@agent-ix/spec-objects-security 0.5.0 → 0.9.0

package/schemas/Secret.json

@@ -0,0 +1,78 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/Secret.json",
+  "type": "object",
+  "properties": {
+    "fields": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+      },
+      "minItems": 1,
+      "contains": {
+        "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/IdentityField.json"
+      }
+    },
+    "clauses": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+      }
+    },
+    "operations": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/OperationDecl.json"
+      }
+    },
+    "lifecycle": {
+      "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/SecretLifecycle.json"
+    },
+    "material_ref": {
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+    },
+    "custodian": {
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+    },
+    "classification": {
+      "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/ConfidentialityLevel.json"
+    }
+  },
+  "required": [
+    "fields"
+  ],
+  "unevaluatedProperties": {
+    "not": {}
+  },
+  "description": "A confidential value kept out of code.",
+  "allOf": [
+    {
+      "properties": {
+        "fields": {
+          "items": {
+            "not": {
+              "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/DefaultedField.json"
+            }
+          }
+        }
+      }
+    },
+    {
+      "properties": {
+        "operations": {
+          "items": {
+            "properties": {
+              "params": {
+                "items": {
+                  "not": {
+                    "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/DefaultedField.json"
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  ]
+}

package/schemas/SecretLifecycle.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/SecretLifecycle.json",
+  "type": "string",
+  "enum": [
+    "proposed",
+    "active",
+    "rotating",
+    "revoked",
+    "compromised",
+    "unknown"
+  ],
+  "description": "Where secret material is in its life. `unknown` states that it was not tracked."
+}

package/schemas/SessionConfig.json

@@ -0,0 +1,43 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/SessionConfig.json",
+  "type": "object",
+  "properties": {
+    "clauses": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+      },
+      "minItems": 1
+    },
+    "fields": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+      }
+    },
+    "binds_flow": {
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+    }
+  },
+  "required": [
+    "clauses"
+  ],
+  "unevaluatedProperties": {
+    "not": {}
+  },
+  "description": "The rules a session obeys. `operations` and `relations` are forbidden by the seal.",
+  "allOf": [
+    {
+      "properties": {
+        "fields": {
+          "items": {
+            "not": {
+              "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/DefaultedField.json"
+            }
+          }
+        }
+      }
+    }
+  ]
+}

package/schemas/Severity.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/Severity.json",
+  "type": "string",
+  "enum": [
+    "none",
+    "low",
+    "medium",
+    "high",
+    "critical",
+    "unknown"
+  ],
+  "description": "How bad a vulnerability is. `unknown` states that it was not assessed."
+}

package/schemas/SeverityField.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/SeverityField.json",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "const": "severity"
+    }
+  },
+  "required": [
+    "name"
+  ],
+  "description": "A `FieldDecl` named `severity`."
+}

package/schemas/StatusField.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/StatusField.json",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "const": "status"
+    }
+  },
+  "required": [
+    "name"
+  ],
+  "description": "A `FieldDecl` named `status`."
+}

package/schemas/StrideCategory.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/StrideCategory.json",
+  "type": "string",
+  "enum": [
+    "spoofing",
+    "tampering",
+    "repudiation",
+    "information_disclosure",
+    "denial_of_service",
+    "elevation_of_privilege",
+    "unknown"
+  ],
+  "description": "The STRIDE class of a threat. `unknown` states that it was not classified."
+}

package/schemas/StrideCategoryField.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/StrideCategoryField.json",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "const": "stride_category"
+    }
+  },
+  "required": [
+    "name"
+  ],
+  "description": "A `FieldDecl` named `stride_category`."
+}

