surface-custodial-admin-access",
      "source": "threat-custody-access-abuse",
      "target": "surface-custodial-admin-access",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-dprk-it-worker-infiltration:asset-secrets-credentials",
      "source": "threat-dprk-it-worker-infiltration",
      "target": "asset-secrets-credentials",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-dprk-it-worker-infiltration:asset-source-code",
      "source": "threat-dprk-it-worker-infiltration",
      "target": "asset-source-code",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-dprk-it-worker-infiltration:surface-contributor-hire-path",
      "source": "threat-dprk-it-worker-infiltration",
      "target": "surface-contributor-hire-path",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-dprk-it-worker-infiltration:surface-hiring-contractor-access",
      "source": "threat-dprk-it-worker-infiltration",
      "target": "surface-hiring-contractor-access",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-duress-coercion:asset-key-holder-safety",
      "source": "threat-duress-coercion",
      "target": "asset-key-holder-safety",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-duress-coercion:asset-seed-secrets",
      "source": "threat-duress-coercion",
      "target": "asset-seed-secrets",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-duress-coercion:asset-signer-keys",
      "source": "threat-duress-coercion",
      "target": "asset-signer-keys",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-duress-coercion:component-family-household",
      "source": "threat-duress-coercion",
      "target": "component-family-household",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-duress-coercion:surface-family-and-household",
      "source": "threat-duress-coercion",
      "target": "surface-family-and-household",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-duress-coercion:surface-physical-presence",
      "source": "threat-duress-coercion",
      "target": "surface-physical-presence",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-duress-coercion:surface-seed-custody",
      "source": "threat-duress-coercion",
      "target": "surface-seed-custody",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-frontend-dns-hijacking:asset-domain-control",
      "source": "threat-frontend-dns-hijacking",
      "target": "asset-domain-control",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-frontend-dns-hijacking:asset-user-funds",
      "source": "threat-frontend-dns-hijacking",
      "target": "asset-user-funds",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-frontend-dns-hijacking:surface-dns-records",
      "source": "threat-frontend-dns-hijacking",
      "target": "surface-dns-records",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-frontend-dns-hijacking:surface-frontend-deployment",
      "source": "threat-frontend-dns-hijacking",
      "target": "surface-frontend-deployment",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-governance-manipulation:asset-governance-authority",
      "source": "threat-governance-manipulation",
      "target": "asset-governance-authority",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-governance-manipulation:surface-governance-proposal",
      "source": "threat-governance-manipulation",
      "target": "surface-governance-proposal",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-infrastructure-compromise:asset-secrets-credentials",
      "source": "threat-infrastructure-compromise",
      "target": "asset-secrets-credentials",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-infrastructure-compromise:surface-cloud-admin-console",
      "source": "threat-infrastructure-compromise",
      "target": "surface-cloud-admin-console",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-infrastructure-compromise:surface-rpc-trust-boundary",
      "source": "threat-infrastructure-compromise",
      "target": "surface-rpc-trust-boundary",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-leadership-phishing:asset-signer-keys",
      "source": "threat-leadership-phishing",
      "target": "asset-signer-keys",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-leadership-phishing:component-founders-executives",
      "source": "threat-leadership-phishing",
      "target": "component-founders-executives",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-leadership-phishing:surface-custodial-admin-access",
      "source": "threat-leadership-phishing",
      "target": "surface-custodial-admin-access",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-leadership-phishing:surface-executive-communications",
      "source": "threat-leadership-phishing",
      "target": "surface-executive-communications",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-misdirected-transfer:asset-treasury-funds",
      "source": "threat-misdirected-transfer",
      "target": "asset-treasury-funds",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-misdirected-transfer:surface-ens-resolution",
      "source": "threat-misdirected-transfer",
      "target": "surface-ens-resolution",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-misdirected-transfer:surface-large-transfer",
      "source": "threat-misdirected-transfer",
      "target": "surface-large-transfer",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-monitoring-gaps:component-monitoring-stack",
      "source": "threat-monitoring-gaps",
