@openauditmodel/cli 0.4.0 → 0.4.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (339) hide show
  1. package/README.md +5 -5
  2. package/conformance-kit/README.md +109 -0
  3. package/conformance-kit/manifest.json +8023 -0
  4. package/examples/README.md +62 -0
  5. package/examples/integrity/README.md +103 -0
  6. package/examples/integrity/invalid/broken-previous-hash/001.json +53 -0
  7. package/examples/integrity/invalid/broken-previous-hash/002.json +52 -0
  8. package/examples/integrity/invalid/broken-previous-hash/003.json +43 -0
  9. package/examples/integrity/invalid/duplicate-sequence/001.json +53 -0
  10. package/examples/integrity/invalid/duplicate-sequence/002.json +52 -0
  11. package/examples/integrity/invalid/duplicate-sequence/003.json +43 -0
  12. package/examples/integrity/invalid/missing-sequence/001.json +53 -0
  13. package/examples/integrity/invalid/missing-sequence/002.json +51 -0
  14. package/examples/integrity/invalid/missing-sequence/003.json +43 -0
  15. package/examples/integrity/invalid/reordered-chain/001.json +53 -0
  16. package/examples/integrity/invalid/reordered-chain/002.json +52 -0
  17. package/examples/integrity/invalid/reordered-chain/003.json +43 -0
  18. package/examples/integrity/invalid/tampered-event.json +51 -0
  19. package/examples/integrity/invalid/tampered-signed-event.json +46 -0
  20. package/examples/integrity/invalid/unsupported-algorithm.json +51 -0
  21. package/examples/integrity/invalid/unsupported-signature-algorithm.json +46 -0
  22. package/examples/integrity/invalid/wrong-declared-hash.json +51 -0
  23. package/examples/integrity/keys/ed25519-test-public.pem +3 -0
  24. package/examples/integrity/valid/signed-event-ed25519.json +46 -0
  25. package/examples/integrity/valid/single-event-sha256.json +51 -0
  26. package/examples/integrity/valid/three-event-chain/001.json +53 -0
  27. package/examples/integrity/valid/three-event-chain/002.json +52 -0
  28. package/examples/integrity/valid/three-event-chain/003.json +43 -0
  29. package/examples/integrity/valid/unicode-and-number-event.json +68 -0
  30. package/examples/invalid/README.md +38 -0
  31. package/examples/invalid/delegation-without-subject.json +27 -0
  32. package/examples/invalid/failure-without-error.json +28 -0
  33. package/examples/invalid/invalid-event-name.json +22 -0
  34. package/examples/invalid/invalid-extension-name.json +25 -0
  35. package/examples/invalid/missing-actor.json +18 -0
  36. package/examples/invalid/missing-resource.json +18 -0
  37. package/examples/invalid/unknown-core-property.json +23 -0
  38. package/examples/privacy/README.md +101 -0
  39. package/examples/privacy/clean/hashes-and-identifiers.json +42 -0
  40. package/examples/privacy/clean/minimal-clean-event.json +22 -0
  41. package/examples/privacy/clean/safe-evidence-reference.json +43 -0
  42. package/examples/privacy/clean/sanitized-change.json +40 -0
  43. package/examples/privacy/clean/structured-metadata.json +43 -0
  44. package/examples/privacy/findings/access-token-field.json +27 -0
  45. package/examples/privacy/findings/bearer-token.json +26 -0
  46. package/examples/privacy/findings/credentialed-connection-string.json +26 -0
  47. package/examples/privacy/findings/evidence-query-string.json +29 -0
  48. package/examples/privacy/findings/high-entropy-token.json +26 -0
  49. package/examples/privacy/findings/jwt-token.json +26 -0
  50. package/examples/privacy/findings/oversized-change-before.json +89 -0
  51. package/examples/privacy/findings/password-field.json +27 -0
  52. package/examples/privacy/findings/private-key.json +26 -0
  53. package/examples/privacy/findings/raw-response-body.json +26 -0
  54. package/examples/privacy/findings/url-userinfo.json +26 -0
  55. package/examples/profiles/api-and-integration-management/README.md +119 -0
  56. package/examples/profiles/api-and-integration-management/invalid/api-key-create-missing-authentication.json +64 -0
  57. package/examples/profiles/api-and-integration-management/invalid/api-key-create-missing-authorization.json +64 -0
  58. package/examples/profiles/api-and-integration-management/invalid/api-key-rotate-missing-credential-reference.json +58 -0
  59. package/examples/profiles/api-and-integration-management/invalid/integration-configuration-update-missing-connection-id.json +67 -0
  60. package/examples/profiles/api-and-integration-management/invalid/integration-connect-missing-approval-status.json +78 -0
  61. package/examples/profiles/api-and-integration-management/invalid/integration-disconnect-missing-authentication.json +63 -0
  62. package/examples/profiles/api-and-integration-management/invalid/integration-reauthorize-missing-error-type.json +68 -0
  63. package/examples/profiles/api-and-integration-management/invalid/integration-sync-start-missing-correlation-id.json +58 -0
  64. package/examples/profiles/api-and-integration-management/invalid/webhook-create-missing-endpoint-class.json +63 -0
  65. package/examples/profiles/api-and-integration-management/invalid/webhook-create-missing-type.json +63 -0
  66. package/examples/profiles/api-and-integration-management/invalid/webhook-disable-missing-reason.json +58 -0
  67. package/examples/profiles/api-and-integration-management/invalid/webhook-update-missing-change.json +63 -0
  68. package/examples/profiles/api-and-integration-management/not-applicable/api-request.json +45 -0
  69. package/examples/profiles/api-and-integration-management/not-applicable/integration-sync-progress.json +44 -0
  70. package/examples/profiles/api-and-integration-management/not-applicable/webhook-delivery.json +44 -0
  71. package/examples/profiles/api-and-integration-management/valid/api-key-create.json +70 -0
  72. package/examples/profiles/api-and-integration-management/valid/api-key-revoke.json +72 -0
  73. package/examples/profiles/api-and-integration-management/valid/api-key-rotate.json +59 -0
  74. package/examples/profiles/api-and-integration-management/valid/integration-configuration-update.json +68 -0
  75. package/examples/profiles/api-and-integration-management/valid/integration-connect.json +79 -0
  76. package/examples/profiles/api-and-integration-management/valid/integration-disconnect.json +69 -0
  77. package/examples/profiles/api-and-integration-management/valid/integration-reauthorize-failure.json +69 -0
  78. package/examples/profiles/api-and-integration-management/valid/integration-sync-cancel.json +65 -0
  79. package/examples/profiles/api-and-integration-management/valid/integration-sync-start.json +59 -0
  80. package/examples/profiles/api-and-integration-management/valid/webhook-create.json +64 -0
  81. package/examples/profiles/api-and-integration-management/valid/webhook-disable.json +63 -0
