emergent-security/envelopes/scales.yaml

11 lines
503 B
YAML

# Ordinal risk scales shared by every envelope (canon B1, A3 step 8).
# Lower index = less risk. A value not listed here cannot be classified
# and therefore counts as exceeding any ceiling.
apiVersion: emergent-security/v0.8
kind: RiskScales
scales:
blast_radius: [none, task, repository, domain, tenant, platform]
tenant_reach: [none, own, cross]
data_sensitivity: [none, internal, personal, regulated]
irreversible: [false, true]
external_exposure: [none, published_endpoints_only, public]