@openauditmodel/cli 0.4.1 → 0.4.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (339) hide show
  1. package/README.md +1 -1
  2. package/conformance-kit/README.md +109 -0
  3. package/conformance-kit/manifest.json +8023 -0
  4. package/examples/README.md +62 -0
  5. package/examples/integrity/README.md +103 -0
  6. package/examples/integrity/invalid/broken-previous-hash/001.json +53 -0
  7. package/examples/integrity/invalid/broken-previous-hash/002.json +52 -0
  8. package/examples/integrity/invalid/broken-previous-hash/003.json +43 -0
  9. package/examples/integrity/invalid/duplicate-sequence/001.json +53 -0
  10. package/examples/integrity/invalid/duplicate-sequence/002.json +52 -0
  11. package/examples/integrity/invalid/duplicate-sequence/003.json +43 -0
  12. package/examples/integrity/invalid/missing-sequence/001.json +53 -0
  13. package/examples/integrity/invalid/missing-sequence/002.json +51 -0
  14. package/examples/integrity/invalid/missing-sequence/003.json +43 -0
  15. package/examples/integrity/invalid/reordered-chain/001.json +53 -0
  16. package/examples/integrity/invalid/reordered-chain/002.json +52 -0
  17. package/examples/integrity/invalid/reordered-chain/003.json +43 -0
  18. package/examples/integrity/invalid/tampered-event.json +51 -0
  19. package/examples/integrity/invalid/tampered-signed-event.json +46 -0
  20. package/examples/integrity/invalid/unsupported-algorithm.json +51 -0
  21. package/examples/integrity/invalid/unsupported-signature-algorithm.json +46 -0
  22. package/examples/integrity/invalid/wrong-declared-hash.json +51 -0
  23. package/examples/integrity/keys/ed25519-test-public.pem +3 -0
  24. package/examples/integrity/valid/signed-event-ed25519.json +46 -0
  25. package/examples/integrity/valid/single-event-sha256.json +51 -0
  26. package/examples/integrity/valid/three-event-chain/001.json +53 -0
  27. package/examples/integrity/valid/three-event-chain/002.json +52 -0
  28. package/examples/integrity/valid/three-event-chain/003.json +43 -0
  29. package/examples/integrity/valid/unicode-and-number-event.json +68 -0
  30. package/examples/invalid/README.md +38 -0
  31. package/examples/invalid/delegation-without-subject.json +27 -0
  32. package/examples/invalid/failure-without-error.json +28 -0
  33. package/examples/invalid/invalid-event-name.json +22 -0
  34. package/examples/invalid/invalid-extension-name.json +25 -0
  35. package/examples/invalid/missing-actor.json +18 -0
  36. package/examples/invalid/missing-resource.json +18 -0
  37. package/examples/invalid/unknown-core-property.json +23 -0
  38. package/examples/privacy/README.md +101 -0
  39. package/examples/privacy/clean/hashes-and-identifiers.json +42 -0
  40. package/examples/privacy/clean/minimal-clean-event.json +22 -0
  41. package/examples/privacy/clean/safe-evidence-reference.json +43 -0
  42. package/examples/privacy/clean/sanitized-change.json +40 -0
  43. package/examples/privacy/clean/structured-metadata.json +43 -0
  44. package/examples/privacy/findings/access-token-field.json +27 -0
  45. package/examples/privacy/findings/bearer-token.json +26 -0
  46. package/examples/privacy/findings/credentialed-connection-string.json +26 -0
  47. package/examples/privacy/findings/evidence-query-string.json +29 -0
  48. package/examples/privacy/findings/high-entropy-token.json +26 -0
  49. package/examples/privacy/findings/jwt-token.json +26 -0
  50. package/examples/privacy/findings/oversized-change-before.json +89 -0
  51. package/examples/privacy/findings/password-field.json +27 -0
  52. package/examples/privacy/findings/private-key.json +26 -0
  53. package/examples/privacy/findings/raw-response-body.json +26 -0
  54. package/examples/privacy/findings/url-userinfo.json +26 -0
  55. package/examples/profiles/api-and-integration-management/README.md +119 -0
  56. package/examples/profiles/api-and-integration-management/invalid/api-key-create-missing-authentication.json +64 -0
  57. package/examples/profiles/api-and-integration-management/invalid/api-key-create-missing-authorization.json +64 -0
  58. package/examples/profiles/api-and-integration-management/invalid/api-key-rotate-missing-credential-reference.json +58 -0
  59. package/examples/profiles/api-and-integration-management/invalid/integration-configuration-update-missing-connection-id.json +67 -0
  60. package/examples/profiles/api-and-integration-management/invalid/integration-connect-missing-approval-status.json +78 -0
  61. package/examples/profiles/api-and-integration-management/invalid/integration-disconnect-missing-authentication.json +63 -0
  62. package/examples/profiles/api-and-integration-management/invalid/integration-reauthorize-missing-error-type.json +68 -0
  63. package/examples/profiles/api-and-integration-management/invalid/integration-sync-start-missing-correlation-id.json +58 -0
  64. package/examples/profiles/api-and-integration-management/invalid/webhook-create-missing-endpoint-class.json +63 -0
  65. package/examples/profiles/api-and-integration-management/invalid/webhook-create-missing-type.json +63 -0
  66. package/examples/profiles/api-and-integration-management/invalid/webhook-disable-missing-reason.json +58 -0
  67. package/examples/profiles/api-and-integration-management/invalid/webhook-update-missing-change.json +63 -0
  68. package/examples/profiles/api-and-integration-management/not-applicable/api-request.json +45 -0
  69. package/examples/profiles/api-and-integration-management/not-applicable/integration-sync-progress.json +44 -0
  70. package/examples/profiles/api-and-integration-management/not-applicable/webhook-delivery.json +44 -0
  71. package/examples/profiles/api-and-integration-management/valid/api-key-create.json +70 -0
  72. package/examples/profiles/api-and-integration-management/valid/api-key-revoke.json +72 -0
  73. package/examples/profiles/api-and-integration-management/valid/api-key-rotate.json +59 -0
  74. package/examples/profiles/api-and-integration-management/valid/integration-configuration-update.json +68 -0
  75. package/examples/profiles/api-and-integration-management/valid/integration-connect.json +79 -0
  76. package/examples/profiles/api-and-integration-management/valid/integration-disconnect.json +69 -0
  77. package/examples/profiles/api-and-integration-management/valid/integration-reauthorize-failure.json +69 -0
  78. package/examples/profiles/api-and-integration-management/valid/integration-sync-cancel.json +65 -0
  79. package/examples/profiles/api-and-integration-management/valid/integration-sync-start.json +59 -0
  80. package/examples/profiles/api-and-integration-management/valid/webhook-create.json +64 -0
  81. package/examples/profiles/api-and-integration-management/valid/webhook-disable.json +63 -0