      "target": "component-monitoring-stack",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-monitoring-gaps:surface-onchain-activity",
      "source": "threat-monitoring-gaps",
      "target": "surface-onchain-activity",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-multisig-operational-failure:asset-signer-keys",
      "source": "threat-multisig-operational-failure",
      "target": "asset-signer-keys",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-multisig-operational-failure:asset-treasury-funds",
      "source": "threat-multisig-operational-failure",
      "target": "asset-treasury-funds",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-multisig-operational-failure:surface-multisig-signing-workflow",
      "source": "threat-multisig-operational-failure",
      "target": "surface-multisig-signing-workflow",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-multisig-operational-failure:surface-signer-lifecycle",
      "source": "threat-multisig-operational-failure",
      "target": "surface-signer-lifecycle",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-on-path-interception:asset-secrets-credentials",
      "source": "threat-on-path-interception",
      "target": "asset-secrets-credentials",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-on-path-interception:surface-data-in-transit",
      "source": "threat-on-path-interception",
      "target": "surface-data-in-transit",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-on-path-interception:surface-public-wifi",
      "source": "threat-on-path-interception",
      "target": "surface-public-wifi",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-opsec-hygiene-failure:asset-secrets-credentials",
      "source": "threat-opsec-hygiene-failure",
      "target": "asset-secrets-credentials",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-opsec-hygiene-failure:surface-device-endpoint",
      "source": "threat-opsec-hygiene-failure",
      "target": "surface-device-endpoint",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-osint-targeting:asset-key-holder-safety",
      "source": "threat-osint-targeting",
      "target": "asset-key-holder-safety",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-osint-targeting:asset-personal-identifying-data",
      "source": "threat-osint-targeting",
      "target": "asset-personal-identifying-data",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-osint-targeting:component-founders-executives",
      "source": "threat-osint-targeting",
      "target": "component-founders-executives",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-plaintext-lost-device:asset-secrets-credentials",
      "source": "threat-plaintext-lost-device",
      "target": "asset-secrets-credentials",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-plaintext-lost-device:surface-endpoint-at-rest",
      "source": "threat-plaintext-lost-device",
      "target": "surface-endpoint-at-rest",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-prompt-injection:asset-secrets-credentials",
      "source": "threat-prompt-injection",
      "target": "asset-secrets-credentials",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-prompt-injection:asset-user-funds",
      "source": "threat-prompt-injection",
      "target": "asset-user-funds",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-prompt-injection:surface-agent-tool-path",
      "source": "threat-prompt-injection",
      "target": "surface-agent-tool-path",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-seed-phrase-compromise:asset-seed-secrets",
      "source": "threat-seed-phrase-compromise",
      "target": "asset-seed-secrets",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-seed-phrase-compromise:asset-signer-keys",
      "source": "threat-seed-phrase-compromise",
      "target": "asset-signer-keys",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-seed-phrase-compromise:surface-seed-custody",
      "source": "threat-seed-phrase-compromise",
      "target": "surface-seed-custody",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-server-readable-chat:asset-secrets-credentials",
      "source": "threat-server-readable-chat",
      "target": "asset-secrets-credentials",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-server-readable-chat:component-community-channels",
      "source": "threat-server-readable-chat",
      "target": "component-community-channels",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-server-readable-chat:surface-operator-messaging",
      "source": "threat-server-readable-chat",
      "target": "surface-operator-messaging",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-smart-contract-exploits:asset-treasury-funds",
      "source": "threat-smart-contract-exploits",
      "target": "asset-treasury-funds",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-smart-contract-exploits:asset-user-funds",
      "source": "threat-smart-contract-exploits",
      "target": "asset-user-funds",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-smart-contract-exploits:surface-active-exploit-window",
      "source": "threat-smart-contract-exploits",
      "target": "surface-active-exploit-window",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-smart-contract-exploits:surface-contract-external-calls",
      "source": "threat-smart-contract-exploits",
      "target": "surface-contract-external-calls",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-smart-contract-exploits:surface-contract-upgrade-path",
      "source": "threat-smart-contract-exploits",
