aws-samples/specification-hardening-engine
Specification Hardening Engine — harden Kiro specs with security primitives before code is written. Analyzes EARS-format requirements, detects relevant CWE/OWASP weaknesses, and proposes traceable, testable security requirements.
Harden a Kiro spec's EARS requirements with security constraints derived from CWE/OWASP/CVE mappings. Use after functional requirements are finalized and before implementation planning, or whenever the user asks to security-review, harden, or shift-left a requirements/spec document.
Reference knowledge for mapping requirements to CWE/OWASP weaknesses and the security primitives that close them. Use to explain why a hardening constraint was proposed, to justify EARS security requirements, or to harden a spec by hand when the Specification Hardening Engine cannot run.