@mitre/hdf-schema 3.0.0 → 3.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (31) hide show
  1. package/README.md +14 -2
  2. package/dist/helpers.js +4 -44
  3. package/dist/schemas/hdf-amendments.schema.json +33 -33
  4. package/dist/schemas/hdf-baseline.schema.json +38 -38
  5. package/dist/schemas/hdf-comparison.schema.json +88 -88
  6. package/dist/schemas/hdf-evidence-package.schema.json +32 -32
  7. package/dist/schemas/hdf-plan.schema.json +38 -38
  8. package/dist/schemas/hdf-results.schema.json +67 -67
  9. package/dist/schemas/hdf-system.schema.json +47 -47
  10. package/package.json +2 -1
  11. package/src/schemas/hdf-amendments.schema.json +7 -7
  12. package/src/schemas/hdf-baseline.schema.json +10 -10
  13. package/src/schemas/hdf-comparison.schema.json +13 -13
  14. package/src/schemas/hdf-evidence-package.schema.json +6 -6
  15. package/src/schemas/hdf-plan.schema.json +6 -6
  16. package/src/schemas/hdf-results.schema.json +24 -24
  17. package/src/schemas/hdf-system.schema.json +9 -9
  18. package/src/schemas/primitives/amendments.schema.json +7 -7
  19. package/src/schemas/primitives/common.schema.json +1 -1
  20. package/src/schemas/primitives/comparison.schema.json +6 -6
  21. package/src/schemas/primitives/component.schema.json +6 -6
  22. package/src/schemas/primitives/data-flow.schema.json +1 -1
  23. package/src/schemas/primitives/extensions.schema.json +13 -13
  24. package/src/schemas/primitives/parameter.schema.json +1 -1
  25. package/src/schemas/primitives/plan.schema.json +2 -2
  26. package/src/schemas/primitives/platform.schema.json +1 -1
  27. package/src/schemas/primitives/result.schema.json +1 -1
  28. package/src/schemas/primitives/runner.schema.json +2 -2
  29. package/src/schemas/primitives/statistics.schema.json +1 -1
  30. package/src/schemas/primitives/system.schema.json +2 -2
  31. package/src/schemas/primitives/target.schema.json +3 -3
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft/2020-12/schema",
3
- "$id": "https://mitre.github.io/hdf-libs/schemas/hdf-evidence-package/v2.0.0",
3
+ "$id": "https://mitre.github.io/hdf-libs/schemas/hdf-evidence-package/v3.0.0",
4
4
  "title": "HDF Evidence Package",
5
5
  "description": "Bundles references to all HDF documents for audit, authorization, and compliance review. Each content entry references a document by type, URI, and checksum for integrity verification.",
6
6
  "type": "object",
@@ -34,7 +34,7 @@
34
34
  "description": "URI to the hdf-plan document that drove this assessment. Used for completeness verification — every baseline in the plan should have a corresponding results document in this package."
35
35
  },
36
36
  "preparedBy": {
37
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Identity",
37
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Identity",
38
38
  "description": "Identity of who prepared this evidence package."
39
39
  },
40
40
  "preparedAt": {
@@ -55,7 +55,7 @@
55
55
  "description": "Summary of assessment completeness and compliance status."
56
56
  },
57
57
  "signature": {
58
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Signature",
58
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Signature",
59
59
  "description": "Digital signature covering the entire evidence package."
60
60
  },
61
61
  "labels": {
@@ -66,7 +66,7 @@
66
66
  "description": "Optional key-value labels for grouping and querying evidence packages."
67
67
  },
68
68
  "integrity": {
69
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0#/$defs/Integrity",
69
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0#/$defs/Integrity",
70
70
  "description": "Cryptographic integrity information for verifying this evidence package has not been tampered with."
71
71
  },
72
72
  "version": {
@@ -74,7 +74,7 @@
74
74
  "description": "Version of this evidence package."
75
75
  },
76
76
  "generator": {
77
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0#/$defs/Generator",
77
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0#/$defs/Generator",
78
78
  "description": "Information about the tool that generated this document."
