Build a surface map
A surface is a workspace-scoped security area linked to a resource. Root surfaces can have child surfaces. Beale records a threat-model foundation: attacker control, trust boundaries, assets at risk, assumptions, known bug history, mapping state, and open questions. The workspace Surfaces view displays the map and each surface's current coverage state.
Coverage has explicit requirements. Missing foundation, incomplete mapping, unexplored sinks or connections, open questions, unblocked findings, and incomplete child surfaces keep a surface from being marked covered. A progress blocker is visible separately.
- Open the workspace Surfaces view and select a resource-linked surface.
- Read its threat model, open questions, children, and coverage gaps.
- Use a Session or Track to test a concrete attacker path, then attach canonical evidence references.
- Return to the surface to review remaining requirements and the next action.