  82. package/examples/profiles/api-and-integration-management/valid/webhook-test.json +59 -0
  83. package/examples/profiles/api-and-integration-management/valid/webhook-update.json +76 -0
  84. package/examples/profiles/backup-and-recovery/README.md +127 -0
  85. package/examples/profiles/backup-and-recovery/invalid/backup-complete-missing-backup-id.json +55 -0
  86. package/examples/profiles/backup-and-recovery/invalid/backup-complete-missing-recovery-point.json +55 -0
  87. package/examples/profiles/backup-and-recovery/invalid/backup-create-missing-authorization.json +50 -0
  88. package/examples/profiles/backup-and-recovery/invalid/backup-delete-missing-reason.json +78 -0
  89. package/examples/profiles/backup-and-recovery/invalid/backup-expire-missing-retention-class.json +55 -0
  90. package/examples/profiles/backup-and-recovery/invalid/backup-verify-missing-verification-status.json +66 -0
  91. package/examples/profiles/backup-and-recovery/invalid/policy-update-missing-change.json +65 -0
  92. package/examples/profiles/backup-and-recovery/invalid/recovery-failover-missing-recovery-id.json +71 -0
  93. package/examples/profiles/backup-and-recovery/invalid/recovery-failover-missing-target-scope.json +71 -0
  94. package/examples/profiles/backup-and-recovery/invalid/restore-start-missing-approval.json +66 -0
  95. package/examples/profiles/backup-and-recovery/invalid/restore-start-missing-source-id.json +73 -0
  96. package/examples/profiles/backup-and-recovery/invalid/snapshot-create-missing-snapshot-id.json +57 -0
  97. package/examples/profiles/backup-and-recovery/not-applicable/backup-chunk-write.json +43 -0
  98. package/examples/profiles/backup-and-recovery/not-applicable/restore-progress.json +42 -0
  99. package/examples/profiles/backup-and-recovery/not-applicable/storage-replica-heartbeat.json +37 -0
  100. package/examples/profiles/backup-and-recovery/valid/backup-complete-failed.json +62 -0
  101. package/examples/profiles/backup-and-recovery/valid/backup-complete.json +56 -0
  102. package/examples/profiles/backup-and-recovery/valid/backup-create.json +56 -0
  103. package/examples/profiles/backup-and-recovery/valid/backup-delete.json +83 -0
  104. package/examples/profiles/backup-and-recovery/valid/backup-expire.json +56 -0
  105. package/examples/profiles/backup-and-recovery/valid/backup-verify.json +67 -0
  106. package/examples/profiles/backup-and-recovery/valid/policy-update.json +78 -0
  107. package/examples/profiles/backup-and-recovery/valid/recovery-complete.json +61 -0
  108. package/examples/profiles/backup-and-recovery/valid/recovery-failback.json +72 -0
  109. package/examples/profiles/backup-and-recovery/valid/recovery-failover.json +72 -0
  110. package/examples/profiles/backup-and-recovery/valid/recovery-start.json +61 -0
  111. package/examples/profiles/backup-and-recovery/valid/restore-complete.json +63 -0
  112. package/examples/profiles/backup-and-recovery/valid/restore-start.json +74 -0
  113. package/examples/profiles/backup-and-recovery/valid/snapshot-create.json +58 -0
  114. package/examples/profiles/backup-and-recovery/valid/snapshot-delete.json +60 -0
  115. package/examples/profiles/customer-and-account-management/README.md +127 -0
  116. package/examples/profiles/customer-and-account-management/invalid/account-close-missing-approval.json +70 -0
  117. package/examples/profiles/customer-and-account-management/invalid/account-freeze-missing-restriction-scope.json +83 -0
  118. package/examples/profiles/customer-and-account-management/invalid/account-freeze-missing-status.json +83 -0
  119. package/examples/profiles/customer-and-account-management/invalid/account-limit-missing-before.json +74 -0
  120. package/examples/profiles/customer-and-account-management/invalid/account-open-missing-owner.json +58 -0
  121. package/examples/profiles/customer-and-account-management/invalid/account-status-missing-subject.json +73 -0
  122. package/examples/profiles/customer-and-account-management/invalid/account-update-missing-override-reason.json +67 -0
  123. package/examples/profiles/customer-and-account-management/invalid/customer-close-missing-authorization.json +69 -0
  124. package/examples/profiles/customer-and-account-management/invalid/customer-create-missing-customer-type.json +62 -0
  125. package/examples/profiles/customer-and-account-management/invalid/customer-delete-missing-scope.json +70 -0
  126. package/examples/profiles/customer-and-account-management/invalid/customer-merge-missing-source.json +78 -0
  127. package/examples/profiles/customer-and-account-management/invalid/customer-update-missing-change.json +61 -0
  128. package/examples/profiles/customer-and-account-management/not-applicable/account-balance-view.json +39 -0
  129. package/examples/profiles/customer-and-account-management/not-applicable/customer-profile-view.json +38 -0
  130. package/examples/profiles/customer-and-account-management/not-applicable/customer-search.json +38 -0
  131. package/examples/profiles/customer-and-account-management/valid/account-close-approved.json +78 -0
  132. package/examples/profiles/customer-and-account-management/valid/account-freeze.json +84 -0
  133. package/examples/profiles/customer-and-account-management/valid/account-limit-increase.json +77 -0
  134. package/examples/profiles/customer-and-account-management/valid/account-open.json +59 -0
  135. package/examples/profiles/customer-and-account-management/valid/account-status-on-behalf.json +79 -0
  136. package/examples/profiles/customer-and-account-management/valid/account-update-override.json +72 -0
  137. package/examples/profiles/customer-and-account-management/valid/customer-close.json +75 -0
  138. package/examples/profiles/customer-and-account-management/valid/customer-create.json +63 -0
  139. package/examples/profiles/customer-and-account-management/valid/customer-delete.json +71 -0
  140. package/examples/profiles/customer-and-account-management/valid/customer-merge.json +79 -0
  141. package/examples/profiles/customer-and-account-management/valid/customer-restrict.json +76 -0
  142. package/examples/profiles/customer-and-account-management/valid/customer-update.json +65 -0
  143. package/examples/profiles/deployment-and-change-management/README.md +115 -0
  144. package/examples/profiles/deployment-and-change-management/invalid/cancel-missing-authorization.json +59 -0
  145. package/examples/profiles/deployment-and-change-management/invalid/cancel-missing-reason.json +61 -0
  146. package/examples/profiles/deployment-and-change-management/invalid/change-request-approve-missing-approval.json +57 -0
  147. package/examples/profiles/deployment-and-change-management/invalid/configuration-update-missing-authorization.json +81 -0