      "target": "surface-contract-upgrade-path",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-social-engineering:asset-community-trust",
      "source": "threat-social-engineering",
      "target": "asset-community-trust",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-social-engineering:component-community-channels",
      "source": "threat-social-engineering",
      "target": "component-community-channels",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-social-engineering:surface-executive-communications",
      "source": "threat-social-engineering",
      "target": "surface-executive-communications",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-social-engineering:surface-large-transfer",
      "source": "threat-social-engineering",
      "target": "surface-large-transfer",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-spoofed-ens-resolution:asset-user-funds",
      "source": "threat-spoofed-ens-resolution",
      "target": "asset-user-funds",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-spoofed-ens-resolution:surface-ens-resolution",
      "source": "threat-spoofed-ens-resolution",
      "target": "surface-ens-resolution",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-stale-threat-model:asset-source-code",
      "source": "threat-stale-threat-model",
      "target": "asset-source-code",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-stale-threat-model:asset-user-funds",
      "source": "threat-stale-threat-model",
      "target": "asset-user-funds",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-stale-threat-model:surface-contract-upgrade-path",
      "source": "threat-stale-threat-model",
      "target": "surface-contract-upgrade-path",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-supply-chain-compromise:asset-deployment-authority",
      "source": "threat-supply-chain-compromise",
      "target": "asset-deployment-authority",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-supply-chain-compromise:asset-source-code",
      "source": "threat-supply-chain-compromise",
      "target": "asset-source-code",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-supply-chain-compromise:surface-ci-cd-secrets",
      "source": "threat-supply-chain-compromise",
      "target": "surface-ci-cd-secrets",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-supply-chain-compromise:surface-package-install",
      "source": "threat-supply-chain-compromise",
      "target": "surface-package-install",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-uncontactable-disclosure:asset-source-code",
      "source": "threat-uncontactable-disclosure",
      "target": "asset-source-code",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-uncontactable-disclosure:asset-user-funds",
      "source": "threat-uncontactable-disclosure",
      "target": "asset-user-funds",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-uncontactable-disclosure:surface-researcher-inbound",
      "source": "threat-uncontactable-disclosure",
      "target": "surface-researcher-inbound",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-unlimited-token-approval:asset-user-funds",
      "source": "threat-unlimited-token-approval",
      "target": "asset-user-funds",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-unlimited-token-approval:surface-token-approvals",
      "source": "threat-unlimited-token-approval",
      "target": "surface-token-approvals",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-whitehat-legal-freeze:asset-user-funds",
      "source": "threat-whitehat-legal-freeze",
      "target": "asset-user-funds",
      "type": "targets",
      "status": "proposed"
    },
    {
      "id": "targets:threat-whitehat-legal-freeze:surface-active-exploit-window",
      "source": "threat-whitehat-legal-freeze",
      "target": "surface-active-exploit-window",
      "type": "targets",
      "status": "proposed"
    }
  ],
  "taxonomies": {
    "domains": [
      {
        "id": "people",
        "title": "People",
        "summary": "Founders, signers, hires, and anyone who can be phished, coerced, or planted inside the team."
      },
      {
        "id": "devices-identity",
        "title": "Devices and identity",
        "summary": "Endpoints, accounts, authenticators, and the credentials that unlock everything else."
      },
      {
        "id": "development-supply-chain",
        "title": "Development and supply chain",
        "summary": "Source, dependencies, build systems, and the path from commit to deployed artifact."
      },
      {
        "id": "infrastructure",
        "title": "Infrastructure",
        "summary": "Cloud, networks, DNS, registrars, and the admin planes that host the product."
      },
      {
        "id": "onchain-systems",
        "title": "Onchain systems",
        "summary": "Contracts, upgrade paths, oracles, and other on-chain logic that moves value."
      },
      {
        "id": "governance-treasury",
        "title": "Governance and treasury",
        "summary": "Multisigs, proposals, councils, and the authority to spend or change the protocol."
      },
      {
        "id": "community-communications",
        "title": "Community and communications",
        "summary": "Public channels, support surfaces, and the trust people place in official messages."
      },
      {
        "id": "detection-incident-response",
        "title": "Detection and incident response",
        "summary": "Monitoring, alerting, runbooks, and the people who contain a live incident."
