@mitre/hdf-schema 3.0.0 → 3.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (31) hide show
  1. package/README.md +14 -2
  2. package/dist/helpers.js +4 -44
  3. package/dist/schemas/hdf-amendments.schema.json +33 -33
  4. package/dist/schemas/hdf-baseline.schema.json +38 -38
  5. package/dist/schemas/hdf-comparison.schema.json +88 -88
  6. package/dist/schemas/hdf-evidence-package.schema.json +32 -32
  7. package/dist/schemas/hdf-plan.schema.json +38 -38
  8. package/dist/schemas/hdf-results.schema.json +67 -67
  9. package/dist/schemas/hdf-system.schema.json +47 -47
  10. package/package.json +2 -1
  11. package/src/schemas/hdf-amendments.schema.json +7 -7
  12. package/src/schemas/hdf-baseline.schema.json +10 -10
  13. package/src/schemas/hdf-comparison.schema.json +13 -13
  14. package/src/schemas/hdf-evidence-package.schema.json +6 -6
  15. package/src/schemas/hdf-plan.schema.json +6 -6
  16. package/src/schemas/hdf-results.schema.json +24 -24
  17. package/src/schemas/hdf-system.schema.json +9 -9
  18. package/src/schemas/primitives/amendments.schema.json +7 -7
  19. package/src/schemas/primitives/common.schema.json +1 -1
  20. package/src/schemas/primitives/comparison.schema.json +6 -6
  21. package/src/schemas/primitives/component.schema.json +6 -6
  22. package/src/schemas/primitives/data-flow.schema.json +1 -1
  23. package/src/schemas/primitives/extensions.schema.json +13 -13
  24. package/src/schemas/primitives/parameter.schema.json +1 -1
  25. package/src/schemas/primitives/plan.schema.json +2 -2
  26. package/src/schemas/primitives/platform.schema.json +1 -1
  27. package/src/schemas/primitives/result.schema.json +1 -1
  28. package/src/schemas/primitives/runner.schema.json +2 -2
  29. package/src/schemas/primitives/statistics.schema.json +1 -1
  30. package/src/schemas/primitives/system.schema.json +2 -2
  31. package/src/schemas/primitives/target.schema.json +3 -3
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft/2020-12/schema",
3
- "$id": "https://mitre.github.io/hdf-libs/schemas/hdf-results/v2.0.0",
3
+ "$id": "https://mitre.github.io/hdf-libs/schemas/hdf-results/v3.0.0",
4
4
  "type": "object",
5
5
  "unevaluatedProperties": false,
6
6
  "required": [
@@ -20,7 +20,7 @@
20
20
  "components": {
21
21
  "type": "array",
22
22
  "items": {
23
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/component/v2.0.0#/$defs/Component"
23
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/component/v3.0.0#/$defs/Component"
24
24
  },
25
25
  "description": "The components that were assessed. Each component describes a system element (host, container, cloud resource, application, etc.) with optional identity, SBOM, and external references."
26
26
  },
@@ -32,27 +32,27 @@
32
32
  "description": "Information on the baselines that were evaluated, including findings."
33
33
  },
34
34
  "statistics": {
35
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/statistics/v2.0.0#/$defs/Statistics",
35
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/statistics/v3.0.0#/$defs/Statistics",
36
36
  "description": "Statistics for the assessment run, including duration and result counts."
37
37
  },
38
38
  "generator": {
39
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0#/$defs/Generator",
39
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0#/$defs/Generator",
40
40
  "description": "Information about the tool that generated this file."
41
41
  },
42
42
  "tool": {
43
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0#/$defs/Tool",
43
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0#/$defs/Tool",
44
44
  "description": "The security tool that produced the assessment data in this file."
45
45
  },
46
46
  "integrity": {
47
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0#/$defs/Integrity",
47
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0#/$defs/Integrity",
48
48
  "description": "Cryptographic integrity information for verifying this file."
