Add CRA/EN 18031 threat model: asset register, trust boundaries, security controls#1149

Open

spoorcc wants to merge 28 commits into

mainfrom

claude/threat-model-en18031-Sfmqp

Commits on Apr 30, 2026

Commits on May 1, 2026

Add .. pytm:: Sphinx directive for live threat-model rendering
claude
committed
Use OWASP/pytm master branch instead of PyPI wheel
claude
committed
Move trust boundaries and assumptions into pytm model; render via directive
claude
committed
Replace CONTROLS/GAPS dicts with Control dataclass; unify into one list
claude
committed
Add actors to pytm model and render via .. pytm:: :actors: directive
claude
committed
Move §7 security assumptions from static RST into pytm model
claude
committed
Add custom threat register with control linkage and diagram rendering
claude
committed
Make threat descriptions generic — remove tool-specific language
claude
committed
Fix LaTeX PDF build failure: wrap diagram directives in .. only:: html
claude
committed
Fix issues
spoorcc
committed
Simplify security.rst
spoorcc
committed
sphinx.ext.graphviz now registers graph first via Sphinx's API, then plantweb silently overwrites it at the docutils level (which is exactly what its own source comment says it does to avoid genera…
spoorcc
committed
fix(docs): render threat-model diagrams in PDF; fix table page-breaks
claude
committed
fix(docs): pre-render DFD to PNG; restore graphviz html fallback
claude
committed
feat(docs): add clickable cross-reference links between threats/controls/gaps
claude
committed
fix(docs): render DFD and seq via plantweb/plantuml.com in all builders
claude
committed
fix(docs): split diagram rendering — plantweb for HTML, image for LaTeX PDF
claude
committed

Commits on May 2, 2026