@openauditmodel/cli 0.4.1 → 0.4.2

package/examples/profiles/deployment-and-change-management/invalid/deploy-approved-missing-approval.json

@@ -0,0 +1,73 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-1002-7a3b-8c4d-5e6f70819202",
+  "time": "2026-03-16T14:41:27.905Z",
+  "event": {
+    "name": "deployment.release.deploy",
+    "category": "deployment",
+    "type": "execute",
+    "outcome": "success",
+    "severity": "high",
+    "summary": "Approved release deployed to the production environment."
+  },
+  "actor": {
+    "type": "user",
+    "id": "user-3307",
+    "roles": ["release-manager"]
+  },
+  "resource": {
+    "type": "deployment",
+    "id": "deployment-2026-0316-9",
+    "name": "checkout-service-release",
+    "parentId": "cluster-production-1"
+  },
+  "relatedResources": [
+    { "type": "service", "id": "service-checkout" },
+    { "type": "service", "id": "service-pricing" }
+  ],
+  "application": {
+    "name": "delivery-platform",
+    "environment": "production",
+    "version": "4.2.0",
+    "component": "release-controller"
+  },
+  "authentication": {
+    "method": "mfa",
+    "mfa": true,
+    "assuranceLevel": "high"
+  },
+  "authorization": {
+    "decision": "allow",
+    "engine": "policy-service",
+    "policy": "production-release",
+    "policyVersion": "7"
+  },
+  "request": {
+    "requestId": "request-9b21ce",
+    "correlationId": "deployment-2026-0316-9"
+  },
+  "change": {
+    "type": "execute",
+    "changedFields": ["releaseVersion"],
+    "ticketId": "change-2026-0316-9",
+    "deploymentId": "deployment-2026-0316-9"
+  },
+  "reason": {
+    "code": "planned-release",
+    "text": "Scheduled release of the approved checkout change set.",
+    "reference": "change-2026-0316-9"
+  },
+  "controlCategories": ["change-approval", "change-management"],
+  "tags": ["production"],
+  "metadata": {
+    "deployment": {
+      "id": "deployment-2026-0316-9",
+      "environment": "production",
+      "version": "9.1.0",
+      "previousVersion": "9.0.3",
+      "approvalRequired": true,
+      "pipelineId": "pipeline-checkout-delivery",
+      "strategy": "blue-green"
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/invalid/deploy-failed-missing-resulting-state.json

@@ -0,0 +1,71 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-1005-7a3b-8c4d-5e6f70819205",
+  "time": "2026-03-16T10:31:55.204Z",
+  "event": {
+    "name": "deployment.release.deploy",
+    "category": "deployment",
+    "type": "execute",
+    "outcome": "failure",
+    "severity": "medium",
+    "summary": "Deployment aborted before any instance was replaced.",
+    "error": {
+      "code": "dependency-unavailable",
+      "type": "dependency",
+      "message": "The migration service did not respond within the release window.",
+      "retryable": true
+    }
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-delivery-runner",
+    "roles": ["deployment-runner"]
+  },
+  "subject": {
+    "type": "user",
+    "id": "user-2210"
+  },
+  "delegation": {
+    "type": "on-behalf-of",
+    "reason": "The pipeline deployed the change its author merged.",
+    "reference": "change-2026-0316-5"
+  },
+  "resource": {
+    "type": "deployment",
+    "id": "deployment-2026-0316-5",
+    "name": "checkout-service-release",
+    "parentId": "cluster-staging-1"
+  },
+  "relatedResources": [{ "type": "service", "id": "service-checkout" }],
+  "application": {
+    "name": "delivery-platform",
+    "environment": "production",
+    "version": "4.2.0",
+    "component": "release-controller"
+  },
+  "request": {
+    "requestId": "request-6f0ba4",
+    "correlationId": "deployment-2026-0316-5"
+  },
+  "change": {
+    "type": "none",
+    "ticketId": "change-2026-0316-5",
+    "deploymentId": "deployment-2026-0316-5"
+  },
+  "reason": {
+    "code": "scheduled-release",
+    "text": "Automated delivery of a merged change."
+  },
+  "controlCategories": ["change-management"],
+  "tags": ["staging"],
+  "metadata": {
+    "deployment": {
+      "id": "deployment-2026-0316-5",
+      "environment": "staging",
+      "version": "9.1.1",
+      "previousVersion": "9.1.0",
+      "approvalRequired": false,
+      "pipelineId": "pipeline-checkout-delivery"
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-approval-required.json

