@openauditmodel/cli 0.4.1 → 0.4.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (339) hide show
  1. package/README.md +1 -1
  2. package/conformance-kit/README.md +109 -0
  3. package/conformance-kit/manifest.json +8023 -0
  4. package/examples/README.md +62 -0
  5. package/examples/integrity/README.md +103 -0
  6. package/examples/integrity/invalid/broken-previous-hash/001.json +53 -0
  7. package/examples/integrity/invalid/broken-previous-hash/002.json +52 -0
  8. package/examples/integrity/invalid/broken-previous-hash/003.json +43 -0
  9. package/examples/integrity/invalid/duplicate-sequence/001.json +53 -0
  10. package/examples/integrity/invalid/duplicate-sequence/002.json +52 -0
  11. package/examples/integrity/invalid/duplicate-sequence/003.json +43 -0
  12. package/examples/integrity/invalid/missing-sequence/001.json +53 -0
  13. package/examples/integrity/invalid/missing-sequence/002.json +51 -0
  14. package/examples/integrity/invalid/missing-sequence/003.json +43 -0
  15. package/examples/integrity/invalid/reordered-chain/001.json +53 -0
  16. package/examples/integrity/invalid/reordered-chain/002.json +52 -0
  17. package/examples/integrity/invalid/reordered-chain/003.json +43 -0
  18. package/examples/integrity/invalid/tampered-event.json +51 -0
  19. package/examples/integrity/invalid/tampered-signed-event.json +46 -0
  20. package/examples/integrity/invalid/unsupported-algorithm.json +51 -0
  21. package/examples/integrity/invalid/unsupported-signature-algorithm.json +46 -0
  22. package/examples/integrity/invalid/wrong-declared-hash.json +51 -0
  23. package/examples/integrity/keys/ed25519-test-public.pem +3 -0
  24. package/examples/integrity/valid/signed-event-ed25519.json +46 -0
  25. package/examples/integrity/valid/single-event-sha256.json +51 -0
  26. package/examples/integrity/valid/three-event-chain/001.json +53 -0
  27. package/examples/integrity/valid/three-event-chain/002.json +52 -0
  28. package/examples/integrity/valid/three-event-chain/003.json +43 -0
  29. package/examples/integrity/valid/unicode-and-number-event.json +68 -0
  30. package/examples/invalid/README.md +38 -0
  31. package/examples/invalid/delegation-without-subject.json +27 -0
  32. package/examples/invalid/failure-without-error.json +28 -0
  33. package/examples/invalid/invalid-event-name.json +22 -0
  34. package/examples/invalid/invalid-extension-name.json +25 -0
  35. package/examples/invalid/missing-actor.json +18 -0
  36. package/examples/invalid/missing-resource.json +18 -0
  37. package/examples/invalid/unknown-core-property.json +23 -0
  38. package/examples/privacy/README.md +101 -0
  39. package/examples/privacy/clean/hashes-and-identifiers.json +42 -0
  40. package/examples/privacy/clean/minimal-clean-event.json +22 -0
  41. package/examples/privacy/clean/safe-evidence-reference.json +43 -0
  42. package/examples/privacy/clean/sanitized-change.json +40 -0
  43. package/examples/privacy/clean/structured-metadata.json +43 -0
  44. package/examples/privacy/findings/access-token-field.json +27 -0
  45. package/examples/privacy/findings/bearer-token.json +26 -0
  46. package/examples/privacy/findings/credentialed-connection-string.json +26 -0
  47. package/examples/privacy/findings/evidence-query-string.json +29 -0
  48. package/examples/privacy/findings/high-entropy-token.json +26 -0
  49. package/examples/privacy/findings/jwt-token.json +26 -0
  50. package/examples/privacy/findings/oversized-change-before.json +89 -0
  51. package/examples/privacy/findings/password-field.json +27 -0
  52. package/examples/privacy/findings/private-key.json +26 -0
  53. package/examples/privacy/findings/raw-response-body.json +26 -0
  54. package/examples/privacy/findings/url-userinfo.json +26 -0
  55. package/examples/profiles/api-and-integration-management/README.md +119 -0
  56. package/examples/profiles/api-and-integration-management/invalid/api-key-create-missing-authentication.json +64 -0
  57. package/examples/profiles/api-and-integration-management/invalid/api-key-create-missing-authorization.json +64 -0
  58. package/examples/profiles/api-and-integration-management/invalid/api-key-rotate-missing-credential-reference.json +58 -0
  59. package/examples/profiles/api-and-integration-management/invalid/integration-configuration-update-missing-connection-id.json +67 -0
  60. package/examples/profiles/api-and-integration-management/invalid/integration-connect-missing-approval-status.json +78 -0
  61. package/examples/profiles/api-and-integration-management/invalid/integration-disconnect-missing-authentication.json +63 -0
  62. package/examples/profiles/api-and-integration-management/invalid/integration-reauthorize-missing-error-type.json +68 -0
  63. package/examples/profiles/api-and-integration-management/invalid/integration-sync-start-missing-correlation-id.json +58 -0
  64. package/examples/profiles/api-and-integration-management/invalid/webhook-create-missing-endpoint-class.json +63 -0
  65. package/examples/profiles/api-and-integration-management/invalid/webhook-create-missing-type.json +63 -0
  66. package/examples/profiles/api-and-integration-management/invalid/webhook-disable-missing-reason.json +58 -0
  67. package/examples/profiles/api-and-integration-management/invalid/webhook-update-missing-change.json +63 -0
  68. package/examples/profiles/api-and-integration-management/not-applicable/api-request.json +45 -0
  69. package/examples/profiles/api-and-integration-management/not-applicable/integration-sync-progress.json +44 -0
  70. package/examples/profiles/api-and-integration-management/not-applicable/webhook-delivery.json +44 -0
  71. package/examples/profiles/api-and-integration-management/valid/api-key-create.json +70 -0
  72. package/examples/profiles/api-and-integration-management/valid/api-key-revoke.json +72 -0
  73. package/examples/profiles/api-and-integration-management/valid/api-key-rotate.json +59 -0
  74. package/examples/profiles/api-and-integration-management/valid/integration-configuration-update.json +68 -0
  75. package/examples/profiles/api-and-integration-management/valid/integration-connect.json +79 -0
  76. package/examples/profiles/api-and-integration-management/valid/integration-disconnect.json +69 -0
  77. package/examples/profiles/api-and-integration-management/valid/integration-reauthorize-failure.json +69 -0
  78. package/examples/profiles/api-and-integration-management/valid/integration-sync-cancel.json +65 -0
  79. package/examples/profiles/api-and-integration-management/valid/integration-sync-start.json +59 -0
  80. package/examples/profiles/api-and-integration-management/valid/webhook-create.json +64 -0
  81. package/examples/profiles/api-and-integration-management/valid/webhook-disable.json +63 -0
  82. package/examples/profiles/api-and-integration-management/valid/webhook-test.json +59 -0
  83. package/examples/profiles/api-and-integration-management/valid/webhook-update.json +76 -0
  84. package/examples/profiles/backup-and-recovery/README.md +127 -0