package/schemas/Threat.json

@@ -0,0 +1,67 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/Threat.json",
+  "type": "object",
+  "properties": {
+    "fields": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+      },
+      "minItems": 1,
+      "contains": {
+        "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/IdentityField.json"
+      }
+    },
+    "clauses": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+      }
+    },
+    "relations": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+      }
+    },
+    "stride_category": {
+      "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/StrideCategory.json"
+    },
+    "exploits": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      }
+    }
+  },
+  "required": [
+    "fields"
+  ],
+  "unevaluatedProperties": {
+    "not": {}
+  },
+  "description": "An adversary capability against this system. `operations` is forbidden by the seal.",
+  "allOf": [
+    {
+      "properties": {
+        "fields": {
+          "contains": {
+            "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/StrideCategoryField.json"
+          }
+        }
+      }
+    },
+    {
+      "properties": {
+        "fields": {
+          "items": {
+            "not": {
+              "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/DefaultedField.json"
+            }
+          }
+        }
+      }
+    }
+  ]
+}

package/schemas/TrustBoundary.json

@@ -0,0 +1,69 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/TrustBoundary.json",
+  "type": "object",
+  "properties": {
+    "fields": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+      },
+      "minItems": 1,
+      "contains": {
+        "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/IdentityField.json"
+      }
+    },
+    "clauses": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+      },
+      "minItems": 1
+    },
+    "relations": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+      }
+    },
+    "trust_level": {
+      "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/TrustLevel.json"
+    },
+    "crosses": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      }
+    }
+  },
+  "required": [
+    "fields",
+    "clauses"
+  ],
+  "unevaluatedProperties": {
+    "not": {}
+  },
+  "description": "A zone edge. `clauses` is required: a boundary that admits every crossing is\nnot a boundary. `operations` is forbidden by the seal.",
+  "allOf": [
+    {
+      "properties": {
+        "fields": {
+          "contains": {
+            "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/TrustLevelField.json"
+          }
+        }
+      }
+    },
+    {
+      "properties": {
+        "fields": {
+          "items": {
+            "not": {
+              "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/DefaultedField.json"
+            }
+          }
+        }
+      }
+    }
+  ]
+}

package/schemas/TrustLevel.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/TrustLevel.json",
+  "type": "string",
+  "enum": [
+    "untrusted",
+    "semi_trusted",
+    "trusted",
+    "unknown"
+  ],
+  "description": "How far a zone is trusted. `untrusted` is the unassessed member, because the\nleast-granting reading of \"we never decided\" is \"we do not trust it\"."
+}

package/schemas/TrustLevelField.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/TrustLevelField.json",
+  "type": "object",
+  "properties": {
+    "name": {
+      "type": "string",
+      "const": "trust_level"
+    }
+  },
+  "required": [
+    "name"
+  ],
+  "description": "A `FieldDecl` named `trust_level`."
+}

package/schemas/Vulnerability.json

@@ -0,0 +1,70 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/Vulnerability.json",
+  "type": "object",
+  "properties": {
+    "fields": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+      },
+      "minItems": 1,
+      "contains": {
+        "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/IdentityField.json"
+      }
+    },
+    "clauses": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+      }
+    },
+    "relations": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+      }
+    },
+    "severity": {
+      "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/Severity.json"
+    },
+    "cve_id": {
+      "type": "string"
+    },
+    "affects": {
+      "type": "array",
+      "items": {
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      }
+    }
+  },
+  "required": [
+    "fields"
+  ],
+  "unevaluatedProperties": {
+    "not": {}
+  },
+  "description": "A weakness an implementation carries. `operations` is forbidden by the seal.",
+  "allOf": [
+    {
+      "properties": {
+        "fields": {
+          "contains": {
+            "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/SeverityField.json"
+          }
+        }
+      }
+    },
+    {
+      "properties": {
+        "fields": {
+          "items": {
+            "not": {
+              "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/DefaultedField.json"
+            }
+          }
+        }
+      }
+    }
+  ]
+}

