1A Security Triad Assessment Record

# 1A Security Triad Assessment Record Supplementary record for: > Guckian, P. *Security Triad: Interface, Execution Pathway and Authority as > the Structural Conditions of Cyber-Mediated Operation.* Manuscript > COSE-D-26-05618, Computers & Security (under revision). This deposit holds the material a reader needs to dispute or re-analyse the paper's assessments case by case, and the pre-registered protocol for the reproducibility study the paper defers. ## Contents ``` protocol/SPECIFICATION_PROTOCOL.md rules R0 to R3, prohibited moves, assessment scheme, Interface nomination rule assessments/ one sheet per analysed mechanism (seven) fourth-role/CANDIDATES.md every candidate fourth structural role examined, with the Section 4.2 criterion applied h3-protocol/H3_REPRODUCIBILITY_PROTOCOL.md pre-registered inter-rater study h3-protocol/CODING_FORM.md analyst-facing materials (definitions and form only; the paper is withheld from analysts) h3-protocol/NEGATIVE_CONTROLS.md construction rules for the corpus negatives ``` The controlled single-mechanism ablation (paper Section 6.6) is deposited separately as the *Paper 1A H2 Ablation Harness*: pre-registration release v0.2.0 at https://doi.org/10.5281/zenodo.23619296, results release v1.0.0 at https://doi.org/10.5281/zenodo.23619886, all versions at https://doi.org/10.5281/zenodo.23619209. It derives from the *H4 Ablation Harness* (https://doi.org/10.5281/zenodo.22711457). ## How to use the assessment sheets Each sheet fixes the specification before any condition is assessed (R0 and R1), nominates the Interface by the rule in `protocol/`, then records each of Interface, Execution Pathway and Authority as present, absent or ambiguous with the evidence for that value and nothing else. Payload, delivery and provenance are recorded separately because they are not structural conditions. A reader who disagrees with a value should be able to point to the evidence line they dispute. ## Status of the record All assessments were made by the author. That is the limitation the reproducibility study exists to address, and nothing in this record should be read as independent confirmation. The record is deposited so that others can recode the same mechanisms under the same protocol. ## Licence Text and data: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). ## Author Paul Guckian, Independent Researcher, London, United Kingdom.