Skip to content

v0.1.0 — Initial release

Latest

Choose a tag to compare

@cjcsecurity cjcsecurity released this 08 May 03:49
· 6 commits to main since this release

First public release.

What's in this release

  • /tabletop-exercise — generates a complete tabletop exercise package tailored to the project in the cwd. Surveys README, manifests, IaC, and CI/CD configs to pick scenarios matching your actual stack. Produces facilitator runbook, participant packet, timed inject deck, fillable forms, and an interactive single-file HTML runbook with live exercise timer, per-inject reveal overlays, decision-log auto-timestamping, localStorage form persistence, and JSON export.
  • /tabletop-aar — companion skill that ingests filled forms (or the HTML's JSON export) and drafts a structured After-Action Report. Audience-tuned register (internal / leadership / regulator / board), severity-rubric P0/P1/P2 action items, blameless framing.

Coverage

  • 9 domains: cybersecurity, product security, DevOps/SRE, privacy/compliance, data/ML, platform, mobile, AI safety, business continuity
  • 54 scenarios across all domains, with stack-relevance hints and framework mappings
  • 38 inject archetypes + 28 NPC personas for vivid, branchable exercise design
  • 7 compliance frameworks with optional --frameworks tagging: NIST CSF 2.0, SOC 2, PCI DSS v4, ISO 27001:2022, HIPAA, GDPR, MITRE ATT&CK

Try it

See INSTALL.md for full options including project-local install and symlink-from-source workflow.