  148. package/examples/profiles/deployment-and-change-management/invalid/deploy-approved-missing-approval.json +73 -0
  149. package/examples/profiles/deployment-and-change-management/invalid/deploy-failed-missing-resulting-state.json +71 -0
  150. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-approval-required.json +67 -0
  151. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-deployment-id.json +67 -0
  152. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-environment.json +67 -0
  153. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-previous-version.json +67 -0
  154. package/examples/profiles/deployment-and-change-management/invalid/deploy-missing-version.json +67 -0
  155. package/examples/profiles/deployment-and-change-management/invalid/deploy-partial-missing-resulting-state.json +68 -0
  156. package/examples/profiles/deployment-and-change-management/invalid/secret-rotate-missing-changed-fields.json +72 -0
  157. package/examples/profiles/deployment-and-change-management/invalid/secret-rotate-missing-reason.json +68 -0
  158. package/examples/profiles/deployment-and-change-management/not-applicable/build-log-append.json +33 -0
  159. package/examples/profiles/deployment-and-change-management/not-applicable/pipeline-poll.json +33 -0
  160. package/examples/profiles/deployment-and-change-management/not-applicable/secret-access.json +39 -0
  161. package/examples/profiles/deployment-and-change-management/valid/change-request-approve.json +69 -0
  162. package/examples/profiles/deployment-and-change-management/valid/configuration-update.json +88 -0
  163. package/examples/profiles/deployment-and-change-management/valid/deploy-approved.json +85 -0
  164. package/examples/profiles/deployment-and-change-management/valid/deploy-automated.json +68 -0
  165. package/examples/profiles/deployment-and-change-management/valid/deploy-failed.json +72 -0
  166. package/examples/profiles/deployment-and-change-management/valid/deploy-partial.json +69 -0
  167. package/examples/profiles/deployment-and-change-management/valid/infrastructure-apply.json +78 -0
  168. package/examples/profiles/deployment-and-change-management/valid/release-approve.json +77 -0
  169. package/examples/profiles/deployment-and-change-management/valid/release-cancel.json +65 -0
  170. package/examples/profiles/deployment-and-change-management/valid/release-create.json +53 -0
  171. package/examples/profiles/deployment-and-change-management/valid/rollback-emergency.json +80 -0
  172. package/examples/profiles/deployment-and-change-management/valid/secret-rotate-emergency.json +73 -0
  173. package/examples/profiles/document-management/README.md +80 -0
  174. package/examples/profiles/document-management/invalid/delete-missing-reason.json +53 -0
  175. package/examples/profiles/document-management/invalid/download-missing-classification.json +46 -0
  176. package/examples/profiles/document-management/invalid/external-share-missing-expiry.json +68 -0
  177. package/examples/profiles/document-management/invalid/external-share-missing-reason.json +64 -0
  178. package/examples/profiles/document-management/invalid/legal-hold-missing-state.json +63 -0
  179. package/examples/profiles/document-management/invalid/permission-grant-missing-grantee.json +57 -0
  180. package/examples/profiles/document-management/invalid/retention-update-missing-class.json +71 -0
  181. package/examples/profiles/document-management/invalid/share-create-missing-permission.json +53 -0
  182. package/examples/profiles/document-management/invalid/share-missing-recipient-type.json +53 -0
  183. package/examples/profiles/document-management/invalid/upload-missing-authorization.json +42 -0
  184. package/examples/profiles/document-management/invalid/version-rollback-missing-previous.json +58 -0
  185. package/examples/profiles/document-management/not-applicable/file-view.json +42 -0
  186. package/examples/profiles/document-management/valid/file-delete.json +58 -0
  187. package/examples/profiles/document-management/valid/file-download.json +47 -0
  188. package/examples/profiles/document-management/valid/file-upload.json +47 -0
  189. package/examples/profiles/document-management/valid/legal-hold-apply.json +64 -0
  190. package/examples/profiles/document-management/valid/permission-grant.json +58 -0
  191. package/examples/profiles/document-management/valid/retention-update.json +72 -0
  192. package/examples/profiles/document-management/valid/share-external.json +69 -0
  193. package/examples/profiles/document-management/valid/share-internal.json +54 -0
  194. package/examples/profiles/document-management/valid/share-revoke.json +56 -0
  195. package/examples/profiles/document-management/valid/version-rollback.json +59 -0
  196. package/examples/profiles/financial-transaction-management/README.md +123 -0
  197. package/examples/profiles/financial-transaction-management/invalid/limit-update-missing-limit-type.json +101 -0
  198. package/examples/profiles/financial-transaction-management/invalid/manual-deposit-missing-change.json +85 -0
  199. package/examples/profiles/financial-transaction-management/invalid/payment-capture-missing-amount.json +69 -0
  200. package/examples/profiles/financial-transaction-management/invalid/payment-capture-missing-authorization.json +65 -0
  201. package/examples/profiles/financial-transaction-management/invalid/payout-missing-direction.json +63 -0
  202. package/examples/profiles/financial-transaction-management/invalid/reconciliation-adjust-missing-change.json +79 -0
  203. package/examples/profiles/financial-transaction-management/invalid/reconciliation-missing-identifier.json +88 -0
  204. package/examples/profiles/financial-transaction-management/invalid/refund-missing-reason.json +70 -0
  205. package/examples/profiles/financial-transaction-management/invalid/reversal-missing-original-transaction.json +84 -0
  206. package/examples/profiles/financial-transaction-management/invalid/transfer-missing-related-resources.json +66 -0
  207. package/examples/profiles/financial-transaction-management/invalid/withdrawal-missing-approval-status.json +96 -0
  208. package/examples/profiles/financial-transaction-management/invalid/withdrawal-missing-correlation.json +96 -0
  209. package/examples/profiles/financial-transaction-management/not-applicable/balance-view.json +36 -0
  210. package/examples/profiles/financial-transaction-management/not-applicable/quote-create.json +33 -0
  211. package/examples/profiles/financial-transaction-management/not-applicable/report-generate.json +36 -0
  212. package/examples/profiles/financial-transaction-management/valid/chargeback-open.json +73 -0
  213. package/examples/profiles/financial-transaction-management/valid/deposit-manual-correction.json +86 -0
