slug: threatlocker
provider: ThreatLocker
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Software & Technology
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 1
edges:
- tag: Approval Request
  spec_file: threatlocker-approval-request-api-openapi.yml
  capability_id: BC-620
  capability_id_l1: BC-620
  capability_name: Cybersecurity Management
  confidence: 0.72
  evidence: POST .../ApprovalRequestPermitApplication 'Approve Permit Application Request'; POST .../ApprovalRequestPermitStorageApproval
    'Approve Storage Request'; 'Reject Approval Request'
  reason: Operations adjudicate end-user requests to permit an application or storage device under a Zero
    Trust allowlist — a security control exception/approval workflow. Clearly cybersecurity; the specific
    L2 (access management vs. security governance) is ambiguous so only L1 is asserted.