79
79
  }
80
80
  },
@@ -111,7 +111,7 @@
111
111
  "description": "URI to the document. Can be a relative path or absolute URL."
112
112
  },
113
113
  "checksum": {
114
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Checksum",
114
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Checksum",
115
115
  "description": "Cryptographic checksum for verifying the referenced document's integrity."
116
116
  },
117
117
  "description": {
@@ -205,9 +205,9 @@
205
205
  "description": "Informational summary of assessment completeness. Not authoritative — tools should compute these from the referenced documents.",
206
206
  "title": "Completeness Check"
207
207
  },
208
- "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0": {
208
+ "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0": {
209
209
  "$schema": "https://json-schema.org/draft/2020-12/schema",
210
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0",
210
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0",
211
211
  "title": "HDF Common Primitives",
212
212
  "description": "Shared building blocks used by hdf-results and hdf-baseline schemas.",
213
213
  "$defs": {
@@ -1023,9 +1023,9 @@
1023
1023
  }
1024
1024
  }
1025
1025
  },
1026
- "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0": {
1026
+ "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0": {
1027
1027
  "$schema": "https://json-schema.org/draft/2020-12/schema",
1028
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0",
1028
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0",
1029
1029
  "title": "HDF Extension Primitives",
1030
1030
  "description": "Extension types for waivers, attestations, generators, and integrity.",
1031
1031
  "$defs": {
@@ -1042,11 +1042,11 @@
1042
1042
  ],
1043
1043
  "properties": {
1044
1044
  "type": {
1045
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v2.0.0#/$defs/Override_Type",
1045
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v3.0.0#/$defs/Override_Type",
1046
1046
  "description": "The type of status override applied to this requirement."
1047
1047
  },
1048
1048
  "status": {
1049
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0#/$defs/Result_Status",
1049
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0#/$defs/Result_Status",
1050
1050
  "description": "The new status this override sets for the requirement. This intentionally changes the compliance status."
1051
1051
  },
1052
1052
  "reason": {
@@ -1054,7 +1054,7 @@
1054
1054
  "description": "Explanation for why this status override was applied."
1055
1055
  },
1056
1056
  "appliedBy": {
1057
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Identity",
1057
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Identity",
1058
1058
  "description": "Identity of who applied this status override. For simple cases, use type 'simple' with just an identifier."
1059
1059
  },
1060
1060
  "appliedAt": {
@@ -1068,18 +1068,18 @@
1068
1068
  "description": "Timestamp when this status override expires and must be reviewed/renewed. REQUIRED - no permanent status overrides allowed. ISO 8601 format."
1069
1069
  },
1070
1070
  "signature": {
1071
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Signature",
1071
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Signature",
1072
1072
  "description": "Optional digital signature for enhanced trust and non-repudiation. Supports hardware security tokens (PKCS#11/PKCS#12), Yubikeys, GPG keys, passkeys, and other signing methods."
1073
1073
  },
1074
1074
  "evidence": {
1075
1075
  "type": "array",
1076
1076
  "items": {
1077
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Evidence"
1077
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Evidence"
1078
1078
  },
1079
1079
  "description": "Supporting evidence for this status override, such as screenshots demonstrating manual verification for attestations."
1080
1080
  },
1081
1081
  "previousChecksum": {
1082
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Checksum",
1082
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Checksum",
1083
1083
  "description": "SHA-256 checksum of the previous amendment in chronological order. Creates a tamper-evident chain of amendments (similar to blockchain). Null for the first amendment on a requirement."
1084
1084
  }
1085
1085
  },
@@ -1149,7 +1149,7 @@
1149
1149
  "description": "Detailed explanation of the plan, including what actions will be taken."
1150
1150
  },
1151
1151
  "appliedBy": {
1152
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Identity",
1152
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Identity",
1153
1153
  "description": "Identity of who created this POA&M. For simple cases, use type 'simple' with just an identifier."
1154
1154
  },
1155
1155
  "appliedAt": {
@@ -1165,23 +1165,23 @@
1165
1165
  "milestones": {
1166
1166
  "type": "array",
1167
1167
  "items": {
1168
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Milestone"
1168
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Milestone"
1169
1169
  },
1170
1170
  "description": "Optional array of milestones tracking progress toward completion."
