@openauditmodel/cli 0.4.1 → 0.4.2

package/examples/profiles/deployment-and-change-management/invalid/secret-rotate-missing-reason.json

@@ -0,0 +1,68 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-100b-7a3b-8c4d-5e6f7081920b",
+  "time": "2026-03-18T02:19:41.006Z",
+  "event": {
+    "name": "configuration.secret.rotate",
+    "category": "configuration",
+    "type": "rotate",
+    "outcome": "success",
+    "severity": "critical",
+    "summary": "Message broker credential replaced after a suspected exposure."
+  },
+  "actor": {
+    "type": "admin",
+    "id": "admin-0247",
+    "roles": ["security-responder"]
+  },
+  "resource": {
+    "type": "configuration",
+    "id": "configuration-broker-credential",
+    "name": "broker-service-credential",
+    "parentId": "cluster-production-1",
+    "classification": "restricted"
+  },
+  "relatedResources": [{ "type": "service", "id": "service-order-router" }],
+  "application": {
+    "name": "platform-control-service",
+    "environment": "production",
+    "version": "9.0.3"
+  },
+  "authentication": {
+    "method": "mfa",
+    "mfa": true,
+    "assuranceLevel": "high"
+  },
+  "authorization": {
+    "decision": "allow",
+    "engine": "policy-service",
+    "policy": "break-glass-secret-rotation",
+    "policyVersion": "4"
+  },
+  "approval": {
+    "status": "not-required"
+  },
+  "request": {
+    "requestId": "request-e12b47",
+    "correlationId": "incident-2026-0318-1"
+  },
+  "change": {
+    "type": "update",
+    "changedFields": ["secret"],
+    "ticketId": "change-2026-0318-2",
+    "incidentId": "incident-2026-0318-1"
+  },
+  "controlCategories": ["configuration-integrity", "privileged-access"],
+  "tags": ["production", "emergency-change"],
+  "metadata": {
+    "deployment": {
+      "id": "change-2026-0318-2",
+      "environment": "production",
+      "approvalRequired": false,
+      "emergency": true,
+      "pipelineId": "pipeline-secret-rotation",
+      "secretType": "broker-credential",
+      "rotationIntervalDays": 30
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/not-applicable/build-log-append.json

@@ -0,0 +1,33 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-2002-7a3b-8c4d-5e6f70819302",
+  "time": "2026-03-16T08:02:11.744Z",
+  "event": {
+    "name": "deployment.build.log-append",
+    "category": "deployment",
+    "type": "create",
+    "outcome": "success",
+    "severity": "debug",
+    "summary": "Build step output appended to the build log."
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-build-controller"
+  },
+  "resource": {
+    "type": "build",
+    "id": "build-checkout-4471"
+  },
+  "application": {
+    "name": "delivery-platform",
+    "environment": "production",
+    "version": "4.2.0",
+    "component": "build-controller"
+  },
+  "metadata": {
+    "build": {
+      "step": "unit-tests",
+      "lineCount": 214
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/not-applicable/pipeline-poll.json

@@ -0,0 +1,33 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-2001-7a3b-8c4d-5e6f70819301",
+  "time": "2026-03-16T09:13:58.002Z",
+  "event": {
+    "name": "deployment.pipeline.poll",
+    "category": "deployment",
+    "type": "read",
+    "outcome": "success",
+    "severity": "debug",
+    "summary": "Pipeline runner polled for queued work."
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-delivery-runner"
+  },
+  "resource": {
+    "type": "pipeline",
+    "id": "pipeline-checkout-delivery"
+  },
+  "application": {
+    "name": "delivery-platform",
+    "environment": "production",
+    "version": "4.2.0",
+    "component": "release-controller"
+  },
+  "metadata": {
+    "pipeline": {
+      "queuedJobs": 0,
+      "pollIntervalSeconds": 15
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/not-applicable/secret-access.json

@@ -0,0 +1,39 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-2003-7a3b-8c4d-5e6f70819303",
+  "time": "2026-03-16T09:14:00.611Z",
+  "event": {
+    "name": "configuration.secret.access",
+    "category": "configuration",
+    "type": "read",
+    "outcome": "success",
+    "severity": "info",
+    "summary": "Workload read the broker credential it starts with."
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-order-router"
+  },
+  "resource": {
+    "type": "configuration",
+    "id": "configuration-broker-credential",
+    "name": "broker-service-credential",
+    "classification": "restricted"
+  },
+  "application": {
+    "name": "platform-control-service",
+    "environment": "production",
+    "version": "9.0.3"
+  },
+  "authorization": {
+    "decision": "allow",
+    "policy": "workload-secret-access",
+    "policyVersion": "9"
+  },
+  "metadata": {
+    "secret": {
+      "type": "broker-credential",
+      "provider": "platform-secret-store"
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/valid/change-request-approve.json

