Introduce shared evidence model and governance imports
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a070b5-4994-7271-bd8b-7c3dbcedec4b
This commit is contained in:
tegwick 2026-09-05 21:16:29 +02:00
parent 305a4d6bd8
commit a2b254786e
54 changed files with 854 additions and 177 deletions

View file

@ -40,10 +40,11 @@
"id": "policy-control-evidence",
"source_artifacts": [
"model/governance",
"model/evidence",
"model/security",
"model/observability"
],
"summary": "Policy states intent or rule, control implements or enforces that rule, and evidence records why the claim should be trusted.",
"summary": "Governance owns policy and control; ITC-EVID owns the distinct evidence assertion and its addressable source. Evidence supports a stated interest without guaranteeing truth.",
"title": "Policy vs Control vs Evidence"
},
{
@ -59,7 +60,7 @@
}
],
"infospace": "canon",
"item_count": 76,
"item_count": 77,
"items": [
{
"canonical_path": "assimilation/emission-cadence/ASSIMILATION.md",
@ -1068,6 +1069,10 @@
"target": "model/governance",
"type": "maps"
},
{
"target": "model/evidence",
"type": "maps"
},
{
"target": "model/task",
"type": "maps"
@ -1189,6 +1194,7 @@
"id": "model/access-control",
"imports": [
"kernel/itc-core",
"model/evidence",
"model/governance",
"model/organization"
],
@ -1197,6 +1203,10 @@
"InfoTechCanon Access Control Model"
],
"relationships": [
{
"target": "model/evidence",
"type": "uses"
},
{
"target": "kernel/itc-core",
"type": "conforms_to"
@ -1221,6 +1231,7 @@
"imports": [
"catalog/evidence-basis",
"kernel/itc-core",
"model/evidence",
"model/governance",
"model/landscape",
"model/observability",
@ -1244,6 +1255,10 @@
"InfoTechCanon Capability Model"
],
"relationships": [
{
"target": "model/evidence",
"type": "uses"
},
{
"target": "kernel/itc-core",
"type": "conforms_to"
@ -1291,6 +1306,7 @@
"id": "model/data",
"imports": [
"kernel/itc-core",
"model/evidence",
"model/governance"
],
"kind": "model",
@ -1298,6 +1314,10 @@
"InfoTechCanon Data Model"
],
"relationships": [
{
"target": "model/evidence",
"type": "uses"
},
{
"target": "kernel/itc-core",
"type": "conforms_to"
@ -1321,6 +1341,7 @@
"id": "model/devsecops",
"imports": [
"kernel/itc-core",
"model/evidence",
"model/security"
],
"kind": "model",
@ -1328,6 +1349,10 @@
"InfoTechCanon DevSecOps Model"
],
"relationships": [
{
"target": "model/evidence",
"type": "uses"
},
{
"target": "kernel/itc-core",
"type": "conforms_to"
@ -1342,17 +1367,47 @@
"title": "InfoTechCanon DevSecOps Model",
"warnings": []
},
{
"canonical_path": "models/evidence/InfoTechCanonEvidenceModel.md",
"id": "model/evidence",
"imports": [
"kernel/itc-core"
],
"kind": "model",
"owned_concepts": [
"Adjudication Outcome",
"Evidence",
"Evidence Source",
"Evidence strength",
"InfoTechCanon Evidence Model"
],
"relationships": [
{
"target": "kernel/itc-core",
"type": "conforms_to"
}
],
"source_path": "../prj-canon-federation/ledger/concept-ownership.json",
"summary": "Domain model used by canon profiles and standards: InfoTechCanon Evidence Model.",
"title": "InfoTechCanon Evidence Model",
"warnings": []
},
{
"canonical_path": "models/governance/InfoTechCanonGovernanceModel.md",
"id": "model/governance",
"imports": [
"kernel/itc-core"
"kernel/itc-core",
"model/evidence"
],
"kind": "model",
"owned_concepts": [
