remove_entity
Soft-delete an asset, attacker, component, trust boundary, or assumption from a threat model. Preserves the ID for restore and applies per-type side effects.
Instructions
Soft-delete a single entity of any core type. Mutating: creates a
new model version. Reversible with restore_entity using the same
entity_type — the entity's ID is preserved (never reused) so a
restore reinstates the same ID and all its links. To change an
entity's fields instead of removing it, use the typed edit_* tool.
Dispatches on entity_type. Per-type consequence (all derived at
read time; nothing is hard-destroyed):
asset— the asset's (asset × attacker) CO pairs are tombstoned, orphaning any controls mapped to them.attacker— control objectives anchored to this attacker are tombstoned; controls left with no live anchor become orphaned.component— controls scoped to this component have theircomponent_idcleared (the controls themselves are kept) and the component's trust-boundary contribution to asset reachability is withdrawn.trust_boundary— reachability widens: attacker vectors the boundary was filtering now pass freely and itssealed/isolation claim is dropped, so CO reachability verdicts past it can flip toward reachable/indeterminate.assumption— marked deleted (kept for the audit trail); linked COs are no longer mitigated by it; controls withassumed_bypointing to it are preserved as inert pointers that reconnect on restore.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| model_id | Yes | ID of the threat model. | |
| entity_id | Yes | ID of the entity to soft-delete. | |
| entity_type | Yes | Which entity to soft-delete — one of ``asset``, ``attacker``, ``component``, ``trust_boundary``, ``assumption``. | |
| server_version | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||