  82. package/examples/profiles/api-and-integration-management/valid/webhook-test.json +59 -0
  83. package/examples/profiles/api-and-integration-management/valid/webhook-update.json +76 -0
  84. package/examples/profiles/backup-and-recovery/README.md +127 -0
  85. package/examples/profiles/backup-and-recovery/invalid/backup-complete-missing-backup-id.json +55 -0
  86. package/examples/profiles/backup-and-recovery/invalid/backup-complete-missing-recovery-point.json +55 -0
  87. package/examples/profiles/backup-and-recovery/invalid/backup-create-missing-authorization.json +50 -0
  88. package/examples/profiles/backup-and-recovery/invalid/backup-delete-missing-reason.json +78 -0
  89. package/examples/profiles/backup-and-recovery/invalid/backup-expire-missing-retention-class.json +55 -0
  90. package/examples/profiles/backup-and-recovery/invalid/backup-verify-missing-verification-status.json +66 -0
  91. package/examples/profiles/backup-and-recovery/invalid/policy-update-missing-change.json +65 -0
  92. package/examples/profiles/backup-and-recovery/invalid/recovery-failover-missing-recovery-id.json +71 -0
  93. package/examples/profiles/backup-and-recovery/invalid/recovery-failover-missing-target-scope.json +71 -0
  94. package/examples/profiles/backup-and-recovery/invalid/restore-start-missing-approval.json +66 -0
  95. package/examples/profiles/backup-and-recovery/invalid/restore-start-missing-source-id.json +73 -0
  96. package/examples/profiles/backup-and-recovery/invalid/snapshot-create-missing-snapshot-id.json +57 -0
  97. package/examples/profiles/backup-and-recovery/not-applicable/backup-chunk-write.json +43 -0
  98. package/examples/profiles/backup-and-recovery/not-applicable/restore-progress.json +42 -0
  99. package/examples/profiles/backup-and-recovery/not-applicable/storage-replica-heartbeat.json +37 -0
  100. package/examples/profiles/backup-and-recovery/valid/backup-complete-failed.json +62 -0
  101. package/examples/profiles/backup-and-recovery/valid/backup-complete.json +56 -0
  102. package/examples/profiles/backup-and-recovery/valid/backup-create.json +56 -0
  103. package/examples/profiles/backup-and-recovery/valid/backup-delete.json +83 -0
  104. package/examples/profiles/backup-and-recovery/valid/backup-expire.json +56 -0
  105. package/examples/profiles/backup-and-recovery/valid/backup-verify.json +67 -0
  106. package/examples/profiles/backup-and-recovery/valid/policy-update.json +78 -0
  107. package/examples/profiles/backup-and-recovery/valid/recovery-complete.json +61 -0
  108. package/examples/profiles/backup-and-recovery/valid/recovery-failback.json +72 -0
  109. package/examples/profiles/backup-and-recovery/valid/recovery-failover.json +72 -0
  110. package/examples/profiles/backup-and-recovery/valid/recovery-start.json +61 -0
  111. package/examples/profiles/backup-and-recovery/valid/restore-complete.json +63 -0
  112. package/examples/profiles/backup-and-recovery/valid/restore-start.json +74 -0
  113. package/examples/profiles/backup-and-recovery/valid/snapshot-create.json +58 -0
  114. package/examples/profiles/backup-and-recovery/valid/snapshot-delete.json +60 -0
  115. package/examples/profiles/customer-and-account-management/README.md +127 -0
  116. package/examples/profiles/customer-and-account-management/invalid/account-close-missing-approval.json +70 -0
  117. package/examples/profiles/customer-and-account-management/invalid/account-freeze-missing-restriction-scope.json +83 -0
  118. package/examples/profiles/customer-and-account-management/invalid/account-freeze-missing-status.json +83 -0
  119. package/examples/profiles/customer-and-account-management/invalid/account-limit-missing-before.json +74 -0
  120. package/examples/profiles/customer-and-account-management/invalid/account-open-missing-owner.json +58 -0
  121. package/examples/profiles/customer-and-account-management/invalid/account-status-missing-subject.json +73 -0
  122. package/examples/profiles/customer-and-account-management/invalid/account-update-missing-override-reason.json +67 -0
  123. package/examples/profiles/customer-and-account-management/invalid/customer-close-missing-authorization.json +69 -0
  124. package/examples/profiles/customer-and-account-management/invalid/customer-create-missing-customer-type.json +62 -0
  125. package/examples/profiles/customer-and-account-management/invalid/customer-delete-missing-scope.json +70 -0
  126. package/examples/profiles/customer-and-account-management/invalid/customer-merge-missing-source.json +78 -0
  127. package/examples/profiles/customer-and-account-management/invalid/customer-update-missing-change.json +61 -0
  128. package/examples/profiles/customer-and-account-management/not-applicable/account-balance-view.json +39 -0
  129. package/examples/profiles/customer-and-account-management/not-applicable/customer-profile-view.json +38 -0
  130. package/examples/profiles/customer-and-account-management/not-applicable/customer-search.json +38 -0
  131. package/examples/profiles/customer-and-account-management/valid/account-close-approved.json +78 -0
  132. package/examples/profiles/customer-and-account-management/valid/account-freeze.json +84 -0
  133. package/examples/profiles/customer-and-account-management/valid/account-limit-increase.json +77 -0
  134. package/examples/profiles/customer-and-account-management/valid/account-open.json +59 -0
  135. package/examples/profiles/customer-and-account-management/valid/account-status-on-behalf.json +79 -0
  136. package/examples/profiles/customer-and-account-management/valid/account-update-override.json +72 -0
  137. package/examples/profiles/customer-and-account-management/valid/customer-close.json +75 -0
  138. package/examples/profiles/customer-and-account-management/valid/customer-create.json +63 -0
  139. package/examples/profiles/customer-and-account-management/valid/customer-delete.json +71 -0
  140. package/examples/profiles/customer-and-account-management/valid/customer-merge.json +79 -0
  141. package/examples/profiles/customer-and-account-management/valid/customer-restrict.json +76 -0
  142. package/examples/profiles/customer-and-account-management/valid/customer-update.json +65 -0
  143. package/examples/profiles/deployment-and-change-management/README.md +115 -0
  144. package/examples/profiles/deployment-and-change-management/invalid/cancel-missing-authorization.json +59 -0
  145. package/examples/profiles/deployment-and-change-management/invalid/cancel-missing-reason.json +61 -0
  146. package/examples/profiles/deployment-and-change-management/invalid/change-request-approve-missing-approval.json +57 -0
  147. package/examples/profiles/deployment-and-change-management/invalid/configuration-update-missing-authorization.json +81 -0