1171
1171
  },
1172
1172
  "signature": {
1173
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Signature",
1173
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Signature",
1174
1174
  "description": "Optional digital signature for enhanced trust and non-repudiation."
1175
1175
  },
1176
1176
  "evidence": {
1177
1177
  "type": "array",
1178
1178
  "items": {
1179
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Evidence"
1179
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Evidence"
1180
1180
  },
1181
1181
  "description": "Supporting evidence for this POA&M, such as documentation of compensating controls or mitigation implementation."
1182
1182
  },
1183
1183
  "previousChecksum": {
1184
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Checksum",
1184
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Checksum",
1185
1185
  "description": "SHA-256 checksum of the previous amendment in chronological order. Creates a tamper-evident chain of amendments (similar to blockchain). Null for the first amendment on a requirement."
1186
1186
  }
1187
1187
  },
@@ -1332,7 +1332,7 @@
1332
1332
  },
1333
1333
  "properties": {
1334
1334
  "algorithm": {
1335
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Hash_Algorithm",
1335
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Hash_Algorithm",
1336
1336
  "description": "The hash algorithm used for the checksum."
1337
1337
  },
1338
1338
  "checksum": {
@@ -1365,9 +1365,9 @@
1365
1365
  }
1366
1366
  }
1367
1367
  },
1368
- "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v2.0.0": {
1368
+ "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v3.0.0": {
1369
1369
  "$schema": "https://json-schema.org/draft/2020-12/schema",
1370
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v2.0.0",
1370
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v3.0.0",
1371
1371
  "title": "HDF Amendment Primitives",
1372
1372
  "description": "Types for waivers, attestations, exceptions, and POA&Ms that modify requirement compliance status.",
1373
1373
  "$defs": {
@@ -1409,7 +1409,7 @@
1409
1409
  "description": "Name of the baseline containing the requirement. Required when the system has multiple baselines with potentially overlapping requirement IDs."
1410
1410
  },
1411
1411
  "status": {
1412
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0#/$defs/Result_Status",
1412
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0#/$defs/Result_Status",
1413
1413
  "description": "The new status this amendment sets. For POA&Ms, this is the current status (POA&Ms track work, they don't change status)."
1414
1414
  },
1415
1415
  "reason": {
@@ -1417,7 +1417,7 @@
1417
1417
  "description": "Justification for this amendment."
1418
1418
  },
1419
1419
  "appliedBy": {
1420
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Identity",
1420
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Identity",
1421
1421
  "description": "Identity of who applied this amendment."
1422
1422
  },
1423
1423
  "appliedAt": {
@@ -1433,22 +1433,22 @@
1433
1433
  "evidence": {
1434
1434
  "type": "array",
1435
1435
  "items": {
1436
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Evidence"
1436
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Evidence"
1437
1437
  },
1438
1438
  "description": "Supporting evidence (screenshots, logs, URLs, documents)."
1439
1439
  },
1440
1440
  "signature": {
1441
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Signature",
1441
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Signature",
1442
1442
  "description": "Digital signature for non-repudiation."
1443
1443
  },
1444
1444
  "previousChecksum": {
1445
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Checksum",
1445
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Checksum",
1446
1446
  "description": "Checksum of the prior amendment in the chain. Creates a tamper-evident linked list. Null for the first amendment."
1447
1447
  },
1448
1448
  "milestones": {
1449
1449
  "type": "array",
1450
1450
  "items": {
1451
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Milestone"
1451
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Milestone"
1452
1452
  },
1453
1453
  "description": "Remediation milestones (primarily for POA&M type amendments)."
