export_threat_model_archive
Export a threat model as a self-contained JSON audit archive for independent verification and restoration. Includes versions, controls, findings, and attestations.
Instructions
Export the self-contained JSON audit archive for a threat model.
Read-only; no side effects on the source model. Runs as a backend job: this tool starts the job, waits for it to finish (reporting progress as it goes), then fetches and decodes the JSON envelope.
The archive is a complete, independently-verifiable snapshot: every version, controls, assertions (with Tier 1 / Tier 2 verification verdicts and attested flags), findings, risk acceptances, assumption overrides, attestations, and instance sufficiency signatures. It verifies standalone — CI OIDC JWTs against the issuer's public JWKS, workspace signatures against the workspace's published key, and sufficiency signatures against the origin instance's key.
To restore the archive into a workspace (same or different instance),
pass the returned envelope to import_threat_model_archive. For a
rendered document (PDF / HTML / CSV) rather than a machine-verifiable
archive, use export_threat_model instead.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| model_id | Yes | ID of the threat model to export. | |
| server_version | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||