49
49
  },
50
50
  "runner": {
51
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/runner/v2.0.0#/$defs/Runner",
51
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/runner/v3.0.0#/$defs/Runner",
52
52
  "description": "Information about the test execution environment where the security tool was run. Distinct from targets (what is being tested)."
53
53
  },
54
54
  "remediation": {
55
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Remediation",
55
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Remediation",
56
56
  "description": "Optional reference to automated remediation resources (Ansible playbooks, Terraform scripts, etc.) for fixing failing requirements found in this assessment."
57
57
  },
58
58
  "systemRef": {
@@ -160,14 +160,14 @@
160
160
  ],
161
161
  "allOf": [
162
162
  {
163
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Baseline_Metadata"
163
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Baseline_Metadata"
164
164
  }
165
165
  ],
166
166
  "properties": {
167
167
  "depends": {
168
168
  "type": "array",
169
169
  "items": {
170
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Dependency"
170
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Dependency"
171
171
  },
172
172
  "description": "The set of dependencies this baseline depends on."
173
173
  },
@@ -180,15 +180,15 @@
180
180
  "description": "The description - should be more detailed than the summary."
181
181
  },
182
182
  "integrity": {
183
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0#/$defs/Integrity",
183
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0#/$defs/Integrity",
184
184
  "description": "Cryptographic integrity information for verifying this baseline has not been tampered with."
185
185
  },
186
186
  "originalChecksum": {
187
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Checksum",
187
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Checksum",
188
188
  "description": "SHA-256 checksum of the original baseline definition file (before execution). This is an immutable reference to the baseline as defined, used to detect tampering with baseline requirements or metadata."
189
189
  },
190
190
  "resultsChecksum": {
191
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Checksum",
191
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Checksum",
192
192
  "description": "SHA-256 checksum of the raw results before any amendments (statusOverrides or POAMs). Used to detect tampering with test results. Compare with currentChecksum to verify amendment integrity."
193
193
  },
194
194
  "statusMessage": {
@@ -206,14 +206,14 @@
206
206
  "groups": {
207
207
  "type": "array",
208
208
  "items": {
209
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Requirement_Group"
209
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Requirement_Group"
210
210
  },
211
211
  "description": "A set of descriptions for the requirement groups."
212
212
  },
213
213
  "inputs": {
214
214
  "type": "array",
215
215
  "items": {
216
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/parameter/v2.0.0#/$defs/Input"
216
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/parameter/v3.0.0#/$defs/Input"
217
217
  },
218
218
  "description": "Typed inputs used to parameterize this baseline at execution time. See the Input primitive for the full schema."
219
219
  },
@@ -238,7 +238,7 @@
238
238
  ],
239
239
  "allOf": [
240
240
  {
241
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Requirement_Core"
241
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Requirement_Core"
242
242
  }
243
243
  ],
244
244
  "properties": {
@@ -246,7 +246,7 @@
246
246
  "type": "array",
247
247
  "minItems": 1,
248
248
  "items": {
249
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0#/$defs/Requirement_Description"
249
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0#/$defs/Requirement_Description"
250
250
  },
251
251
  "contains": {
252
252
  "type": "object",
@@ -262,43 +262,43 @@
262
262
  "description": "Array of labeled descriptions. At least one description with label 'default' must be present. Convention: place default description first. Common labels: 'default', 'check', 'fix', 'rationale'."
263
263
  },
264
264
  "severity": {
265
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Severity",
265
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Severity",
266
266
  "description": "Explicit severity rating. Typically derived from impact score but provided explicitly for clarity."
267
267
  },
268
268
  "sourceLocation": {
269
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Source_Location",
269
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Source_Location",
270
270
  "description": "The explicit location of the requirement within the source code."
271
271
  },
272
272
  "results": {
273
273
  "type": "array",
274
274
  "minItems": 1,
275
275
  "items": {
276
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0#/$defs/Requirement_Result"
276
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0#/$defs/Requirement_Result"
277
277
  },
278
278
  "description": "The set of all tests within the requirement and their results."