"InfoTechCanon Governance Model"
],
"relationships": [
{
"target": "model/evidence",
"type": "uses"
},
{
"target": "kernel/itc-core",
"type": "conforms_to"
@ -1371,13 +1426,18 @@
"canonical_path": "models/information-space/InfoTechCanonInformationSpaceModel.md",
"id": "model/information-space",
"imports": [
"kernel/itc-core"
"kernel/itc-core",
"model/evidence"
],
"kind": "model",
"owned_concepts": [
"InfoTechCanon Information Space Model"
],
"relationships": [
{
"target": "model/evidence",
"type": "uses"
},
{
"target": "kernel/itc-core",
"type": "conforms_to"
@ -1392,13 +1452,18 @@
"canonical_path": "models/landscape/InfoTechCanonLandscapeModel.md",
"id": "model/landscape",
"imports": [
"kernel/itc-core"
"kernel/itc-core",
"model/evidence"
],
"kind": "model",
"owned_concepts": [
"InfoTechCanon Landscape Model"
],
"relationships": [
{
"target": "model/evidence",
"type": "uses"
},
{
"target": "kernel/itc-core",
"type": "conforms_to"
@ -1414,6 +1479,7 @@
"id": "model/network",
"imports": [
"kernel/itc-core",
"model/evidence",
"model/security"
],
"kind": "model",
@ -1421,6 +1487,10 @@
"InfoTechCanon Network Model"
],
"relationships": [
{
"target": "model/evidence",
"type": "uses"
},
{
"target": "kernel/itc-core",
"type": "conforms_to"
@ -1440,6 +1510,7 @@
"id": "model/observability",
"imports": [
"kernel/itc-core",
"model/evidence",
"model/task"
],
"kind": "model",
@ -1447,6 +1518,10 @@
"InfoTechCanon Observability Model"
],
"relationships": [
{
"target": "model/evidence",
"type": "uses"
},
{
"target": "kernel/itc-core",
"type": "conforms_to"
@ -1465,13 +1540,18 @@
"canonical_path": "models/organization/InfoTechCanonOrganizationModel.md",
"id": "model/organization",
"imports": [
"kernel/itc-core"
"kernel/itc-core",
"model/evidence"
],
"kind": "model",
"owned_concepts": [
"InfoTechCanon Organization Model"
],
"relationships": [
{
"target": "model/evidence",
"type": "uses"
},
{
"target": "kernel/itc-core",
"type": "conforms_to"
@ -1535,13 +1615,18 @@
"id": "model/security",
"imports": [
"kernel/itc-core",
"model/access-control"
"model/access-control",
"model/evidence"
],
"kind": "model",
"owned_concepts": [
"InfoTechCanon Security Model"
],
"relationships": [
{
"target": "model/evidence",
"type": "uses"
},
{
"target": "kernel/itc-core",
"type": "conforms_to"
@ -1560,13 +1645,18 @@
"canonical_path": "models/task/InfoTechCanonTaskModel.md",
"id": "model/task",
"imports": [
"kernel/itc-core"
"kernel/itc-core",
"model/evidence"
],
"kind": "model",
"owned_concepts": [
"InfoTechCanon Task Model"
],
"relationships": [
{
"target": "model/evidence",
"type": "uses"
},
{
"target": "kernel/itc-core",
"type": "conforms_to"
@ -2565,6 +2655,7 @@
"model/access-control",
"model/data",
"model/devsecops",
"model/evidence",
"model/governance",
"model/network",
"model/observability",
@ -2593,6 +2684,10 @@
"InfoTechCanon CARING Access Governance Standard"
],
"relationships": [
{
"target": "model/evidence",
"type": "uses"
},
{
"target": "kernel/itc-core",
"type": "conforms_to"
@ -2732,6 +2827,7 @@
"id": "standard/tagging",
"imports": [
"kernel/itc-core",
"model/evidence",
"model/task"
],
"kind": "standard",
@ -2739,6 +2835,10 @@
"InfoTechCanon Tagging Standard"
],
"relationships": [
{
"target": "model/evidence",
"type": "uses"
},
{
"target": "kernel/itc-core",
"type": "conforms_to"