Skip to content

The TIDIR Golden Path: 15-Minute Architectural Orientation

Tier 1: Strategic Architecture · Audience: All Audiences · Normative Status: Informational / Guided Journey
Purpose: Provides a structured 5-step sequence to understand TIDIR from first principles to concrete threat assurance.


How to Read TIDIR

TIDIR is designed to be understood at multiple depths:

  • The 60-Second View: Available on the Homepage (Problem ➔ Operating Maxim ➔ Architecture-at-a-Glance ➔ 3 Tiers).
  • The 15-Minute Orientation (This Guide): A curated 5-step walkthrough establishing core architectural doctrine and system topology.
  • The Deep Reference & Interrogation: Direct exploration of the 11 Invariants, 4-Plane System Model, Capability Model, Assurance Map, and 21 ADRs.

The 5-Step Golden Path

Step 1: What is TIDIR?

  • Core Takeaway: SecOps is an asymmetric closed-loop control system. Probabilistic models propose; deterministic policy kernels authorize.
  • Reading Time: 3 minutes.

Step 2: The Architectural Constitution & 11 Invariants

  • Core Takeaway: Tenets of evidence preservation, evidential independence, least capability, and security-state monotonicity ( sn+1sn ).
  • Reading Time: 4 minutes.

Step 3: System Overview & The 4-Plane Model

  • Core Takeaway: Clear operational separation between the Telemetry Data Plane, Analytical Plane, Defence Control Plane (DCP), and Actuation Plane. Minimises the Trusted Computing Base (TCB).
  • Reading Time: 4 minutes.

Step 4: Capability & Enterprise Service Model

  • Core Takeaway: 41 atomic capabilities across 5 operational domains and 2 cross-cutting disciplines, backed by Reference Target SLOs.
  • Reading Time: 3 minutes.

Step 5: Target Threat Model & Assurance Case

  • Core Takeaway: Threat modelling TIDIR itself (T1–T6) and tracing threats to invariants, capabilities, and concrete validation evidence via the Assurance Case Map.
  • Reading Time: 3 minutes.

Begin the Tour

Start your journey with Step 1: What is TIDIR?.

Human-Led Architecture · AI-Supported · Apache-2.0 Licence · Live Commit: 1b5b76d