@@ -0,0 +1,69 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-100c-7a3b-8c4d-5e6f7081920c",
+  "time": "2026-03-17T09:44:51.492Z",
+  "event": {
+    "name": "change.request.approve",
+    "category": "workflow",
+    "type": "approve",
+    "outcome": "success",
+    "severity": "medium",
+    "summary": "Change request approved for the production authentication configuration."
+  },
+  "actor": {
+    "type": "user",
+    "id": "user-7702",
+    "roles": ["security-officer"]
+  },
+  "resource": {
+    "type": "change-request",
+    "id": "change-2026-0317-4",
+    "name": "session-lifetime-reduction"
+  },
+  "relatedResources": [{ "type": "configuration", "id": "configuration-authentication-session" }],
+  "application": {
+    "name": "change-management-service",
+    "environment": "production",
+    "version": "6.4.2"
+  },
+  "authorization": {
+    "decision": "allow",
+    "policy": "change-approval",
+    "policyVersion": "11"
+  },
+  "approval": {
+    "status": "approved",
+    "workflowId": "workflow-standard-change",
+    "requestId": "approval-request-6120",
+    "requiredApprovals": 2,
+    "receivedApprovals": 2,
+    "approvers": [
+      { "type": "user", "id": "user-1180", "roles": ["change-manager"] },
+      { "type": "user", "id": "user-7702", "roles": ["security-officer"] }
+    ],
+    "approvedAt": "2026-03-17T09:44:51Z"
+  },
+  "request": {
+    "requestId": "request-31fa8c",
+    "correlationId": "change-2026-0317-4"
+  },
+  "change": {
+    "type": "none",
+    "ticketId": "change-2026-0317-4"
+  },
+  "reason": {
+    "code": "security-hardening",
+    "text": "Approved on the strength of the security review finding.",
+    "reference": "change-2026-0317-4"
+  },
+  "controlCategories": ["change-approval"],
+  "tags": ["production"],
+  "metadata": {
+    "deployment": {
+      "id": "change-2026-0317-4",
+      "environment": "production",
+      "approvalRequired": true,
+      "riskLevel": "high"
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/valid/configuration-update.json

@@ -0,0 +1,88 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-100a-7a3b-8c4d-5e6f7081920a",
+  "time": "2026-03-17T09:52:03.884Z",
+  "event": {
+    "name": "configuration.setting.update",
+    "category": "configuration",
+    "type": "update",
+    "outcome": "success",
+    "severity": "critical",
+    "summary": "Session lifetime reduced on the production authentication configuration."
+  },
+  "actor": {
+    "type": "admin",
+    "id": "admin-0091",
+    "roles": ["platform-administrator"]
+  },
+  "resource": {
+    "type": "configuration",
+    "id": "configuration-authentication-session",
+    "name": "authentication-session-policy",
+    "parentId": "cluster-production-1",
+    "classification": "restricted"
+  },
+  "application": {
+    "name": "platform-control-service",
+    "environment": "production",
+    "version": "9.0.3",
+    "instance": "instance-7c1a"
+  },
+  "authentication": {
+    "method": "mfa",
+    "mfa": true,
+    "assuranceLevel": "high"
+  },
+  "authorization": {
+    "decision": "allow",
+    "engine": "policy-service",
+    "policy": "privileged-configuration-change",
+    "policyVersion": "23",
+    "permissions": ["configuration.setting.update"]
+  },
+  "approval": {
+    "status": "approved",
+    "workflowId": "workflow-standard-change",
+    "requestId": "approval-request-6120",
+    "requiredApprovals": 2,
+    "receivedApprovals": 2,
+    "approvers": [
+      { "type": "user", "id": "user-1180", "roles": ["change-manager"] },
+      { "type": "user", "id": "user-7702", "roles": ["security-officer"] }
+    ],
+    "approvedAt": "2026-03-17T09:44:51Z"
+  },
+  "request": {
+    "requestId": "request-cc10ab",
+    "correlationId": "change-2026-0317-4",
+    "method": "PATCH",
+    "route": "/clusters/{clusterId}/configurations/{configurationId}"
+  },
+  "change": {
+    "type": "update",
+    "changedFields": ["sessionLifetimeMinutes", "requireReauthenticationForPrivilegedActions"],
+    "before": {
+      "sessionLifetimeMinutes": 720,
+      "requireReauthenticationForPrivilegedActions": false
+    },
+    "after": {
+      "sessionLifetimeMinutes": 60,
+      "requireReauthenticationForPrivilegedActions": true
+    },
+    "ticketId": "change-2026-0317-4"
+  },
+  "reason": {
+    "code": "security-hardening",
+    "text": "Session lifetime reduced following a security review finding.",
+    "reference": "change-2026-0317-4"
+  },
+  "controlCategories": ["configuration-integrity", "change-approval"],
+  "tags": ["production"],
+  "metadata": {
+    "deployment": {
+      "id": "change-2026-0317-4",
+      "environment": "production",
+      "approvalRequired": true
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/valid/deploy-approved.json

