forge-armour

Harden an audited Forge spec corpus by performing security posture analysis across project, module, and atom levels. The process maps risks to concrete spec changes, proposes controls, and writes only approved changes to enforce explicit security postures.

Security posture analysis reviews audited specifications to build a security profile and map identified risks to concrete spec changes. It ensures requirements for trust models, data handling, authentication, authorization, abuse resistance, and incident response are explicitly satisfied.

Ensure human approval for spec mutations by using a hardening process that guards against silent changes and writes only approved Armour changes. This guarantees no specification is altered without explicit human authorization during security posture improvements.

Apply security hardening across project, module, and atom levels for comprehensive coverage. The analysis builds a security profile and guides security posture improvements at each level, ensuring trust boundaries and robust policies are enforced throughout the spec corpus.

Run an audit before hardening because the security posture analysis is applicable after forge-audit. The hardening process relies on an audited Forge spec corpus to accurately map risks to spec changes and propose effective controls.

Spec hardening covers requirements for explicit trust models, data handling, authentication and authorization coverage, abuse resistance, incident response, and durability artifacts. It maps these requirements to concrete spec changes within the audited corpus.