ilpanich / axiam / 36120912648

92%

push

github

docs(threat-model): the nine Phase 21 entries enter the Threat Dragon file — model 2.17.0

T-272 … T-280 lived in threat-model-stride.md since 2026-09-17 and in
Axiam.json never; the dogfooding wave allocated T-281 … T-288 past them.
Four elements join the OAuth2 diagram (/oauth2/register, the CIMD fetch,
the externally registered client rows, the per-tenant path issuers); the
four findings closed in #475/#476 enter as Mitigated with their commit.
The STRIDE document's §5.3 count line and §7 open columns are corrected
(13 open, not 17); threat-modeling-and-security.md's three coverage tables
are corrected to 288. The generator now prints 288 / 275 / 13; the generated
website files are regenerated in the beta17 website pass, with the prose.

Five flows were added rather than the four the plan's heading counts: its
list names five. The Data tier box grew in height to hold the new store; no
existing element's position changed. Threat Dragon was not opened — no
desktop was available in this session; gen-threat-model.mjs, the gate CI
has, read the file.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LBUGLzX7VKzcZGCTmfu2P6

3912 of 4321 branches covered (90.53%)

Branch coverage included in aggregate %.

92202 of 100255 relevant lines covered (91.97%)

760.21 hits per line