transilienceai/tpse-capability-packs - Page 2

normalize-delivery-receipts

Normalize Slack, Jira, ServiceNow, and internal work state into idempotent delivery artifacts. Use when a Delivery workflow needs the normalize stage.

package-outcome-delivery

Package a concise non-empty outcome delta with why, action, evidence link, run state, and next schedule. Use when a Delivery workflow needs the package stage.

access-policy-kb

Apply versioned least-privilege, MFA, segregation-of-duties, lifecycle, and exception knowledge. Use when a Identity Assurance workflow needs the know stage.

collect-identity-state

Collect identities, groups, roles, grants, sessions, MFA, lifecycle, and source coverage read-only. Use when a Identity Assurance workflow needs the collect stage.

model-access-paths

Model direct, inherited, cross-account, service, and privilege-escalation paths with evidence. Use when a Identity Assurance workflow needs the model stage.

normalize-identity-entitlements

Normalize principals, effective entitlements, trust, ownership, employment state, and review scope. Use when a Identity Assurance workflow needs the normalize stage.

package-access-assurance

Package review population, exceptions, risk, conclusions, decisions needed, and exact source traceability. Use when a Identity Assurance workflow needs the package stage.

perform-access-review

Produce review decisions with why, risk, recommendation, owner, confidence, and unresolved evidence. Use when a Identity Assurance workflow needs the decide stage.

assess-change-gaps

Identify missing change controls, coverage gaps, business risk, and the smallest defensible next action. Use when a Source Control workflow needs the decide stage.

collect-repository-state

Collect exact repository revisions, settings, protections, and change evidence without changing provider state. Use when a Source Control workflow needs the collect stage.

model-change-controls

Model effective review, protection, approval, and release paths at an exact revision. Use when a Source Control workflow needs the model stage.

normalize-change-evidence

Normalize provider-specific repository and pull-request observations into stable source-control artifacts. Use when a Source Control workflow needs the normalize stage.

package-source-control-evidence

Package concise source-control findings with revision, source, confidence, gaps, and control-ready evidence. Use when a Source Control workflow needs the package stage.

source-control-policy-kb

Apply versioned branch, review, change-management, and provenance expectations. Use when a Source Control workflow needs the know stage.

attack-technique-kb

Apply extensible attack primitives, techniques, tactics, prerequisites, consequences, and mitigations. Use when a Threat and Risk workflow needs the know stage.

collect-threat-intelligence

Collect hashed, fresh public and tenant-private threat observations with source and legal/coverage gaps. Use when a Threat and Risk workflow needs the collect stage.

model-attack-paths

Build and rank paths from observed entry points through identity, cloud, code, and data relationships to crown jewels. Use when a Threat and Risk workflow needs the model stage.

normalize-threat-observations

Normalize CVEs, techniques, actors, exposures, sources, confidence, and freshness without losing provenance. Use when a Threat and Risk workflow needs the normalize stage.

package-threat-risk

Package relevant threats, attack paths, risks, why, decisions, recommendations, unknowns, and verification. Use when a Threat and Risk workflow needs the package stage.

prioritize-risk-reduction

Rank risk reduction by business consequence, likelihood, evidence confidence, chains severed, effort, and residual uncertainty. Use when a Threat and Risk workflow needs the decide stage.