git:20260519.dc15fe2 to git:20260615.7a62936

5 added, 2 removed. Audit A to A.

---

name: attack-resilience-scoring

- description: Compute overall resilience score (0.0-1.0) based on attack results, coverage, and vulnerability severity distribution.

+ description: Compute overall resilience score (0.0-1.0) based on attack results, coverage,

+ and vulnerability severity distribution.

execution: subagent

prompt: ./prompt.md

input: aggregated_findings (string), coverage_data (string)

- used-by: [red-teaming]

+ dependencies:

+ sops:

+ - spawn-agent

---

# Attack Resilience Scoring

Computes a quantitative resilience score for the artifact based on red team results.

## Execution

Subagent — spawned via subagent-spawning/spawn-agent.

## Why Subagent

Scoring requires calibrated judgment independent of attack or defense bias. The scorer must weigh findings objectively against coverage.

## Input

- **aggregated_findings**: Deduplicated vulnerability report from finding-aggregation

- **coverage_data**: What percentage of threat surfaces were tested, at what depth

## Output

- **resilience_score**: 0.0-1.0 overall score

- **dimension_scores**: Per-dimension breakdown (logical, empirical, methodological, practical)

- **confidence_in_score**: How much to trust the score given coverage gaps

- **verdict**: Pass/conditional-pass/fail with justification