  85. package/examples/profiles/backup-and-recovery/invalid/backup-complete-missing-backup-id.json +55 -0
  86. package/examples/profiles/backup-and-recovery/invalid/backup-complete-missing-recovery-point.json +55 -0
  87. package/examples/profiles/backup-and-recovery/invalid/backup-create-missing-authorization.json +50 -0
  88. package/examples/profiles/backup-and-recovery/invalid/backup-delete-missing-reason.json +78 -0
  89. package/examples/profiles/backup-and-recovery/invalid/backup-expire-missing-retention-class.json +55 -0
  90. package/examples/profiles/backup-and-recovery/invalid/backup-verify-missing-verification-status.json +66 -0
  91. package/examples/profiles/backup-and-recovery/invalid/policy-update-missing-change.json +65 -0
  92. package/examples/profiles/backup-and-recovery/invalid/recovery-failover-missing-recovery-id.json +71 -0
  93. package/examples/profiles/backup-and-recovery/invalid/recovery-failover-missing-target-scope.json +71 -0
  94. package/examples/profiles/backup-and-recovery/invalid/restore-start-missing-approval.json +66 -0
  95. package/examples/profiles/backup-and-recovery/invalid/restore-start-missing-source-id.json +73 -0
  96. package/examples/profiles/backup-and-recovery/invalid/snapshot-create-missing-snapshot-id.json +57 -0
  97. package/examples/profiles/backup-and-recovery/not-applicable/backup-chunk-write.json +43 -0
  98. package/examples/profiles/backup-and-recovery/not-applicable/restore-progress.json +42 -0
  99. package/examples/profiles/backup-and-recovery/not-applicable/storage-replica-heartbeat.json +37 -0
  100. package/examples/profiles/backup-and-recovery/valid/backup-complete-failed.json +62 -0
  101. package/examples/profiles/backup-and-recovery/valid/backup-complete.json +56 -0
  102. package/examples/profiles/backup-and-recovery/valid/backup-create.json +56 -0
  103. package/examples/profiles/backup-and-recovery/valid/backup-delete.json +83 -0
  104. package/examples/profiles/backup-and-recovery/valid/backup-expire.json +56 -0
  105. package/examples/profiles/backup-and-recovery/valid/backup-verify.json +67 -0
  106. package/examples/profiles/backup-and-recovery/valid/policy-update.json +78 -0
  107. package/examples/profiles/backup-and-recovery/valid/recovery-complete.json +61 -0
  108. package/examples/profiles/backup-and-recovery/valid/recovery-failback.json +72 -0
  109. package/examples/profiles/backup-and-recovery/valid/recovery-failover.json +72 -0
  110. package/examples/profiles/backup-and-recovery/valid/recovery-start.json +61 -0
  111. package/examples/profiles/backup-and-recovery/valid/restore-complete.json +63 -0
  112. package/examples/profiles/backup-and-recovery/valid/restore-start.json +74 -0
  113. package/examples/profiles/backup-and-recovery/valid/snapshot-create.json +58 -0
  114. package/examples/profiles/backup-and-recovery/valid/snapshot-delete.json +60 -0
  115. package/examples/profiles/customer-and-account-management/README.md +127 -0
  116. package/examples/profiles/customer-and-account-management/invalid/account-close-missing-approval.json +70 -0
  117. package/examples/profiles/customer-and-account-management/invalid/account-freeze-missing-restriction-scope.json +83 -0
  118. package/examples/profiles/customer-and-account-management/invalid/account-freeze-missing-status.json +83 -0
  119. package/examples/profiles/customer-and-account-management/invalid/account-limit-missing-before.json +74 -0
  120. package/examples/profiles/customer-and-account-management/invalid/account-open-missing-owner.json +58 -0
  121. package/examples/profiles/customer-and-account-management/invalid/account-status-missing-subject.json +73 -0
  122. package/examples/profiles/customer-and-account-management/invalid/account-update-missing-override-reason.json +67 -0
  123. package/examples/profiles/customer-and-account-management/invalid/customer-close-missing-authorization.json +69 -0
  124. package/examples/profiles/customer-and-account-management/invalid/customer-create-missing-customer-type.json +62 -0
  125. package/examples/profiles/customer-and-account-management/invalid/customer-delete-missing-scope.json +70 -0
  126. package/examples/profiles/customer-and-account-management/invalid/customer-merge-missing-source.json +78 -0
  127. package/examples/profiles/customer-and-account-management/invalid/customer-update-missing-change.json +61 -0
  128. package/examples/profiles/customer-and-account-management/not-applicable/account-balance-view.json +39 -0
  129. package/examples/profiles/customer-and-account-management/not-applicable/customer-profile-view.json +38 -0
  130. package/examples/profiles/customer-and-account-management/not-applicable/customer-search.json +38 -0
  131. package/examples/profiles/customer-and-account-management/valid/account-close-approved.json +78 -0
  132. package/examples/profiles/customer-and-account-management/valid/account-freeze.json +84 -0
  133. package/examples/profiles/customer-and-account-management/valid/account-limit-increase.json +77 -0
  134. package/examples/profiles/customer-and-account-management/valid/account-open.json +59 -0
  135. package/examples/profiles/customer-and-account-management/valid/account-status-on-behalf.json +79 -0
  136. package/examples/profiles/customer-and-account-management/valid/account-update-override.json +72 -0
  137. package/examples/profiles/customer-and-account-management/valid/customer-close.json +75 -0
  138. package/examples/profiles/customer-and-account-management/valid/customer-create.json +63 -0
  139. package/examples/profiles/customer-and-account-management/valid/customer-delete.json +71 -0
  140. package/examples/profiles/customer-and-account-management/valid/customer-merge.json +79 -0
  141. package/examples/profiles/customer-and-account-management/valid/customer-restrict.json +76 -0
  142. package/examples/profiles/customer-and-account-management/valid/customer-update.json +65 -0
  143. package/examples/profiles/deployment-and-change-management/README.md +115 -0
  144. package/examples/profiles/deployment-and-change-management/invalid/cancel-missing-authorization.json +59 -0
  145. package/examples/profiles/deployment-and-change-management/invalid/cancel-missing-reason.json +61 -0
  146. package/examples/profiles/deployment-and-change-management/invalid/change-request-approve-missing-approval.json +57 -0
  147. package/examples/profiles/deployment-and-change-management/invalid/configuration-update-missing-authorization.json +81 -0
  148. package/examples/profiles/deployment-and-change-management/invalid/deploy-approved-missing-approval.json +73 -0
  149. package/examples/profiles/deployment-and-change-management/invalid/deploy-failed-missing-resulting-state.json +71 -0
  150. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-approval-required.json +67 -0
  151. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-deployment-id.json +67 -0
  152. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-environment.json +67 -0
