NP-200 system security design review
NimbusPump NP-200 Program · candidate AREV-0004 vs effective baseline DRB-0007
PRJ-2026-0042-DRV-0001Threat review
History
Baselines, decisions and the append-only event stream for this review.
- Architecture revision
- AREV-0003
- Risk method
- RM-5x5 v2.0
- Ruleset
- STRIDE-RS 3.2.1
- Knowledge release
- KBR-2026-01
- Approvals
- 7 decisions (1 with dissent)
- Tracked actions
- 2 open
- Normalized architecture modelAREV-0003sha256:2b8e41...c9a0
- Source intake manifest4 sources (SRC-0001 rev G lineage)sha256:77d1f0...4e2b
- Threat model register12 threats as-of 18 Feb 2026sha256:c31d95...08aa
- Risk assessment setMethod RM-5x5 v2.0 / matrix MTX-2025-02sha256:e09b12...7f61
- Remediation decision registerIncl. REM-105 adoptionsha256:1a45c8...b3d7
- Approval decisions + dissent recordAPR-000091..097sha256:8d20e6...55c4
- Architecture revision
- AREV-0002
- Risk method
- RM-5x5 v2.0
- Ruleset
- STRIDE-RS 3.2.0
- Knowledge release
- KBR-2026-01
- Approvals
- 3 decisions (0 with dissent)
- Tracked actions
- None
- Normalized architecture modelAREV-0002sha256:90cc17...2ab8
- Threat model register11 threats as-of 28 Jan 2026sha256:5f02d3...91be
Event stream
- Readiness evaluation: 2 blocking failures (DR-RUL-002, DR-RUL-004), 1 advisory warning (DR-RUL-009).Architecturesystem · architecture.validation_completed.v1 · cor-01JX2X9Z2A
- REM-216 deferred with interim control; REM-218 rejected; REM-219 adopted.RemediationDana Whitfield · remediation.decision_changed.v1 · cor-01JX2V5W8Y
- REM-201/202 adopted primary, REM-203 adopted defense-in-depth for TV-000118; obligations VOB-000211/212/213 created.RemediationTomas Novak · remediation.decision_changed.v1 · cor-01JX2T1U4W
- RSK-000126 manual band override (Medium 9 -> High) independently approved; calculation history retained.RiskPriya Raman · risk.assessment_changed.v1 · cor-01JX2R8S0V
- Triage wave 1 complete: 10 threats confirmed, 1 dismissed with individual rationale (TV-000140), 1 marked out of scope (TV-000144); TV-000141/142/143 remain proposed for wave 2.ThreatMarcus Chen · threat.disposition_changed.v1 · cor-01JX2P4Q6T
- Run TMR-0009 (STRIDE-RS 3.4.0): 11 deterministic candidates; enrichment proposed 3 more with provenance. Idempotency keys verified against run TMR-0008: no duplicates created.Threatsystem · threat.candidates_generated.v1 · cor-01JX2M9N3R
- Candidate revision AREV-0004 confirmed (15 elements, 12 flows, 3 zones, 3 boundaries).ArchitecturePriya Raman · architecture.revision_confirmed.v1 · cor-01JX2K7M1P
- SRC-0005 LegacyDataFlows.pdf partial parse: 6 OCR proposals below confidence threshold; MAPPING_REQUIRED.Architecturesystem · architecture.parse_completed.v1 · cor-01JX2H4V7N
Events by category
Review4
Architecture7
Threat2
Risk1
Remediation2
Verification1
| Category | Value | Share |
|---|---|---|
| Review | 4 | 24% |
| Architecture | 7 | 41% |
| Threat | 2 | 12% |
| Risk | 1 | 6% |
| Remediation | 2 | 12% |
| Verification | 1 | 6% |