microsoft/hve-core
Publicmirrored fromhttps://github.com/microsoft/hve-coreAvailable
docs/security/README.md
49lines · modecode
| 1 | --- |
| 2 | title: Security Documentation |
| 3 | description: Index of security documentation including threat model and assurance case for HVE Core |
| 4 | author: Microsoft |
| 5 | ms.date: 2026-01-23 |
| 6 | ms.topic: overview |
| 7 | keywords: |
| 8 | - security |
| 9 | - documentation |
| 10 | - index |
| 11 | estimated_reading_time: 2 |
| 12 | --- |
| 13 | |
| 14 | ## Overview |
| 15 | |
| 16 | This directory contains security documentation for HVE Core, demonstrating defense-in-depth security practices. |
| 17 | |
| 18 | ## Documents |
| 19 | |
| 20 | | Document | Description | |
| 21 | |----------------------------------|--------------------------------------------------------| |
| 22 | | [Threat Model](threat-model.md) | Comprehensive threat model and security assurance case | |
| 23 | | [SECURITY.md](../../SECURITY.md) | Vulnerability disclosure and reporting process | |
| 24 | |
| 25 | ## Security Posture |
| 26 | |
| 27 | HVE Core is an enterprise prompt engineering framework that: |
| 28 | |
| 29 | - Contains no runtime services or user data storage |
| 30 | - Operates as development-time tooling consumed by GitHub Copilot |
| 31 | - Relies on defense-in-depth with 18+ automated security controls |
| 32 | |
| 33 | The [threat model](threat-model.md) documents: |
| 34 | |
| 35 | - 36 threats across STRIDE, AI-specific, and Responsible AI categories |
| 36 | - Security controls mapped to each threat |
| 37 | - MCP server trust analysis |
| 38 | - Quantitative security metrics |
| 39 | - GSN-style assurance argument |
| 40 | |
| 41 | ## Related Resources |
| 42 | |
| 43 | - [Branch Protection](../contributing/branch-protection.md): Repository protection configuration |
| 44 | - [MCP Configuration](../getting-started/mcp-configuration.md): MCP server setup and trust guidance |
| 45 | - [GOVERNANCE.md](../../GOVERNANCE.md): Project governance and maintainer roles |
| 46 | |
| 47 | --- |
| 48 | |
| 49 | 🤖 *Crafted with precision by ✨Copilot following brilliant human instruction, then carefully refined by our team of discerning human reviewers.* |
| 50 | |