  153. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-previous-version.json +67 -0
  154. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-version.json +67 -0
  155. package/examples/profiles/deployment-and-change-management/invalid/deploy-partial-missing-resulting-state.json +68 -0
  156. package/examples/profiles/deployment-and-change-management/invalid/secret-rotate-missing-changed-fields.json +72 -0
  157. package/examples/profiles/deployment-and-change-management/invalid/secret-rotate-missing-reason.json +68 -0
  158. package/examples/profiles/deployment-and-change-management/not-applicable/build-log-append.json +33 -0
  159. package/examples/profiles/deployment-and-change-management/not-applicable/pipeline-poll.json +33 -0
  160. package/examples/profiles/deployment-and-change-management/not-applicable/secret-access.json +39 -0
  161. package/examples/profiles/deployment-and-change-management/valid/change-request-approve.json +69 -0
  162. package/examples/profiles/deployment-and-change-management/valid/configuration-update.json +88 -0
  163. package/examples/profiles/deployment-and-change-management/valid/deploy-approved.json +85 -0
  164. package/examples/profiles/deployment-and-change-management/valid/deploy-automated.json +68 -0
  165. package/examples/profiles/deployment-and-change-management/valid/deploy-failed.json +72 -0
  166. package/examples/profiles/deployment-and-change-management/valid/deploy-partial.json +69 -0
  167. package/examples/profiles/deployment-and-change-management/valid/infrastructure-apply.json +78 -0
  168. package/examples/profiles/deployment-and-change-management/valid/release-approve.json +77 -0
  169. package/examples/profiles/deployment-and-change-management/valid/release-cancel.json +65 -0
  170. package/examples/profiles/deployment-and-change-management/valid/release-create.json +53 -0
  171. package/examples/profiles/deployment-and-change-management/valid/rollback-emergency.json +80 -0
  172. package/examples/profiles/deployment-and-change-management/valid/secret-rotate-emergency.json +73 -0
  173. package/examples/profiles/document-management/README.md +80 -0
  174. package/examples/profiles/document-management/invalid/delete-missing-reason.json +53 -0
  175. package/examples/profiles/document-management/invalid/download-missing-classification.json +46 -0
  176. package/examples/profiles/document-management/invalid/external-share-missing-expiry.json +68 -0
  177. package/examples/profiles/document-management/invalid/external-share-missing-reason.json +64 -0
  178. package/examples/profiles/document-management/invalid/legal-hold-missing-state.json +63 -0
  179. package/examples/profiles/document-management/invalid/permission-grant-missing-grantee.json +57 -0
  180. package/examples/profiles/document-management/invalid/retention-update-missing-class.json +71 -0
  181. package/examples/profiles/document-management/invalid/share-create-missing-permission.json +53 -0
  182. package/examples/profiles/document-management/invalid/share-missing-recipient-type.json +53 -0
  183. package/examples/profiles/document-management/invalid/upload-missing-authorization.json +42 -0
  184. package/examples/profiles/document-management/invalid/version-rollback-missing-previous.json +58 -0
  185. package/examples/profiles/document-management/not-applicable/file-view.json +42 -0
  186. package/examples/profiles/document-management/valid/file-delete.json +58 -0
  187. package/examples/profiles/document-management/valid/file-download.json +47 -0
  188. package/examples/profiles/document-management/valid/file-upload.json +47 -0
  189. package/examples/profiles/document-management/valid/legal-hold-apply.json +64 -0
  190. package/examples/profiles/document-management/valid/permission-grant.json +58 -0
  191. package/examples/profiles/document-management/valid/retention-update.json +72 -0
  192. package/examples/profiles/document-management/valid/share-external.json +69 -0
  193. package/examples/profiles/document-management/valid/share-internal.json +54 -0
  194. package/examples/profiles/document-management/valid/share-revoke.json +56 -0
  195. package/examples/profiles/document-management/valid/version-rollback.json +59 -0
  196. package/examples/profiles/financial-transaction-management/README.md +123 -0
  197. package/examples/profiles/financial-transaction-management/invalid/limit-update-missing-limit-type.json +101 -0
  198. package/examples/profiles/financial-transaction-management/invalid/manual-deposit-missing-change.json +85 -0
  199. package/examples/profiles/financial-transaction-management/invalid/payment-capture-missing-amount.json +69 -0
  200. package/examples/profiles/financial-transaction-management/invalid/payment-capture-missing-authorization.json +65 -0
  201. package/examples/profiles/financial-transaction-management/invalid/payout-missing-direction.json +63 -0
  202. package/examples/profiles/financial-transaction-management/invalid/reconciliation-adjust-missing-change.json +79 -0
  203. package/examples/profiles/financial-transaction-management/invalid/reconciliation-missing-identifier.json +88 -0
  204. package/examples/profiles/financial-transaction-management/invalid/refund-missing-reason.json +70 -0
  205. package/examples/profiles/financial-transaction-management/invalid/reversal-missing-original-transaction.json +84 -0
  206. package/examples/profiles/financial-transaction-management/invalid/transfer-missing-related-resources.json +66 -0
  207. package/examples/profiles/financial-transaction-management/invalid/withdrawal-missing-approval-status.json +96 -0
  208. package/examples/profiles/financial-transaction-management/invalid/withdrawal-missing-correlation.json +96 -0
  209. package/examples/profiles/financial-transaction-management/not-applicable/balance-view.json +36 -0
  210. package/examples/profiles/financial-transaction-management/not-applicable/quote-create.json +33 -0
  211. package/examples/profiles/financial-transaction-management/not-applicable/report-generate.json +36 -0
  212. package/examples/profiles/financial-transaction-management/valid/chargeback-open.json +73 -0
  213. package/examples/profiles/financial-transaction-management/valid/deposit-manual-correction.json +86 -0
  214. package/examples/profiles/financial-transaction-management/valid/limit-update.json +92 -0
  215. package/examples/profiles/financial-transaction-management/valid/payment-capture.json +70 -0
  216. package/examples/profiles/financial-transaction-management/valid/payment-reject.json +76 -0
  217. package/examples/profiles/financial-transaction-management/valid/payout-execute.json +64 -0
  218. package/examples/profiles/financial-transaction-management/valid/reconciliation-adjust.json +85 -0
  219. package/examples/profiles/financial-transaction-management/valid/refund-create.json +75 -0
  220. package/examples/profiles/financial-transaction-management/valid/reversal-execute.json +80 -0
