Merge pull request #1 from laugiov/feat/threat-modeling

Add initial threat model documentation for SkyLink platform using STR…

Author: laugiov

.gitignore

@@ -58,8 +58,9 @@ cosign-keys/
 .DS_Store
 Thumbs.db
 
-# local files
+# Local development files (internal planning, specs, progress tracking)
 local/*
+.local/
 
 # SQLite databases
 *.db

README.md

@@ -294,6 +294,8 @@ skylink/
 
 | Document | Description |
 |----------|-------------|
+| [docs/THREAT_MODEL.md](docs/THREAT_MODEL.md) | STRIDE-based threat analysis and risk assessment |
+| [docs/SECURITY_ARCHITECTURE.md](docs/SECURITY_ARCHITECTURE.md) | Data flow diagrams, trust boundaries, security controls |
 | [docs/DEMO.md](docs/DEMO.md) | Step-by-step demonstration walkthrough |
 | [docs/TECHNICAL_DOCUMENTATION.md](docs/TECHNICAL_DOCUMENTATION.md) | Complete technical documentation (architecture, security, RRA) |
 | [docs/GITHUB_CI_SETUP.md](docs/GITHUB_CI_SETUP.md) | GitHub Actions CI/CD setup guide (secrets, variables, workflow) |
@@ -334,7 +336,7 @@ poetry run pytest
 
 ## Security Controls Implemented
 
-- [x] **Threat Modeling** — RRA document in `/docs/`
+- [x] **Threat Modeling** — STRIDE analysis in [docs/THREAT_MODEL.md](docs/THREAT_MODEL.md)
 - [x] **Strict Input Validation** — Pydantic `extra="forbid"`, reject unknown fields
 - [x] **JWT RS256 Authentication** — Short TTL (15 min), audience validation
 - [x] **mTLS Cross-Validation** — Certificate CN must match JWT subject

docs/DEMO.md

@@ -616,4 +616,15 @@ Jobs:
 
 ---
 
-**SkyLink Demonstration Guide** (with Supply Chain Security)
+## Security Documentation
+
+For a complete understanding of the security posture:
+
+| Document | Description |
+|----------|-------------|
+| [THREAT_MODEL.md](THREAT_MODEL.md) | STRIDE-based threat analysis covering 30+ threats |
+| [SECURITY_ARCHITECTURE.md](SECURITY_ARCHITECTURE.md) | Data flow diagrams with trust boundaries |
+| [TECHNICAL_DOCUMENTATION.md](TECHNICAL_DOCUMENTATION.md) | Complete technical documentation with RRA compliance |
+
+---
+