@@ -0,0 +1,67 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-1001-7a3b-8c4d-5e6f70819201",
+  "time": "2026-03-16T09:14:02.318Z",
+  "event": {
+    "name": "deployment.release.deploy",
+    "category": "deployment",
+    "type": "execute",
+    "outcome": "success",
+    "severity": "medium",
+    "summary": "Merged change delivered to the staging environment by the pipeline."
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-delivery-runner",
+    "roles": ["deployment-runner"]
+  },
+  "subject": {
+    "type": "user",
+    "id": "user-2210"
+  },
+  "delegation": {
+    "type": "on-behalf-of",
+    "reason": "The pipeline deployed the change its author merged.",
+    "reference": "change-2026-0316-4"
+  },
+  "resource": {
+    "type": "deployment",
+    "id": "deployment-2026-0316-4",
+    "name": "checkout-service-release",
+    "parentId": "cluster-staging-1"
+  },
+  "relatedResources": [{ "type": "service", "id": "service-checkout" }],
+  "application": {
+    "name": "delivery-platform",
+    "environment": "production",
+    "version": "4.2.0",
+    "component": "release-controller",
+    "region": "region-1"
+  },
+  "request": {
+    "requestId": "request-d41f2a",
+    "correlationId": "deployment-2026-0316-4"
+  },
+  "change": {
+    "type": "execute",
+    "changedFields": ["releaseVersion"],
+    "ticketId": "change-2026-0316-4",
+    "deploymentId": "deployment-2026-0316-4"
+  },
+  "reason": {
+    "code": "scheduled-release",
+    "text": "Automated delivery of a merged change."
+  },
+  "controlCategories": ["change-management"],
+  "tags": ["staging", "continuous-delivery"],
+  "metadata": {
+    "deployment": {
+      "id": "deployment-2026-0316-4",
+      "environment": "staging",
+      "version": "9.1.0",
+      "previousVersion": "9.0.3",
+      "pipelineId": "pipeline-checkout-delivery",
+      "strategy": "rolling"
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-deployment-id.json

@@ -0,0 +1,67 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-1001-7a3b-8c4d-5e6f70819201",
+  "time": "2026-03-16T09:14:02.318Z",
+  "event": {
+    "name": "deployment.release.deploy",
+    "category": "deployment",
+    "type": "execute",
+    "outcome": "success",
+    "severity": "medium",
+    "summary": "Merged change delivered to the staging environment by the pipeline."
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-delivery-runner",
+    "roles": ["deployment-runner"]
+  },
+  "subject": {
+    "type": "user",
+    "id": "user-2210"
+  },
+  "delegation": {
+    "type": "on-behalf-of",
+    "reason": "The pipeline deployed the change its author merged.",
+    "reference": "change-2026-0316-4"
+  },
+  "resource": {
+    "type": "deployment",
+    "id": "deployment-2026-0316-4",
+    "name": "checkout-service-release",
+    "parentId": "cluster-staging-1"
+  },
+  "relatedResources": [{ "type": "service", "id": "service-checkout" }],
+  "application": {
+    "name": "delivery-platform",
+    "environment": "production",
+    "version": "4.2.0",
+    "component": "release-controller",
+    "region": "region-1"
+  },
+  "request": {
+    "requestId": "request-d41f2a",
+    "correlationId": "deployment-2026-0316-4"
+  },
+  "change": {
+    "type": "execute",
+    "changedFields": ["releaseVersion"],
+    "ticketId": "change-2026-0316-4",
+    "deploymentId": "deployment-2026-0316-4"
+  },
+  "reason": {
+    "code": "scheduled-release",
+    "text": "Automated delivery of a merged change."
+  },
+  "controlCategories": ["change-management"],
+  "tags": ["staging", "continuous-delivery"],
+  "metadata": {
+    "deployment": {
+      "environment": "staging",
+      "version": "9.1.0",
+      "previousVersion": "9.0.3",
+      "approvalRequired": false,
+      "pipelineId": "pipeline-checkout-delivery",
+      "strategy": "rolling"
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-environment.json