  214. package/examples/profiles/financial-transaction-management/valid/limit-update.json +92 -0
  215. package/examples/profiles/financial-transaction-management/valid/payment-capture.json +70 -0
  216. package/examples/profiles/financial-transaction-management/valid/payment-reject.json +76 -0
  217. package/examples/profiles/financial-transaction-management/valid/payout-execute.json +64 -0
  218. package/examples/profiles/financial-transaction-management/valid/reconciliation-adjust.json +85 -0
  219. package/examples/profiles/financial-transaction-management/valid/refund-create.json +75 -0
  220. package/examples/profiles/financial-transaction-management/valid/reversal-execute.json +80 -0
  221. package/examples/profiles/financial-transaction-management/valid/settlement-execute.json +70 -0
  222. package/examples/profiles/financial-transaction-management/valid/transfer-execute.json +74 -0
  223. package/examples/profiles/financial-transaction-management/valid/withdrawal-execute.json +91 -0
  224. package/examples/profiles/identity-and-access-management/README.md +93 -0
  225. package/examples/profiles/identity-and-access-management/invalid/credential-rotate-missing-reason.json +47 -0
  226. package/examples/profiles/identity-and-access-management/invalid/permission-grant-missing-scope.json +54 -0
  227. package/examples/profiles/identity-and-access-management/invalid/privileged-role-without-approval.json +68 -0
  228. package/examples/profiles/identity-and-access-management/invalid/privileged-role-without-mfa.json +83 -0
  229. package/examples/profiles/identity-and-access-management/invalid/role-assign-missing-authorization.json +54 -0
  230. package/examples/profiles/identity-and-access-management/invalid/role-assign-missing-role-id.json +60 -0
  231. package/examples/profiles/identity-and-access-management/invalid/service-account-missing-owner.json +53 -0
  232. package/examples/profiles/identity-and-access-management/not-applicable/document-share.json +49 -0
  233. package/examples/profiles/identity-and-access-management/valid/credential-rotate.json +59 -0
  234. package/examples/profiles/identity-and-access-management/valid/permission-revoke.json +77 -0
  235. package/examples/profiles/identity-and-access-management/valid/role-assign-privileged.json +87 -0
  236. package/examples/profiles/identity-and-access-management/valid/role-assign-standard.json +80 -0
  237. package/examples/profiles/identity-and-access-management/valid/service-account-create.json +55 -0
  238. package/examples/profiles/identity-and-access-management/valid/user-create.json +55 -0
  239. package/examples/profiles/identity-and-access-management/valid/user-disable.json +79 -0
  240. package/examples/profiles/incident-management/README.md +125 -0
  241. package/examples/profiles/incident-management/invalid/assignment-change-missing-assignee.json +69 -0
  242. package/examples/profiles/incident-management/invalid/assignment-change-missing-change.json +59 -0
  243. package/examples/profiles/incident-management/invalid/case-close-missing-approval.json +94 -0
  244. package/examples/profiles/incident-management/invalid/case-close-missing-authorization.json +108 -0
  245. package/examples/profiles/incident-management/invalid/case-close-missing-reason.json +109 -0
  246. package/examples/profiles/incident-management/invalid/case-create-missing-status.json +67 -0
  247. package/examples/profiles/incident-management/invalid/case-reopen-missing-change.json +66 -0
  248. package/examples/profiles/incident-management/invalid/case-reopen-missing-reason.json +72 -0
  249. package/examples/profiles/incident-management/invalid/case-resolve-missing-resolution-type.json +74 -0
  250. package/examples/profiles/incident-management/invalid/corrective-action-verify-missing-method.json +81 -0
  251. package/examples/profiles/incident-management/invalid/priority-change-missing-priority.json +73 -0
  252. package/examples/profiles/incident-management/invalid/rca-approve-missing-approval.json +66 -0
  253. package/examples/profiles/incident-management/invalid/rca-create-missing-method.json +72 -0
  254. package/examples/profiles/incident-management/invalid/sla-breach-missing-target.json +49 -0
  255. package/examples/profiles/incident-management/not-applicable/case-view.json +40 -0
  256. package/examples/profiles/incident-management/not-applicable/monitoring-alert-raise.json +40 -0
  257. package/examples/profiles/incident-management/not-applicable/note-create.json +46 -0
  258. package/examples/profiles/incident-management/valid/assignment-change.json +70 -0
  259. package/examples/profiles/incident-management/valid/case-close.json +114 -0
  260. package/examples/profiles/incident-management/valid/case-create.json +68 -0
  261. package/examples/profiles/incident-management/valid/case-reopen.json +77 -0
  262. package/examples/profiles/incident-management/valid/case-resolve.json +75 -0
  263. package/examples/profiles/incident-management/valid/corrective-action-open.json +72 -0
  264. package/examples/profiles/incident-management/valid/corrective-action-verify.json +82 -0
  265. package/examples/profiles/incident-management/valid/create-short-form.json +64 -0
  266. package/examples/profiles/incident-management/valid/major-declare.json +79 -0
  267. package/examples/profiles/incident-management/valid/priority-change.json +74 -0
  268. package/examples/profiles/incident-management/valid/problem-case-close.json +73 -0
  269. package/examples/profiles/incident-management/valid/rca-approve.json +86 -0
  270. package/examples/profiles/incident-management/valid/rca-create.json +73 -0
  271. package/examples/profiles/incident-management/valid/sla-breach.json +50 -0
  272. package/examples/profiles/message-broker-management/README.md +123 -0
  273. package/examples/profiles/message-broker-management/invalid/acl-grant-missing-principal.json +78 -0
  274. package/examples/profiles/message-broker-management/invalid/configuration-update-missing-change.json +58 -0
  275. package/examples/profiles/message-broker-management/invalid/message-replay-missing-scope.json +76 -0
  276. package/examples/profiles/message-broker-management/invalid/offset-reset-missing-target.json +96 -0
  277. package/examples/profiles/message-broker-management/invalid/queue-purge-missing-destructive-flag.json +79 -0
  278. package/examples/profiles/message-broker-management/invalid/queue-purge-missing-reason.json +77 -0
  279. package/examples/profiles/message-broker-management/invalid/quota-update-missing-dimension.json +72 -0
  280. package/examples/profiles/message-broker-management/invalid/topic-create-missing-authorization.json +61 -0
  281. package/examples/profiles/message-broker-management/invalid/topic-create-missing-classification.json +66 -0
