)]}'
{
  "commit": "cf6ee108254b24fa4d88a3746273446c7f29d002",
  "tree": "55519b1e7061a9fe017ffdec0e2d4bbace016d2f",
  "parents": [
    "fddd8be2c6efd87b47a188b1dcf182854ce7bef3"
  ],
  "author": {
    "name": "Charles S. Givre",
    "email": "cgivre@apache.org",
    "time": "Wed Oct 14 14:10:11 2026 -0400"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Wed Oct 14 14:10:11 2026 -0400"
  },
  "message": "[MINOR-UPDATE] Document staging-area precondition for CREATE FUNCTION / CREATE DAFFODIL SCHEMA USING JAR in threat model (#3091)\n\nBoth statements only register a jar already present in a staging area\non the cluster filesystem, so exploiting them requires filesystem write\naccess the model already treats as out of scope. Add a known\nnon-finding, operator guidance to restrict the staging directories,\nand update the Q4 status.",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d91288eb7b0b0ac828392892c69bba9e747e7280",
      "old_mode": 33188,
      "old_path": "THREAT_MODEL.md",
      "new_id": "260dda1d32a7f96c246c2c9c6211028835213897",
      "new_mode": 33188,
      "new_path": "THREAT_MODEL.md"
    }
  ]
}