frameworks/docs/data/security-map/edges/structure.json at develop · security-alliance/frameworks · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
{
  "edges": [
    {
      "source": "asset-treasury-funds",
      "target": "component-multisig",
      "type": "contains",
      "rationale": "Protocol treasuries in this model are held by the protocol multisig."
    },
    {
      "source": "asset-governance-authority",
      "target": "component-governance-module",
      "type": "contains"
    },
    {
      "source": "asset-governance-authority",
      "target": "component-multisig",
      "type": "contains",
      "rationale": "Upgrade and pause authority often sit on the same privileged multisig as treasury."
    },
    {
      "source": "component-multisig",
      "target": "component-signers",
      "type": "contains"
    },
    {
      "source": "component-frontend",
      "target": "component-dns-registrar",
      "type": "depends-on"
    },
    {
      "source": "component-frontend",
      "target": "component-ci-cd",
      "type": "depends-on"
    },
    {
      "source": "component-ci-cd",
      "target": "component-dependency-graph",
      "type": "depends-on"
    },
    {
      "source": "component-ci-cd",
      "target": "component-identity-accounts",
      "type": "depends-on"
    },
    {
      "source": "component-multisig",
      "target": "component-signers",
      "type": "depends-on"
    },
    {
      "source": "component-smart-contracts",
      "target": "component-multisig",
      "type": "depends-on",
      "rationale": "Upgradeable contracts typically grant admin to a protocol multisig."
    },
    {
      "source": "component-monitoring-stack",
      "target": "component-rpc-endpoints",
      "type": "depends-on"
    },
    {
      "source": "component-cloud-infrastructure",
      "target": "component-identity-accounts",
      "type": "depends-on"
    },
    {
      "source": "component-smart-contracts",
      "target": "surface-contract-external-calls",
      "type": "exposes"
    },
    {
      "source": "component-smart-contracts",
      "target": "surface-contract-upgrade-path",
      "type": "exposes"
    },
    {
      "source": "component-multisig",
      "target": "surface-multisig-signing-workflow",
      "type": "exposes"
    },
    {
      "source": "component-signers",
      "target": "surface-signer-lifecycle",
      "type": "exposes"
    },
    {
      "source": "component-hiring-pipeline",
      "target": "surface-hiring-contractor-access",
      "type": "exposes"
    },
    {
      "source": "component-founders-executives",
      "target": "surface-executive-communications",
      "type": "exposes"
    },
    {
      "source": "component-cloud-infrastructure",
      "target": "surface-cloud-admin-console",
      "type": "exposes"
    },
    {
      "source": "component-rpc-endpoints",
      "target": "surface-rpc-trust-boundary",
      "type": "exposes"
    },
    {
      "source": "component-dns-registrar",
      "target": "surface-dns-records",
      "type": "exposes"
    },
    {
      "source": "component-frontend",
      "target": "surface-frontend-deployment",
      "type": "exposes"
    },
    {
      "source": "component-dependency-graph",
      "target": "surface-package-install",
      "type": "exposes"
    },
    {
      "source": "component-ci-cd",
      "target": "surface-ci-cd-secrets",
      "type": "exposes"
    },
    {
      "source": "component-developer-devices",
      "target": "surface-device-endpoint",
      "type": "exposes"
    },
    {
      "source": "component-governance-module",
      "target": "surface-governance-proposal",
      "type": "exposes"
    },
    {
      "source": "component-monitoring-stack",
      "target": "surface-onchain-activity",
      "type": "exposes"
    },
    {
      "source": "component-signers",
      "target": "surface-physical-presence",
      "type": "exposes"
    }
  ]
}