279
279
  },
280
280
  "statusOverrides": {
281
281
  "type": "array",
282
282
  "items": {
283
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0#/$defs/Status_Override"
283
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0#/$defs/Status_Override"
284
284
  },
285
285
  "description": "Chronological history of all status overrides applied to this requirement. Status overrides are intentional changes to the compliance status (waivers, attestations). Most recent override should be first in array. Preserves full audit trail."
286
286
  },
287
287
  "poams": {
288
288
  "type": "array",
289
289
  "items": {
290
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0#/$defs/POAM"
290
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0#/$defs/POAM"
291
291
  },
292
292
  "description": "Plan of Action and Milestones for tracking remediation, mitigation, or risk acceptance. POAMs do NOT change effectiveStatus - they track the work being done to address a failure. Separate from statusOverrides which DO change status."
293
293
  },
294
294
  "effectiveStatus": {
295
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0#/$defs/Result_Status",
295
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0#/$defs/Result_Status",
296
296
  "description": "The current effective status of this requirement after applying the most recent non-expired override, or computed from results if no overrides exist."
297
297
  },
298
298
  "evidence": {
299
299
  "type": "array",
300
300
  "items": {
301
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Evidence"
301
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Evidence"
302
302
  },
303
303
  "description": "Supporting evidence for this requirement's findings, such as screenshots, code samples, or log excerpts."
304
304
  }
@@ -306,9 +306,9 @@
306
306
  "description": "A requirement that has been evaluated, including any findings.",
307
307
  "title": "Evaluated Requirement"
308
308
  },
309
- "https://mitre.github.io/hdf-libs/schemas/primitives/component/v2.0.0": {
309
+ "https://mitre.github.io/hdf-libs/schemas/primitives/component/v3.0.0": {
310
310
  "$schema": "https://json-schema.org/draft/2020-12/schema",
311
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/component/v2.0.0",
311
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/component/v3.0.0",
312
312
  "title": "HDF Component Primitives",
313
313
  "description": "First-class system component with identity, polymorphic type, SBOM embedding, and system-binding properties. Components are the successor to Targets, adding stable identity (componentId), external system cross-references, and software inventory.",
314
314
  "$defs": {
@@ -338,7 +338,7 @@
338
338
  "description": "Description of this component's role or purpose."
339
339
  },
340
340
  "owner": {
341
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Identity",
341
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Identity",
342
342
  "description": "Team or individual responsible for this component. Enables per-component ownership when different teams manage different parts of a system."
343
343
  },
344
344
  "externalIds": {
@@ -382,12 +382,12 @@
382
382
  "inputOverrides": {
383
383
  "type": "array",
384
384
  "items": {
385
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/system/v2.0.0#/$defs/Input_Override"
385
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/system/v3.0.0#/$defs/Input_Override"
386
386
  },
387
387
  "description": "System-specific overrides for baseline input values."
388
388
  },
389
389
  "targetSelector": {
390
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/system/v2.0.0#/$defs/Target_Selector",
390
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/system/v3.0.0#/$defs/Target_Selector",
391
391
  "description": "Label selector to match targets belonging to this component during migration. Targets with matching labels are automatically included."
392
392
  }
393
393
  },
@@ -707,7 +707,7 @@
707
707
  "const": "cloudAccount"
708
708
  },
709
709
  "provider": {
710
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Cloud_Provider",
710
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Cloud_Provider",
711
711
  "description": "Cloud provider."
712
712
  },
713
713
  "accountId": {
@@ -746,7 +746,7 @@
746
746
  "const": "cloudResource"
747
747
  },
748
748
  "provider": {
749
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Cloud_Provider",
749
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Cloud_Provider",
750
750
  "description": "Cloud provider."
