Repository navigation

Add a draft threat model and wire it for discoverability - #1242

Merged

pjfanning merged 13 commits into

apache:mainfrom

potiuk:asf-security/threat-model-2026-08-27

Sep 10, 2026

Merged

Add a draft threat model and wire it for discoverability#1242
pjfanning merged 13 commits into
apache:mainfrom
potiuk:asf-security/threat-model-2026-08-27

Commits on Sep 9, 2026
- Add a draft threat model and wire it for discoverability
  
  potiuk
  authored and
  pjfanning
  committed
  8fe967f
- Update THREAT_MODEL.md
  pjfanning
  committed
  79035be
- Answer Q1 and Q2, and record the defaults posture as §5b
  pjfanning
  committed
  15b258c
- Answer Q4-Q8, resolve Q9 against the source, correct the client-IP claim
  pjfanning
  committed
  bf6f3ec
- Answer Q9: Pekko HTTP registers no shutdown hook of its own
  pjfanning
  committed
  8c03a9d
- Answer Q10: three documents, each canonical for one thing
  pjfanning
  committed
  d4576a0
- Correct two §5/§9 claims against the source and answer Q3
  pjfanning
  committed
  f07f577
- Update the §12 note on #1217: reworked to a CoordinatedShutdown task
  pjfanning
  committed
  8416534
- Fold the reworked #1217 and #1218 into §5, §9 and Q3
  pjfanning
  committed
  b89f7f7
- Record the decoding limits that bound decompression bombs
  pjfanning
  committed
  b2c0159
- Re-pin the model to the rebased base and correct P2 against the render path
  pjfanning
  committed
  05511df
- Account for the rest of the fixes merged since the pin, and fix four citations
  pjfanning
  committed
  2d24669
- Close three gaps the open PRs exposed in the model
  pjfanning
  committed
  39cf30b