---
type: "term"
title: "Axiom Quick Reference"
description: "| | Name | Group | Core Statement | | | | | | | I | No System Type Differentiation | Scope | Generic IT assets; sector labels don't create threat classes | | II | Client–Server Model | Scope | Universal interaction abstraction | | III | Causes, Not Outcomes | Separation | Threats ≠ data risk events | | IV | Not Threat Actors | Separation | Threats ≠ actor identity | | V | Not Control Failure | Separation | Control risk ≠ threat category | | VI | Single Cluster Rule | Classification | One step = one vulnerability = one cluster | | VII | Initial Vulnerability Rule | Classification | Vector defined by initial generic vulnerability | | VIII | Strategic–Operational Layering | Classification | Clusters → sub threats | | IX | Sequence + Velocity | Sequences | Clusters chain; Δt measures velocity | | X | Credential Duality | Sequences | Acquisition vs application | Reference: §2 (Axioms and Assumptions)"
resource: "tlctc:term:axiom-quick-reference"
tags:
  - "glossary"
---
# Axiom Quick Reference

| # | Name | Group | Core Statement |
| --- | --- | --- | --- |
| **I** | No System-Type Differentiation | Scope | Generic IT assets; sector labels don't create threat classes |
| **II** | Client–Server Model | Scope | Universal interaction abstraction |
| **III** | Causes, Not Outcomes | Separation | Threats ≠ data risk events |
| **IV** | Not Threat Actors | Separation | Threats ≠ actor identity |
| **V** | Not Control Failure | Separation | Control-risk ≠ threat category |
| **VI** | Single-Cluster Rule | Classification | One step = one vulnerability = one cluster |
| **VII** | Initial-Vulnerability Rule | Classification | Vector defined by initial generic vulnerability |
| **VIII** | Strategic–Operational Layering | Classification | Clusters → sub-threats |
| **IX** | Sequence + Velocity | Sequences | Clusters chain; Δt measures velocity |
| **X** | Credential Duality | Sequences | Acquisition vs application |

**Reference:** §2 (Axioms and Assumptions)