Structural hazards (T)
Taxonomies › Care assistant › Structural hazards
The whole domain · 9 hazards, 5 of them life-safety · prefix T
These nine hazards are properties of the domain itself, so no single suit can fix them. Apply them to the whole design after the suits; they usually explain several findings at once.
Scope: Properties of the domain that cut across every suit.
Text version: every entry on this page is in the PDF and Excel downloads on the overview page, where it can be searched and copied.
The hazards
- EOC-T1 Silence Reads as Safety †
- EOC-T2 The Watched Is Not the User
- EOC-T3 Intended Purpose Drift
- EOC-T4 Safety–Privacy Inversion †
- EOC-T5 Promised Vigilance †
- EOC-T6 Inside the Walls, Outside the Boundary †
- EOC-T7 Many Principals, One Person
- EOC-T8 Response Is Part of the System †
- EOC-T9 Capacity Is Not Fixed
† marks a life-safety entry: one whose failure can leave someone without help when they need it.
Where the hazards touch
These hazards cut across every suit, so they touch all of them. Apply them to the whole design after the suits; they usually explain several findings at once and point to a design change, not a patch per finding.
Seen in the wild
- EOC-T3 Intended Purpose Drift: FDA warning letter on Owlet Smart Sock (2021), later Dream Sock De Novo clearance (2023).
Sources for each case are listed on the overview page.
STRIDE, LINDDUN, CAPEC and CWE
Of the 9 hazards here, STRIDE fits 4 only loosely, and none of its categories applies to 5. LINDDUN fits 3 only loosely, and has no category for 6. CAPEC 3.9 has nothing for any of them. CWE 5.0 has only a broader weakness for 3 and has nothing for 6. All four frameworks miss every one of them: no clean STRIDE or LINDDUN prompt, and no direct CAPEC or CWE match. The table below gives the mapping entry by entry, with the names of the CAPEC patterns and CWE weaknesses; what the mapping shows across the whole taxonomy is in Mapping the Care Assistant Threat Taxonomy to STRIDE, LINDDUN, CAPEC and CWE. The Excel, SKOS and STIX downloads carry the same mapping as text.
← Lifecycle (LC) · Care assistant overview
© 2026 Jonathan Brett Crawley. Licensed under CC BY-NC-ND 4.0 with additional permissions: see the licence on the care assistant overview.