Add a draft threat model and wire it for discoverability - #1242

Open

potiuk wants to merge 9 commits into

apache:mainfrom

potiuk:asf-security/threat-model-2026-08-27

Commits on Aug 30, 2026

Add a draft threat model and wire it for discoverability

potiuk
authored and
pjfanning
committed
444d939
Update THREAT_MODEL.md
pjfanning
committed
2d43a3b
Answer Q1 and Q2, and record the defaults posture as §5b
pjfanning
committed
a6d7a2d
Answer Q4-Q8, resolve Q9 against the source, correct the client-IP claim
pjfanning
committed
3c5559c
Answer Q9: Pekko HTTP registers no shutdown hook of its own
pjfanning
committed
0459904
Answer Q10: three documents, each canonical for one thing
pjfanning
committed
57dbfaf

Commits on Aug 31, 2026