anti d09764beec docs(ttp): add TTP tagging design (order-of-work step 1) ...

Pre-implementation spec for the TTP-tagging worker. Defines the
ATT&CK-canonical vocabulary, schema (ttp_tag + ttp_rule[_state]),
bus topics, worker shape, lifter layering (rule-based v0,
behavioral/intel/email v0.5, sigma/biometric later), confidence
model, API surface, UI surface, observability, performance targets,
and a CDD plan (Appendix E) that splits contracts from tests with
xfail discipline so CI stays green between steps.

2026-05-01 06:02:56 -04:00

..

docs

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

profiles

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

api-audit.md

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

ast_graph.md

moved: AST graphs into develpment/ folder

2026-04-12 03:42:08 -04:00

BUG_FIXES.md

…

BUGS.md

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

CAMPAIGN_CLUSTERING.md

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

complete_execution_graph.md

moved: AST graphs into develpment/ folder

2026-04-12 03:42:08 -04:00

COVERAGE.md

…

DEBT.md

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

DEVELOPMENT_V2.md

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

DEVELOPMENT.md

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

docker-compose.otel.yml

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

EVENTS.md

…

execution_graphs.md

moved: AST graphs into develpment/ folder

2026-04-12 03:42:08 -04:00

FUTURE.md

…

HARDENING.md

…

ICS_SCADA.md

…

IDENTITY_RESOLUTION.md

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

IMAP_BAIT.md

…

mermaid.svg

moved: mermaid graph to development folder

2026-04-12 03:42:43 -04:00

nmap-output-post-fixes.txt

…

NOTES.md

…

postpostfixnmap.txt

chore: fix unused imports in tests and update development roadmap

2026-04-12 03:46:23 -04:00

REALISM_AUDIT.md

…

SIGNAL_CAPTURE_AUDIT.md

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

SMTP_RELAY.md

…

STATIC-TYPES.md

fix(types): P3 — annotate transport in all template protocol servers; 0 errors in templates/

2026-05-01 01:09:14 -04:00

THREAT_MODEL.md

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

TTP_TAGGING.md

docs(ttp): add TTP tagging design (order-of-work step 1)

2026-05-01 06:02:56 -04:00