refactor: make sdd-lab review-driven (WealthLedger/specs#66)
Specs security / security (push) Successful in 8s
Specs verify / verify (push) Successful in 10s

Replace executable schema checks with explicit review-driven readiness, add a requirement-writing profile, and incorporate review clarifications for source traceability and comparative validation.
This commit was merged in pull request #68.
This commit is contained in:
2026-10-30 13:35:39 +03:00
parent a2d2df3b5a
commit b9ec11f5ba
19 changed files with 982 additions and 851 deletions
@@ -1,7 +1,7 @@
# Security Analysis
<!-- guide: Threat model of this change only. Reference security NFR rows by id;
do not restate them. No generic checklist. Remove guides before G3. -->
<!-- Threat model только этого change. На security-NFR ссылайся по id, не
пересказывай. Без универсального чек-листа. -->
## Scope
@@ -11,16 +11,16 @@
## Threats
| ID | Threat (STRIDE) | Attack scenario | Asset / boundary | Existing control | Likelihood / impact |
| ID | Угроза (STRIDE) | Сценарий атаки | Актив / граница | Существующий контроль | Вероятность / ущерб |
| --- | --- | --- | --- | --- | --- |
## Recommended Mitigations
| Threat | Mitigation | Owner artifact (specs / system-analysis / design) |
| Угроза | Mitigation | Артефакт-владелец (specs / system-analysis / design) |
| --- | --- | --- |
## Residual Risks
## Validation Requirements
<!-- guide: Evidence needed before G4: review focus, negative tests, tooling. -->
<!-- Evidence, нужные до G4: фокус review, негативные тесты, инструменты. -->