      }
    ],
    "roles": [
      {
        "id": "founder-executive",
        "title": "Founder / executive"
      },
      {
        "id": "engineer-developer",
        "title": "Engineer / developer"
      },
      {
        "id": "security-engineer",
        "title": "Security engineer"
      },
      {
        "id": "multisig-signer",
        "title": "Multisig signer"
      },
      {
        "id": "infrastructure-operator",
        "title": "Infrastructure operator"
      },
      {
        "id": "community-manager",
        "title": "Community manager"
      },
      {
        "id": "incident-responder",
        "title": "Incident responder"
      },
      {
        "id": "governance-participant",
        "title": "Governance participant"
      }
    ],
    "lifecycle": [
      {
        "id": "design",
        "title": "Design"
      },
      {
        "id": "development",
        "title": "Development"
      },
      {
        "id": "pre-launch",
        "title": "Pre-launch"
      },
      {
        "id": "normal-operations",
        "title": "Normal operations"
      },
      {
        "id": "upgrade",
        "title": "Upgrade"
      },
      {
        "id": "incident-response",
        "title": "Incident response"
      },
      {
        "id": "recovery",
        "title": "Recovery"
      }
    ],
    "nodeTypes": [
      {
        "id": "asset",
        "title": "Asset",
        "prefix": "asset"
      },
      {
        "id": "component",
        "title": "Component",
        "prefix": "component"
      },
      {
        "id": "attack-surface",
        "title": "Attack surface",
        "prefix": "surface"
      },
      {
        "id": "threat",
        "title": "Threat",
        "prefix": "threat"
      },
      {
        "id": "control",
        "title": "Control",
        "prefix": "control"
      },
      {
        "id": "response",
        "title": "Response",
        "prefix": "response"
      },
      {
        "id": "guidance",
        "title": "Guidance",
        "prefix": "guidance"
      },
      {
        "id": "incident",
        "title": "Incident",
        "prefix": "incident"
      }
    ],
    "edgeTypes": [
      {
        "id": "contains",
        "title": "contains",
        "direction": "source contains target"
      },
      {
        "id": "depends-on",
        "title": "depends on",
        "direction": "source depends on target"
      },
      {
        "id": "exposes",
        "title": "exposes",
        "direction": "source exposes target"
      },
      {
        "id": "targets",
        "title": "targets",
        "direction": "source threat targets target"
      },
      {
        "id": "mitigates",
        "title": "mitigates",
        "direction": "source control mitigates target threat"
      },
      {
        "id": "protects",
        "title": "protects",
        "direction": "source control protects target"
      },
      {
        "id": "detects",
        "title": "detects",
        "direction": "source control detects target"
      },
      {
        "id": "responds-to",
        "title": "responds to",
        "direction": "source response responds to target"
      },
      {
        "id": "documented-by",
        "title": "documented by",
        "direction": "source is documented by target guidance"
      },
      {
        "id": "demonstrated-by",
        "title": "demonstrated by",
        "direction": "source is demonstrated by target incident"
      },
      {
        "id": "evaluated-by",
        "title": "evaluated by",
        "direction": "source is in scope for target certification guidance"
      },
      {
        "id": "related-to",
        "title": "related to",
        "direction": "weak symmetric link; use only when a stronger edge is wrong"
      }
    ],
    "controlClasses": [
      {
        "id": "preventive",
        "title": "Preventive"
      },
      {
        "id": "detective",
        "title": "Detective"
      },
      {
        "id": "corrective",
        "title": "Corrective"
      },
      {
        "id": "recovery",
        "title": "Recovery"
      },
      {
        "id": "governance",
        "title": "Governance"
      }
    ],
    "severities": [
      {
        "id": "contextual",
        "title": "Contextual"
      },
      {
        "id": "low",
        "title": "Low"
      },
      {
        "id": "medium",
        "title": "Medium"
      },
      {
        "id": "high",
        "title": "High"
      },
      {
        "id": "critical",
        "title": "Critical"
      }
    ],
    "statuses": [
      {
        "id": "proposed",
        "title": "Proposed"
      },
      {
        "id": "reviewed",
        "title": "Reviewed"
      },
      {
        "id": "deprecated",
