set_mitigation_groups
Assign mitigation groups for a control objective to define alternate AND/OR paths, replacing all current group mappings. Optionally include defense-in-depth control IDs.
Instructions
Declaratively set the mitigation-group structure for a control objective. Mutating; runs as a polled background job (an LLM sufficiency check evaluates whether the new structure satisfies the CO) and returns once complete.
Replaces ALL mitigation-group assignments for this CO. Call
get_mitigation_groups first to see the current structure and the
unmapped controls available for assignment.
Mitigation groups define alternative paths to satisfy a CO:
Within a group: AND — all controls must be implemented.
Across groups: OR — any one complete group mitigates the CO.
Defense-in-depth: tracked but not required for mitigation.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| co_id | Yes | ID of the control objective (e.g., "CO5"). | |
| groups | Yes | JSON object mapping group numbers to control-ID lists. Example: '{"1": ["CTRL-01", "CTRL-02"], "2": ["CTRL-03"]}'. | |
| model_id | Yes | ID of the threat model. | |
| justification | No | Why this group structure is appropriate (min 10 chars). | |
| server_version | Yes | ||
| defense_in_depth | No | Comma-separated control IDs tracked as defense-in-depth (not required for mitigation). Example: "CTRL-04,CTRL-05". |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||