get_reachability_verdicts
Retrieve reachability verdicts for all live controls in a threat model, or a single control by ID. Deterministic derivation from model structure ensures reproducible audit results.
Instructions
Composer verdicts for every live CO on the model. Pass co_id
to retrieve a single verdict (skips the cross-CO loop).
Pure derivation over the model's structural primitives — components, asset.component_ids, trust_boundary.passes, attacker.trust_boundary_ids + attack_vector, and Assumption.exclusion predicates. NOT persisted on the CO. Re- running this call against the model JSON produces the same result every time — that's the verification an auditor performs.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| co_id | No | Optional CO id. When set, returns a single verdict; 404 if the CO doesn't exist or is tombstoned. | |
| model_id | Yes | ID of the threat model. | |
| server_version | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||