{
  "type": "playbook",
  "slug": "chokepoint-remediation-playbook",
  "name": "Chokepoint Remediation Playbook",
  "author": "tarhou",
  "description": "An eight-stage remediation chain from thousands of findings to a handful of proven fixes, with a human checkpoint before every external mutation and a runner that enforces the contract offline.",
  "github_url": "https://github.com/tarhou/chokepoint-finder-playbook",
  "license": "MIT",
  "tier": "contributed",
  "tags": [
    "vuln-management",
    "exposure-management",
    "remediation",
    "change-management",
    "human-in-the-loop",
    "verification",
    "claude-code"
  ],
  "integrations": [
    "AWS",
    "Tenable"
  ],
  "domains": [
    "vulnerability-management"
  ],
  "date_added": "2026-08-05",
  "last_reviewed": "2026-08-05",
  "works_with_tenable_hexa_mcp": false,
  "playbook_type": "standard",
  "agents_used": [
    {
      "name": "Chokepoint Finder",
      "role": "Carries the loop end to end: collapses findings into shared fixes, ranks them, gates unsafe targets, and holds no external write tools.",
      "type": "exchange",
      "ref": "agents/chokepoint-finder"
    },
    {
      "name": "Chokepoint Finder MCP Server",
      "role": "Provides the typed tools the chain binds to: ingest, rank, pre-flight, plan hashing, execution accounting and verification.",
      "type": "exchange",
      "ref": "mcp-servers/chokepoint-finder-mcp"
    },
    {
      "name": "Chokepoint Finder Skill",
      "role": "The portable, dependency-free form of the same ranking method, for operators who run the chain without the MCP server.",
      "type": "exchange",
      "ref": "skills/chokepoint-finder-skill"
    },
    {
      "name": "Community MCP Server for Tenable",
      "role": "Read-only collection of findings and asset context, and the authoritative re-scan the verification stage diffs against.",
      "type": "exchange",
      "ref": "mcp-servers/tenable-mcp-server"
    },
    {
      "name": "AWS MCP Server (Agent Toolkit for AWS)",
      "role": "Read-only cloud posture collection, and the execution path for approved cloud changes under the operator's own credentials.",
      "type": "info",
      "ref": "https://docs.aws.amazon.com/agent-toolkit/latest/userguide/mcp-server.html"
    }
  ],
  "repo": {
    "found": true,
    "archived": false,
    "pushed_at": "2026-08-10T21:45:01Z",
    "stars": 1,
    "forks": 0,
    "open_issues": 0,
    "owner_type": "user",
    "language": "Python",
    "checked_at": "2026-11-05T20:35:15.821Z"
  },
  "url": "https://exchange.tenable.com/playbooks/chokepoint-remediation-playbook",
  "json_url": "https://exchange.tenable.com/api/playbooks/chokepoint-remediation-playbook.json",
  "markdown_url": "https://exchange.tenable.com/playbooks/chokepoint-remediation-playbook.md",
  "source_url": "https://github.com/tenable/cyberagents-exchange/blob/main/playbooks/chokepoint-remediation-playbook.md"
}