NP-200 system security design review
NimbusPump NP-200 Program · candidate AREV-0004 vs effective baseline DRB-0007
PRJ-2026-0042-DRV-0001Threat review
Threat workbench
EHR adapter verbose errors leak integration credentials
PRJ-2026-0042-TV-000140Dismissed
- Proposed (passed)
- Dismissed (blocked)
Proposed: verbose fault responses from the EHR integration adapter might echo connection strings or tokens to gateway logs.
Enrichment proposalConfidence low
Actor: Log reader on gateway host.
- Verbose fault mode enabled in production.
- Trigger integration fault.
- Read gateway log capture.
- Harvest echoed credential material.
No assessment yet: the threat is awaiting triage (dismissed).
- Responsible implementer
- Unassigned
- Accountable manager
- Unassigned
- Independent security reviewer
- Unassigned
- Risk owner
- Marcus Chen
- Target date
- Not set
- Disposition
- Dismissed by Marcus Chen, 16 Apr 2026
- Treatment adopted (pending)
- Implemented (pending)
- Evidence accepted (pending)
- Retest passed (pending)
- Closed (pending)
No remediation options recorded for this threat yet.
EvidenceNot requestedRetestNot scheduled
- Dismissed with rationaleMarcus Chen
- Proposed by enrichment (provenance retained)enrichment · Model enrich-m2 1.3; reviewer disposition required.