  148. package/examples/profiles/deployment-and-change-management/invalid/deploy-approved-missing-approval.json +73 -0
  149. package/examples/profiles/deployment-and-change-management/invalid/deploy-failed-missing-resulting-state.json +71 -0
  150. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-approval-required.json +67 -0
  151. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-deployment-id.json +67 -0
  152. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-environment.json +67 -0
  153. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-previous-version.json +67 -0
  154. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-version.json +67 -0
  155. package/examples/profiles/deployment-and-change-management/invalid/deploy-partial-missing-resulting-state.json +68 -0
  156. package/examples/profiles/deployment-and-change-management/invalid/secret-rotate-missing-changed-fields.json +72 -0
  157. package/examples/profiles/deployment-and-change-management/invalid/secret-rotate-missing-reason.json +68 -0
  158. package/examples/profiles/deployment-and-change-management/not-applicable/build-log-append.json +33 -0
  159. package/examples/profiles/deployment-and-change-management/not-applicable/pipeline-poll.json +33 -0
  160. package/examples/profiles/deployment-and-change-management/not-applicable/secret-access.json +39 -0
  161. package/examples/profiles/deployment-and-change-management/valid/change-request-approve.json +69 -0
  162. package/examples/profiles/deployment-and-change-management/valid/configuration-update.json +88 -0
  163. package/examples/profiles/deployment-and-change-management/valid/deploy-approved.json +85 -0
  164. package/examples/profiles/deployment-and-change-management/valid/deploy-automated.json +68 -0
  165. package/examples/profiles/deployment-and-change-management/valid/deploy-failed.json +72 -0
  166. package/examples/profiles/deployment-and-change-management/valid/deploy-partial.json +69 -0
  167. package/examples/profiles/deployment-and-change-management/valid/infrastructure-apply.json +78 -0
  168. package/examples/profiles/deployment-and-change-management/valid/release-approve.json +77 -0
  169. package/examples/profiles/deployment-and-change-management/valid/release-cancel.json +65 -0
  170. package/examples/profiles/deployment-and-change-management/valid/release-create.json +53 -0
  171. package/examples/profiles/deployment-and-change-management/valid/rollback-emergency.json +80 -0
  172. package/examples/profiles/deployment-and-change-management/valid/secret-rotate-emergency.json +73 -0
  173. package/examples/profiles/document-management/README.md +80 -0
  174. package/examples/profiles/document-management/invalid/delete-missing-reason.json +53 -0
  175. package/examples/profiles/document-management/invalid/download-missing-classification.json +46 -0
  176. package/examples/profiles/document-management/invalid/external-share-missing-expiry.json +68 -0
  177. package/examples/profiles/document-management/invalid/external-share-missing-reason.json +64 -0
  178. package/examples/profiles/document-management/invalid/legal-hold-missing-state.json +63 -0
  179. package/examples/profiles/document-management/invalid/permission-grant-missing-grantee.json +57 -0
  180. package/examples/profiles/document-management/invalid/retention-update-missing-class.json +71 -0
  181. package/examples/profiles/document-management/invalid/share-create-missing-permission.json +53 -0
  182. package/examples/profiles/document-management/invalid/share-missing-recipient-type.json +53 -0
  183. package/examples/profiles/document-management/invalid/upload-missing-authorization.json +42 -0
  184. package/examples/profiles/document-management/invalid/version-rollback-missing-previous.json +58 -0
  185. package/examples/profiles/document-management/not-applicable/file-view.json +42 -0
  186. package/examples/profiles/document-management/valid/file-delete.json +58 -0
  187. package/examples/profiles/document-management/valid/file-download.json +47 -0
  188. package/examples/profiles/document-management/valid/file-upload.json +47 -0
  189. package/examples/profiles/document-management/valid/legal-hold-apply.json +64 -0
  190. package/examples/profiles/document-management/valid/permission-grant.json +58 -0
  191. package/examples/profiles/document-management/valid/retention-update.json +72 -0
  192. package/examples/profiles/document-management/valid/share-external.json +69 -0
  193. package/examples/profiles/document-management/valid/share-internal.json +54 -0
  194. package/examples/profiles/document-management/valid/share-revoke.json +56 -0
  195. package/examples/profiles/document-management/valid/version-rollback.json +59 -0
  196. package/examples/profiles/financial-transaction-management/README.md +123 -0
  197. package/examples/profiles/financial-transaction-management/invalid/limit-update-missing-limit-type.json +101 -0
  198. package/examples/profiles/financial-transaction-management/invalid/manual-deposit-missing-change.json +85 -0
  199. package/examples/profiles/financial-transaction-management/invalid/payment-capture-missing-amount.json +69 -0
  200. package/examples/profiles/financial-transaction-management/invalid/payment-capture-missing-authorization.json +65 -0
  201. package/examples/profiles/financial-transaction-management/invalid/payout-missing-direction.json +63 -0
  202. package/examples/profiles/financial-transaction-management/invalid/reconciliation-adjust-missing-change.json +79 -0
  203. package/examples/profiles/financial-transaction-management/invalid/reconciliation-missing-identifier.json +88 -0
  204. package/examples/profiles/financial-transaction-management/invalid/refund-missing-reason.json +70 -0
  205. package/examples/profiles/financial-transaction-management/invalid/reversal-missing-original-transaction.json +84 -0
  206. package/examples/profiles/financial-transaction-management/invalid/transfer-missing-related-resources.json +66 -0
  207. package/examples/profiles/financial-transaction-management/invalid/withdrawal-missing-approval-status.json +96 -0
  208. package/examples/profiles/financial-transaction-management/invalid/withdrawal-missing-correlation.json +96 -0
  209. package/examples/profiles/financial-transaction-management/not-applicable/balance-view.json +36 -0
  210. package/examples/profiles/financial-transaction-management/not-applicable/quote-create.json +33 -0
  211. package/examples/profiles/financial-transaction-management/not-applicable/report-generate.json +36 -0
  212. package/examples/profiles/financial-transaction-management/valid/chargeback-open.json +73 -0
  213. package/examples/profiles/financial-transaction-management/valid/deposit-manual-correction.json +86 -0
