How SF² Got Here¶

SF² did not arrive finished. It began as a set of hard-won mental models, went out as a draft for the security community to challenge, and became a complete framework in the open, with that community's fingerprints on it.

Origin: October 2025¶

The first versions (v0.1 through v0.5) moved the core thinking out of a Google Doc and onto the web: the Universal Security Conditions, the two-axis positioning model, the framework relationships, and an automatic PDF build. Enough to be read. Not yet enough to stand on.

The Sprint: v0.6 to v1.2¶

June to July 2026

Eight months later, in a single month, the draft became the framework.

1. v0.6.0Jun 8

   Coadaptive layer hardening.The draft I first shared publicly for feedback.

2. v0.7.0Jun 22

   Renamed the reach axis to Blast Radius, and ran a corpus-wide readability pass with 14 new content items.

3. v0.8.0Jun 22

   A visual identity: the Mexican-modernist brand.

4. v0.9.0Jun 23

   The editorial release: clarity, end to end.

5. v0.10 – v0.11Jun 24

   Pressure-tested against outside critique. Added Defender Cost Economics, the defender-side mirror of Adversary Economics.

6. v1.0.0Jun 24

   The shape, ready to use."The 0.x series was me finding the shape; 1.0 is the shape."

7. v1.1.0Jun 26

   Academic grounding: contingency-theory lineage and primary-source citations.

8. v1.2.0Jul 7

   Scoring-logic fix and final editorial polish.The current release.

SF² stays a living document, established but never finished. For the granular, release-by-release record, see the full changelog on GitHub.