feat(lab2): Threagile threat model + secure variant + auth flow

[IamdLite]

Pull Request Template

Goal

Complete Lab 2 threat modeling submission with baseline STRIDE analysis, secure variant hardening, and bonus auth-focused threat model.

• Task 1 — Baseline risk table + top-5 with STRIDE mapping
• Task 2 — Secure variant + risk diff table
• Bonus — Auth-flow model + 3 auth-specific risks

Changes

• submissions/lab2.md — Complete submission with Task 1 (baseline STRIDE analysis), Task 2 (secure variant & diff), Bonus Task (auth-focused model)
• labs/lab2/threagile-model-secure.yaml — Hardened threat model with HTTPS, encrypted storage, DB access controls
• labs/lab2/threagile-model-auth.yaml — Focused authentication flow model with 4+ data assets and 5+ communication links

Testing

• Baseline run: docker run --rm -v $(pwd)/labs/lab2:/w threagile/threagile:0.9.1 -model-filename /w/threagile-model.yaml -output-folder /w/output/ -generate-report-pdf=true -generate-risks-json=true -generate-risks-diagram=true
• Secure variant run: Same command with -model-filename /w/threagile-model-secure.yaml -output-folder /w/output-secure/
• Auth model run: Same command with -model-filename /w/threagile-model-auth.yaml -output-folder /w/output-auth-new/
• Verification: Parsed risks.json to confirm counts match submission (baseline: 23, secure: 21, auth: 18)

Artifacts & Screenshots

(not all artefacts uploaded as per the report: strictly used submitting commands provided. So most of the files below are only available in the local repo)

• submissions/lab2.md — Final submission document

• labs/lab2/output/report.pdf — Baseline threat model report

• labs/lab2/output/risks.json — Baseline risks (23 total; Elevated 4, Medium 14, Low 5)

• labs/lab2/output-secure/report.pdf — Secure variant report

• labs/lab2/output-secure/risks.json — Secure risks (21 total; 2 risks mitigated)

• labs/lab2/output-auth-new/report.pdf — Auth-focused report

• labs/lab2/output-auth-new/risks.json — Auth risks (18 total)

• labs/lab2/output/data-flow-diagram.png — Baseline DFD

• labs/lab2/output-secure/data-flow-diagram.png — Secure DFD

• Title uses feat(lab2): threat-modeling style

• No secrets/large temp files committed

• submissions/lab2.md present