ilpanich / axiam / 39115760580
93%

DEFAULT BRANCH: main
Ran
Jobs 0
Files 0
Run time –
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
39115760580

push

github

claude 
docs(website): an 802.1X & RADIUS page, and the threat model's network-access details

The public site carried RADIUS only as one link on the PKI page: nothing
described the FreeRADIUS recipe, the D3/D4 profiles, network segments,
reply profiles, the write gate or the decision route that 1.1.0 ships.

Website documentation
- New page "802.1X & RADIUS" (Operate, after PKI): what AXIAM does and
  does not do, D3 vs D4, issuing and binding devices, one tenant per
  trust anchor, the FreeRADIUS settings that carry the security, the D3
  placement table keyed on the serial, the CRL fetch and the revocation
  lag, segments, the closed axiam-radius-reply/1 dictionary and the cap,
  placement and quarantine by deny-override, the network: permissions
  and the write gate, the twelve management routes plus decide, the
  decision route's caller, body, answers and limits, RadSec, operator
  responsibilities, the end-to-end coverage and the threat entries.
  Derived from docs/pki/freeradius.md, sdks/CONTRACT.md §36 and the
  OpenAPI document; links to them for anything normative.
- PKI page gains a card to it.

Threat model write-up (threat-modeling-and-security.md, security.ts)
- New "Network access (802.1X & RADIUS)" section under "How AXIAM
  defends each layer": the decision's caller, the single negative answer,
  the closed dictionary and FreeRADIUS's mapping, quarantine as a deny,
  the write gate, audit without personal data, and what the recipe's
  configuration carries — with the open residuals named.
- Assets: network policy and the FreeRADIUS decision credential, plus
  the SAML IdP signing key and SSF push credentials the STRIDE model
  already listed. The website table also gains the directory, SCIM and
  CIBA rows the write-up had and the page had dropped.

STRIDE model (threat-model-stride.md)
- §1 scope no longer says nothing in §5.10 exists: the recipe, the
  decision route and the network management API are named.
- §4: the NAS ↔ AXIAM row states... (continued)
Source Files on build 39115760580
Detailed source file information is not available for this build.