package/skeletons/asset.md

@@ -1,22 +1,30 @@
 ---
 id: ASSET-001
-title: "Session store"
+title: "TenantDatabase"
 type: asset
+object: asset
 ---
-<!-- asset authoring skeleton (spec-objects-security). Fill every part with
+<!-- asset authoring skeleton (spec-objects-security). Fill every section with
      substantive content. Contract (manifest body_extraction asserts):
-     - Frontmatter MUST carry id, title, type (type: asset).
-     - A "Description" section MUST describe the asset and why it matters. -->
-# [ASSET-001] Session store
-
-Redis cluster holding all active Atlas web sessions and CSRF token state.
+     - Frontmatter MUST carry id, title, type: asset, object: asset.
+     - "## Description" (H2, required): what the asset is and why it matters.
+     - "## Properties" (H2): one typed row per attribute, header exactly
+       `Field | Type | Multiplicity | Constraints`. At least one row carries
+       the `identity` constraint (Asset.json refuses a record without one). -->
+# [ASSET-001] TenantDatabase
 
 ## Description
 
-The session store is the authority for who is currently authenticated:
-compromise yields the ability to mint or hijack any active session across all
-tenants, bypassing AUTHFLOW-001 entirely. It runs in the trusted private
-subnet behind BOUND-001, accepts only mTLS connections from the auth service,
-and persists nothing to disk (RDB/AOF disabled) so session identifiers never
-reach backup media. Data it holds is classified Confidential (CLASS-001
-handling applies to the embedded user identifiers).
+The per-tenant PostgreSQL database holding customer records, order history and
+audit trails. It is the primary confidentiality and integrity asset of the
+platform: its compromise discloses every tenant's data at once.
+
+## Properties
+
+| Field | Type | Multiplicity | Constraints |
+|---|---|---|---|
+| asset_id | UUID | 1..1 | identity |
+| name | String | 1..1 | minLength: 1, maxLength: 128 |
+| classification | DataRestricted | 1..1 |  |
+| steward | String | 1..1 | minLength: 1 |
+| replica_count | Integer | 0..1 | min: 0 |

package/skeletons/asset.sysml.md

@@ -0,0 +1,27 @@
+---
+id: ASSET-001
+title: "TenantDatabase"
+type: asset
+object: asset
+---
+<!-- asset authoring skeleton, alternate Properties form. Declares exactly the
+     same fields as asset.md, authored as one ```sysml``` fence instead of the
+     typed table (FR-005-AC-2). One artifact carries one form; the alternate is
+     a separate file, never a second block in the same artifact. -->
+# [ASSET-001] TenantDatabase
+
+## Description
+
+The per-tenant PostgreSQL database holding customer records, order history and
+audit trails. It is the primary confidentiality and integrity asset of the
+platform: its compromise discloses every tenant's data at once.
+
+## Properties
+
+```sysml
+attribute asset_id : UUID[1..1] { identity }
+attribute name : String[1..1] { minLength: 1, maxLength: 128 }
+ref item classification : DataRestricted[1..1]
+attribute steward : String[1..1] { minLength: 1 }
+attribute replica_count : Integer[0..1] { min: 0 }
+```

package/skeletons/attack_surface.md

@@ -1,25 +1,28 @@
 ---
 id: SURF-001
-title: "Atlas authentication attack surface"
+title: "PublicTokenEndpoint"
 type: attack_surface
+object: attack_surface
 ---
-<!-- attack_surface authoring skeleton (spec-objects-security). Fill every part
-     with substantive content. Contract (manifest body_extraction asserts):
-     - Frontmatter MUST carry id, title, type (type:
-       attack_surface).
-     - An "Entry Points" section MUST enumerate the externally reachable
-       entry points. -->
-# [SURF-001] Atlas authentication attack surface
-
-Internet-reachable surface of the Atlas authentication subsystem, reviewed
-whenever a new route crosses BOUND-001 outward.
+<!-- attack_surface authoring skeleton (spec-objects-security). Fill every section with
+     substantive content. Contract (manifest body_extraction asserts):
+     - Frontmatter MUST carry id, title, type: attack_surface,
+       object: attack_surface.
+     - "## Entry Points" (H2, required): the reachable entry points.
+     - "## Properties" (H2): the typed declaration. -->
+# [SURF-001] PublicTokenEndpoint
 
