Skip to main content

APA Artifact Repository Threats Catalog

Threats to unauthorised modification, wrong-version evaluation, and model unavailability for the Artifact Repository.

ThreatCatalogv0.1.0draft
Threats to integrity, authenticity, and correct consumption of Governance Model artifacts hosted in the Artifact Repository.

Showing 3 of 3

Integrity and Authenticity

Risks to the published model set and its consumers.

apa-artifact-unauthorized-modifyUnauthorised Modification of Published Model
Description

An attacker or unauthorised publisher alters lexicon, guidance, or policy artifacts so evaluation outcomes no longer match approved governance.

Capabilities apa-artifact-repository-capabilities
  • apa-artifact-publish-model
  • apa-artifact-serve-model
apa-artifact-stale-or-wrong-versionRuntime Uses Stale or Wrong Model Version
Description

The Governance Runtime evaluates sensitive activities against an outdated, unpinned, or unintended model release, producing allow/deny decisions that diverge from the currently approved Governance Model.

Capabilities apa-artifact-repository-capabilities
  • apa-artifact-serve-model
  • apa-artifact-inventory

Availability

Risks that the runtime cannot obtain a valid model release.

apa-artifact-model-unavailableGovernance Model Unavailable to Runtime
Description

The Artifact Repository cannot serve a required model release, blocking informed evaluation or forcing unsafe fallback behaviour.

Capabilities apa-artifact-repository-capabilities
  • apa-artifact-serve-model