@agent-ix/spec-objects-security 0.9.0 → 0.12.0

package/README.md

@@ -1,6 +1,6 @@
 # spec-objects-security
 
-[![Discord](https://img.shields.io/badge/Discord-Join%20us-5865F2?logo=discord&logoColor=white)](https://discord.gg/6qsdhSPE)
+[![Discord](https://img.shields.io/badge/Discord-Join%20us-5865F2?logo=discord&logoColor=white)](https://discord.gg/k8DVhuYBR2)
 
 > Filament Module: tier-2 security and identity ObjectTypes (threats, controls, auth flows, secrets, policies)
 

package/manifest.yaml

@@ -4,7 +4,6 @@ version: 0.2.0
 description: 'Filament Module: tier-2 security and identity ObjectTypes (threats, controls, auth flows, secrets, policies)'
 semantic:
   contract_version: 1.0.0
-  semantic_core: 0.3.0
   package: agent-ix/spec-objects-security
   exports:
   - auth_flow
@@ -78,7 +77,7 @@ object_types:
           after_heading: Flow
           required: true
           language: mermaid
-        # Added at 0.2.0 (FR-005): the `## Operations` subsections.
+        # FR-005: the `## Operations` subsections.
         operations:
           from: section_body
           after_heading: Operations
@@ -106,8 +105,8 @@ object_types:
           path:
           - verb
           required: true
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
@@ -127,8 +126,8 @@ object_types:
           from: section_body
           after_heading: Grants
           required: true
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
@@ -149,8 +148,8 @@ object_types:
           from: section_body
           after_heading: Permissions
           required: true
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
@@ -171,8 +170,8 @@ object_types:
           from: section_body
           after_heading: Rotation
           required: true
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
@@ -199,8 +198,8 @@ object_types:
           path:
           - rotation
           required: false
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
@@ -220,7 +219,7 @@ object_types:
           from: section_body
           after_heading: Settings
           required: true
-        # Added at 0.2.0 (FR-005): the `## Invariants` OCL clauses.
+        # FR-005: the `## Invariants` OCL clauses.
         invariants:
           from: section_body
           after_heading: Invariants
@@ -241,8 +240,8 @@ object_types:
           from: section_body
           after_heading: Handling
           required: true
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
@@ -264,13 +263,13 @@ object_types:
           after_heading: Boundary
           required: true
           language: mermaid
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
           required: false
-        # Added at 0.2.0 (FR-005): the `## Invariants` OCL clauses.
+        # FR-005: the `## Invariants` OCL clauses.
         invariants:
           from: section_body
           after_heading: Invariants
@@ -292,8 +291,8 @@ object_types:
           after_heading: Event Schema
           required: true
           language: json
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
@@ -315,8 +314,8 @@ object_types:
           path:
           - rotation_window
           required: true
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
@@ -336,7 +335,7 @@ object_types:
           from: section_body
           after_heading: Origins
           required: true
-        # Added at 0.2.0 (FR-005): the `## Invariants` OCL clauses.
+        # FR-005: the `## Invariants` OCL clauses.
         invariants:
           from: section_body
           after_heading: Invariants
@@ -356,7 +355,7 @@ object_types:
           from: section_body
           after_heading: Rules
           required: true
-        # Added at 0.2.0 (FR-005): the `## Invariants` OCL clauses.
+        # FR-005: the `## Invariants` OCL clauses.
         invariants:
           from: section_body
           after_heading: Invariants
@@ -382,8 +381,8 @@ object_types:
           path:
           - factor
           required: false
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
@@ -405,8 +404,8 @@ object_types:
           after_heading: Schema
           required: true
           language: json
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
@@ -445,15 +444,15 @@ object_types:
           path:
           - vector
           required: true
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
           required: false
 - name: control
   allowed_links:
-    mitigates: [threat, risk, vulnerability]
+    mitigates: [threat, risk, vulnerability, hazard, failure_mode]
     implements: [policy]
     protects: [externally-exposed, asset]
   data_schema:
@@ -468,13 +467,13 @@ object_types:
           from: section_body
           after_heading: Mappings
           required: true
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
           required: false
-        # Added at 0.2.0 (FR-005): the `## Invariants` OCL clauses.
+        # FR-005: the `## Invariants` OCL clauses.
         invariants:
           from: section_body
           after_heading: Invariants
@@ -501,8 +500,8 @@ object_types:
           path:
           - impact
           required: true
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
@@ -529,8 +528,8 @@ object_types:
           path:
           - severity
           required: true
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
@@ -550,8 +549,8 @@ object_types:
           from: section_body
           after_heading: Description
           required: true
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
@@ -572,8 +571,8 @@ object_types:
           from: section_body
           after_heading: Entry Points
           required: true
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
@@ -593,7 +592,7 @@ object_types:
           from: section_body
           after_heading: Policy
           required: true
-        # Added at 0.2.0 (FR-005): the `## Invariants` OCL clauses.
+        # FR-005: the `## Invariants` OCL clauses.
         invariants:
           from: section_body
           after_heading: Invariants
@@ -614,15 +613,15 @@ object_types:
           from: section_body
           after_heading: Recommendation
           required: true
-        # Added at 0.2.0 (FR-005): the typed `## Properties` table the
-        # semantic layer reads. Optional, so every 0.1.0 artifact stays valid.
+        # FR-005: the typed `## Properties` table the
+        # semantic layer reads. Optional, so existing artifacts stay valid.
         properties:
           from: section_body
           after_heading: Properties
           required: false
 