  214. package/examples/profiles/financial-transaction-management/valid/limit-update.json +92 -0
  215. package/examples/profiles/financial-transaction-management/valid/payment-capture.json +70 -0
  216. package/examples/profiles/financial-transaction-management/valid/payment-reject.json +76 -0
  217. package/examples/profiles/financial-transaction-management/valid/payout-execute.json +64 -0
  218. package/examples/profiles/financial-transaction-management/valid/reconciliation-adjust.json +85 -0
  219. package/examples/profiles/financial-transaction-management/valid/refund-create.json +75 -0
  220. package/examples/profiles/financial-transaction-management/valid/reversal-execute.json +80 -0
  221. package/examples/profiles/financial-transaction-management/valid/settlement-execute.json +70 -0
  222. package/examples/profiles/financial-transaction-management/valid/transfer-execute.json +74 -0
  223. package/examples/profiles/financial-transaction-management/valid/withdrawal-execute.json +91 -0
  224. package/examples/profiles/identity-and-access-management/README.md +93 -0
  225. package/examples/profiles/identity-and-access-management/invalid/credential-rotate-missing-reason.json +47 -0
  226. package/examples/profiles/identity-and-access-management/invalid/permission-grant-missing-scope.json +54 -0
  227. package/examples/profiles/identity-and-access-management/invalid/privileged-role-without-approval.json +68 -0
  228. package/examples/profiles/identity-and-access-management/invalid/privileged-role-without-mfa.json +83 -0
  229. package/examples/profiles/identity-and-access-management/invalid/role-assign-missing-authorization.json +54 -0
  230. package/examples/profiles/identity-and-access-management/invalid/role-assign-missing-role-id.json +60 -0
  231. package/examples/profiles/identity-and-access-management/invalid/service-account-missing-owner.json +53 -0
  232. package/examples/profiles/identity-and-access-management/not-applicable/document-share.json +49 -0
  233. package/examples/profiles/identity-and-access-management/valid/credential-rotate.json +59 -0
  234. package/examples/profiles/identity-and-access-management/valid/permission-revoke.json +77 -0
  235. package/examples/profiles/identity-and-access-management/valid/role-assign-privileged.json +87 -0
  236. package/examples/profiles/identity-and-access-management/valid/role-assign-standard.json +80 -0
  237. package/examples/profiles/identity-and-access-management/valid/service-account-create.json +55 -0
  238. package/examples/profiles/identity-and-access-management/valid/user-create.json +55 -0
  239. package/examples/profiles/identity-and-access-management/valid/user-disable.json +79 -0
  240. package/examples/profiles/incident-management/README.md +125 -0
  241. package/examples/profiles/incident-management/invalid/assignment-change-missing-assignee.json +69 -0
  242. package/examples/profiles/incident-management/invalid/assignment-change-missing-change.json +59 -0
  243. package/examples/profiles/incident-management/invalid/case-close-missing-approval.json +94 -0
  244. package/examples/profiles/incident-management/invalid/case-close-missing-authorization.json +108 -0
  245. package/examples/profiles/incident-management/invalid/case-close-missing-reason.json +109 -0
  246. package/examples/profiles/incident-management/invalid/case-create-missing-status.json +67 -0
  247. package/examples/profiles/incident-management/invalid/case-reopen-missing-change.json +66 -0
  248. package/examples/profiles/incident-management/invalid/case-reopen-missing-reason.json +72 -0
  249. package/examples/profiles/incident-management/invalid/case-resolve-missing-resolution-type.json +74 -0
  250. package/examples/profiles/incident-management/invalid/corrective-action-verify-missing-method.json +81 -0
  251. package/examples/profiles/incident-management/invalid/priority-change-missing-priority.json +73 -0
  252. package/examples/profiles/incident-management/invalid/rca-approve-missing-approval.json +66 -0
  253. package/examples/profiles/incident-management/invalid/rca-create-missing-method.json +72 -0
  254. package/examples/profiles/incident-management/invalid/sla-breach-missing-target.json +49 -0
  255. package/examples/profiles/incident-management/not-applicable/case-view.json +40 -0
  256. package/examples/profiles/incident-management/not-applicable/monitoring-alert-raise.json +40 -0
  257. package/examples/profiles/incident-management/not-applicable/note-create.json +46 -0
  258. package/examples/profiles/incident-management/valid/assignment-change.json +70 -0
  259. package/examples/profiles/incident-management/valid/case-close.json +114 -0
  260. package/examples/profiles/incident-management/valid/case-create.json +68 -0
  261. package/examples/profiles/incident-management/valid/case-reopen.json +77 -0
  262. package/examples/profiles/incident-management/valid/case-resolve.json +75 -0
  263. package/examples/profiles/incident-management/valid/corrective-action-open.json +72 -0
  264. package/examples/profiles/incident-management/valid/corrective-action-verify.json +82 -0
  265. package/examples/profiles/incident-management/valid/create-short-form.json +64 -0
  266. package/examples/profiles/incident-management/valid/major-declare.json +79 -0
  267. package/examples/profiles/incident-management/valid/priority-change.json +74 -0
  268. package/examples/profiles/incident-management/valid/problem-case-close.json +73 -0
  269. package/examples/profiles/incident-management/valid/rca-approve.json +86 -0
  270. package/examples/profiles/incident-management/valid/rca-create.json +73 -0
  271. package/examples/profiles/incident-management/valid/sla-breach.json +50 -0
  272. package/examples/profiles/message-broker-management/README.md +123 -0
  273. package/examples/profiles/message-broker-management/invalid/acl-grant-missing-principal.json +78 -0
  274. package/examples/profiles/message-broker-management/invalid/configuration-update-missing-change.json +58 -0
  275. package/examples/profiles/message-broker-management/invalid/message-replay-missing-scope.json +76 -0
  276. package/examples/profiles/message-broker-management/invalid/offset-reset-missing-target.json +96 -0
  277. package/examples/profiles/message-broker-management/invalid/queue-purge-missing-destructive-flag.json +79 -0
  278. package/examples/profiles/message-broker-management/invalid/queue-purge-missing-reason.json +77 -0
  279. package/examples/profiles/message-broker-management/invalid/quota-update-missing-dimension.json +72 -0
  280. package/examples/profiles/message-broker-management/invalid/topic-create-missing-authorization.json +61 -0
  281. package/examples/profiles/message-broker-management/invalid/topic-create-missing-classification.json +66 -0
