Playbook/Risks

Risk register

A live projection of every Risk node and its mitigations.

Forged ledger events

high

A visitor could write arbitrary events or claim curator identity.

Affects: event-ledger
Mitigations
  • Locked verdict schema + server-stamped actor
    Public writes accept verdicts on commit_<sha> only; actor set server-side; idempotent.

Cost-surface abuse

medium

Loops against the copilot or extractors could burn tokens and GitHub quota.

Affects: ask-copilot, ingest-extractor
Mitigations
  • Per-endpoint rate budgets
    Chat, ledger, extractors and CRM writes each carry a fixed per-minute budget.

Secret-shaped strings in commit messages

medium

Anyone who ever pushed can place text on a public surface.

Affects: ingest-extractor
Mitigations
  • Secret-shape redaction
    Commit messages and repo descriptions pass through redactSecrets before display.

LLM extractor drift

medium

Model updates may silently change extraction quality.

Affects: ingest-extractor
Mitigations
  • Human ratification gate
    Extracted facts stay pending until a verdict lands in the ingestion queue.