751
751
  },
752
752
  "resourceType": {
@@ -926,9 +926,9 @@
926
926
  }
927
927
  }
928
928
  },
929
- "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0": {
929
+ "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0": {
930
930
  "$schema": "https://json-schema.org/draft/2020-12/schema",
931
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0",
931
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0",
932
932
  "title": "HDF Common Primitives",
933
933
  "description": "Shared building blocks used by hdf-results and hdf-baseline schemas.",
934
934
  "$defs": {
@@ -1744,9 +1744,9 @@
1744
1744
  }
1745
1745
  }
1746
1746
  },
1747
- "https://mitre.github.io/hdf-libs/schemas/primitives/system/v2.0.0": {
1747
+ "https://mitre.github.io/hdf-libs/schemas/primitives/system/v3.0.0": {
1748
1748
  "$schema": "https://json-schema.org/draft/2020-12/schema",
1749
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/system/v2.0.0",
1749
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/system/v3.0.0",
1750
1750
  "title": "HDF System Primitives",
1751
1751
  "description": "Types for describing system architecture, authorization boundaries, and components.",
1752
1752
  "$defs": {
@@ -1797,7 +1797,7 @@
1797
1797
  "description": "Rationale for why this override is needed."
1798
1798
  },
1799
1799
  "approvedBy": {
1800
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Identity",
1800
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Identity",
1801
1801
  "description": "Identity of the person or system that approved this override."
1802
1802
  }
1803
1803
  },
@@ -1878,9 +1878,9 @@
1878
1878
  }
1879
1879
  }
1880
1880
  },
1881
- "https://mitre.github.io/hdf-libs/schemas/primitives/statistics/v2.0.0": {
1881
+ "https://mitre.github.io/hdf-libs/schemas/primitives/statistics/v3.0.0": {
1882
1882
  "$schema": "https://json-schema.org/draft/2020-12/schema",
1883
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/statistics/v2.0.0",
1883
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/statistics/v3.0.0",
1884
1884
  "title": "HDF Statistics Primitives",
1885
1885
  "description": "Statistics types for tracking assessment run metrics.",
1886
1886
  "$defs": {
@@ -1949,9 +1949,9 @@
1949
1949
  }
1950
1950
  }
1951
1951
  },
1952
- "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0": {
1952
+ "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0": {
1953
1953
  "$schema": "https://json-schema.org/draft/2020-12/schema",
1954
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v2.0.0",
1954
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/extensions/v3.0.0",
1955
1955
  "title": "HDF Extension Primitives",
1956
1956
  "description": "Extension types for waivers, attestations, generators, and integrity.",
1957
1957
  "$defs": {
@@ -1968,11 +1968,11 @@
1968
1968
  ],
1969
1969
  "properties": {
1970
1970
  "type": {
1971
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v2.0.0#/$defs/Override_Type",
1971
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v3.0.0#/$defs/Override_Type",
1972
1972
  "description": "The type of status override applied to this requirement."
1973
1973
  },
1974
1974
  "status": {
1975
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0#/$defs/Result_Status",
1975
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0#/$defs/Result_Status",
1976
1976
  "description": "The new status this override sets for the requirement. This intentionally changes the compliance status."
1977
1977
  },
1978
1978
  "reason": {
@@ -1980,7 +1980,7 @@
1980
1980
  "description": "Explanation for why this status override was applied."
1981
1981
  },
1982
1982
  "appliedBy": {
1983
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Identity",
1983
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Identity",
1984
1984
  "description": "Identity of who applied this status override. For simple cases, use type 'simple' with just an identifier."
1985
1985
  },
1986
1986
  "appliedAt": {
@@ -1994,18 +1994,18 @@
1994
1994
  "description": "Timestamp when this status override expires and must be reviewed/renewed. REQUIRED - no permanent status overrides allowed. ISO 8601 format."
1995
1995
  },
1996
1996
  "signature": {
1997
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Signature",
1997
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Signature",
1998
1998
  "description": "Optional digital signature for enhanced trust and non-repudiation. Supports hardware security tokens (PKCS#11/PKCS#12), Yubikeys, GPG keys, passkeys, and other signing methods."
