Section 3 · Workflow V1

Methodology workflow (14 steps)

Authoritative execution sequence from Grok-Bot Workflow V1. Do not merge, split, or reorder these steps. Two control structures are part of the methodology: the Step 13 → Step 7 revision loop, and the Step 14 hierarchical recurse.

Tier-1 architecture — Capability requirements → Tier-1 Systems and Connections. Tools: Requirements, Connection, Navigator, GUI.
Allocate & join — Requirements onto Interface / Function / Element; join Interfaces to Connections. Tools: Requirements, Connection, Navigator, Flow (participates).
Asset identification — Assets, Regime, Criticality, Assurance. Tool: Asset Manager.
State behavior — States and transitions; VALID_IN edited in Context. Tools: State, Context.
Environment & threats — Environments, valid States, reference threat research. Tools: Context, Reference.
Hazard analysis — Hazards from the threat environment. Tools: Context, Reference.
Functional Flow / STPA — Functional Flow and STPA Control Flow; feedback / process-model requirements. Tools: Flow, Requirements. Re-entry point from Step 13.
Controls — Tailor Security Controls Baseline; map to SecurityControl; realizing requirements. Tools: Controls, Reference, GUI.
Validation criteria — Satisfaction of Control “must” statements; Verification; Purpose-level Validation. Tools: Controls, Requirements, GUI.
State-Trace — HOLDS / TRANSPORTS / USES matrix per Asset Assurance. Tool: Trace.
Attacks — Actionable Attacks on susceptible entities. Tools: Attack, Reference.
Loss / Attack Tree — Structured Attack Trees per Loss. Tool: Loss.
GSN argument — Goal Keeper assurance case; if not credible, revise and return to Step 7. Tool: Goal Keeper.
Hierarchical decompose — Element parents a child System; repeat Steps 1–13. See Decompose.

Step × Tool matrix (summary)

P = primary · p = participates · G = GUI Main Panel / Data Drawer.

Step	Nav	Req	Conn	Asset	State	Ctx	Ref	Flow	Ctrl	Trace	Atk	Loss	GK	GUI
1 Architecture	P	P	P											G
2 Allocate / join	p	P	P					p
3 Asset ID				P										p
4 State					P	p
5 Environment						P	P
6 Hazard						P	p
7 Flow / STPA		p						P
8 Controls							p		P					p
9 Validation		P							P					G
10 Trace				p	p					P
11 Attack							p			p	P
12 Loss					p	p				p	p	P
13 GSN		p*						p*				p*	P
14 Decompose	P	P		P										G

* Step 13 participation of Loss, Requirements, and Flow applies when the GSN argument is not credible and the inner loop fires.