This is great to see. For those who don't know, this is an "assurance case" (definition: "a body of evidence organized into an argument demonstrating that some

This is great to see. For those who don't know, this is an "assurance case" (definition: "a body of evidence organized into an argument demonstrating that some claim about a system holds, i.e., is assured") - https://www.us-cert.gov/bsi/articles/knowledge/assurance-cases/arguing-security-creating-security-assurance-cases https://www.us-cert.gov/bsi/articles/knowledge/assurance-cas... I'm glad to see more assurance cases. You can't just do one thing and have a secure system. And if you want people to trust you, you need to give them a reason to trust. The CII best practices badge ( https://bestpractices.coreinfrastructure.org https://bestpractices.coreinfrastructure.org ) also has an assurance case; details at https://github.com/linuxfoundation/cii-best-practices-badge/blob/master/doc/security.md https://github.com/linuxfoundation/cii-best-practices-badge/... . If you want to help us make that better, let us know!