1999
1999
  },
2000
2000
  "evidence": {
2001
2001
  "type": "array",
2002
2002
  "items": {
2003
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Evidence"
2003
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Evidence"
2004
2004
  },
2005
2005
  "description": "Supporting evidence for this status override, such as screenshots demonstrating manual verification for attestations."
2006
2006
  },
2007
2007
  "previousChecksum": {
2008
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Checksum",
2008
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Checksum",
2009
2009
  "description": "SHA-256 checksum of the previous amendment in chronological order. Creates a tamper-evident chain of amendments (similar to blockchain). Null for the first amendment on a requirement."
2010
2010
  }
2011
2011
  },
@@ -2075,7 +2075,7 @@
2075
2075
  "description": "Detailed explanation of the plan, including what actions will be taken."
2076
2076
  },
2077
2077
  "appliedBy": {
2078
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Identity",
2078
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Identity",
2079
2079
  "description": "Identity of who created this POA&M. For simple cases, use type 'simple' with just an identifier."
2080
2080
  },
2081
2081
  "appliedAt": {
@@ -2091,23 +2091,23 @@
2091
2091
  "milestones": {
2092
2092
  "type": "array",
2093
2093
  "items": {
2094
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Milestone"
2094
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Milestone"
2095
2095
  },
2096
2096
  "description": "Optional array of milestones tracking progress toward completion."
2097
2097
  },
2098
2098
  "signature": {
2099
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Signature",
2099
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Signature",
2100
2100
  "description": "Optional digital signature for enhanced trust and non-repudiation."
2101
2101
  },
2102
2102
  "evidence": {
2103
2103
  "type": "array",
2104
2104
  "items": {
2105
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Evidence"
2105
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Evidence"
2106
2106
  },
2107
2107
  "description": "Supporting evidence for this POA&M, such as documentation of compensating controls or mitigation implementation."
2108
2108
  },
2109
2109
  "previousChecksum": {
2110
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Checksum",
2110
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Checksum",
2111
2111
  "description": "SHA-256 checksum of the previous amendment in chronological order. Creates a tamper-evident chain of amendments (similar to blockchain). Null for the first amendment on a requirement."
2112
2112
  }
2113
2113
  },
@@ -2258,7 +2258,7 @@
2258
2258
  },
2259
2259
  "properties": {
2260
2260
  "algorithm": {
2261
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Hash_Algorithm",
2261
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Hash_Algorithm",
2262
2262
  "description": "The hash algorithm used for the checksum."
2263
2263
  },
2264
2264
  "checksum": {
@@ -2291,9 +2291,9 @@
2291
2291
  }
2292
2292
  }
2293
2293
  },
2294
- "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v2.0.0": {
2294
+ "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v3.0.0": {
2295
2295
  "$schema": "https://json-schema.org/draft/2020-12/schema",
2296
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v2.0.0",
2296
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/amendments/v3.0.0",
2297
2297
  "title": "HDF Amendment Primitives",
2298
2298
  "description": "Types for waivers, attestations, exceptions, and POA&Ms that modify requirement compliance status.",
2299
2299
  "$defs": {
@@ -2335,7 +2335,7 @@
2335
2335
  "description": "Name of the baseline containing the requirement. Required when the system has multiple baselines with potentially overlapping requirement IDs."
2336
2336
  },
2337
2337
  "status": {
2338
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0#/$defs/Result_Status",
2338
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0#/$defs/Result_Status",
2339
2339
  "description": "The new status this amendment sets. For POA&Ms, this is the current status (POA&Ms track work, they don't change status)."
2340
2340
  },
2341
2341
  "reason": {
@@ -2343,7 +2343,7 @@
2343
2343
  "description": "Justification for this amendment."
