u Access control for development artifacts, including but not limited to
threat models, and use/misuse/abuse cases; requirements, architecture,
and design specifications; source code, binary executables; test
plans/scenarios/reports/oracles, code review findings, and vulnerability