  221. package/examples/profiles/financial-transaction-management/valid/settlement-execute.json +70 -0
  222. package/examples/profiles/financial-transaction-management/valid/transfer-execute.json +74 -0
  223. package/examples/profiles/financial-transaction-management/valid/withdrawal-execute.json +91 -0
  224. package/examples/profiles/identity-and-access-management/README.md +93 -0
  225. package/examples/profiles/identity-and-access-management/invalid/credential-rotate-missing-reason.json +47 -0
  226. package/examples/profiles/identity-and-access-management/invalid/permission-grant-missing-scope.json +54 -0
  227. package/examples/profiles/identity-and-access-management/invalid/privileged-role-without-approval.json +68 -0
  228. package/examples/profiles/identity-and-access-management/invalid/privileged-role-without-mfa.json +83 -0
  229. package/examples/profiles/identity-and-access-management/invalid/role-assign-missing-authorization.json +54 -0
  230. package/examples/profiles/identity-and-access-management/invalid/role-assign-missing-role-id.json +60 -0
  231. package/examples/profiles/identity-and-access-management/invalid/service-account-missing-owner.json +53 -0
  232. package/examples/profiles/identity-and-access-management/not-applicable/document-share.json +49 -0
  233. package/examples/profiles/identity-and-access-management/valid/credential-rotate.json +59 -0
  234. package/examples/profiles/identity-and-access-management/valid/permission-revoke.json +77 -0
  235. package/examples/profiles/identity-and-access-management/valid/role-assign-privileged.json +87 -0
  236. package/examples/profiles/identity-and-access-management/valid/role-assign-standard.json +80 -0
  237. package/examples/profiles/identity-and-access-management/valid/service-account-create.json +55 -0
  238. package/examples/profiles/identity-and-access-management/valid/user-create.json +55 -0
  239. package/examples/profiles/identity-and-access-management/valid/user-disable.json +79 -0
  240. package/examples/profiles/incident-management/README.md +125 -0
  241. package/examples/profiles/incident-management/invalid/assignment-change-missing-assignee.json +69 -0
  242. package/examples/profiles/incident-management/invalid/assignment-change-missing-change.json +59 -0
  243. package/examples/profiles/incident-management/invalid/case-close-missing-approval.json +94 -0
  244. package/examples/profiles/incident-management/invalid/case-close-missing-authorization.json +108 -0
  245. package/examples/profiles/incident-management/invalid/case-close-missing-reason.json +109 -0
  246. package/examples/profiles/incident-management/invalid/case-create-missing-status.json +67 -0
  247. package/examples/profiles/incident-management/invalid/case-reopen-missing-change.json +66 -0
  248. package/examples/profiles/incident-management/invalid/case-reopen-missing-reason.json +72 -0
  249. package/examples/profiles/incident-management/invalid/case-resolve-missing-resolution-type.json +74 -0
  250. package/examples/profiles/incident-management/invalid/corrective-action-verify-missing-method.json +81 -0
  251. package/examples/profiles/incident-management/invalid/priority-change-missing-priority.json +73 -0
  252. package/examples/profiles/incident-management/invalid/rca-approve-missing-approval.json +66 -0
  253. package/examples/profiles/incident-management/invalid/rca-create-missing-method.json +72 -0
  254. package/examples/profiles/incident-management/invalid/sla-breach-missing-target.json +49 -0
  255. package/examples/profiles/incident-management/not-applicable/case-view.json +40 -0
  256. package/examples/profiles/incident-management/not-applicable/monitoring-alert-raise.json +40 -0
  257. package/examples/profiles/incident-management/not-applicable/note-create.json +46 -0
  258. package/examples/profiles/incident-management/valid/assignment-change.json +70 -0
  259. package/examples/profiles/incident-management/valid/case-close.json +114 -0
  260. package/examples/profiles/incident-management/valid/case-create.json +68 -0
  261. package/examples/profiles/incident-management/valid/case-reopen.json +77 -0
  262. package/examples/profiles/incident-management/valid/case-resolve.json +75 -0
  263. package/examples/profiles/incident-management/valid/corrective-action-open.json +72 -0
  264. package/examples/profiles/incident-management/valid/corrective-action-verify.json +82 -0
  265. package/examples/profiles/incident-management/valid/create-short-form.json +64 -0
  266. package/examples/profiles/incident-management/valid/major-declare.json +79 -0
  267. package/examples/profiles/incident-management/valid/priority-change.json +74 -0
  268. package/examples/profiles/incident-management/valid/problem-case-close.json +73 -0
  269. package/examples/profiles/incident-management/valid/rca-approve.json +86 -0
  270. package/examples/profiles/incident-management/valid/rca-create.json +73 -0
  271. package/examples/profiles/incident-management/valid/sla-breach.json +50 -0
  272. package/examples/profiles/message-broker-management/README.md +123 -0
  273. package/examples/profiles/message-broker-management/invalid/acl-grant-missing-principal.json +78 -0
  274. package/examples/profiles/message-broker-management/invalid/configuration-update-missing-change.json +58 -0
  275. package/examples/profiles/message-broker-management/invalid/message-replay-missing-scope.json +76 -0
  276. package/examples/profiles/message-broker-management/invalid/offset-reset-missing-target.json +96 -0
  277. package/examples/profiles/message-broker-management/invalid/queue-purge-missing-destructive-flag.json +79 -0
  278. package/examples/profiles/message-broker-management/invalid/queue-purge-missing-reason.json +77 -0
  279. package/examples/profiles/message-broker-management/invalid/quota-update-missing-dimension.json +72 -0
  280. package/examples/profiles/message-broker-management/invalid/topic-create-missing-authorization.json +61 -0
  281. package/examples/profiles/message-broker-management/invalid/topic-create-missing-classification.json +66 -0
  282. package/examples/profiles/message-broker-management/invalid/topic-create-missing-cluster.json +66 -0
  283. package/examples/profiles/message-broker-management/invalid/topic-delete-denied-missing-error-type.json +68 -0
  284. package/examples/profiles/message-broker-management/invalid/topic-delete-missing-approval.json +65 -0
  285. package/examples/profiles/message-broker-management/not-applicable/consumer-group-rebalance.json +40 -0
  286. package/examples/profiles/message-broker-management/not-applicable/message-consume.json +41 -0
  287. package/examples/profiles/message-broker-management/not-applicable/message-publish.json +41 -0
  288. package/examples/profiles/message-broker-management/valid/acl-grant.json +79 -0
  289. package/examples/profiles/message-broker-management/valid/cluster-upgrade.json +77 -0
  290. package/examples/profiles/message-broker-management/valid/configuration-update.json +65 -0