  282. package/examples/profiles/message-broker-management/invalid/topic-create-missing-cluster.json +66 -0
  283. package/examples/profiles/message-broker-management/invalid/topic-delete-denied-missing-error-type.json +68 -0
  284. package/examples/profiles/message-broker-management/invalid/topic-delete-missing-approval.json +65 -0
  285. package/examples/profiles/message-broker-management/not-applicable/consumer-group-rebalance.json +40 -0
  286. package/examples/profiles/message-broker-management/not-applicable/message-consume.json +41 -0
  287. package/examples/profiles/message-broker-management/not-applicable/message-publish.json +41 -0
  288. package/examples/profiles/message-broker-management/valid/acl-grant.json +79 -0
  289. package/examples/profiles/message-broker-management/valid/cluster-upgrade.json +77 -0
  290. package/examples/profiles/message-broker-management/valid/configuration-update.json +65 -0
  291. package/examples/profiles/message-broker-management/valid/consumer-group-delete.json +64 -0
  292. package/examples/profiles/message-broker-management/valid/message-replay.json +77 -0
  293. package/examples/profiles/message-broker-management/valid/offset-reset.json +97 -0
  294. package/examples/profiles/message-broker-management/valid/queue-purge.json +82 -0
  295. package/examples/profiles/message-broker-management/valid/quota-update.json +73 -0
  296. package/examples/profiles/message-broker-management/valid/topic-create.json +67 -0
  297. package/examples/profiles/message-broker-management/valid/topic-delete-denied.json +69 -0
  298. package/examples/profiles/message-broker-management/valid/topic-delete.json +77 -0
  299. package/examples/profiles/message-broker-management/valid/topic-retention-reduce.json +77 -0
  300. package/examples/profiles/secrets-and-key-management/README.md +115 -0
  301. package/examples/profiles/secrets-and-key-management/invalid/certificate-issue-missing-expiry.json +54 -0
  302. package/examples/profiles/secrets-and-key-management/invalid/emergency-reveal-missing-approval.json +61 -0
  303. package/examples/profiles/secrets-and-key-management/invalid/key-destroy-missing-approval.json +56 -0
  304. package/examples/profiles/secrets-and-key-management/invalid/key-generate-missing-owner.json +56 -0
  305. package/examples/profiles/secrets-and-key-management/invalid/key-import-missing-reason.json +59 -0
  306. package/examples/profiles/secrets-and-key-management/invalid/policy-update-missing-change.json +61 -0
  307. package/examples/profiles/secrets-and-key-management/invalid/secret-create-missing-authorization.json +53 -0
  308. package/examples/profiles/secrets-and-key-management/invalid/secret-export-missing-destination.json +74 -0
  309. package/examples/profiles/secrets-and-key-management/invalid/secret-reveal-missing-reason.json +65 -0
  310. package/examples/profiles/secrets-and-key-management/invalid/secret-revoke-missing-reason.json +52 -0
  311. package/examples/profiles/secrets-and-key-management/invalid/secret-rotate-missing-change.json +48 -0
  312. package/examples/profiles/secrets-and-key-management/invalid/secret-rotate-missing-type.json +54 -0
  313. package/examples/profiles/secrets-and-key-management/not-applicable/key-decrypt.json +27 -0
  314. package/examples/profiles/secrets-and-key-management/not-applicable/secret-cache-refresh.json +27 -0
  315. package/examples/profiles/secrets-and-key-management/not-applicable/secret-retrieve.json +27 -0
  316. package/examples/profiles/secrets-and-key-management/valid/certificate-issue.json +55 -0
  317. package/examples/profiles/secrets-and-key-management/valid/key-destroy.json +64 -0
  318. package/examples/profiles/secrets-and-key-management/valid/key-export.json +73 -0
  319. package/examples/profiles/secrets-and-key-management/valid/key-generate.json +57 -0
  320. package/examples/profiles/secrets-and-key-management/valid/key-import.json +64 -0
  321. package/examples/profiles/secrets-and-key-management/valid/secret-create.json +59 -0
  322. package/examples/profiles/secrets-and-key-management/valid/secret-export.json +75 -0
  323. package/examples/profiles/secrets-and-key-management/valid/secret-policy-update.json +68 -0
  324. package/examples/profiles/secrets-and-key-management/valid/secret-reveal-emergency.json +68 -0
  325. package/examples/profiles/secrets-and-key-management/valid/secret-reveal.json +70 -0
  326. package/examples/profiles/secrets-and-key-management/valid/secret-revoke.json +57 -0
  327. package/examples/profiles/secrets-and-key-management/valid/secret-rotate.json +55 -0
  328. package/examples/valid/access-request-approval.json +47 -0
  329. package/examples/valid/document-external-share.json +92 -0
  330. package/examples/valid/incident-case-close.json +114 -0
  331. package/examples/valid/kafka-consumer-offset-reset.json +105 -0
  332. package/examples/valid/minimal-event.json +22 -0
  333. package/examples/valid/nightly-reconciliation-job.json +33 -0
  334. package/examples/valid/order-api-publish.json +34 -0
  335. package/examples/valid/order-consumer-new-trace.json +36 -0
  336. package/examples/valid/privileged-configuration-change.json +109 -0
  337. package/examples/valid/service-account-data-export.json +83 -0
  338. package/examples/valid/user-role-assignment.json +92 -0
  339. package/package.json +6 -2
@@ -0,0 +1,76 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0002-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T09:41:02.885Z",
5
+ "event": {
6
+ "name": "financial.payment.reject",
7
+ "category": "data-modification",
8
+ "type": "execute",
9
+ "outcome": "failure",
10
+ "severity": "high",
11
+ "summary": "Payment refused by the risk control before any value moved.",
12
+ "error": {
13
+ "code": "velocity-limit-exceeded",
14
+ "type": "validation",
15
+ "message": "The payer exceeded the configured transaction velocity threshold.",
16
+ "retryable": false
17
+ }
18
+ },
19
+ "actor": {
20
+ "type": "service",
21
+ "id": "payment-risk-engine",
22
+ "tenantId": "tenant-12"
23
+ },
24
+ "resource": {
25
+ "type": "payment",
26
+ "id": "payment-ref-4498",
27
+ "ownerId": "account-ref-781",
28
+ "tenantId": "tenant-12"
29
+ },
30
+ "application": {
31
+ "name": "payment-service",
32
+ "environment": "production",
33
+ "version": "4.2.1",
34
+ "region": "eu-central"
35
+ },
36
+ "organization": {
37
+ "tenantId": "tenant-12"
38
+ },
39
+ "request": {
40
+ "requestId": "request-6f21b34",
41
+ "correlationId": "payment-lifecycle-4498"
42
+ },
43
+ "authentication": {
44
+ "method": "service-account",
45
+ "provider": "workload-identity"
46
+ },
47
+ "authorization": {
48
+ "decision": "deny",
49
+ "policy": "payment-risk-policy",
50
+ "policyVersion": "19",
51
+ "reason": "Velocity threshold for the payer was already reached."
