This file is read by automated agents (security scanners, code analyzers, AI assistants) operating on this repository.
Security model: SECURITY.md -> THREAT_MODEL.md
This repository hosts the Apache Directory umbrella threat model, which
covers the shared identity-stack trust model across the project's components —
LDAP bind/ACI (ApacheDS), the LDAP API codec, Kerberos KDC (Kerby), Fortress
RBAC, SCIM (SCIMple), and MVCC storage (Mavibot) — with per-domain addenda.
Agents should consult SECURITY.md and the linked THREAT_MODEL.md before
reporting issues.