  291. package/examples/profiles/message-broker-management/valid/consumer-group-delete.json +64 -0
  292. package/examples/profiles/message-broker-management/valid/message-replay.json +77 -0
  293. package/examples/profiles/message-broker-management/valid/offset-reset.json +97 -0
  294. package/examples/profiles/message-broker-management/valid/queue-purge.json +82 -0
  295. package/examples/profiles/message-broker-management/valid/quota-update.json +73 -0
  296. package/examples/profiles/message-broker-management/valid/topic-create.json +67 -0
  297. package/examples/profiles/message-broker-management/valid/topic-delete-denied.json +69 -0
  298. package/examples/profiles/message-broker-management/valid/topic-delete.json +77 -0
  299. package/examples/profiles/message-broker-management/valid/topic-retention-reduce.json +77 -0
  300. package/examples/profiles/secrets-and-key-management/README.md +115 -0
  301. package/examples/profiles/secrets-and-key-management/invalid/certificate-issue-missing-expiry.json +54 -0
  302. package/examples/profiles/secrets-and-key-management/invalid/emergency-reveal-missing-approval.json +61 -0
  303. package/examples/profiles/secrets-and-key-management/invalid/key-destroy-missing-approval.json +56 -0
  304. package/examples/profiles/secrets-and-key-management/invalid/key-generate-missing-owner.json +56 -0
  305. package/examples/profiles/secrets-and-key-management/invalid/key-import-missing-reason.json +59 -0
  306. package/examples/profiles/secrets-and-key-management/invalid/policy-update-missing-change.json +61 -0
  307. package/examples/profiles/secrets-and-key-management/invalid/secret-create-missing-authorization.json +53 -0
  308. package/examples/profiles/secrets-and-key-management/invalid/secret-export-missing-destination.json +74 -0
  309. package/examples/profiles/secrets-and-key-management/invalid/secret-reveal-missing-reason.json +65 -0
  310. package/examples/profiles/secrets-and-key-management/invalid/secret-revoke-missing-reason.json +52 -0
  311. package/examples/profiles/secrets-and-key-management/invalid/secret-rotate-missing-change.json +48 -0
  312. package/examples/profiles/secrets-and-key-management/invalid/secret-rotate-missing-type.json +54 -0
  313. package/examples/profiles/secrets-and-key-management/not-applicable/key-decrypt.json +27 -0
  314. package/examples/profiles/secrets-and-key-management/not-applicable/secret-cache-refresh.json +27 -0
  315. package/examples/profiles/secrets-and-key-management/not-applicable/secret-retrieve.json +27 -0
  316. package/examples/profiles/secrets-and-key-management/valid/certificate-issue.json +55 -0
  317. package/examples/profiles/secrets-and-key-management/valid/key-destroy.json +64 -0
  318. package/examples/profiles/secrets-and-key-management/valid/key-export.json +73 -0
  319. package/examples/profiles/secrets-and-key-management/valid/key-generate.json +57 -0
  320. package/examples/profiles/secrets-and-key-management/valid/key-import.json +64 -0
  321. package/examples/profiles/secrets-and-key-management/valid/secret-create.json +59 -0
  322. package/examples/profiles/secrets-and-key-management/valid/secret-export.json +75 -0
  323. package/examples/profiles/secrets-and-key-management/valid/secret-policy-update.json +68 -0
  324. package/examples/profiles/secrets-and-key-management/valid/secret-reveal-emergency.json +68 -0
  325. package/examples/profiles/secrets-and-key-management/valid/secret-reveal.json +70 -0
  326. package/examples/profiles/secrets-and-key-management/valid/secret-revoke.json +57 -0
  327. package/examples/profiles/secrets-and-key-management/valid/secret-rotate.json +55 -0
  328. package/examples/valid/access-request-approval.json +47 -0
  329. package/examples/valid/document-external-share.json +92 -0
  330. package/examples/valid/incident-case-close.json +114 -0
  331. package/examples/valid/kafka-consumer-offset-reset.json +105 -0
  332. package/examples/valid/minimal-event.json +22 -0
  333. package/examples/valid/nightly-reconciliation-job.json +33 -0
  334. package/examples/valid/order-api-publish.json +34 -0
  335. package/examples/valid/order-consumer-new-trace.json +36 -0
  336. package/examples/valid/privileged-configuration-change.json +109 -0
  337. package/examples/valid/service-account-data-export.json +83 -0
  338. package/examples/valid/user-role-assignment.json +92 -0
  339. package/package.json +6 -2
@@ -0,0 +1,85 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0038-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T11:14:26.744Z",
5
+ "event": {
6
+ "name": "financial.deposit.record",
7
+ "category": "data-modification",
8
+ "type": "update",
9
+ "outcome": "success",
10
+ "severity": "high",
11
+ "summary": "Operator corrected an under-posted deposit after a partner file was reprocessed."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "user-5120",
16
+ "tenantId": "tenant-12",
17
+ "roles": ["ledger-operator"]
18
+ },
19
+ "resource": {
20
+ "type": "account",
21
+ "id": "account-ref-781",
22
+ "name": "operating-account",
23
+ "classification": "confidential",
24
+ "tenantId": "tenant-12"
25
+ },
26
+ "relatedResources": [
27
+ {
28
+ "type": "reconciliation-run",
29
+ "id": "recon-2026-0313-eu-02"
30
+ }
31
+ ],
32
+ "application": {
33
+ "name": "ledger-service",
34
+ "environment": "production",
35
+ "version": "3.8.0"
36
+ },
37
+ "organization": {
38
+ "tenantId": "tenant-12",
39
+ "businessUnitId": "finance-operations"
40
+ },
41
+ "request": {
42
+ "requestId": "request-7a02f61",
43
+ "correlationId": "deposit-lifecycle-0140"
44
+ },
45
+ "authentication": {
46
+ "method": "mfa",
47
+ "mfa": true,
48
+ "provider": "corporate-idp"
49
+ },
50
+ "authorization": {
51
+ "decision": "allow",
52
+ "policy": "ledger-correction-policy",
53
+ "policyVersion": "4"
54
+ },
55
+ "approval": {
56
+ "status": "approved",
57
+ "workflowId": "ledger-correction-review",
58
+ "requiredApprovals": 1,
59
+ "receivedApprovals": 1,
60
+ "approvers": [
61
+ {
62
+ "type": "user",
63
+ "id": "user-4477"
64
+ }
65
+ ],
66
+ "approvedAt": "2026-03-14T11:12:03Z"
67
+ },
68
+ "reason": {
69
+ "code": "partner-file-restatement",
70
+ "text": "Partner restated the settlement file, so the posted deposit was corrected by hand.",
71
+ "reference": "case-88112"
72
+ },
73
+ "controlCategories": ["financial-transaction-integrity", "manual-intervention"],
74
+ "metadata": {
75
+ "financial": {
76
+ "transactionId": "txn-2026-0314-0140",
77
+ "amount": 100,
78
+ "currency": "EUR",
79
+ "direction": "credit",
80
+ "status": "posted",
81
+ "approvalRequired": true,
82
+ "manual": true
83
+ }
84
+ }
85
+ }
@@ -0,0 +1,69 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0031-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T09:12:44.310Z",
5
+ "event": {
6
+ "name": "financial.payment.capture",
7
+ "category": "data-modification",
8
+ "type": "execute",
9
+ "outcome": "success",
10
+ "severity": "medium",
11
+ "summary": "Authorized payment captured after the order was fulfilled."
