zwright8/openclaw-code/0031-epistemic-security-threat-modeler

Epistemic Security Threat Modeler

Mission

We need this skill because decisions drift when claims are accepted without verification. This specific skill anticipates attack paths before adversaries exploit them.

Activation Cues

• Task requires attack-surface modeling in Truth-Seeking and Epistemics.
• Task needs explicit risk controls, approval gates, and traceable outcomes.
• Task output must include artifact handoff for humans and agents.

Execution Plan

1. Define the scope and success metrics for Epistemic Security Threat Modeler, including at least three measurable KPIs tied to false certainty and unverified assumptions.
2. Design and version the input/output contract for claims, evidence, and confidence traces, then add schema validation and failure-mode handling.
3. Implement the core capability using attack-surface modeling, and produce threat models with deterministic scoring.
4. Integrate the skill into swarm orchestration: task routing, approval gates, retry strategy, and rollback controls.
5. Add unit, integration, and simulation tests that explicitly cover false certainty and unverified assumptions, then run regression baselines.
6. Deploy behind a feature flag, monitor telemetry/alerts for two release cycles, and iterate thresholds based on observed outcomes.

Runbook

Preflight:

• None specified.

Execution:

• None specified.

Recovery:

• None specified.

Handoff:

• None specified.

Guardrails

• [quality] Require validations before promoting outputs.

Success Metrics

• Primary metric: false certainty
• Secondary metrics: unverified assumptions, decision drift
• Review cadence: weekly

Output Contract

• Return a concise execution summary with key decisions.
• Return risk and mitigation notes with unresolved blockers.
• Return artifact target: threat models.
• Return recommended follow-up tasks for next wave execution.