# Who are you protecting against? Draw the security line where the attacker is, not above it: what changed in v1.1.0, sgit.ai > The changes to the article "Who are you protecting against? Draw the security line where the attacker is, not above it" in v1.1.0, paragraph by paragraph. *Source: · site v0.7.38 · this file is generated from the same content as the page, so the two cannot drift. Every page on this site has a `.md` twin; internal links below point at them.* --- [Home](../../../index.md) / [Articles](../../index.md) / [Who are you protecting against? Draw the security line where the attacker is, not above it](../../who-are-you-protecting-against.md) / [Versions](../who-are-you-protecting-against.md) / v1.1.0 # Who are you protecting against? Draw the security line where the attacker is, not above it: what changed in v1.1.0 From v1.0.0 (2026-10-08, `a23144066`) to v1.1.0 (2026-10-10, `ed8f0cd7f`), paragraph by paragraph. 0 paragraphs added, 0 removed, 3 changed in place, 58 unchanged. About 3 words added and 32 removed. Insertions are marked like this, deletions like this; unchanged runs are folded to one line; figures appear as their file names. [all versions](../who-are-you-protecting-against.md) 2 unchanged paragraphs !shot ts-ladder.webp | images/ | Six tiers of attacker, from your own mistakes to elevated threats, with what stops each, and where the eight fictional startups in the vault set their ceiling.each. Most of themstartups plan for everything up to organised crime for money, and write down what they accept above it. 41 unchanged paragraphs, under In short, A Mac mini that will never touch the internet, Three questions before any control… | StartupFictional| What it isstartup | Ceiling | Why | |---|---|---|---||---|---|---|| Courtside | A booking app for padel clubs | T1 | Member contact details; nothing that pays a ransom | | Ledgerlight | AI bookkeeping reading bank feeds | T3 | Financial data and live tokens: ransomware and extortion | | Quietroom | Session notes for independent therapists | T3, with T4 for insiders | The harm is to patients; the 2020 Vastaamo case shows how | | Benchbox | The Mac mini at an accounting firm | T3 | Ransomware starts at the staff laptops | | Courtfile | Document review for law firms in disputes | T4 | Hack-for-hire against litigants is documented | | Gridwise | Energy monitoring with optional control | T3 | Keep the dangerous capability off by default | | Openshelf | A popular open-source library | T5 | The target is everyone downstream; the xz Utils backdoor is the precedent | | Sovra | AI drafting for a government department | T5 | Set by the customer, who already owns the controls | !shot app-benchbox.webpapp-accounting-assistant.webp | ../demos/vaults/threat-sized-security/images/ | One scenario in full: Benchbox'sthe accounting firm assistant's assets, its attack tree with an ATT&CK technique on every branch, and the line, with what must be done, what should, what is over the line and why, and the under-engineering to avoid. 15 unchanged paragraphs, under Draw your own line, Where to start [all versions](../who-are-you-protecting-against.md) --- *[Site index for agents](../../../llms.txt) · [HTML version](https://sgit.ai/articles/versions/who-are-you-protecting-against/v1.1.0.html)*