1454
1454
  },
@@ -1529,9 +1529,9 @@
1529
1529
  }
1530
1530
  }
1531
1531
  },
1532
- "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0": {
1532
+ "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0": {
1533
1533
  "$schema": "https://json-schema.org/draft/2020-12/schema",
1534
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0",
1534
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0",
1535
1535
  "title": "HDF Result Primitives",
1536
1536
  "description": "Types for representing assessment results and statuses.",
1537
1537
  "$defs": {
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft/2020-12/schema",
3
- "$id": "https://mitre.github.io/hdf-libs/schemas/hdf-plan/v2.0.0",
3
+ "$id": "https://mitre.github.io/hdf-libs/schemas/hdf-plan/v3.0.0",
4
4
  "title": "HDF Plan",
5
5
  "description": "Defines an assessment plan — what baselines to run against which targets, with resolved inputs and scheduling. Maps to OSCAL Assessment Plan.",
6
6
  "type": "object",
@@ -20,7 +20,7 @@
20
20
  "description": "Human-readable plan name. Example: 'Portal Monthly Assessment'."
21
21
  },
22
22
  "type": {
23
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/plan/v2.0.0#/$defs/Plan_Type",
23
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/plan/v3.0.0#/$defs/Plan_Type",
24
24
  "description": "The type of assessment plan."
25
25
  },
26
26
  "description": {
@@ -36,12 +36,12 @@
36
36
  "type": "array",
37
37
  "minItems": 1,
38
38
  "items": {
39
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/plan/v2.0.0#/$defs/Assessment"
39
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/plan/v3.0.0#/$defs/Assessment"
40
40
  },
41
41
  "description": "The assessments to perform. Each assessment pairs a baseline with targets and resolved inputs."
42
42
  },
43
43
  "schedule": {
44
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/plan/v2.0.0#/$defs/Schedule",
44
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/plan/v3.0.0#/$defs/Schedule",
45
45
  "description": "Optional scheduling configuration for recurring assessments."
46
46
  },
47
47
  "labels": {
@@ -52,7 +52,7 @@
52
52
  "description": "Optional key-value labels for grouping and querying plans."
53
53
  },
54
54
  "integrity": {
55
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0#/$defs/Integrity",
55
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0#/$defs/Integrity",
56
56
  "description": "Cryptographic integrity information for verifying this plan document has not been tampered with."
57
57
  },
58
58
  "version": {
@@ -60,7 +60,7 @@
60
60
  "description": "Version of this plan document."
61
61
  },
62
62
  "generator": {
63
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0#/$defs/Generator",
63
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0#/$defs/Generator",
64
64
  "description": "Information about the tool that generated this plan."
65
65
  }
66
66
  },
@@ -94,9 +94,9 @@
94
94
  }
95
95
  ],
96
96
  "$defs": {
97
- "https://mitre.github.io/hdf-libs/schemas/primitives/plan/v2.0.0": {
97
+ "https://mitre.github.io/hdf-libs/schemas/primitives/plan/v3.0.0": {
98
98
  "$schema": "https://json-schema.org/draft/2020-12/schema",
99
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/plan/v2.0.0",
99
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/plan/v3.0.0",
100
100
  "title": "HDF Plan Primitives",
101
101
  "description": "Types for defining assessment plans — what to scan, how to configure it, and when to run.",
102
102
  "$defs": {
@@ -144,7 +144,7 @@
144
144
  "description": "componentId of the system component this assessment targets. Use for direct component binding. Alternative to targetSelector."
145
145
  },
146
146
  "targetSelector": {
147
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/system/v2.0.0#/$defs/Target_Selector",
147
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/system/v3.0.0#/$defs/Target_Selector",
148
148
  "description": "Label selector to match targets for this assessment. Overrides the system component's targetSelector if provided."
149
149
  },
150
150
  "inputs": {
@@ -226,9 +226,9 @@
226
226
  }
227
227
  }
228
228
  },
229
- "https://mitre.github.io/hdf-libs/schemas/primitives/system/v2.0.0": {
229
+ "https://mitre.github.io/hdf-libs/schemas/primitives/system/v3.0.0": {
230
230
  "$schema": "https://json-schema.org/draft/2020-12/schema",
231
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/system/v2.0.0",
231
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/system/v3.0.0",
232
232
  "title": "HDF System Primitives",
233
233
  "description": "Types for describing system architecture, authorization boundaries, and components.",
234
234
  "$defs": {
@@ -279,7 +279,7 @@
279
279
  "description": "Rationale for why this override is needed."