@@ -0,0 +1,85 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-1002-7a3b-8c4d-5e6f70819202",
+  "time": "2026-03-16T14:41:27.905Z",
+  "event": {
+    "name": "deployment.release.deploy",
+    "category": "deployment",
+    "type": "execute",
+    "outcome": "success",
+    "severity": "high",
+    "summary": "Approved release deployed to the production environment."
+  },
+  "actor": {
+    "type": "user",
+    "id": "user-3307",
+    "roles": ["release-manager"]
+  },
+  "resource": {
+    "type": "deployment",
+    "id": "deployment-2026-0316-9",
+    "name": "checkout-service-release",
+    "parentId": "cluster-production-1"
+  },
+  "relatedResources": [
+    { "type": "service", "id": "service-checkout" },
+    { "type": "service", "id": "service-pricing" }
+  ],
+  "application": {
+    "name": "delivery-platform",
+    "environment": "production",
+    "version": "4.2.0",
+    "component": "release-controller"
+  },
+  "authentication": {
+    "method": "mfa",
+    "mfa": true,
+    "assuranceLevel": "high"
+  },
+  "authorization": {
+    "decision": "allow",
+    "engine": "policy-service",
+    "policy": "production-release",
+    "policyVersion": "7"
+  },
+  "approval": {
+    "status": "approved",
+    "workflowId": "workflow-production-release",
+    "requestId": "approval-request-4471",
+    "requiredApprovals": 2,
+    "receivedApprovals": 2,
+    "approvers": [
+      { "type": "user", "id": "user-1180", "roles": ["change-manager"] },
+      { "type": "user", "id": "user-7702", "roles": ["service-owner"] }
+    ],
+    "approvedAt": "2026-03-16T14:22:10Z"
+  },
+  "request": {
+    "requestId": "request-9b21ce",
+    "correlationId": "deployment-2026-0316-9"
+  },
+  "change": {
+    "type": "execute",
+    "changedFields": ["releaseVersion"],
+    "ticketId": "change-2026-0316-9",
+    "deploymentId": "deployment-2026-0316-9"
+  },
+  "reason": {
+    "code": "planned-release",
+    "text": "Scheduled release of the approved checkout change set.",
+    "reference": "change-2026-0316-9"
+  },
+  "controlCategories": ["change-approval", "change-management"],
+  "tags": ["production"],
+  "metadata": {
+    "deployment": {
+      "id": "deployment-2026-0316-9",
+      "environment": "production",
+      "version": "9.1.0",
+      "previousVersion": "9.0.3",
+      "approvalRequired": true,
+      "pipelineId": "pipeline-checkout-delivery",
+      "strategy": "blue-green"
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/valid/deploy-automated.json

@@ -0,0 +1,68 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-1001-7a3b-8c4d-5e6f70819201",
+  "time": "2026-03-16T09:14:02.318Z",
+  "event": {
+    "name": "deployment.release.deploy",
+    "category": "deployment",
+    "type": "execute",
+    "outcome": "success",
+    "severity": "medium",
+    "summary": "Merged change delivered to the staging environment by the pipeline."
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-delivery-runner",
+    "roles": ["deployment-runner"]
+  },
+  "subject": {
+    "type": "user",
+    "id": "user-2210"
+  },
+  "delegation": {
+    "type": "on-behalf-of",
+    "reason": "The pipeline deployed the change its author merged.",
+    "reference": "change-2026-0316-4"
+  },
+  "resource": {
+    "type": "deployment",
+    "id": "deployment-2026-0316-4",
+    "name": "checkout-service-release",
+    "parentId": "cluster-staging-1"
+  },
+  "relatedResources": [{ "type": "service", "id": "service-checkout" }],
+  "application": {
+    "name": "delivery-platform",
+    "environment": "production",
+    "version": "4.2.0",
+    "component": "release-controller",
+    "region": "region-1"
+  },
+  "request": {
+    "requestId": "request-d41f2a",
+    "correlationId": "deployment-2026-0316-4"
+  },
+  "change": {
+    "type": "execute",
+    "changedFields": ["releaseVersion"],
+    "ticketId": "change-2026-0316-4",
+    "deploymentId": "deployment-2026-0316-4"
+  },
+  "reason": {
+    "code": "scheduled-release",
+    "text": "Automated delivery of a merged change."
+  },
+  "controlCategories": ["change-management"],
+  "tags": ["staging", "continuous-delivery"],
+  "metadata": {
+    "deployment": {
+      "id": "deployment-2026-0316-4",
+      "environment": "staging",
+      "version": "9.1.0",
+      "previousVersion": "9.0.3",
+      "approvalRequired": false,
+      "pipelineId": "pipeline-checkout-delivery",
+      "strategy": "rolling"
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/valid/deploy-failed.json