        "title": "Deprecated"
      }
    ]
  },
  "views": [
    {
      "id": "view-overview",
      "title": "Overview",
      "summary": "Start from the eight domains. Pick a domain, a saved view, or search.",
      "kind": "overview"
    },
    {
      "id": "view-secure-multisig",
      "title": "Secure a multisig operation",
      "summary": "Treasury and upgrade authority held by a multisig, the signing workflow, and the controls that keep signers from being the weak link.",
      "kind": "entry",
      "focusNodeId": "component-multisig",
      "visibleTypes": [
        "asset",
        "component",
        "attack-surface",
        "threat",
        "control",
        "response",
        "guidance"
      ]
    },
    {
      "id": "view-protect-deployment",
      "title": "Protect deployment authority",
      "summary": "Who can ship code or upgrade contracts, and the build path that has to stay trustworthy.",
      "kind": "entry",
      "focusNodeId": "asset-deployment-authority",
      "visibleTypes": [
        "asset",
        "component",
        "attack-surface",
        "threat",
        "control",
        "guidance"
      ]
    },
    {
      "id": "view-protect-domains-frontends",
      "title": "Protect domains and frontends",
      "summary": "Registrar, DNS, and frontend deployment integrity, where users actually connect their wallets.",
      "kind": "entry",
      "focusNodeId": "asset-domain-control",
      "visibleTypes": [
        "asset",
        "component",
        "attack-surface",
        "threat",
        "control",
        "response",
        "guidance"
      ]
    },
    {
      "id": "view-reduce-signer-compromise",
      "title": "Reduce signer compromise risk",
      "summary": "Phishing, malware, hiring, and device hygiene that turn a signer into an attacker-controlled key.",
      "kind": "entry",
      "focusNodeId": "asset-signer-keys",
      "visibleTypes": [
        "asset",
        "component",
        "attack-surface",
        "threat",
        "control",
        "response",
        "guidance"
      ]
    },
    {
      "id": "view-harden-supply-chain",
      "title": "Harden software supply chains",
      "summary": "Dependencies, CI/CD, and reproducible builds between a commit and what users run.",
      "kind": "entry",
      "focusNodeId": "component-dependency-graph",
      "visibleTypes": [
        "asset",
        "component",
        "attack-surface",
        "threat",
        "control",
        "response",
        "guidance"
      ]
    },
    {
      "id": "view-prepare-incident-response",
      "title": "Prepare for incident response",
      "summary": "Detection gaps, runbooks, and containment paths before an incident is live.",
      "kind": "entry",
      "focusNodeId": "component-monitoring-stack",
      "visibleTypes": [
        "asset",
        "component",
        "attack-surface",
        "threat",
        "control",
        "response",
        "guidance"
      ]
    },
    {
      "id": "view-constrain-ai-agents",
      "title": "Constrain an AI agent",
      "summary": "The agent tool path, prompt injection, and runtime allow/deny before an irreversible action.",
      "kind": "entry",
      "focusNodeId": "component-ai-agent",
      "visibleTypes": [
        "asset",
        "component",
        "attack-surface",
        "threat",
        "control",
        "guidance"
      ]
    },
    {
      "id": "view-resolve-ens-names",
      "title": "Resolve ENS before sending",
      "summary": "Human-readable names, L1 resolution, and normalization so a send does not go to a lookalike.",
      "kind": "entry",
      "focusNodeId": "surface-ens-resolution",
      "visibleTypes": [
        "asset",
        "component",
        "attack-surface",
        "threat",
        "control",
        "guidance"
      ]
    },
    {
      "id": "view-receive-vuln-reports",
      "title": "Receive a vulnerability report",
      "summary": "A monitored security contact and bounty path before a finding goes public or gets sold.",
      "kind": "entry",
      "focusNodeId": "surface-researcher-inbound",
      "visibleTypes": [
        "asset",
        "component",
        "attack-surface",
        "threat",
        "control",
        "response",
        "guidance"
      ]
    },
    {
      "id": "view-keep-threat-model-current",
      "title": "Keep the threat model current",
      "summary": "Named abuses and owners that get rewritten when architecture or value at risk changes.",
      "kind": "entry",
      "focusNodeId": "control-living-threat-model",
      "visibleTypes": [
        "asset",
        "component",
        "attack-surface",
        "threat",
        "control",
        "guidance"
      ]
    }
  ]
} as SecurityMapGraph