52
+ },
53
+ "relatedResources": [
54
+ {
55
+ "type": "account",
56
+ "id": "account-ref-781"
57
+ }
58
+ ],
59
+ "reason": {
60
+ "code": "risk-threshold-reached",
61
+ "text": "Refused under the standing velocity control rather than by an operator decision.",
62
+ "reference": "risk-case-3391"
63
+ },
64
+ "controlCategories": ["financial-transaction-integrity", "fraud-prevention"],
65
+ "metadata": {
66
+ "financial": {
67
+ "transactionId": "txn-2026-0314-0104",
68
+ "amount": 2400,
69
+ "currency": "EUR",
70
+ "direction": "inbound",
71
+ "status": "rejected",
72
+ "approvalRequired": false,
73
+ "manual": false
74
+ }
75
+ }
76
+ }
@@ -0,0 +1,64 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0009-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T15:00:04.271Z",
5
+ "event": {
6
+ "name": "financial.payout.execute",
7
+ "category": "data-modification",
8
+ "type": "execute",
9
+ "outcome": "success",
10
+ "severity": "low",
11
+ "summary": "Scheduled seller payout released without human intervention."
12
+ },
13
+ "actor": {
14
+ "type": "service",
15
+ "id": "payout-scheduler",
16
+ "tenantId": "tenant-31"
17
+ },
18
+ "resource": {
19
+ "type": "payout",
20
+ "id": "payout-ref-9014",
21
+ "ownerId": "account-ref-3390",
22
+ "tenantId": "tenant-31"
23
+ },
24
+ "relatedResources": [
25
+ {
26
+ "type": "account",
27
+ "id": "account-ref-3390",
28
+ "name": "seller-balance-account"
29
+ }
30
+ ],
31
+ "application": {
32
+ "name": "marketplace-payouts",
33
+ "environment": "production",
34
+ "version": "2.6.3"
35
+ },
36
+ "organization": {
37
+ "tenantId": "tenant-31"
38
+ },
39
+ "request": {
40
+ "requestId": "request-7a06d41",
41
+ "correlationId": "payout-cycle-2026-0314"
42
+ },
43
+ "authentication": {
44
+ "method": "service-account",
45
+ "provider": "workload-identity"
46
+ },
47
+ "authorization": {
48
+ "decision": "allow",
49
+ "policy": "payout-schedule-policy",
50
+ "policyVersion": "8"
51
+ },
52
+ "controlCategories": ["financial-transaction-integrity"],
53
+ "metadata": {
54
+ "financial": {
55
+ "transactionId": "txn-2026-0314-0188",
56
+ "amount": 612.4,
57
+ "currency": "EUR",
58
+ "direction": "outbound",
59
+ "status": "settled",
60
+ "approvalRequired": false,
61
+ "manual": false
62
+ }
63
+ }
64
+ }
@@ -0,0 +1,85 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0011-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T18:12:55.030Z",
5
+ "event": {
6
+ "name": "financial.reconciliation.adjust",
7
+ "category": "data-modification",
8
+ "type": "update",
9
+ "outcome": "success",
10
+ "severity": "high",
11
+ "summary": "Ledger balance adjusted to agree with the counterparty statement for the period."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "user-4477",
16
+ "tenantId": "tenant-12",
17
+ "roles": ["reconciliation-analyst"]
18
+ },
19
+ "resource": {
20
+ "type": "reconciliation-run",
21
+ "id": "recon-2026-0314-eu-01",
22
+ "tenantId": "tenant-12"
23
+ },
24
+ "relatedResources": [
25
+ {
26
+ "type": "settlement-batch",
27
+ "id": "settlement-2026-0314-eu"
28
+ },
29
+ {
30
+ "type": "account",
31
+ "id": "account-ref-781"
32
+ }
33
+ ],
34
+ "application": {
35
+ "name": "treasury-reconciliation",
36
+ "environment": "production",
37
+ "version": "6.0.2"
38
+ },
39
+ "organization": {
40
+ "tenantId": "tenant-12",
41
+ "businessUnitId": "treasury"
42
+ },
43
+ "request": {
44
+ "requestId": "request-7a08f70",
45
+ "correlationId": "reconciliation-cycle-2026-0314"
46
+ },
47
+ "authentication": {
48
+ "method": "mfa",
49
+ "mfa": true,
50
+ "provider": "corporate-idp"
51
+ },
52
+ "authorization": {
53
+ "decision": "allow",
54
+ "policy": "reconciliation-adjustment-policy",
55
+ "policyVersion": "3"
56
+ },
57
+ "approval": {
58
+ "status": "approved",
59
+ "workflowId": "reconciliation-break-review",
60
+ "requiredApprovals": 1,
61
+ "receivedApprovals": 1,
62
+ "approvedAt": "2026-03-14T18:10:12Z"
63
+ },
64
+ "change": {
65
+ "type": "update",
66
+ "changedFields": ["ledgerBalance"],
67
+ "before": { "ledgerBalance": 482310.4 },
68
+ "after": { "ledgerBalance": 482352.55 }
69
+ },
70
+ "reason": {
71
+ "code": "counterparty-fee-difference",
72
+ "text": "Counterparty applied a fee the ledger had not yet booked for the period.",
73
+ "reference": "case-88190"
74
+ },
75
+ "controlCategories": ["financial-transaction-integrity", "reconciliation"],
76
+ "metadata": {
77
+ "financial": {
78
+ "reconciliationId": "recon-2026-0314-eu-01",
79
+ "amount": 42.15,
80
+ "currency": "EUR",
81