280
280
  },
281
281
  "approvedBy": {
282
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Identity",
282
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Identity",
283
283
  "description": "Identity of the person or system that approved this override."
284
284
  }
285
285
  },
@@ -360,9 +360,9 @@
360
360
  }
361
361
  }
362
362
  },
363
- "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0": {
363
+ "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0": {
364
364
  "$schema": "https://json-schema.org/draft/2020-12/schema",
365
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0",
365
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0",
366
366
  "title": "HDF Common Primitives",
367
367
  "description": "Shared building blocks used by hdf-results and hdf-baseline schemas.",
368
368
  "$defs": {
@@ -1178,9 +1178,9 @@
1178
1178
  }
1179
1179
  }
1180
1180
  },
1181
- "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0": {
1181
+ "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0": {
1182
1182
  "$schema": "https://json-schema.org/draft/2020-12/schema",
1183
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0",
1183
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0",
1184
1184
  "title": "HDF Extension Primitives",
1185
1185
  "description": "Extension types for waivers, attestations, generators, and integrity.",
1186
1186
  "$defs": {
@@ -1197,11 +1197,11 @@
1197
1197
  ],
1198
1198
  "properties": {
1199
1199
  "type": {
1200
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v2.0.0#/$defs/Override_Type",
1200
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v3.0.0#/$defs/Override_Type",
1201
1201
  "description": "The type of status override applied to this requirement."
1202
1202
  },
1203
1203
  "status": {
1204
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0#/$defs/Result_Status",
1204
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0#/$defs/Result_Status",
1205
1205
  "description": "The new status this override sets for the requirement. This intentionally changes the compliance status."
1206
1206
  },
1207
1207
  "reason": {
@@ -1209,7 +1209,7 @@
1209
1209
  "description": "Explanation for why this status override was applied."
1210
1210
  },
1211
1211
  "appliedBy": {
1212
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Identity",
1212
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Identity",
1213
1213
  "description": "Identity of who applied this status override. For simple cases, use type 'simple' with just an identifier."
1214
1214
  },
1215
1215
  "appliedAt": {
@@ -1223,18 +1223,18 @@
1223
1223
  "description": "Timestamp when this status override expires and must be reviewed/renewed. REQUIRED - no permanent status overrides allowed. ISO 8601 format."
1224
1224
  },
1225
1225
  "signature": {
1226
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Signature",
1226
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Signature",
1227
1227
  "description": "Optional digital signature for enhanced trust and non-repudiation. Supports hardware security tokens (PKCS#11/PKCS#12), Yubikeys, GPG keys, passkeys, and other signing methods."
1228
1228
  },
1229
1229
  "evidence": {
1230
1230
  "type": "array",
1231
1231
  "items": {
1232
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Evidence"
1232
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Evidence"
1233
1233
  },
1234
1234
  "description": "Supporting evidence for this status override, such as screenshots demonstrating manual verification for attestations."
1235
1235
  },
1236
1236
  "previousChecksum": {
1237
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Checksum",
1237
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Checksum",
1238
1238
  "description": "SHA-256 checksum of the previous amendment in chronological order. Creates a tamper-evident chain of amendments (similar to blockchain). Null for the first amendment on a requirement."
1239
1239
  }
1240
1240
  },
@@ -1304,7 +1304,7 @@
1304
1304
  "description": "Detailed explanation of the plan, including what actions will be taken."
1305
1305
  },
1306
1306
  "appliedBy": {
1307
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Identity",
1307
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Identity",
1308
1308
  "description": "Identity of who created this POA&M. For simple cases, use type 'simple' with just an identifier."
1309
1309
  },
1310
1310
  "appliedAt": {
@@ -1320,23 +1320,23 @@
1320
1320
  "milestones": {
1321
1321
  "type": "array",
1322
1322
  "items": {
1323
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Milestone"
1323
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Milestone"
1324
1324
  },
1325
1325
  "description": "Optional array of milestones tracking progress toward completion."