@@ -0,0 +1,72 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-1005-7a3b-8c4d-5e6f70819205",
+  "time": "2026-03-16T10:31:55.204Z",
+  "event": {
+    "name": "deployment.release.deploy",
+    "category": "deployment",
+    "type": "execute",
+    "outcome": "failure",
+    "severity": "medium",
+    "summary": "Deployment aborted before any instance was replaced.",
+    "error": {
+      "code": "dependency-unavailable",
+      "type": "dependency",
+      "message": "The migration service did not respond within the release window.",
+      "retryable": true
+    }
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-delivery-runner",
+    "roles": ["deployment-runner"]
+  },
+  "subject": {
+    "type": "user",
+    "id": "user-2210"
+  },
+  "delegation": {
+    "type": "on-behalf-of",
+    "reason": "The pipeline deployed the change its author merged.",
+    "reference": "change-2026-0316-5"
+  },
+  "resource": {
+    "type": "deployment",
+    "id": "deployment-2026-0316-5",
+    "name": "checkout-service-release",
+    "parentId": "cluster-staging-1"
+  },
+  "relatedResources": [{ "type": "service", "id": "service-checkout" }],
+  "application": {
+    "name": "delivery-platform",
+    "environment": "production",
+    "version": "4.2.0",
+    "component": "release-controller"
+  },
+  "request": {
+    "requestId": "request-6f0ba4",
+    "correlationId": "deployment-2026-0316-5"
+  },
+  "change": {
+    "type": "none",
+    "ticketId": "change-2026-0316-5",
+    "deploymentId": "deployment-2026-0316-5"
+  },
+  "reason": {
+    "code": "scheduled-release",
+    "text": "Automated delivery of a merged change."
+  },
+  "controlCategories": ["change-management"],
+  "tags": ["staging"],
+  "metadata": {
+    "deployment": {
+      "id": "deployment-2026-0316-5",
+      "environment": "staging",
+      "version": "9.1.1",
+      "previousVersion": "9.1.0",
+      "approvalRequired": false,
+      "resultingState": "unchanged",
+      "pipelineId": "pipeline-checkout-delivery"
+    }
+  }
+}

package/examples/profiles/deployment-and-change-management/valid/deploy-partial.json

@@ -0,0 +1,69 @@
+{
+  "specVersion": "0.1",
+  "id": "018f2c40-1006-7a3b-8c4d-5e6f70819206",
+  "time": "2026-03-16T11:07:19.663Z",
+  "event": {
+    "name": "deployment.release.deploy",
+    "category": "deployment",
+    "type": "execute",
+    "outcome": "partial",
+    "severity": "high",
+    "summary": "Rollout replaced part of the fleet before it was halted, leaving two versions serving."
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-delivery-runner",
+    "roles": ["deployment-runner"]
+  },
+  "subject": {
+    "type": "user",
+    "id": "user-2210"
+  },
+  "delegation": {
+    "type": "on-behalf-of",
+    "reason": "The pipeline deployed the change its author merged.",
+    "reference": "change-2026-0316-6"
+  },
+  "resource": {
+    "type": "deployment",
+    "id": "deployment-2026-0316-6",
+    "name": "checkout-service-release",
+    "parentId": "cluster-staging-1"
+  },
+  "relatedResources": [{ "type": "service", "id": "service-checkout" }],
+  "application": {
+    "name": "delivery-platform",
+    "environment": "production",
+    "version": "4.2.0",
+    "component": "release-controller"
+  },
+  "request": {
+    "requestId": "request-2ce917",
+    "correlationId": "deployment-2026-0316-6"
+  },
+  "change": {
+    "type": "execute",
+    "changedFields": ["releaseVersion"],
+    "ticketId": "change-2026-0316-6",
+    "deploymentId": "deployment-2026-0316-6"
+  },
+  "reason": {
+    "code": "scheduled-release",
+    "text": "Automated delivery of a merged change."
+  },
+  "controlCategories": ["change-management"],
+  "tags": ["staging"],
+  "metadata": {
+    "deployment": {
+      "id": "deployment-2026-0316-6",
+      "environment": "staging",
+      "version": "9.1.2",
+      "previousVersion": "9.1.0",
+      "approvalRequired": false,
+      "pipelineId": "pipeline-checkout-delivery",
+      "resultingState": "partially-applied",
+      "instancesUpdated": 4,
+      "instancesTotal": 12
+    }
+  }
+}