Answer Attacker Credentials
answer_attacker_credentialsRecords which credential classes an attacker holds in a behavioral threat model, creating a new model version and deriving attacker privileges from those holdings.
Instructions
Say which of the behavioural model's credential classes an attacker holds. Mutating; creates a model version.
Answer from what the code or the owner shows. Empty means it holds no
credential. Its privileges follow from what it holds, by rule: None
with none, High when a class may invoke an action that writes what
decides authority, Low otherwise; edit_attacker then refuses a
privileges change (409 privileges_from_holdings). A holder of a
per-tenant class is placed at every tenant-isolation boundary,
suggested. Refused with 422 unknown_class (a class the model does not
have), 409 closure_not_offered (get_behavioural_attackers reads
applies: false), 404 no_attacker.
A program's answer is a judgment. Unless the workspace's delegation
policy admits it, it is refused with 403 and an escalation_id and
parked for a person. Do not retry: report the escalation_id and poll
list_proposals.
Returns {model_id, model_version, applies, credential_classes, counts, attacker}: how many proposals, dismissals and questions the closure now
holds (read them with get_behavioural_attackers) and the attacker
as it now stands.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| model_id | Yes | ID of the threat model. | |
| attacker_id | Yes | The attacker (e.g. "T3"). | |
| server_version | Yes | ||
| credential_classes | No | Comma-separated class ids from ``credential_classes``; empty for none. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||