1326
1326
  },
1327
1327
  "signature": {
1328
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Signature",
1328
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Signature",
1329
1329
  "description": "Optional digital signature for enhanced trust and non-repudiation."
1330
1330
  },
1331
1331
  "evidence": {
1332
1332
  "type": "array",
1333
1333
  "items": {
1334
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Evidence"
1334
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Evidence"
1335
1335
  },
1336
1336
  "description": "Supporting evidence for this POA&M, such as documentation of compensating controls or mitigation implementation."
1337
1337
  },
1338
1338
  "previousChecksum": {
1339
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Checksum",
1339
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Checksum",
1340
1340
  "description": "SHA-256 checksum of the previous amendment in chronological order. Creates a tamper-evident chain of amendments (similar to blockchain). Null for the first amendment on a requirement."
1341
1341
  }
1342
1342
  },
@@ -1487,7 +1487,7 @@
1487
1487
  },
1488
1488
  "properties": {
1489
1489
  "algorithm": {
1490
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Hash_Algorithm",
1490
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Hash_Algorithm",
1491
1491
  "description": "The hash algorithm used for the checksum."
1492
1492
  },
1493
1493
  "checksum": {
@@ -1520,9 +1520,9 @@
1520
1520
  }
1521
1521
  }
1522
1522
  },
1523
- "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v2.0.0": {
1523
+ "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v3.0.0": {
1524
1524
  "$schema": "https://json-schema.org/draft/2020-12/schema",
1525
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v2.0.0",
1525
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v3.0.0",
1526
1526
  "title": "HDF Amendment Primitives",
1527
1527
  "description": "Types for waivers, attestations, exceptions, and POA&Ms that modify requirement compliance status.",
1528
1528
  "$defs": {
@@ -1564,7 +1564,7 @@
1564
1564
  "description": "Name of the baseline containing the requirement. Required when the system has multiple baselines with potentially overlapping requirement IDs."
1565
1565
  },
1566
1566
  "status": {
1567
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0#/$defs/Result_Status",
1567
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0#/$defs/Result_Status",
1568
1568
  "description": "The new status this amendment sets. For POA&Ms, this is the current status (POA&Ms track work, they don't change status)."
1569
1569
  },
1570
1570
  "reason": {
@@ -1572,7 +1572,7 @@
1572
1572
  "description": "Justification for this amendment."
1573
1573
  },
1574
1574
  "appliedBy": {
1575
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Identity",
1575
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Identity",
1576
1576
  "description": "Identity of who applied this amendment."
1577
1577
  },
1578
1578
  "appliedAt": {
@@ -1588,22 +1588,22 @@
1588
1588
  "evidence": {
1589
1589
  "type": "array",
1590
1590
  "items": {
1591
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Evidence"
1591
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Evidence"
1592
1592
  },
1593
1593
  "description": "Supporting evidence (screenshots, logs, URLs, documents)."
1594
1594
  },
1595
1595
  "signature": {
1596
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Signature",
1596
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Signature",
1597
1597
  "description": "Digital signature for non-repudiation."
1598
1598
  },
1599
1599
  "previousChecksum": {
1600
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Checksum",
1600
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Checksum",
1601
1601
  "description": "Checksum of the prior amendment in the chain. Creates a tamper-evident linked list. Null for the first amendment."
1602
1602
  },
1603
1603
  "milestones": {
1604
1604
  "type": "array",
1605
1605
  "items": {
1606
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Milestone"
1606
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Milestone"
1607
1607
  },
1608
1608
  "description": "Remediation milestones (primarily for POA&M type amendments)."
1609
1609
  },
@@ -1684,9 +1684,9 @@
1684
1684
  }
1685
1685
  }
1686
1686
  },
1687
- "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0": {
1687
+ "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0": {
1688
1688
  "$schema": "https://json-schema.org/draft/2020-12/schema",
1689
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0",
1689
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0",
1690
1690
  "title": "HDF Result Primitives",
1691
1691
  "description": "Types for representing assessment results and statuses.",
1692
1692
  "$defs": {