 # FR-043: concrete-term lexicon — security / identity / auth objects.
-# FR-058 (quire-rs v0.31.0): upward-trace completeness — the second half of
+# FR-058 (quire-rs): upward-trace completeness — the second half of
 # agent-ix/spec-objects-security#5. Declaration, not code: the engine holds no
 # archetype name, no verb and no direction.
 #

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-ix/spec-objects-security",
-  "version": "0.9.0",
+  "version": "0.12.0",
   "description": "Filament Module: tier-2 security and identity ObjectTypes (threat, control, risk, asset, policy, auth_flow, role, scope, jwt_claim, secret)",
   "license": "AGPL-3.0-or-later",
   "author": "Agent IX <agents@agent-ix.dev>",
@@ -32,7 +32,7 @@
     "url": "git+https://github.com/agent-ix/spec-objects-security.git"
   },
   "devDependencies": {
-    "@agent-ix/semantic-core": "0.3.0",
+    "@agent-ix/semantic-core": "0.3.2",
     "@typespec/compiler": "1.15.0",
     "@typespec/json-schema": "1.15.0"
   }

package/schemas/Asset.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,26 +16,26 @@
     "relations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/RelationDecl.json"
       }
     },
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "operations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/OperationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/OperationDecl.json"
       }
     },
     "classification": {
       "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/ConfidentialityLevel.json"
     },
     "owner": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
     }
   },
   "required": [

package/schemas/AttackSurface.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,19 +16,19 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "relations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/RelationDecl.json"
       }
     },
     "exposes": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
       }
     }
   },

package/schemas/AuditEvent.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,11 +16,11 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "source": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
     }
   },
   "required": [

package/schemas/AuditFinding.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,13 +16,13 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "relations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/RelationDecl.json"
       }
     },
     "status": {
@@ -31,7 +31,7 @@
     "traces_to": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
       }
     }
   },

package/schemas/AuthFlow.json

@@ -6,20 +6,20 @@
     "operations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/OperationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/OperationDecl.json"
       },
       "minItems": 1
     },
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       }
     },
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "steps": {

package/schemas/Control.json

@@ -6,14 +6,14 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       },
       "minItems": 1
     },
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -23,7 +23,7 @@
     "operations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/OperationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/OperationDecl.json"
       }
     },
     "effectiveness": {
@@ -32,7 +32,7 @@
     "mitigates": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
       }
     },
     "mappings": {

package/schemas/CorsPolicy.json

@@ -6,14 +6,14 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       },
       "minItems": 1
     },
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       }
     },
     "allowed_origins": {

package/schemas/CsrfToken.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,11 +16,11 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "binds": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
     }
   },
   "required": [