+ "approvalRequired": false,
82
+ "manual": false
83
+ }
84
+ }
85
+ }
@@ -0,0 +1,75 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0006-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T12:02:11.556Z",
5
+ "event": {
6
+ "name": "financial.refund.create",
7
+ "category": "data-modification",
8
+ "type": "create",
9
+ "outcome": "success",
10
+ "severity": "medium",
11
+ "summary": "Refund issued to the buyer after the seller accepted a return."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "user-6605",
16
+ "tenantId": "tenant-31",
17
+ "roles": ["support-agent"]
18
+ },
19
+ "resource": {
20
+ "type": "refund",
21
+ "id": "refund-ref-1180",
22
+ "ownerId": "account-ref-3390",
23
+ "tenantId": "tenant-31"
24
+ },
25
+ "relatedResources": [
26
+ {
27
+ "type": "payment",
28
+ "id": "payment-ref-4412"
29
+ },
30
+ {
31
+ "type": "account",
32
+ "id": "account-ref-3390"
33
+ }
34
+ ],
35
+ "application": {
36
+ "name": "marketplace-payments",
37
+ "environment": "production",
38
+ "version": "2.6.3"
39
+ },
40
+ "organization": {
41
+ "tenantId": "tenant-31"
42
+ },
43
+ "request": {
44
+ "requestId": "request-7a03a55",
45
+ "correlationId": "payment-lifecycle-4412"
46
+ },
47
+ "authentication": {
48
+ "method": "oidc",
49
+ "mfa": true,
50
+ "provider": "workforce-idp"
51
+ },
52
+ "authorization": {
53
+ "decision": "allow",
54
+ "policy": "refund-policy",
55
+ "policyVersion": "3",
56
+ "permissions": ["marketplace.refund.create"]
57
+ },
58
+ "reason": {
59
+ "code": "goods-returned",
60
+ "text": "Buyer returned the item and the seller accepted the return.",
61
+ "reference": "case-77204"
62
+ },
63
+ "controlCategories": ["financial-transaction-integrity"],
64
+ "metadata": {
65
+ "financial": {
66
+ "transactionId": "txn-2026-0314-0155",
67
+ "amount": 148.5,
68
+ "currency": "EUR",
69
+ "direction": "outbound",
70
+ "status": "pending-settlement",
71
+ "approvalRequired": false,
72
+ "manual": false
73
+ }
74
+ }
75
+ }
@@ -0,0 +1,80 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0007-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T13:20:47.128Z",
5
+ "event": {
6
+ "name": "financial.reversal.execute",
7
+ "category": "data-modification",
8
+ "type": "execute",
9
+ "outcome": "success",
10
+ "severity": "high",
11
+ "summary": "Duplicate capture unwound against the original payment."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "user-5120",
16
+ "tenantId": "tenant-12",
17
+ "roles": ["ledger-operator"]
18
+ },
19
+ "resource": {
20
+ "type": "payment",
21
+ "id": "payment-ref-4412",
22
+ "ownerId": "account-ref-781",
23
+ "tenantId": "tenant-12"
24
+ },
25
+ "relatedResources": [
26
+ {
27
+ "type": "account",
28
+ "id": "account-ref-781"
29
+ }
30
+ ],
31
+ "application": {
32
+ "name": "ledger-service",
33
+ "environment": "production",
34
+ "version": "3.8.0"
35
+ },
36
+ "organization": {
37
+ "tenantId": "tenant-12",
38
+ "businessUnitId": "finance-operations"
39
+ },
40
+ "request": {
41
+ "requestId": "request-7a04b08",
42
+ "correlationId": "payment-lifecycle-4412"
43
+ },
44
+ "authentication": {
45
+ "method": "mfa",
46
+ "mfa": true,
47
+ "provider": "corporate-idp"
48
+ },
49
+ "authorization": {
50
+ "decision": "allow",
51
+ "policy": "reversal-policy",
52
+ "policyVersion": "6"
53
+ },
54
+ "approval": {
55
+ "status": "approved",
56
+ "workflowId": "ledger-reversal-review",
57
+ "requiredApprovals": 1,
58
+ "receivedApprovals": 1,
59
+ "approvers": [{ "type": "user", "id": "user-4477" }],
60
+ "approvedAt": "2026-03-14T13:18:02Z"
61
+ },
62
+ "reason": {
63
+ "code": "duplicate-capture",
64
+ "text": "The same authorization was captured twice by a retried job, so the second capture was unwound.",
65
+ "reference": "case-88155"
66
+ },
67
+ "controlCategories": ["financial-transaction-integrity"],
68
+ "metadata": {
69
+ "financial": {
70
+ "transactionId": "txn-2026-0314-0161",
71
+ "originalTransactionId": "txn-2026-0314-0091",
72
+ "amount": 148.5,
73
+ "currency": "EUR",
74
+ "direction": "outbound",
75
+ "status": "reversed",
76
+ "approvalRequired": true,
77
+ "manual": false
78
+ }
79
+ }
80
+ }
@@ -0,0 +1,70 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0010-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T16:45:29.663Z",
5
+ "event": {
6
+ "name": "financial.settlement.execute",
7
+ "category": "data-modification",
8
+ "type": "execute",
9
+ "outcome": "success",
10
+ "severity": "medium",
11
+ "summary": "Daily net settlement released to the counterparty account."