12
+ },
13
+ "actor": {
14
+ "type": "service",
15
+ "id": "payment-capture-worker",
16
+ "tenantId": "tenant-12"
17
+ },
18
+ "resource": {
19
+ "type": "payment",
20
+ "id": "payment-ref-4412",
21
+ "name": "order-88214-payment",
22
+ "ownerId": "account-ref-781",
23
+ "tenantId": "tenant-12"
24
+ },
25
+ "application": {
26
+ "name": "payment-service",
27
+ "environment": "production",
28
+ "version": "4.2.1",
29
+ "region": "eu-central"
30
+ },
31
+ "organization": {
32
+ "tenantId": "tenant-12"
33
+ },
34
+ "request": {
35
+ "requestId": "request-6f21a08",
36
+ "correlationId": "payment-lifecycle-4412"
37
+ },
38
+ "authentication": {
39
+ "method": "service-account",
40
+ "provider": "workload-identity"
41
+ },
42
+ "authorization": {
43
+ "decision": "allow",
44
+ "policy": "payment-capture-policy",
45
+ "policyVersion": "7"
46
+ },
47
+ "relatedResources": [
48
+ {
49
+ "type": "account",
50
+ "id": "account-ref-781",
51
+ "name": "merchant-receivables"
52
+ }
53
+ ],
54
+ "reason": {
55
+ "code": "order-fulfilled",
56
+ "text": "Goods dispatched, so the held authorization was captured."
57
+ },
58
+ "controlCategories": ["financial-transaction-integrity"],
59
+ "metadata": {
60
+ "financial": {
61
+ "transactionId": "txn-2026-0314-0091",
62
+ "currency": "EUR",
63
+ "direction": "inbound",
64
+ "status": "captured",
65
+ "approvalRequired": false,
66
+ "manual": false
67
+ }
68
+ }
69
+ }
@@ -0,0 +1,65 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0030-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T09:12:44.310Z",
5
+ "event": {
6
+ "name": "financial.payment.capture",
7
+ "category": "data-modification",
8
+ "type": "execute",
9
+ "outcome": "success",
10
+ "severity": "medium",
11
+ "summary": "Authorized payment captured after the order was fulfilled."
12
+ },
13
+ "actor": {
14
+ "type": "service",
15
+ "id": "payment-capture-worker",
16
+ "tenantId": "tenant-12"
17
+ },
18
+ "resource": {
19
+ "type": "payment",
20
+ "id": "payment-ref-4412",
21
+ "name": "order-88214-payment",
22
+ "ownerId": "account-ref-781",
23
+ "tenantId": "tenant-12"
24
+ },
25
+ "application": {
26
+ "name": "payment-service",
27
+ "environment": "production",
28
+ "version": "4.2.1",
29
+ "region": "eu-central"
30
+ },
31
+ "organization": {
32
+ "tenantId": "tenant-12"
33
+ },
34
+ "request": {
35
+ "requestId": "request-6f21a08",
36
+ "correlationId": "payment-lifecycle-4412"
37
+ },
38
+ "authentication": {
39
+ "method": "service-account",
40
+ "provider": "workload-identity"
41
+ },
42
+ "relatedResources": [
43
+ {
44
+ "type": "account",
45
+ "id": "account-ref-781",
46
+ "name": "merchant-receivables"
47
+ }
48
+ ],
49
+ "reason": {
50
+ "code": "order-fulfilled",
51
+ "text": "Goods dispatched, so the held authorization was captured."
52
+ },
53
+ "controlCategories": ["financial-transaction-integrity"],
54
+ "metadata": {
55
+ "financial": {
56
+ "transactionId": "txn-2026-0314-0091",
57
+ "amount": 148.5,
58
+ "currency": "EUR",
59
+ "direction": "inbound",
60
+ "status": "captured",
61
+ "approvalRequired": false,
62
+ "manual": false
63
+ }
64
+ }
65
+ }
@@ -0,0 +1,63 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0033-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T15:00:04.271Z",
5
+ "event": {
6
+ "name": "financial.payout.execute",
7
+ "category": "data-modification",
8
+ "type": "execute",
9
+ "outcome": "success",
10
+ "severity": "low",
11
+ "summary": "Scheduled seller payout released without human intervention."