 ## Entry Points
 
-- `GET /login`, `GET /callback` — browser OIDC endpoints (AUTHFLOW-001)
-- `POST /api/token` — public API token exchange for integrations (SCOPE-001)
-- `POST /auth/local` — break-glass local login, gated by PASSPOL-001 and
-  MFA-001
-- `POST /webhooks/idp` — IdP back-channel logout receiver, HMAC-verified
-- Session cookie and `X-Atlas-CSRF` header parsing in the gateway middleware
-  (CSRF-001), reachable from any authenticated page
+- `POST /oauth/token` — authorization-code and refresh-token grants.
+- `POST /oauth/revoke` — grant-family revocation.
+- `GET /.well-known/openid-configuration` — unauthenticated metadata.
+
+## Properties
+
+| Field | Type | Multiplicity | Constraints |
+|---|---|---|---|
+| surface_id | UUID | 1..1 | identity |
+| transport | String | 1..1 | minLength: 1 |
+| internet_reachable | Boolean | 1..1 |  |
+| rate_limit_per_minute | Integer | 0..1 | min: 1 |

package/skeletons/audit_event.md

@@ -1,34 +1,47 @@
 ---
 id: AUDIT-001
-title: "user.login.succeeded audit event"
+title: "TokenReuseDetected"
 type: audit_event
+object: audit_event
 ---
-<!-- audit_event authoring skeleton (spec-objects-security). Fill every part
-     with substantive content. Contract (manifest body_extraction asserts):
-     - Frontmatter MUST carry id, title, type (type:
-       audit_event).
-     - An "Event Schema" section MUST carry a ```json code block with the
-       event's payload schema. -->
-# [AUDIT-001] user.login.succeeded audit event
+<!-- audit_event authoring skeleton (spec-objects-security). Fill every section with
+     substantive content. Contract (manifest body_extraction asserts):
+     - Frontmatter MUST carry id, title, type: audit_event,
+       object: audit_event.
+     - "## Properties" (H2): the declared payload as typed rows. An audit
+       event declaration carries NO identity field (occurrence identity
+       belongs to the runtime record) and at least one `Timestamp`
+       occurrence field; no row carries a default.
+     - "## Event Schema" (H2, required) holds a fenced `json` block. It is a
+       derived, human-facing view; the typed table is the authority. -->
+# [AUDIT-001] TokenReuseDetected
 
-Emitted by the auth service when AUTHFLOW-001 completes and a session is
-established. Appended to the tenant's immutable audit stream and queryable by
-ROLE-001 (Tenant Auditor) holders.
+TokenReuseDetected is emitted when an already-rotated refresh token is
+presented. The whole grant family is revoked and the session terminated.
+
+## Properties
+
+| Field | Type | Multiplicity | Constraints |
+|---|---|---|---|
+| occurred_at | Timestamp | 1..1 |  |
+| actor_reference | String | 1..1 | minLength: 1 |
+| grant_family_reference | String | 1..1 | minLength: 1 |
+| source_address | String | 0..1 | minLength: 1 |
 
 ## Event Schema
 
 ```json
 {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://specs.agent-ix.dev/audit/token-reuse-detected.schema.json",
+  "title": "TokenReuseDetected",
   "type": "object",
-  "required": ["event", "occurred_at", "tenant_id", "user_id", "source_ip"],
+  "required": ["occurred_at", "actor_reference", "grant_family_reference"],
   "properties": {
-    "event": { "const": "user.login.succeeded" },
     "occurred_at": { "type": "string", "format": "date-time" },
-    "tenant_id": { "type": "string", "format": "uuid" },
-    "user_id": { "type": "string", "format": "uuid" },
-    "source_ip": { "type": "string" },
-    "idp_issuer": { "type": "string", "format": "uri" },
-    "mfa_method": { "type": "string", "enum": ["totp", "webauthn", "none"] }
+    "actor_reference": { "type": "string", "minLength": 1 },
+    "grant_family_reference": { "type": "string", "minLength": 1 },
+    "source_address": { "type": "string", "minLength": 1 }
   }
 }
 ```