@@ -0,0 +1,67 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-1001-7a3b-8c4d-5e6f70819201",
+  "time": "2026-03-16T09:14:02.318Z",
+  "event": {
+    "name": "deployment.release.deploy",
+    "category": "deployment",
+    "type": "execute",
+    "outcome": "success",
+    "severity": "medium",
+    "summary": "Merged change delivered to the staging environment by the pipeline."
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-delivery-runner",
+    "roles": ["deployment-runner"]
+  },
+  "subject": {
+    "type": "user",
+    "id": "user-2210"
+  },
+  "delegation": {
+    "type": "on-behalf-of",
+    "reason": "The pipeline deployed the change its author merged.",
+    "reference": "change-2026-0316-4"
+  },
+  "resource": {
+    "type": "deployment",
+    "id": "deployment-2026-0316-4",
+    "name": "checkout-service-release",
+    "parentId": "cluster-staging-1"
+  },
+  "relatedResources": [{ "type": "service", "id": "service-checkout" }],
+  "application": {
+    "name": "delivery-platform",
+    "environment": "production",
+    "version": "4.2.0",
+    "component": "release-controller",
+    "region": "region-1"
+  },
+  "request": {
+    "requestId": "request-d41f2a",
+    "correlationId": "deployment-2026-0316-4"
+  },
+  "change": {
+    "type": "execute",
+    "changedFields": ["releaseVersion"],
+    "ticketId": "change-2026-0316-4",
+    "deploymentId": "deployment-2026-0316-4"
+  },
+  "reason": {
+    "code": "scheduled-release",
+    "text": "Automated delivery of a merged change."
+  },
+  "controlCategories": ["change-management"],
+  "tags": ["staging", "continuous-delivery"],
+  "metadata": {
+    "deployment": {
+      "id": "deployment-2026-0316-4",
+      "version": "9.1.0",
+      "previousVersion": "9.0.3",
+      "approvalRequired": false,
+      "pipelineId": "pipeline-checkout-delivery",
+      "strategy": "rolling"
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-previous-version.json

@@ -0,0 +1,67 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-1001-7a3b-8c4d-5e6f70819201",
+  "time": "2026-03-16T09:14:02.318Z",
+  "event": {
+    "name": "deployment.release.deploy",
+    "category": "deployment",
+    "type": "execute",
+    "outcome": "success",
+    "severity": "medium",
+    "summary": "Merged change delivered to the staging environment by the pipeline."
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-delivery-runner",
+    "roles": ["deployment-runner"]
+  },
+  "subject": {
+    "type": "user",
+    "id": "user-2210"
+  },
+  "delegation": {
+    "type": "on-behalf-of",
+    "reason": "The pipeline deployed the change its author merged.",
+    "reference": "change-2026-0316-4"
+  },
+  "resource": {
+    "type": "deployment",
+    "id": "deployment-2026-0316-4",
+    "name": "checkout-service-release",
+    "parentId": "cluster-staging-1"
+  },
+  "relatedResources": [{ "type": "service", "id": "service-checkout" }],
+  "application": {
+    "name": "delivery-platform",
+    "environment": "production",
+    "version": "4.2.0",
+    "component": "release-controller",
+    "region": "region-1"
+  },
+  "request": {
+    "requestId": "request-d41f2a",
+    "correlationId": "deployment-2026-0316-4"
+  },
+  "change": {
+    "type": "execute",
+    "changedFields": ["releaseVersion"],
+    "ticketId": "change-2026-0316-4",
+    "deploymentId": "deployment-2026-0316-4"
+  },
+  "reason": {
+    "code": "scheduled-release",
+    "text": "Automated delivery of a merged change."
+  },
+  "controlCategories": ["change-management"],
+  "tags": ["staging", "continuous-delivery"],
+  "metadata": {
+    "deployment": {
+      "id": "deployment-2026-0316-4",
+      "environment": "staging",
+      "version": "9.1.0",
+      "approvalRequired": false,
+      "pipelineId": "pipeline-checkout-delivery",
+      "strategy": "rolling"
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-version.json

@@ -0,0 +1,67 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-1001-7a3b-8c4d-5e6f70819201",
+  "time": "2026-03-16T09:14:02.318Z",
+  "event": {
+    "name": "deployment.release.deploy",
+    "category": "deployment",
+    "type": "execute",
+    "outcome": "success",
+    "severity": "medium",
+    "summary": "Merged change delivered to the staging environment by the pipeline."
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-delivery-runner",
+    "roles": ["deployment-runner"]
+  },
+  "subject": {
+    "type": "user",
+    "id": "user-2210"
+  },
+  "delegation": {
+    "type": "on-behalf-of",
+    "reason": "The pipeline deployed the change its author merged.",
+    "reference": "change-2026-0316-4"
+  },
+  "resource": {
+    "type": "deployment",
+    "id": "deployment-2026-0316-4",
+    "name": "checkout-service-release",
+    "parentId": "cluster-staging-1"
+  },
+  "relatedResources": [{ "type": "service", "id": "service-checkout" }],
+  "application": {
+    "name": "delivery-platform",
+    "environment": "production",
+    "version": "4.2.0",
+    "component": "release-controller",
+    "region": "region-1"
+  },
+  "request": {
+    "requestId": "request-d41f2a",
+    "correlationId": "deployment-2026-0316-4"
+  },
+  "change": {
+    "type": "execute",
+    "changedFields": ["releaseVersion"],
+    "ticketId": "change-2026-0316-4",
+    "deploymentId": "deployment-2026-0316-4"
+  },
+  "reason": {
+    "code": "scheduled-release",
+    "text": "Automated delivery of a merged change."
+  },
+  "controlCategories": ["change-management"],
+  "tags": ["staging", "continuous-delivery"],
+  "metadata": {
+    "deployment": {
+      "id": "deployment-2026-0316-4",
+      "environment": "staging",
+      "previousVersion": "9.0.3",
+      "approvalRequired": false,
+      "pipelineId": "pipeline-checkout-delivery",
+      "strategy": "rolling"
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/invalid/deploy-partial-missing-resulting-state.json