12
+ },
13
+ "actor": {
14
+ "type": "service",
15
+ "id": "payout-scheduler",
16
+ "tenantId": "tenant-31"
17
+ },
18
+ "resource": {
19
+ "type": "payout",
20
+ "id": "payout-ref-9014",
21
+ "ownerId": "account-ref-3390",
22
+ "tenantId": "tenant-31"
23
+ },
24
+ "relatedResources": [
25
+ {
26
+ "type": "account",
27
+ "id": "account-ref-3390",
28
+ "name": "seller-balance-account"
29
+ }
30
+ ],
31
+ "application": {
32
+ "name": "marketplace-payouts",
33
+ "environment": "production",
34
+ "version": "2.6.3"
35
+ },
36
+ "organization": {
37
+ "tenantId": "tenant-31"
38
+ },
39
+ "request": {
40
+ "requestId": "request-7a06d41",
41
+ "correlationId": "payout-cycle-2026-0314"
42
+ },
43
+ "authentication": {
44
+ "method": "service-account",
45
+ "provider": "workload-identity"
46
+ },
47
+ "authorization": {
48
+ "decision": "allow",
49
+ "policy": "payout-schedule-policy",
50
+ "policyVersion": "8"
51
+ },
52
+ "controlCategories": ["financial-transaction-integrity"],
53
+ "metadata": {
54
+ "financial": {
55
+ "transactionId": "txn-2026-0314-0188",
56
+ "amount": 612.4,
57
+ "currency": "EUR",
58
+ "status": "settled",
59
+ "approvalRequired": false,
60
+ "manual": false
61
+ }
62
+ }
63
+ }
@@ -0,0 +1,79 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0040-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T18:12:55.030Z",
5
+ "event": {
6
+ "name": "financial.reconciliation.adjust",
7
+ "category": "data-modification",
8
+ "type": "update",
9
+ "outcome": "success",
10
+ "severity": "high",
11
+ "summary": "Ledger balance adjusted to agree with the counterparty statement for the period."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "user-4477",
16
+ "tenantId": "tenant-12",
17
+ "roles": ["reconciliation-analyst"]
18
+ },
19
+ "resource": {
20
+ "type": "reconciliation-run",
21
+ "id": "recon-2026-0314-eu-01",
22
+ "tenantId": "tenant-12"
23
+ },
24
+ "relatedResources": [
25
+ {
26
+ "type": "settlement-batch",
27
+ "id": "settlement-2026-0314-eu"
28
+ },
29
+ {
30
+ "type": "account",
31
+ "id": "account-ref-781"
32
+ }
33
+ ],
34
+ "application": {
35
+ "name": "treasury-reconciliation",
36
+ "environment": "production",
37
+ "version": "6.0.2"
38
+ },
39
+ "organization": {
40
+ "tenantId": "tenant-12",
41
+ "businessUnitId": "treasury"
42
+ },
43
+ "request": {
44
+ "requestId": "request-7a08f70",
45
+ "correlationId": "reconciliation-cycle-2026-0314"
46
+ },
47
+ "authentication": {
48
+ "method": "mfa",
49
+ "mfa": true,
50
+ "provider": "corporate-idp"
51
+ },
52
+ "authorization": {
53
+ "decision": "allow",
54
+ "policy": "reconciliation-adjustment-policy",
55
+ "policyVersion": "3"
56
+ },
57
+ "approval": {
58
+ "status": "approved",
59
+ "workflowId": "reconciliation-break-review",
60
+ "requiredApprovals": 1,
61
+ "receivedApprovals": 1,
62
+ "approvedAt": "2026-03-14T18:10:12Z"
63
+ },
64
+ "reason": {
65
+ "code": "counterparty-fee-difference",
66
+ "text": "Counterparty applied a fee the ledger had not yet booked for the period.",
67
+ "reference": "case-88190"
68
+ },
69
+ "controlCategories": ["financial-transaction-integrity", "reconciliation"],
70
+ "metadata": {
71
+ "financial": {
72
+ "reconciliationId": "recon-2026-0314-eu-01",
73
+ "amount": 42.15,
74
+ "currency": "EUR",
75
+ "approvalRequired": false,
76
+ "manual": false
77
+ }
78
+ }
79
+ }
@@ -0,0 +1,88 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0039-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T18:12:55.030Z",
5
+ "event": {
6
+ "name": "financial.reconciliation.adjust",
7
+ "category": "data-modification",
8
+ "type": "update",
9
+ "outcome": "success",
10
+ "severity": "high",
11
+ "summary": "Ledger balance adjusted to agree with the counterparty statement for the period."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "user-4477",
16
+ "tenantId": "tenant-12",
17
+ "roles": ["reconciliation-analyst"]
18
+ },
19
+ "resource": {
20
+ "type": "reconciliation-run",
21
+ "id": "recon-2026-0314-eu-01",
22
+ "tenantId": "tenant-12"
23
+ },
24
+ "relatedResources": [
25
+ {
26
+ "type": "settlement-batch",
27
+ "id": "settlement-2026-0314-eu"
28
+ },
29
+ {
30
+ "type": "account",
31
+ "id": "account-ref-781"
32
+ }
33
+ ],
34
+ "application": {
35
+ "name": "treasury-reconciliation",
36
+ "environment": "production",
37
+ "version": "6.0.2"
38
+ },
39
+ "organization": {
40
+ "tenantId": "tenant-12",
41
+ "businessUnitId": "treasury"
42
+ },
43
+ "request": {
44
+ "requestId": "request-7a08f70",
45
+ "correlationId": "reconciliation-cycle-2026-0314"
46
+ },
47
+ "authentication": {
48
+ "method": "mfa",
49
+ "mfa": true,
50
+ "provider": "corporate-idp"
51
+ },
52
+ "authorization": {
53
+ "decision": "allow",
54
+ "policy": "reconciliation-adjustment-policy",
55
+ "policyVersion": "3"
56
+ },
57
+ "approval": {
58
+ "status": "approved",
59
+ "workflowId": "reconciliation-break-review",
60
+ "requiredApprovals": 1,
61
+ "receivedApprovals": 1,
62
+ "approvedAt": "2026-03-14T18:10:12Z"
63
+ },
64
+ "change": {
65
+ "type": "update",
66
+ "changedFields": ["ledgerBalance"],
67
+ "before": {
68
+ "ledgerBalance": 482310.4
69
+ },
70
+ "after": {
71
+ "ledgerBalance": 482352.55
72
+ }
73
+ },
74
+ "reason": {
75
+ "code": "counterparty-fee-difference",
76
+ "text": "Counterparty applied a fee the ledger had not yet booked for the period.",
77
+ "reference": "case-88190"
78
+ },
79
+ "controlCategories": ["financial-transaction-integrity", "reconciliation"],
80
+ "metadata": {
81
+ "financial": {
82
+ "amount": 42.15,
83
+ "currency": "EUR",
84
+ "approvalRequired": false,
85
+ "manual": false
86
+ }
87
+ }
88
+ }