12
+ },
13
+ "actor": {
14
+ "type": "service",
15
+ "id": "settlement-runner",
16
+ "tenantId": "tenant-12"
17
+ },
18
+ "resource": {
19
+ "type": "settlement-batch",
20
+ "id": "settlement-2026-0314-eu",
21
+ "tenantId": "tenant-12"
22
+ },
23
+ "relatedResources": [
24
+ {
25
+ "type": "account",
26
+ "id": "account-ref-781",
27
+ "name": "operating-account"
28
+ },
29
+ {
30
+ "type": "external-account",
31
+ "id": "counterparty-ref-44"
32
+ }
33
+ ],
34
+ "application": {
35
+ "name": "treasury-settlement",
36
+ "environment": "production",
37
+ "version": "6.0.2",
38
+ "region": "eu-central"
39
+ },
40
+ "organization": {
41
+ "tenantId": "tenant-12",
42
+ "businessUnitId": "treasury"
43
+ },
44
+ "request": {
45
+ "requestId": "request-7a07e29",
46
+ "correlationId": "settlement-cycle-2026-0314"
47
+ },
48
+ "authentication": {
49
+ "method": "service-account",
50
+ "provider": "workload-identity"
51
+ },
52
+ "authorization": {
53
+ "decision": "allow",
54
+ "policy": "settlement-policy",
55
+ "policyVersion": "10"
56
+ },
57
+ "controlCategories": ["financial-transaction-integrity"],
58
+ "metadata": {
59
+ "financial": {
60
+ "transactionId": "settlement-txn-2026-0314-01",
61
+ "amount": 482310.4,
62
+ "currency": "EUR",
63
+ "direction": "outbound",
64
+ "status": "settled",
65
+ "reconciliationId": "recon-2026-0314-eu-01",
66
+ "approvalRequired": false,
67
+ "manual": false
68
+ }
69
+ }
70
+ }
@@ -0,0 +1,74 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0003-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T10:05:18.402Z",
5
+ "event": {
6
+ "name": "financial.transfer.execute",
7
+ "category": "data-modification",
8
+ "type": "execute",
9
+ "outcome": "success",
10
+ "severity": "medium",
11
+ "summary": "Internal transfer posted between two ledger accounts."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "user-5120",
16
+ "tenantId": "tenant-12",
17
+ "roles": ["ledger-operator"]
18
+ },
19
+ "resource": {
20
+ "type": "account",
21
+ "id": "account-ref-781",
22
+ "name": "operating-account",
23
+ "classification": "confidential",
24
+ "tenantId": "tenant-12"
25
+ },
26
+ "relatedResources": [
27
+ {
28
+ "type": "account",
29
+ "id": "account-ref-902",
30
+ "name": "reserve-account",
31
+ "tenantId": "tenant-12"
32
+ }
33
+ ],
34
+ "application": {
35
+ "name": "ledger-service",
36
+ "environment": "production",
37
+ "version": "3.8.0"
38
+ },
39
+ "organization": {
40
+ "tenantId": "tenant-12",
41
+ "businessUnitId": "finance-operations"
42
+ },
43
+ "request": {
44
+ "requestId": "request-6f22c17",
45
+ "correlationId": "transfer-lifecycle-7712"
46
+ },
47
+ "authentication": {
48
+ "method": "mfa",
49
+ "mfa": true,
50
+ "provider": "corporate-idp"
51
+ },
52
+ "authorization": {
53
+ "decision": "allow",
54
+ "policy": "ledger-transfer-policy",
55
+ "policyVersion": "11",
56
+ "permissions": ["ledger.transfer.execute"]
57
+ },
58
+ "reason": {
59
+ "code": "liquidity-rebalance",
60
+ "text": "Scheduled rebalance of the operating account against the reserve account."
61
+ },
62
+ "controlCategories": ["financial-transaction-integrity"],
63
+ "metadata": {
64
+ "financial": {
65
+ "transactionId": "txn-2026-0314-0112",
66
+ "amount": 50000,
67
+ "currency": "EUR",
68
+ "direction": "debit",
69
+ "status": "posted",
70
+ "approvalRequired": false,
71
+ "manual": false
72
+ }
73
+ }
74
+ }
@@ -0,0 +1,91 @@
1
+ {
2
+ "specVersion": "0.1",
3
+ "id": "018f2c90-0004-7a2b-9c3d-4e5f60718293",
4
+ "time": "2026-03-14T10:31:57.019Z",
5
+ "event": {
6
+ "name": "financial.withdrawal.execute",
7
+ "category": "data-modification",
8
+ "type": "execute",
9
+ "outcome": "success",
10
+ "severity": "high",
11
+ "summary": "Client cash withdrawal released under dual control."
12
+ },
13
+ "actor": {
14
+ "type": "user",
15
+ "id": "user-3391",
16
+ "tenantId": "tenant-44",
17
+ "roles": ["treasury-operator"]
18
+ },
19
+ "subject": {
20
+ "type": "user",
21
+ "id": "user-7712",
22
+ "tenantId": "tenant-44"
23
+ },
24
+ "resource": {
25
+ "type": "account",
26
+ "id": "account-ref-2201",
27
+ "name": "client-cash-account",
28
+ "classification": "restricted",
29
+ "ownerId": "user-7712",
30
+ "tenantId": "tenant-44"
31
+ },
32
+ "relatedResources": [
33
+ {
34
+ "type": "external-account",
35
+ "id": "counterparty-ref-44"
36
+ }
37
+ ],
38
+ "application": {
39
+ "name": "brokerage-ledger",
40
+ "environment": "production",
41
+ "version": "9.1.4"
42
+ },
43
+ "organization": {
44
+ "tenantId": "tenant-44",
45
+ "businessUnitId": "treasury"
46
+ },
47
+ "request": {
48
+ "requestId": "request-7a01d92",
49
+ "correlationId": "withdrawal-lifecycle-2201"
50
+ },
51
+ "authentication": {
52
+ "method": "mfa",
53
+ "mfa": true,
54
+ "provider": "corporate-idp",
55
+ "assuranceLevel": "high"
56
+ },
57
+ "authorization": {
58
+ "decision": "allow",
59
+ "policy": "cash-withdrawal-policy",
60
+ "policyVersion": "5"
61
+ },
62
+ "approval": {
63
+ "status": "approved",
64
+ "workflowId": "treasury-dual-control",
65
+ "requestId": "approval-req-3318",
66
+ "requiredApprovals": 2,
67
+ "receivedApprovals": 2,
68
+ "approvers": [
69
+ { "type": "user", "id": "user-4477" },
70
+ { "type": "user", "id": "user-4482" }
71
+ ],
72
+ "approvedAt": "2026-03-14T10:29:40Z"
73
+ },
74
+ "reason": {
75
+ "code": "client-instruction",
76
+ "text": "Client instructed a cash withdrawal to their registered destination.",
77
+ "reference": "case-88041"
78
+ },
79
+ "controlCategories": ["financial-transaction-integrity", "segregation-of-duties"],
80
+ "metadata": {
81
+ "financial": {
82
+ "transactionId": "txn-2026-0314-0128",
83
+ "amount": 75000,
84
+ "currency": "USD",
85
+ "direction": "outbound",
86
+ "status": "settled",
87
+ "approvalRequired": true,
88
+ "manual": false
89
+ }
90
+ }
91
+ }