package/schemas/DataClassification.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,7 +16,7 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "level": {
@@ -25,7 +25,7 @@
     "values": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/EnumValue.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/EnumValue.json"
       }
     }
   },

package/schemas/DefaultedField.json

@@ -4,7 +4,7 @@
   "type": "object",
   "properties": {
     "default": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/DefaultDecl.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/DefaultDecl.json"
     }
   },
   "required": [

package/schemas/EncryptionKey.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,26 +16,26 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "operations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/OperationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/OperationDecl.json"
       }
     },
     "lifecycle": {
       "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/SecretLifecycle.json"
     },
     "material_ref": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
     },
     "custodian": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
     },
     "algorithm": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/Identifier.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/Identifier.json"
     }
   },
   "required": [

package/schemas/FlowStep.json

@@ -4,10 +4,10 @@
   "type": "object",
   "properties": {
     "name": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/Identifier.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/Identifier.json"
     },
     "actor": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/Identifier.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/Identifier.json"
     },
     "doc": {
       "type": "string"

package/schemas/JwtClaim.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,14 +16,14 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "classification": {
       "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/ConfidentialityLevel.json"
     },
     "issuer": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
     }
   },
   "required": [

package/schemas/MfaMethod.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,13 +16,13 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "operations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/OperationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/OperationDecl.json"
       }
     },
     "factor_kind": {

package/schemas/PasswordPolicy.json

@@ -6,14 +6,14 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       },
       "minItems": 1
     },
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       }
     }
   },

package/schemas/Permission.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,14 +16,14 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "resource": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
     },
     "verb": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/Identifier.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/Identifier.json"
     }
   },
   "required": [

package/schemas/Policy.json

@@ -6,26 +6,26 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       },
       "minItems": 1
     },
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       }
     },
     "relations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/RelationDecl.json"
       }
     },
     "governs": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
       }
     }
   },

package/schemas/Risk.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,13 +16,13 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "relations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/RelationDecl.json"
       }
     },
     "likelihood": {
@@ -34,7 +34,7 @@
     "arises_from": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
       }
     }
   },

package/schemas/Role.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,19 +16,19 @@
     "relations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/RelationDecl.json"
       }
     },
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "grants": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
       }
     }
   },

package/schemas/Scope.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,13 +16,13 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "includes": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
       }
     }
   },

package/schemas/Secret.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,23 +16,23 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "operations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/OperationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/OperationDecl.json"
       }
     },
     "lifecycle": {
       "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/SecretLifecycle.json"
     },
     "material_ref": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
     },
     "custodian": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
     },
     "classification": {
       "$ref": "https://schemas.agent-ix.org/agent-ix/spec-objects-security/ConfidentialityLevel.json"

package/schemas/SessionConfig.json

@@ -6,18 +6,18 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       },
       "minItems": 1
     },
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       }
     },
     "binds_flow": {
-      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+      "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
     }
   },
   "required": [

package/schemas/Threat.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,13 +16,13 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "relations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/RelationDecl.json"
       }
     },
     "stride_category": {
@@ -31,7 +31,7 @@
     "exploits": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
       }
     }
   },

package/schemas/TrustBoundary.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,14 +16,14 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       },
       "minItems": 1
     },
     "relations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/RelationDecl.json"
       }
     },
     "trust_level": {
@@ -32,7 +32,7 @@
     "crosses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
       }
     }
   },

package/schemas/Vulnerability.json

@@ -6,7 +6,7 @@
     "fields": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/FieldDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/FieldDecl.json"
       },
       "minItems": 1,
       "contains": {
@@ -16,13 +16,13 @@
     "clauses": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/ClauseRef.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/ClauseRef.json"
       }
     },
     "relations": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/RelationDecl.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/RelationDecl.json"
       }
     },
     "severity": {
@@ -34,7 +34,7 @@
     "affects": {
       "type": "array",
       "items": {
-        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.0/SemanticId.json"
+        "$ref": "https://schemas.agent-ix.org/semantic-core/0.3.2/SemanticId.json"
       }
     }
   },