Skip to content

feat(stpa): AI-in-the-loop safety and security analysis#148

Merged
avrabe merged 1 commit intomainfrom
feat/ai-stpa
Apr 14, 2026
Merged

feat(stpa): AI-in-the-loop safety and security analysis#148
avrabe merged 1 commit intomainfrom
feat/ai-stpa

Conversation

@avrabe
Copy link
Copy Markdown
Contributor

@avrabe avrabe commented Apr 14, 2026

Summary

STPA + STPA-Sec addressing the circular trust problem of AI-assisted
development of a qualification tool. 20 new safety artifacts.

Key: This analysis is AI-generated (SH-AI-001) and must be human-reviewed.

Implements: REQ-002

🤖 Generated with Claude Code

STPA + STPA-Sec for circular trust problem: AI builds the tool AND
writes the safety analysis that certifies it.

Safety: 3 losses, 6 hazards, 6 constraints
- H-AI-001: AI writes test that validates the bug
- H-AI-005: Human review degrades with AI output volume
- SC-AI-001: proptest/Kani provide independent verification
- SC-AI-002: STPA must be human-reviewed, not auto-approved

Security: 3 losses, 2 hazards, 3 constraints
- SH-AI-001: Self-referential blind spot (this file is AI-generated)
- SSC-AI-001: AI safety artifacts must be draft until human-reviewed

NOTE: This analysis is itself AI-generated and must be treated as
a starting point for human review, not authoritative evidence.

Implements: REQ-002

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@avrabe avrabe merged commit fa8eb71 into main Apr 14, 2026
13 checks passed
@avrabe avrabe deleted the feat/ai-stpa branch April 14, 2026 03:55
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 14, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant