@agent-ix/spec-objects-security 0.5.0 → 0.8.0

package/schemas/Secret.json

@@ -0,0 +1,78 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/Secret.json",
+  "type": "object",
+  "properties": {
+    "fields": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+      },
+      "minItems": 1,
+      "contains": {
+        "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/IdentityField.json"
+      }
+    },
+    "clauses": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+      }
+    },
+    "operations": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/OperationDecl.json"
+      }
+    },
+    "lifecycle": {
+      "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/SecretLifecycle.json"
+    },
+    "material_ref": {
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+    },
+    "custodian": {
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+    },
+    "classification": {
+      "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/ConfidentialityLevel.json"
+    }
+  },
+  "required": [
+    "fields"
+  ],
+  "unevaluatedProperties": {
+    "not": {}
+  },
+  "description": "A confidential value kept out of code.",
+  "allOf": [
+    {
+      "properties": {
+        "fields": {
+          "items": {
+            "not": {
+              "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/DefaultedField.json"
+            }
+          }
+        }
+      }
+    },
+    {
+      "properties": {
+        "operations": {
+          "items": {
+            "properties": {
+              "params": {
+                "items": {
+                  "not": {
+                    "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/DefaultedField.json"
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  ]
+}

package/schemas/SecretLifecycle.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/SecretLifecycle.json",
+  "type": "string",
+  "enum": [
+    "proposed",
+    "active",
+    "rotating",
+    "revoked",
+    "compromised",
+    "unknown"
+  ],
+  "description": "Where secret material is in its life. `unknown` states that it was not tracked."
+}

package/schemas/SessionConfig.json

@@ -0,0 +1,43 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/SessionConfig.json",
+  "type": "object",
+  "properties": {
+    "clauses": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+      },
+      "minItems": 1
+    },
+    "fields": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+      }
+    },
+    "binds_flow": {
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+    }
+  },
+  "required": [
+    "clauses"
+  ],
+  "unevaluatedProperties": {
+    "not": {}
+  },
+  "description": "The rules a session obeys. `operations` and `relations` are forbidden by the seal.",
+  "allOf": [
+    {
+      "properties": {
+        "fields": {
+          "items": {
+            "not": {
+              "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/DefaultedField.json"
+            }
+          }
+        }
+      }
+    }
+  ]
+}

package/schemas/Severity.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/Severity.json",
+  "type": "string",
+  "enum": [
+    "none",
+    "low",
+    "medium",
+    "high",
+    "critical",
+    "unknown"
+  ],
+  "description": "How bad a vulnerability is. `unknown` states that it was not assessed."
+}

package/schemas/SeverityField.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/SeverityField.json",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "const": "severity"
+    }
+  },
+  "required": [
+    "name"
+  ],
+  "description": "A `FieldDecl` named `severity`."
+}

package/schemas/StatusField.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/StatusField.json",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "const": "status"
+    }
+  },
+  "required": [
+    "name"
+  ],
+  "description": "A `FieldDecl` named `status`."
+}

package/schemas/StrideCategory.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/StrideCategory.json",
+  "type": "string",
+  "enum": [
+    "spoofing",
+    "tampering",
+    "repudiation",
+    "information_disclosure",
+    "denial_of_service",
+    "elevation_of_privilege",
+    "unknown"
+  ],
+  "description": "The STRIDE class of a threat. `unknown` states that it was not classified."
+}

package/schemas/StrideCategoryField.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/StrideCategoryField.json",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "const": "stride_category"
+    }
+  },
+  "required": [
+    "name"
+  ],
+  "description": "A `FieldDecl` named `stride_category`."
+}

package/schemas/Threat.json

@@ -0,0 +1,67 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/Threat.json",
+  "type": "object",
+  "properties": {
+    "fields": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+      },
+      "minItems": 1,
+      "contains": {
+        "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/IdentityField.json"
+      }
+    },
+    "clauses": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+      }
+    },
+    "relations": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+      }
+    },
+    "stride_category": {
+      "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/StrideCategory.json"
+    },
+    "exploits": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      }
+    }
+  },
+  "required": [
+    "fields"
+  ],
+  "unevaluatedProperties": {
+    "not": {}
+  },
+  "description": "An adversary capability against this system. `operations` is forbidden by the seal.",
+  "allOf": [
+    {
+      "properties": {
+        "fields": {
+          "contains": {
+            "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/StrideCategoryField.json"
+          }
+        }
+      }
+    },
+    {
+      "properties": {
+        "fields": {
+          "items": {
+            "not": {
+              "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/DefaultedField.json"
+            }
+          }
+        }
+      }
+    }
+  ]
+}

package/schemas/TrustBoundary.json

@@ -0,0 +1,69 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/TrustBoundary.json",
+  "type": "object",
+  "properties": {
+    "fields": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+      },
+      "minItems": 1,
+      "contains": {
+        "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/IdentityField.json"
+      }
+    },
+    "clauses": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+      },
+      "minItems": 1
+    },
+    "relations": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+      }
+    },
+    "trust_level": {
+      "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/TrustLevel.json"
+    },
+    "crosses": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      }
+    }
+  },
+  "required": [
+    "fields",
+    "clauses"
+  ],
+  "unevaluatedProperties": {
+    "not": {}
+  },
+  "description": "A zone edge. `clauses` is required: a boundary that admits every crossing is\nnot a boundary. `operations` is forbidden by the seal.",
+  "allOf": [
+    {
+      "properties": {
+        "fields": {
+          "contains": {
+            "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/TrustLevelField.json"
+          }
+        }
+      }
+    },
+    {
+      "properties": {
+        "fields": {
+          "items": {
+            "not": {
+              "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/DefaultedField.json"
+            }
+          }
+        }
+      }
+    }
+  ]
+}

package/schemas/TrustLevel.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/TrustLevel.json",
+  "type": "string",
+  "enum": [
+    "untrusted",
+    "semi_trusted",
+    "trusted",
+    "unknown"
+  ],
+  "description": "How far a zone is trusted. `untrusted` is the unassessed member, because the\nleast-granting reading of \"we never decided\" is \"we do not trust it\"."
+}

package/schemas/TrustLevelField.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/TrustLevelField.json",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "const": "trust_level"
+    }
+  },
+  "required": [
+    "name"
+  ],
+  "description": "A `FieldDecl` named `trust_level`."
+}

package/schemas/Vulnerability.json

@@ -0,0 +1,70 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/Vulnerability.json",
+  "type": "object",
+  "properties": {
+    "fields": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+      },
+      "minItems": 1,
+      "contains": {
+        "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/IdentityField.json"
+      }
+    },
+    "clauses": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+      }
+    },
+    "relations": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+      }
+    },
+    "severity": {
+      "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/Severity.json"
+    },
+    "cve_id": {
+      "type": "string"
+    },
+    "affects": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      }
+    }
+  },
+  "required": [
+    "fields"
+  ],
+  "unevaluatedProperties": {
+    "not": {}
+  },
+  "description": "A weakness an implementation carries. `operations` is forbidden by the seal.",
+  "allOf": [
+    {
+      "properties": {
+        "fields": {
+          "contains": {
+            "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/SeverityField.json"
+          }
+        }
+      }
+    },
+    {
+      "properties": {
+        "fields": {
+          "items": {
+            "not": {
+              "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/DefaultedField.json"
+            }
+          }
+        }
+      }
+    }
+  ]
+}

package/schemas/toolchain.json

@@ -0,0 +1,97 @@
+{
+  "compiler": {
+    "name": "@typespec/compiler",
+    "version": "1.15.0"
+  },
+  "emitter": {
+    "name": "@typespec/json-schema",
+    "version": "1.15.0"
+  },
+  "semanticCore": {
+    "name": "@agent-ix/semantic-core",
+    "version": "0.3.0"
+  },
+  "base": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/0.2.0/",
+  "normalization": {
+    "name": "absolute-id-and-ref",
+    "version": "1.0.0",
+    "issue": "https://github.com/agent-ix/spec-objects-security/issues/13",
+    "applied": true,
+    "rewrittenFiles": [
+      "Asset.json",
+      "AttackSurface.json",
+      "AuditEvent.json",
+      "AuditFinding.json",
+      "AuthFlow.json",
+      "Control.json",
+      "CorsPolicy.json",
+      "CsrfToken.json",
+      "DataClassification.json",
+      "EncryptionKey.json",
+      "JwtClaim.json",
+      "MfaMethod.json",
+      "PasswordPolicy.json",
+      "Permission.json",
+      "Policy.json",
+      "Risk.json",
+      "Role.json",
+      "Scope.json",
+      "Secret.json",
+      "SessionConfig.json",
+      "Threat.json",
+      "TrustBoundary.json",
+      "Vulnerability.json"
+    ],
+    "note": "rewrote relative $id/$ref to the module base or semantic-core 0.3.0"
+  },
+  "files": [
+    "Asset.json",
+    "AttackSurface.json",
+    "AuditEvent.json",
+    "AuditFinding.json",
+    "AuthFlow.json",
+    "ConfidentialityLevel.json",
+    "Control.json",
+    "ControlEffectiveness.json",
+    "ControlMapping.json",
+    "CorsPolicy.json",
+    "CsrfToken.json",
+    "DataClassification.json",
+    "DefaultedField.json",
+    "EffectivenessField.json",
+    "EncryptionKey.json",
+    "FindingStatus.json",
+    "FlowStep.json",
+    "IdentityField.json",
+    "Impact.json",
+    "ImpactField.json",
+    "JwtClaim.json",
+    "LevelField.json",
+    "Likelihood.json",
+    "LikelihoodField.json",
+    "MfaFactorKind.json",
+    "MfaMethod.json",
+    "OccurrenceField.json",
+    "OccurrenceTypeRef.json",
+    "PasswordPolicy.json",
+    "Permission.json",
+    "Policy.json",
+    "Risk.json",
+    "Role.json",
+    "Scope.json",
+    "Secret.json",
+    "SecretLifecycle.json",
+    "SessionConfig.json",
+    "Severity.json",
+    "SeverityField.json",
+    "StatusField.json",
+    "StrideCategory.json",
+    "StrideCategoryField.json",
+    "Threat.json",
+    "TrustBoundary.json",
+    "TrustLevel.json",
+    "TrustLevelField.json",
+    "Vulnerability.json"
+  ],
+  "digest": "sha256:cf9cc6011a068155fac6918c69f5f7ea54805650a5812e9e63633d1cdff2c839"
+}

package/skeletons/asset.md

@@ -1,22 +1,30 @@
 ---
 id: ASSET-001
-title: "Session store"
+title: "TenantDatabase"
 type: asset
+object: asset
 ---
-<!-- asset authoring skeleton (spec-objects-security). Fill every part with
+<!-- asset authoring skeleton (spec-objects-security). Fill every section with
      substantive content. Contract (manifest body_extraction asserts):
-     - Frontmatter MUST carry id, title, type (type: asset).
-     - A "Description" section MUST describe the asset and why it matters. -->
-# [ASSET-001] Session store
-
-Redis cluster holding all active Atlas web sessions and CSRF token state.
+     - Frontmatter MUST carry id, title, type: asset, object: asset.
+     - "## Description" (H2, required): what the asset is and why it matters.
+     - "## Properties" (H2): one typed row per attribute, header exactly
+       `Field | Type | Multiplicity | Constraints`. At least one row carries
+       the `identity` constraint (Asset.json refuses a record without one). -->
+# [ASSET-001] TenantDatabase
 
 ## Description
 
-The session store is the authority for who is currently authenticated:
-compromise yields the ability to mint or hijack any active session across all
-tenants, bypassing AUTHFLOW-001 entirely. It runs in the trusted private
-subnet behind BOUND-001, accepts only mTLS connections from the auth service,
-and persists nothing to disk (RDB/AOF disabled) so session identifiers never
-reach backup media. Data it holds is classified Confidential (CLASS-001
-handling applies to the embedded user identifiers).
+The per-tenant PostgreSQL database holding customer records, order history and
+audit trails. It is the primary confidentiality and integrity asset of the
+platform: its compromise discloses every tenant's data at once.
+
+## Properties
+
+| Field | Type | Multiplicity | Constraints |
+|---|---|---|---|
+| asset_id | UUID | 1..1 | identity |
+| name | String | 1..1 | minLength: 1, maxLength: 128 |
+| classification | DataRestricted | 1..1 |  |
+| steward | String | 1..1 | minLength: 1 |
+| replica_count | Integer | 0..1 | min: 0 |

package/skeletons/asset.sysml.md

@@ -0,0 +1,27 @@
+---
+id: ASSET-001
+title: "TenantDatabase"
+type: asset
+object: asset
+---
+<!-- asset authoring skeleton, alternate Properties form. Declares exactly the
+     same fields as asset.md, authored as one ```sysml``` fence instead of the
+     typed table (FR-005-AC-2). One artifact carries one form; the alternate is
+     a separate file, never a second block in the same artifact. -->
+# [ASSET-001] TenantDatabase
+
+## Description
+
+The per-tenant PostgreSQL database holding customer records, order history and
+audit trails. It is the primary confidentiality and integrity asset of the
+platform: its compromise discloses every tenant's data at once.
+
+## Properties
+
+```sysml
+attribute asset_id : UUID[1..1] { identity }
+attribute name : String[1..1] { minLength: 1, maxLength: 128 }
+ref item classification : DataRestricted[1..1]
+attribute steward : String[1..1] { minLength: 1 }
+attribute replica_count : Integer[0..1] { min: 0 }
+```