Governance Runtime Threats
ThreatCatalogv0.1.0draft
Threats against the Governance Runtime evaluation API and evidence record/report/aggregate behaviours.
Evaluation
Threats to correct evaluation of sensitive activities.
apa-runtime-bypass-evaluationEvaluation Bypass or Spoofed Decision
Description
An attacker or misconfigured Desktop Agent may bypass the evaluation API, spoof ALLOW outcomes, or call the runtime without authenticating, enabling consequential intents to proceed without policy checks.
Capabilities
apa-governance-runtime-capabilitiesapa-runtime-evaluateapa-runtime-authenticate-caller
apa-runtime-stale-or-wrong-modelStale or Wrong Governance Model Applied
Description
The runtime may evaluate against outdated, incomplete, or unintended Governance Model artifacts, producing incorrect ALLOW / DENY / REQUIRE APPROVAL decisions.
Capabilities
apa-governance-runtime-capabilitiesapa-runtime-informed-by-modelapa-runtime-evaluate
Evidence
Threats to evidence integrity and availability.
apa-runtime-evidence-gapEvidence Not Recorded or Incomplete
Description
Evaluation or enforcement outcomes may fail to be recorded, reported, or aggregated, leaving gaps in audit trails for authority decisions.
Capabilities
apa-governance-runtime-capabilitiesapa-runtime-record-evidenceapa-runtime-report-evidenceapa-runtime-aggregate-evidence