{
  "slug": "threat-model-file",
  "term": "Threat model file",
  "tools": [
    "zkao",
    "codex-security"
  ],
  "definition": "A scope document the tool reads before scanning (zkao's zkao.md, Codex Security's generated threat model) stating trust boundaries, adversaries and out-of-scope behaviour.",
  "detail": [
    "It is the single cheapest false-positive reducer on this index. Write it before the first scan."
  ],
  "page": "https://agentsast.com/glossary/threat-model-file/",
  "updated": "2026-09-13"
}