What is Threat model file? Definition and why it matters
========================================================

A scope document the tool reads before scanning (zkao's zkao.md, Codex Security's generated threat model) stating trust boundaries, adversaries and out-of-scope behaviour.

Detail: It is the single cheapest false-positive reducer on this index. Write it before the first scan.

Source page: https://agentsast.com/glossary/threat-model-file/
Compiled by: agentsast editors (https://agentsast.com/about/)
Last reviewed: 2026-09-13