@@ -0,0 +1,70 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0035-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T12:02:11.556Z",
5
+ "event": {
6
+ "name": "financial.refund.create",
7
+ "category": "data-modification",
8
+ "type": "create",
9
+ "outcome": "success",
10
+ "severity": "medium",
11
+ "summary": "Refund issued to the buyer after the seller accepted a return."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "user-6605",
16
+ "tenantId": "tenant-31",
17
+ "roles": ["support-agent"]
18
+ },
19
+ "resource": {
20
+ "type": "refund",
21
+ "id": "refund-ref-1180",
22
+ "ownerId": "account-ref-3390",
23
+ "tenantId": "tenant-31"
24
+ },
25
+ "relatedResources": [
26
+ {
27
+ "type": "payment",
28
+ "id": "payment-ref-4412"
29
+ },
30
+ {
31
+ "type": "account",
32
+ "id": "account-ref-3390"
33
+ }
34
+ ],
35
+ "application": {
36
+ "name": "marketplace-payments",
37
+ "environment": "production",
38
+ "version": "2.6.3"
39
+ },
40
+ "organization": {
41
+ "tenantId": "tenant-31"
42
+ },
43
+ "request": {
44
+ "requestId": "request-7a03a55",
45
+ "correlationId": "payment-lifecycle-4412"
46
+ },
47
+ "authentication": {
48
+ "method": "oidc",
49
+ "mfa": true,
50
+ "provider": "workforce-idp"
51
+ },
52
+ "authorization": {
53
+ "decision": "allow",
54
+ "policy": "refund-policy",
55
+ "policyVersion": "3",
56
+ "permissions": ["marketplace.refund.create"]
57
+ },
58
+ "controlCategories": ["financial-transaction-integrity"],
59
+ "metadata": {
60
+ "financial": {
61
+ "transactionId": "txn-2026-0314-0155",
62
+ "amount": 148.5,
63
+ "currency": "EUR",
64
+ "direction": "outbound",
65
+ "status": "pending-settlement",
66
+ "approvalRequired": false,
67
+ "manual": false
68
+ }
69
+ }
70
+ }
@@ -0,0 +1,84 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0036-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T13:20:47.128Z",
5
+ "event": {
6
+ "name": "financial.reversal.execute",
7
+ "category": "data-modification",
8
+ "type": "execute",
9
+ "outcome": "success",
10
+ "severity": "high",
11
+ "summary": "Duplicate capture unwound against the original payment."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "user-5120",
16
+ "tenantId": "tenant-12",
17
+ "roles": ["ledger-operator"]
18
+ },
19
+ "resource": {
20
+ "type": "payment",
21
+ "id": "payment-ref-4412",
22
+ "ownerId": "account-ref-781",
23
+ "tenantId": "tenant-12"
24
+ },
25
+ "relatedResources": [
26
+ {
27
+ "type": "account",
28
+ "id": "account-ref-781"
29
+ }
30
+ ],
31
+ "application": {
32
+ "name": "ledger-service",
33
+ "environment": "production",
34
+ "version": "3.8.0"
35
+ },
36
+ "organization": {
37
+ "tenantId": "tenant-12",
38
+ "businessUnitId": "finance-operations"
39
+ },
40
+ "request": {
41
+ "requestId": "request-7a04b08",
42
+ "correlationId": "payment-lifecycle-4412"
43
+ },
44
+ "authentication": {
45
+ "method": "mfa",
46
+ "mfa": true,
47
+ "provider": "corporate-idp"
48
+ },
49
+ "authorization": {
50
+ "decision": "allow",
51
+ "policy": "reversal-policy",
52
+ "policyVersion": "6"
53
+ },
54
+ "approval": {
55
+ "status": "approved",
56
+ "workflowId": "ledger-reversal-review",
57
+ "requiredApprovals": 1,
58
+ "receivedApprovals": 1,
59
+ "approvers": [
60
+ {
61
+ "type": "user",
62
+ "id": "user-4477"
63
+ }
64
+ ],
65
+ "approvedAt": "2026-03-14T13:18:02Z"
66
+ },
67
+ "reason": {
68
+ "code": "duplicate-capture",
69
+ "text": "The same authorization was captured twice by a retried job, so the second capture was unwound.",
70
+ "reference": "case-88155"
71
+ },
72
+ "controlCategories": ["financial-transaction-integrity"],
73
+ "metadata": {
74
+ "financial": {
75
+ "transactionId": "txn-2026-0314-0161",
76
+ "amount": 148.5,
77
+ "currency": "EUR",
78
+ "direction": "outbound",
79
+ "status": "reversed",
80
+ "approvalRequired": true,
81
+ "manual": false
82
+ }
83
+ }
84
+ }
@@ -0,0 +1,66 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0034-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T10:05:18.402Z",
5
+ "event": {
6
+ "name": "financial.transfer.execute",
7
+ "category": "data-modification",
8
+ "type": "execute",
9
+ "outcome": "success",
10
+ "severity": "medium",
11
+ "summary": "Internal transfer posted between two ledger accounts."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "user-5120",
16
+ "tenantId": "tenant-12",
17
+ "roles": ["ledger-operator"]
18
+ },
19
+ "resource": {
20
+ "type": "account",
21
+ "id": "account-ref-781",
22
+ "name": "operating-account",
23
+ "classification": "confidential",
24
+ "tenantId": "tenant-12"
25
+ },
26
+ "application": {
27
+ "name": "ledger-service",
28
+ "environment": "production",
29
+ "version": "3.8.0"
30
+ },
31
+ "organization": {
32
+ "tenantId": "tenant-12",
33
+ "businessUnitId": "finance-operations"
34
+ },
35
+ "request": {
36
+ "requestId": "request-6f22c17",
37
+ "correlationId": "transfer-lifecycle-7712"
38
+ },
39
+ "authentication": {
40
+ "method": "mfa",
41
+ "mfa": true,
42
+ "provider": "corporate-idp"
43
+ },
44
+ "authorization": {
45
+ "decision": "allow",
46
+ "policy": "ledger-transfer-policy",
47
+ "policyVersion": "11",
48
+ "permissions": ["ledger.transfer.execute"]
49
+ },
50
+ "reason": {
51
+ "code": "liquidity-rebalance",
52
+ "text": "Scheduled rebalance of the operating account against the reserve account."
53
+ },
54
+ "controlCategories": ["financial-transaction-integrity"],
55
+ "metadata": {
56
+ "financial": {
57
+ "transactionId": "txn-2026-0314-0112",
58
+ "amount": 50000,
59
+ "currency": "EUR",
60
+ "direction": "debit",
61
+ "status": "posted",
62
+ "approvalRequired": false,
63
+ "manual": false
64
+ }
65
+ }
66
+ }