Illustrative view — your household's model runs locally on your devices. TargetProof keeps no copy.
Standard Edition — the on-device deliverable from the Family Threat Model engagement. Households and family offices map protection posture across people, institutions, and lifestyle using the 156-control Sanctuary Framework (NIST CSF 2.0: Govern → Recover). Everything runs on your devices. No cloud. No AI in this edition.
Discretion is not a feature. It is the foundation.
Released under the MIT License. You may use, modify, and distribute this software — including for commercial purposes — without royalties or compensation to TargetProof. Keep the copyright notice and license text with any copy you redistribute.
Read the full disclaimer before using this tool with clients or sensitive household data. The software is provided as-is, with no warranty and no guarantee of security outcomes.
- Practitioners delivering the Family Threat Model to client households
- Family offices and estate teams maintaining a living protection posture record
- Households that want the full Sanctuary Loop without AI or external data connectors
This repository ships the Standard Edition only: guided Assistant (rule-based, no language model), full control catalog, intake, threat spectrum, recommendations, and encrypted local storage.
AI Edition, Connected Edition, and fiduciary export integrations are not in this repo — they ship through TargetProof engagements and stewardship programs.
START.batOr:
powershell -ExecutionPolicy Bypass -File .\start.ps1Double-click START.command (first time: right-click → Open).
chmod +x start.sh start-server.sh
./start.shA local server opens at http://127.0.0.1:8765/unlock.html. Keep the terminal window open while working.
- Create a vault password (minimum 14 characters) — encrypts the assessment in this browser.
- Complete Overview with household name and scope.
- Work through the Sanctuary Loop: Intake → Spectrum → Controls → Roadmap → Review.
- Use Assistant for guided answers from your scored data.
| Section | Purpose |
|---|---|
| Overview | Household profile and Sanctuary Loop navigation |
| Intake | Properties, participants, travel, incidents, goals |
| Spectrum | NIST CSF mapping, FTC advisories, UHNWI threat patterns |
| Controls | 156 controls across Govern → Recover with gap scoring |
| Recommendations | Gaps linked to Sanctuary remediation services (optional, user-initiated) |
| Summary | Maturity dashboard, findings, 30 / 90 / 180-day roadmap |
| Review | Effectiveness and explicit residual-risk acceptance |
| Assistant | Guided Q&A from local model data only |
| Your Data | Encrypted export, import, lock, backups |
- On-device only — assessment data is encrypted in the browser vault (Web Crypto PBKDF2 + AES-GCM).
- No telemetry — TargetProof receives nothing from this tool.
- Optional encrypted backups —
.sanctuary.jsonexports with a separate passphrase. - Local HTTP server — binds to
127.0.0.1only; path traversal blocked. - Content Security Policy — scripts restricted to this origin.
Recommendation links open targetproof.com/model only when the user clicks them.
Use Your Data → Download Backup for a portable JSON export. For sensitive archives, use encrypted .sanctuary.json format with a dedicated export passphrase.
Publish the Standard Edition to ../targetproof-model:
.\publish-standard.ps1The guided assistant answers from your scored intake, controls, and summary using structured, rule-based analysis — no language model, no cloud, no external connectors.
v1.5 — Sanctuary Model · Standard Edition · TargetProof
Questions or practitioner inquiries: hello@targetproof.com