Get Design Leverage
get_design_leverageIdentify which design change removes the most critical and high-risk objectives from the threat model, so you can eliminate attacker positions by design before adding controls.
Instructions
Rank what eliminating each attacker position or asset BY DESIGN would remove from the matrix. Call this when deciding whether to change the design instead of implementing controls: it shows which single design change retires the most critical and high at-risk objectives. Read-only; no side effects.
Each row in ranked is an attacker or asset with the objectives its
removal would take out of the matrix (objectives_removed, broken
down by tier in removes), how many of those are currently at risk
(removes_at_risk / removes_at_risk_by_tier), and the controls
that would be retired. Rows are ranked by critical, then high, at-risk
objectives removed. design_move (a concrete change of design that
would eliminate the row) is filled only when include_design_moves
is true. To act on a row, raise a design_change proposal with
create_proposal; never apply a design change yourself.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| top | No | Number of rows to return. Default 5. | |
| model_id | Yes | ID of the threat model. | |
| server_version | Yes | ||
| include_design_moves | No | Also author a ``design_move`` per row. Default False. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||