  282. package/examples/profiles/message-broker-management/invalid/topic-create-missing-cluster.json +66 -0
  283. package/examples/profiles/message-broker-management/invalid/topic-delete-denied-missing-error-type.json +68 -0
  284. package/examples/profiles/message-broker-management/invalid/topic-delete-missing-approval.json +65 -0
  285. package/examples/profiles/message-broker-management/not-applicable/consumer-group-rebalance.json +40 -0
  286. package/examples/profiles/message-broker-management/not-applicable/message-consume.json +41 -0
  287. package/examples/profiles/message-broker-management/not-applicable/message-publish.json +41 -0
  288. package/examples/profiles/message-broker-management/valid/acl-grant.json +79 -0
  289. package/examples/profiles/message-broker-management/valid/cluster-upgrade.json +77 -0
  290. package/examples/profiles/message-broker-management/valid/configuration-update.json +65 -0
  291. package/examples/profiles/message-broker-management/valid/consumer-group-delete.json +64 -0
  292. package/examples/profiles/message-broker-management/valid/message-replay.json +77 -0
  293. package/examples/profiles/message-broker-management/valid/offset-reset.json +97 -0
  294. package/examples/profiles/message-broker-management/valid/queue-purge.json +82 -0
  295. package/examples/profiles/message-broker-management/valid/quota-update.json +73 -0
  296. package/examples/profiles/message-broker-management/valid/topic-create.json +67 -0
  297. package/examples/profiles/message-broker-management/valid/topic-delete-denied.json +69 -0
  298. package/examples/profiles/message-broker-management/valid/topic-delete.json +77 -0
  299. package/examples/profiles/message-broker-management/valid/topic-retention-reduce.json +77 -0
  300. package/examples/profiles/secrets-and-key-management/README.md +115 -0
  301. package/examples/profiles/secrets-and-key-management/invalid/certificate-issue-missing-expiry.json +54 -0
  302. package/examples/profiles/secrets-and-key-management/invalid/emergency-reveal-missing-approval.json +61 -0
  303. package/examples/profiles/secrets-and-key-management/invalid/key-destroy-missing-approval.json +56 -0
  304. package/examples/profiles/secrets-and-key-management/invalid/key-generate-missing-owner.json +56 -0
  305. package/examples/profiles/secrets-and-key-management/invalid/key-import-missing-reason.json +59 -0
  306. package/examples/profiles/secrets-and-key-management/invalid/policy-update-missing-change.json +61 -0
  307. package/examples/profiles/secrets-and-key-management/invalid/secret-create-missing-authorization.json +53 -0
  308. package/examples/profiles/secrets-and-key-management/invalid/secret-export-missing-destination.json +74 -0
  309. package/examples/profiles/secrets-and-key-management/invalid/secret-reveal-missing-reason.json +65 -0
  310. package/examples/profiles/secrets-and-key-management/invalid/secret-revoke-missing-reason.json +52 -0
  311. package/examples/profiles/secrets-and-key-management/invalid/secret-rotate-missing-change.json +48 -0
  312. package/examples/profiles/secrets-and-key-management/invalid/secret-rotate-missing-type.json +54 -0
  313. package/examples/profiles/secrets-and-key-management/not-applicable/key-decrypt.json +27 -0
  314. package/examples/profiles/secrets-and-key-management/not-applicable/secret-cache-refresh.json +27 -0
  315. package/examples/profiles/secrets-and-key-management/not-applicable/secret-retrieve.json +27 -0
  316. package/examples/profiles/secrets-and-key-management/valid/certificate-issue.json +55 -0
  317. package/examples/profiles/secrets-and-key-management/valid/key-destroy.json +64 -0
  318. package/examples/profiles/secrets-and-key-management/valid/key-export.json +73 -0
  319. package/examples/profiles/secrets-and-key-management/valid/key-generate.json +57 -0
  320. package/examples/profiles/secrets-and-key-management/valid/key-import.json +64 -0
  321. package/examples/profiles/secrets-and-key-management/valid/secret-create.json +59 -0
  322. package/examples/profiles/secrets-and-key-management/valid/secret-export.json +75 -0
  323. package/examples/profiles/secrets-and-key-management/valid/secret-policy-update.json +68 -0
  324. package/examples/profiles/secrets-and-key-management/valid/secret-reveal-emergency.json +68 -0
  325. package/examples/profiles/secrets-and-key-management/valid/secret-reveal.json +70 -0
  326. package/examples/profiles/secrets-and-key-management/valid/secret-revoke.json +57 -0
  327. package/examples/profiles/secrets-and-key-management/valid/secret-rotate.json +55 -0
  328. package/examples/valid/access-request-approval.json +47 -0
  329. package/examples/valid/document-external-share.json +92 -0
  330. package/examples/valid/incident-case-close.json +114 -0
  331. package/examples/valid/kafka-consumer-offset-reset.json +105 -0
  332. package/examples/valid/minimal-event.json +22 -0
  333. package/examples/valid/nightly-reconciliation-job.json +33 -0
  334. package/examples/valid/order-api-publish.json +34 -0
  335. package/examples/valid/order-consumer-new-trace.json +36 -0
  336. package/examples/valid/privileged-configuration-change.json +109 -0
  337. package/examples/valid/service-account-data-export.json +83 -0
  338. package/examples/valid/user-role-assignment.json +92 -0
  339. package/package.json +6 -2
@@ -0,0 +1,38 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c40-0020-7b3c-8d4e-5f6071829320",
4
+ "time": "2026-04-08T09:55:12.470Z",
5
+ "event": {
6
+ "name": "customer.profile.view",
7
+ "category": "data-access",
8
+ "type": "read",
9
+ "outcome": "success",
10
+ "summary": "Customer profile opened in the service desk console."
11
+ },
12
+ "actor": {
13
+ "type": "user",
14
+ "id": "operator-3318",
15
+ "tenantId": "tenant-19",
16
+ "roles": ["customer-support-operator"]
17
+ },
18
+ "resource": {
19
+ "type": "customer",
20
+ "id": "customer-42",
21
+ "classification": "restricted",
22
+ "tenantId": "tenant-19"
23
+ },
24
+ "application": {
25
+ "name": "customer-platform",
26
+ "environment": "production",
27
+ "version": "5.2.0",
28
+ "service": "customer-records"
29
+ },
30
+ "organization": {
31
+ "tenantId": "tenant-19",
32
+ "businessUnitId": "unit-retail"
33
+ },
34
+ "request": {
35
+ "requestId": "request-9f3271",
36
+ "correlationId": "support-contact-9014"
37
+ }
38
+ }
@@ -0,0 +1,38 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c40-0021-7b3c-8d4e-5f6071829321",
4
+ "time": "2026-04-08T09:56:41.020Z",
5
+ "event": {
6
+ "name": "customer.search",
7
+ "category": "data-access",
8
+ "type": "read",
9
+ "outcome": "success",
10
+ "summary": "Customer directory searched from the service desk console."
