tegwick
48385816fd
Schema, validator (30 tests), make targets and eight declarations authored from the inventory, all unconfirmed by their owners. First run: 0 non-conformant, 12 unknown, 2 excepted, 5 planned, 6 conformant. Provisional: built against draft-1 before the founder's review. Building it changed the draft: custody is a list, SI-X1 now covers SI-9 and NAMING, and the reserved-name rule applies only to credential-holding identities (open question 7). Unknown is a finding for every class. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 328925@bnt-lap001 Assistant-Session: 14b795fd-c632-4c01-8d28-e7e490c7b0ed
18 lines
1 KiB
JSON
18 lines
1 KiB
JSON
{
|
|
"schema_version": "0.1",
|
|
"service": "example",
|
|
"owner": "Example owners",
|
|
"declared_at": "2026-10-24",
|
|
"attestation": {"authored_by": "fixture", "basis": ["fixture"], "owner_confirmed": true},
|
|
"complete": true,
|
|
"identities": [
|
|
{"name": "svc-example", "classes": ["bind"], "purpose": "Read-only lookup", "privilege_level": "read",
|
|
"interactive_login": false, "second_factor": "not_applicable", "custody": ["delivered-secret"],
|
|
"consumers": [{"name": "example", "kind": "service"}], "owner": "Example owners",
|
|
"rotation": {"path": "Rotate with the consumer", "coupling": ["example"]}, "status": "active"},
|
|
{"name": "ex-admin", "classes": ["service-admin"], "purpose": "Administer the example service", "privilege_level": "admin",
|
|
"interactive_login": true, "second_factor": "required", "custody": ["personal-safe"],
|
|
"consumers": [{"name": "operator", "kind": "person"}], "owner": "Example owners",
|
|
"rotation": {"path": "Owner-managed", "coupling": []}, "status": "active"}
|
|
]
|
|
}
|