@@ -0,0 +1,68 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-1006-7a3b-8c4d-5e6f70819206",
+  "time": "2026-03-16T11:07:19.663Z",
+  "event": {
+    "name": "deployment.release.deploy",
+    "category": "deployment",
+    "type": "execute",
+    "outcome": "partial",
+    "severity": "high",
+    "summary": "Rollout replaced part of the fleet before it was halted, leaving two versions serving."
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-delivery-runner",
+    "roles": ["deployment-runner"]
+  },
+  "subject": {
+    "type": "user",
+    "id": "user-2210"
+  },
+  "delegation": {
+    "type": "on-behalf-of",
+    "reason": "The pipeline deployed the change its author merged.",
+    "reference": "change-2026-0316-6"
+  },
+  "resource": {
+    "type": "deployment",
+    "id": "deployment-2026-0316-6",
+    "name": "checkout-service-release",
+    "parentId": "cluster-staging-1"
+  },
+  "relatedResources": [{ "type": "service", "id": "service-checkout" }],
+  "application": {
+    "name": "delivery-platform",
+    "environment": "production",
+    "version": "4.2.0",
+    "component": "release-controller"
+  },
+  "request": {
+    "requestId": "request-2ce917",
+    "correlationId": "deployment-2026-0316-6"
+  },
+  "change": {
+    "type": "execute",
+    "changedFields": ["releaseVersion"],
+    "ticketId": "change-2026-0316-6",
+    "deploymentId": "deployment-2026-0316-6"
+  },
+  "reason": {
+    "code": "scheduled-release",
+    "text": "Automated delivery of a merged change."
+  },
+  "controlCategories": ["change-management"],
+  "tags": ["staging"],
+  "metadata": {
+    "deployment": {
+      "id": "deployment-2026-0316-6",
+      "environment": "staging",
+      "version": "9.1.2",
+      "previousVersion": "9.1.0",
+      "approvalRequired": false,
+      "pipelineId": "pipeline-checkout-delivery",
+      "instancesUpdated": 4,
+      "instancesTotal": 12
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/invalid/secret-rotate-missing-changed-fields.json

@@ -0,0 +1,72 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-100b-7a3b-8c4d-5e6f7081920b",
+  "time": "2026-03-18T02:19:41.006Z",
+  "event": {
+    "name": "configuration.secret.rotate",
+    "category": "configuration",
+    "type": "rotate",
+    "outcome": "success",
+    "severity": "critical",
+    "summary": "Message broker credential replaced after a suspected exposure."
+  },
+  "actor": {
+    "type": "admin",
+    "id": "admin-0247",
+    "roles": ["security-responder"]
+  },
+  "resource": {
+    "type": "configuration",
+    "id": "configuration-broker-credential",
+    "name": "broker-service-credential",
+    "parentId": "cluster-production-1",
+    "classification": "restricted"
+  },
+  "relatedResources": [{ "type": "service", "id": "service-order-router" }],
+  "application": {
+    "name": "platform-control-service",
+    "environment": "production",
+    "version": "9.0.3"
+  },
+  "authentication": {
+    "method": "mfa",
+    "mfa": true,
+    "assuranceLevel": "high"
+  },
+  "authorization": {
+    "decision": "allow",
+    "engine": "policy-service",
+    "policy": "break-glass-secret-rotation",
+    "policyVersion": "4"
+  },
+  "approval": {
+    "status": "not-required"
+  },
+  "request": {
+    "requestId": "request-e12b47",
+    "correlationId": "incident-2026-0318-1"
+  },
+  "change": {
+    "type": "update",
+    "ticketId": "change-2026-0318-2",
+    "incidentId": "incident-2026-0318-1"
+  },
+  "reason": {
+    "code": "suspected-credential-exposure",
+    "text": "Credential rotated immediately after it was found in an unprotected build artifact.",
+    "reference": "incident-2026-0318-1"
+  },
+  "controlCategories": ["configuration-integrity", "privileged-access"],
+  "tags": ["production", "emergency-change"],
+  "metadata": {
+    "deployment": {
+      "id": "change-2026-0318-2",
+      "environment": "production",
+      "approvalRequired": false,
+      "emergency": true,
+      "pipelineId": "pipeline-secret-rotation",
+      "secretType": "broker-credential",
+      "rotationIntervalDays": 30
+    }
+  }
+}