tachi-risk-scoring

What problem does it solve?

Domain knowledge for quantitative risk scoring used by the risk-scorer agent to convert qualitative threat findings into data-backed risk scores, including four-dimensional scoring models, CVSS base vector mappings, composite score formulas, severity bands, and governance rules.

Core Features & Use Cases

• Reference tables and formulas for CVSS 3.1 base scoring, four-dimensional scoring model (CVSS, Exploitability, Scalability, Reachability), and governance field derivation.
• Supports deterministic risk scoring in automated pipelines and governance workflows for threat findings, architecture descriptors, and score governance.
• Use Case: When you feed threats.md and category defaults to the risk-scorer, you obtain full scores and governance fields for each finding, enabling traceable risk remediation.

Quick Start

Feed your threats model and category defaults to the risk-scorer to generate initial four-dimensional risk scores and governance fields for every finding.