11
+ },
12
+ "actor": {
13
+ "type": "user",
14
+ "id": "operator-3318",
15
+ "tenantId": "tenant-19",
16
+ "roles": ["customer-support-operator"]
17
+ },
18
+ "resource": {
19
+ "type": "customer-directory",
20
+ "id": "directory-retail",
21
+ "classification": "restricted",
22
+ "tenantId": "tenant-19"
23
+ },
24
+ "application": {
25
+ "name": "customer-platform",
26
+ "environment": "production",
27
+ "version": "5.2.0",
28
+ "service": "customer-records"
29
+ },
30
+ "organization": {
31
+ "tenantId": "tenant-19",
32
+ "businessUnitId": "unit-retail"
33
+ },
34
+ "request": {
35
+ "requestId": "request-9f3283",
36
+ "correlationId": "support-contact-9014"
37
+ }
38
+ }
@@ -0,0 +1,78 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c40-0010-7b3c-8d4e-5f6071829310",
4
+ "time": "2026-04-08T18:05:27.310Z",
5
+ "event": {
6
+ "name": "account.close",
7
+ "category": "resource-lifecycle",
8
+ "type": "update",
9
+ "outcome": "success",
10
+ "severity": "high",
11
+ "summary": "Settlement account closed after the balance was transferred and the contract ended."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "operator-3318",
16
+ "tenantId": "tenant-19",
17
+ "roles": ["customer-administrator"]
18
+ },
19
+ "resource": {
20
+ "type": "account",
21
+ "id": "account-ref-781",
22
+ "ownerId": "customer-42",
23
+ "classification": "restricted",
24
+ "tenantId": "tenant-19"
25
+ },
26
+ "application": {
27
+ "name": "customer-platform",
28
+ "environment": "production",
29
+ "version": "5.2.0",
30
+ "service": "account-records"
31
+ },
32
+ "organization": {
33
+ "tenantId": "tenant-19",
34
+ "businessUnitId": "unit-retail"
35
+ },
36
+ "request": {
37
+ "requestId": "request-9f3239",
38
+ "correlationId": "offboarding-6633"
39
+ },
40
+ "authorization": {
41
+ "decision": "allow",
42
+ "engine": "policy-service",
43
+ "policy": "account-closure",
44
+ "policyVersion": "8"
45
+ },
46
+ "approval": {
47
+ "status": "approved",
48
+ "workflowId": "workflow-account-closure",
49
+ "requestId": "approval-request-6288",
50
+ "requiredApprovals": 2,
51
+ "receivedApprovals": 2,
52
+ "approvedAt": "2026-04-08T18:01:44Z"
53
+ },
54
+ "reason": {
55
+ "code": "contract-ended",
56
+ "text": "Account closed as part of an agreed end of the customer relationship.",
57
+ "reference": "case-3688"
58
+ },
59
+ "change": {
60
+ "type": "update",
61
+ "changedFields": ["status"],
62
+ "before": {
63
+ "status": "active"
64
+ },
65
+ "after": {
66
+ "status": "closed"
67
+ }
68
+ },
69
+ "controlCategories": ["account-lifecycle", "change-approval"],
70
+ "metadata": {
71
+ "customer": {
72
+ "customerType": "business",
73
+ "accountType": "settlement",
74
+ "status": "closed",
75
+ "approvalRequired": true
76
+ }
77
+ }
78
+ }
@@ -0,0 +1,84 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c40-0009-7b3c-8d4e-5f6071829309",
4
+ "time": "2026-04-08T17:33:44.190Z",
5
+ "event": {
6
+ "name": "account.freeze",
7
+ "category": "security",
8
+ "type": "update",
9
+ "outcome": "success",
10
+ "severity": "critical",
11
+ "summary": "Outbound transactions frozen on a settlement account after a fraud alert."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "operator-4102",
16
+ "tenantId": "tenant-19",
17
+ "roles": ["customer-risk-officer"]
18
+ },
19
+ "resource": {
20
+ "type": "account",
21
+ "id": "account-ref-781",
22
+ "ownerId": "customer-42",
23
+ "classification": "restricted",
24
+ "tenantId": "tenant-19"
25
+ },
26
+ "application": {
27
+ "name": "customer-platform",
28
+ "environment": "production",
29
+ "version": "5.2.0",
30
+ "service": "account-risk"
31
+ },
32
+ "organization": {
33
+ "tenantId": "tenant-19",
34
+ "businessUnitId": "unit-retail"
35
+ },
36
+ "request": {
37
+ "requestId": "request-9f3227",
38
+ "correlationId": "fraud-alert-8823"
39
+ },
40
+ "authentication": {
41
+ "method": "oidc",
42
+ "provider": "corporate-idp",
43
+ "mfa": true,
44
+ "authenticatedAt": "2026-04-08T17:29:02Z"
45
+ },
46
+ "authorization": {
47
+ "decision": "allow",
48
+ "engine": "policy-service",
49
+ "policy": "account-risk-controls",
50
+ "policyVersion": "11"
51
+ },
52
+ "approval": {
53
+ "status": "approved",
54
+ "workflowId": "workflow-account-freeze",
55
+ "requiredApprovals": 1,
56
+ "receivedApprovals": 1,
57
+ "approvedAt": "2026-04-08T17:32:18Z"
58
+ },
59
+ "reason": {
60
+ "code": "fraud-alert",
61
+ "text": "Automated monitoring flagged an unusual outbound pattern for manual review.",
62
+ "reference": "case-4180"
63
+ },
64
+ "change": {
65
+ "type": "update",
66
+ "changedFields": ["status"],
67
+ "before": {
68
+ "status": "active"
69
+ },
70
+ "after": {
71
+ "status": "frozen"
72
+ }
73
+ },
74
+ "controlCategories": ["account-lifecycle", "account-restriction"],
75
+ "metadata": {
76
+ "customer": {
77
+ "customerType": "business",
78
+ "accountType": "settlement",
79
+ "status": "frozen",
80
+ "restrictionScope": "outbound-transactions",
81
+ "reviewId": "review-2026-051"
82
+ }
83
+ }
84
+ }
@@ -0,0 +1,77 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c40-0011-7b3c-8d4e-5f6071829311",
4
+ "time": "2026-04-08T14:26:51.470Z",
5
+ "event": {
6
+ "name": "account.limit.increase",
7
+ "category": "configuration",
8
+ "type": "update",
9
+ "outcome": "success",
10
+ "severity": "high",
11
+ "summary": "Daily outbound transfer limit raised for a settlement account."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "operator-4102",
16
+ "tenantId": "tenant-19",
17
+ "roles": ["account-supervisor"]
18
+ },
19
+ "resource": {
20
+ "type": "account",
21
+ "id": "account-ref-781",
22
+ "ownerId": "customer-42",
23
+ "classification": "restricted",
24
+ "tenantId": "tenant-19"
25
+ },
26
+ "application": {
27
+ "name": "customer-platform",
28
+ "environment": "production",
29
+ "version": "5.2.0",
30
+ "service": "account-limits"
31
+ },
32
+ "organization": {
33
+ "tenantId": "tenant-19",
34
+ "businessUnitId": "unit-retail"
35
+ },
36
+ "request": {
37