2344
2344
  },
2345
2345
  "appliedBy": {
2346
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Identity",
2346
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Identity",
2347
2347
  "description": "Identity of who applied this amendment."
2348
2348
  },
2349
2349
  "appliedAt": {
@@ -2359,22 +2359,22 @@
2359
2359
  "evidence": {
2360
2360
  "type": "array",
2361
2361
  "items": {
2362
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Evidence"
2362
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Evidence"
2363
2363
  },
2364
2364
  "description": "Supporting evidence (screenshots, logs, URLs, documents)."
2365
2365
  },
2366
2366
  "signature": {
2367
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Signature",
2367
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Signature",
2368
2368
  "description": "Digital signature for non-repudiation."
2369
2369
  },
2370
2370
  "previousChecksum": {
2371
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Checksum",
2371
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Checksum",
2372
2372
  "description": "Checksum of the prior amendment in the chain. Creates a tamper-evident linked list. Null for the first amendment."
2373
2373
  },
2374
2374
  "milestones": {
2375
2375
  "type": "array",
2376
2376
  "items": {
2377
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Milestone"
2377
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Milestone"
2378
2378
  },
2379
2379
  "description": "Remediation milestones (primarily for POA&M type amendments)."
2380
2380
  },
@@ -2455,9 +2455,9 @@
2455
2455
  }
2456
2456
  }
2457
2457
  },
2458
- "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0": {
2458
+ "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0": {
2459
2459
  "$schema": "https://json-schema.org/draft/2020-12/schema",
2460
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v2.0.0",
2460
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/result/v3.0.0",
2461
2461
  "title": "HDF Result Primitives",
2462
2462
  "description": "Types for representing assessment results and statuses.",
2463
2463
  "$defs": {
@@ -2588,9 +2588,9 @@
2588
2588
  }
2589
2589
  }
2590
2590
  },
2591
- "https://mitre.github.io/hdf-libs/schemas/primitives/runner/v2.0.0": {
2591
+ "https://mitre.github.io/hdf-libs/schemas/primitives/runner/v3.0.0": {
2592
2592
  "$schema": "https://json-schema.org/draft/2020-12/schema",
2593
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/runner/v2.0.0",
2593
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/runner/v3.0.0",
2594
2594
  "title": "HDF Runner Primitive",
2595
2595
  "description": "Information about the test execution environment where the security tool/scanner was executed.",
2596
2596
  "$defs": {
@@ -2626,7 +2626,7 @@
2626
2626
  "description": "The container instance identifier. Example: 'a1b2c3d4e5f6', 'security-scan-job-xyz123'. Can be a Docker container ID, Kubernetes pod name, or other container runtime identifier."
2627
2627
  },
2628
2628
  "operator": {
2629
- "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v2.0.0#/$defs/Identity",
2629
+ "$ref": "https://mitre.github.io/hdf-libs/schemas/primitives/common/v3.0.0#/$defs/Identity",
2630
2630
  "description": "The identity of the person or system responsible for executing the test. This could be a human auditor manually completing a checklist, an automated CI/CD system, or a security tool. Optional field to support both automated and manual HDF generation."
2631
2631
  }
2632
2632
  },
@@ -2673,9 +2673,9 @@
2673
2673
  }
2674
2674
  }
2675
2675
  },
2676
- "https://mitre.github.io/hdf-libs/schemas/primitives/parameter/v2.0.0": {
2676
+ "https://mitre.github.io/hdf-libs/schemas/primitives/parameter/v3.0.0": {
2677
2677
  "$schema": "https://json-schema.org/draft/2020-12/schema",
2678
- "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/parameter/v2.0.0",
2678
+ "$id": "https://mitre.github.io/hdf-libs/schemas/primitives/parameter/v3.0.0",
2679
2679
  "title": "HDF Parameter Primitives",
2680
2680
  "description": "Input/parameter type definitions for typed, traceable configuration values that bridge governance prose and scanner automation.",
2681
2681
  "$defs": {