+ "requestId": "request-9f324b",
38
+ "correlationId": "limit-review-3320"
39
+ },
40
+ "authorization": {
41
+ "decision": "allow",
42
+ "engine": "policy-service",
43
+ "policy": "account-limit-controls",
44
+ "policyVersion": "5"
45
+ },
46
+ "approval": {
47
+ "status": "approved",
48
+ "workflowId": "workflow-limit-change",
49
+ "requiredApprovals": 1,
50
+ "receivedApprovals": 1,
51
+ "approvedAt": "2026-04-08T14:24:09Z"
52
+ },
53
+ "reason": {
54
+ "code": "customer-request",
55
+ "text": "Customer demonstrated a sustained increase in settlement volume.",
56
+ "reference": "case-4211"
57
+ },
58
+ "change": {
59
+ "type": "update",
60
+ "changedFields": ["dailyTransferLimit"],
61
+ "before": {
62
+ "dailyTransferLimit": 50000
63
+ },
64
+ "after": {
65
+ "dailyTransferLimit": 250000
66
+ }
67
+ },
68
+ "controlCategories": ["account-lifecycle", "limit-change"],
69
+ "metadata": {
70
+ "customer": {
71
+ "customerType": "business",
72
+ "accountType": "settlement",
73
+ "status": "active",
74
+ "limitType": "daily-transfer-limit"
75
+ }
76
+ }
77
+ }
@@ -0,0 +1,59 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c40-0007-7b3c-8d4e-5f6071829307",
4
+ "time": "2026-04-08T09:41:16.030Z",
5
+ "event": {
6
+ "name": "account.open",
7
+ "category": "resource-lifecycle",
8
+ "type": "create",
9
+ "outcome": "success",
10
+ "severity": "medium",
11
+ "summary": "Settlement account opened for an onboarded business customer."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "operator-3318",
16
+ "tenantId": "tenant-19",
17
+ "roles": ["customer-administrator"]
18
+ },
19
+ "resource": {
20
+ "type": "account",
21
+ "id": "account-ref-781",
22
+ "ownerId": "customer-42",
23
+ "classification": "restricted",
24
+ "tenantId": "tenant-19"
25
+ },
26
+ "application": {
27
+ "name": "customer-platform",
28
+ "environment": "production",
29
+ "version": "5.2.0",
30
+ "service": "account-records"
31
+ },
32
+ "organization": {
33
+ "tenantId": "tenant-19",
34
+ "businessUnitId": "unit-retail"
35
+ },
36
+ "request": {
37
+ "requestId": "request-9f3201",
38
+ "correlationId": "onboarding-4471"
39
+ },
40
+ "authorization": {
41
+ "decision": "allow",
42
+ "engine": "policy-service",
43
+ "policy": "account-opening",
44
+ "policyVersion": "8"
45
+ },
46
+ "reason": {
47
+ "code": "customer-onboarding",
48
+ "text": "First account for a newly onboarded business relationship.",
49
+ "reference": "case-3391"
50
+ },
51
+ "controlCategories": ["account-lifecycle"],
52
+ "metadata": {
53
+ "customer": {
54
+ "customerType": "business",
55
+ "accountType": "settlement",
56
+ "status": "active"
57
+ }
58
+ }
59
+ }
@@ -0,0 +1,79 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c40-0012-7b3c-8d4e-5f6071829312",
4
+ "time": "2026-04-08T19:14:33.900Z",
5
+ "event": {
6
+ "name": "account.status.update",
7
+ "category": "resource-lifecycle",
8
+ "type": "update",
9
+ "outcome": "success",
10
+ "severity": "high",
11
+ "summary": "Account moved to dormant by a support operator acting for the account holder."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "operator-3318",
16
+ "tenantId": "tenant-19",
17
+ "roles": ["customer-support-operator"]
18
+ },
19
+ "subject": {
20
+ "type": "external",
21
+ "id": "customer-42",
22
+ "organizationId": "organization-155",
23
+ "tenantId": "tenant-19"
24
+ },
25
+ "resource": {
26
+ "type": "account",
27
+ "id": "account-ref-781",
28
+ "ownerId": "customer-42",
29
+ "classification": "restricted",
30
+ "tenantId": "tenant-19"
31
+ },
32
+ "application": {
33
+ "name": "customer-platform",
34
+ "environment": "production",
35
+ "version": "5.2.0",
36
+ "service": "account-records"
37
+ },
38
+ "organization": {
39
+ "tenantId": "tenant-19",
40
+ "businessUnitId": "unit-retail"
41
+ },
42
+ "request": {
43
+ "requestId": "request-9f325c",
44
+ "correlationId": "support-contact-9014"
45
+ },
46
+ "authorization": {
47
+ "decision": "allow",
48
+ "engine": "policy-service",
49
+ "policy": "account-status-controls",
50
+ "policyVersion": "5"
51
+ },
52
+ "approval": {
53
+ "status": "not-required"
54
+ },
55
+ "reason": {
56
+ "code": "customer-request",
57
+ "text": "Account holder asked for the account to be made dormant during a seasonal pause.",
58
+ "reference": "case-4290"
59
+ },
60
+ "change": {
61
+ "type": "update",
62
+ "changedFields": ["status"],
63
+ "before": {
64
+ "status": "active"
65
+ },
66
+ "after": {
67
+ "status": "dormant"
68
+ }
69
+ },
70
+ "controlCategories": ["account-lifecycle"],
71
+ "metadata": {
72
+ "customer": {
73
+ "customerType": "business",
74
+ "accountType": "settlement",
75
+ "status": "dormant",
76
+ "onBehalfOf": true
77
+ }
78
+ }
79
+ }
@@ -0,0 +1,72 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c40-0008-7b3c-8d4e-5f6071829308",
4
+ "time": "2026-04-08T16:18:05.720Z",
5
+ "event": {
6
+ "name": "account.update",
7
+ "category": "data-modification",
8
+ "type": "update",
9
+ "outcome": "success",
10
+ "severity": "high",
11
+ "summary": "Statement cycle changed by an operator overriding the automated schedule."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "operator-4102",
16
+ "tenantId": "tenant-19",
17
+ "roles": ["account-supervisor"]
18
+ },
19
+ "resource": {
20
+ "type": "account",
21
+ "id": "account-ref-781",
22
+ "ownerId": "customer-42",
23
+ "classification": "restricted",
24
+ "tenantId": "tenant-19"
25
+ },
26
+ "application": {
27
+ "name": "customer-platform",
28
+ "environment": "production",
29
+ "version": "5.2.0",
30
+ "service": "account-records"
31
+ },
32
+ "organization": {
33
+ "tenantId": "tenant-19",
34
+ "businessUnitId": "unit-retail"
35
+ },
36
+ "request": {
37
+ "requestId": "request-9f3214",
38
+ "correlationId": "account-maintenance-5511"
39
+ },
40
+ "authorization": {
41
+ "decision": "allow",
42
+ "engine": "policy-service",
43
+ "policy": "account-maintenance",
44
+ "policyVersion": "8",
45
+ "reason": "Supervisor override permitted for statement scheduling."
46
+ },
47
+ "reason": {
48
+ "code": "manual-override",
49
+ "text": "Automated statement schedule produced a cycle the customer contract does not allow.",
50
+ "reference": "case-4055"
51
+ },
52
+ "change": {
53
+ "type": "update",
54
+ "changedFields": ["statementCycle"],
55
+ "before": {
56
+ "statementCycle": "monthly"
57
+ },
58
+ "after": {
59
+ "statementCycle": "quarterly"
60
+ }
61
+ },
62
+ "controlCategories": ["account-lifecycle", "manual-override"],
63
+ "metadata": {
64
+ "customer": {
65
+ "customerType": "business",
66
+ "accountType": "settlement",
67
+ "status": "active",
68
+ "manualOverride": true,
69
+ "overrideReference": "override-2026-0188"
70
+ }
71
+ }
72
+ }
@@ -0,0 +1,75 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c40-0004-7b3c-8d4e-5f6071829304",
4
+ "time": "2026-04-08T12:20:59.140Z",
5
+ "event": {
6
+ "name": "customer.close",
7
+ "category": "resource-lifecycle",
8
+ "type": "update",
9
+ "outcome": "success",
10
+ "severity": "high",
11
+ "summary": "Customer relationship closed at the customer's request."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "operator-3318",
16
+ "tenantId": "tenant-19",
17
+ "roles": ["customer-administrator"]
18
+ },
19
+ "resource": {
20
+ "type": "customer",
21
+ "id": "customer-42",
22
+ "classification": "restricted",
23
+ "tenantId": "tenant-19"
24
+ },
25
+ "application": {
26
+ "name": "customer-platform",
27
+ "environment": "production",
28
+ "version": "5.2.0",
29
+ "service": "customer-records"
30
+ },
31
+ "organization": {
32
+ "tenantId": "tenant-19",
33
+ "businessUnitId": "unit-retail"
34
+ },
35
+ "request": {
36
+ "requestId": "request-9f31d9",
37
+ "correlationId": "offboarding-6633"
38
+ },
39
+ "authorization": {
40
+ "decision": "allow",
41
+ "engine": "policy-service",
42
+ "policy": "customer-offboarding",
43
+ "policyVersion": "6"
44
+ },
45
+ "approval": {
46
+ "status": "approved",
47
+ "workflowId": "workflow-customer-offboarding",
48
+ "requiredApprovals": 1,
49
+ "receivedApprovals": 1,
50
+ "approvedAt": "2026-04-08T12:18:02Z"
51
+ },
52
+ "reason": {
53
+ "code": "customer-request",
54
+ "text": "Customer asked to end the relationship after contract expiry.",
55
+ "reference": "case-3688"
56
+ },
57
+ "change": {
58
+ "type": "update",
59
+ "changedFields": ["status"],
60
+ "before": {
61
+ "status": "active"
62
+ },
63
+ "after": {
64
+ "status": "closed"
65
+ }
66
+ },
67
+ "controlCategories": ["customer-lifecycle"],
68
+ "metadata": {
69
+ "customer": {
70
+ "customerType": "business",
71
+ "status": "closed",
72
+ "closureChannel": "self-service"
73
+ }
74
+ }
75
+ }
@@ -0,0 +1,63 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c40-0001-7b3c-8d4e-5f6071829301",
4
+ "time": "2026-04-08T09:12:04.220Z",
5
+ "event": {
6
+ "name": "customer.create",
7
+ "category": "data-modification",
8
+ "type": "create",
9
+ "outcome": "success",
10
+ "severity": "medium",
11
+ "summary": "Business customer record created at the end of onboarding."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "operator-3318",
16
+ "tenantId": "tenant-19",
17
+ "roles": ["customer-administrator"]
18
+ },
19
+ "resource": {
20
+ "type": "customer",
21
+ "id": "customer-42",
22
+ "classification": "restricted",
23
+ "tenantId": "tenant-19"
24
+ },
25
+ "application": {
26
+ "name": "customer-platform",
27
+ "environment": "production",
28
+ "version": "5.2.0",
29
+ "service": "customer-records"
30
+ },
31
+ "organization": {
32
+ "tenantId": "tenant-19",
33
+ "businessUnitId": "unit-retail"
34
+ },
35
+ "request": {
36
+ "requestId": "request-9f31a2",
37
+ "correlationId": "onboarding-4471"
38
+ },
39
+ "authorization": {
40
+ "decision": "allow",
41
+ "engine": "policy-service",
42
+ "policy": "customer-onboarding",
43
+ "policyVersion": "9"
44
+ },
45
+ "reason": {
46
+ "code": "customer-onboarding",
47
+ "text": "Onboarding completed for a new business relationship.",
48
+ "reference": "case-3391"
49
+ },
50
+ "privacy": {
51
+ "containsPersonalData": false,
52
+ "minimized": true,
53
+ "purpose": "operational-audit"
54
+ },
55
+ "controlCategories": ["customer-lifecycle"],
56
+ "metadata": {
57
+ "customer": {
58
+ "customerType": "business",
59
+ "status": "active",
60
+ "segment": "small-business"
61
+ }
62
+ }
63
+ }