@openauditmodel/cli 0.4.1 → 0.4.2

package/examples/profiles/incident-management/invalid/corrective-action-verify-missing-method.json

@@ -0,0 +1,81 @@
+{
+  "specVersion": "0.1",
+  "id": "018f1c1a-000c-7a2b-9c3d-4e5f60718312",
+  "time": "2026-04-11T08:00:44.130Z",
+  "event": {
+    "name": "corrective-action.verify",
+    "category": "workflow",
+    "type": "update",
+    "outcome": "success",
+    "severity": "medium",
+    "summary": "Corrective action verified after seven days of production observation."
+  },
+  "actor": {
+    "type": "user",
+    "id": "user-2245",
+    "roles": ["problem-manager"],
+    "tenantId": "tenant-7"
+  },
+  "resource": {
+    "type": "corrective-action",
+    "id": "corrective-action-2026-0418",
+    "name": "raise-checkout-connection-pool-ceiling",
+    "classification": "internal",
+    "tenantId": "tenant-7"
+  },
+  "relatedResources": [
+    {
+      "type": "incident",
+      "id": "incident-2026-0418"
+    },
+    {
+      "type": "service",
+      "id": "service-checkout"
+    }
+  ],
+  "application": {
+    "name": "incident-service",
+    "environment": "production",
+    "version": "5.2.0"
+  },
+  "authorization": {
+    "decision": "allow",
+    "policy": "corrective-action-management",
+    "permissions": ["corrective-action.verify"]
+  },
+  "request": {
+    "requestId": "request-4986",
+    "correlationId": "correlation-incident-2026-0418"
+  },
+  "change": {
+    "type": "update",
+    "changedFields": ["status"],
+    "before": {
+      "status": "implemented"
+    },
+    "after": {
+      "status": "verified"
+    },
+    "incidentId": "incident-2026-0418"
+  },
+  "reason": {
+    "code": "observation-window-passed",
+    "text": "Checkout response times stayed inside the agreed range for the full observation window."
+  },
+  "evidence": [
+    {
+      "type": "document",
+      "reference": "records/verification/corrective-action-2026-0418"
+    }
+  ],
+  "controlCategories": ["incident-traceability"],
+  "metadata": {
+    "incident": {
+      "status": "verified",
+      "correctiveAction": {
+        "verifiedAt": "2026-04-11T07:55:00Z",
+        "observationDays": 7
+      }
+    }
+  }
+}

package/examples/profiles/incident-management/invalid/priority-change-missing-priority.json

@@ -0,0 +1,73 @@
+{
+  "specVersion": "0.1",
+  "id": "018f1c1a-0002-7a2b-9c3d-4e5f60718302",
+  "time": "2026-03-14T09:41:02.500Z",
+  "event": {
+    "name": "incident.priority.change",
+    "category": "workflow",
+    "type": "update",
+    "outcome": "success",
+    "severity": "medium",
+    "summary": "Incident priority raised after a second region began failing."
+  },
+  "actor": {
+    "type": "user",
+    "id": "user-3301",
+    "roles": ["incident-manager"],
+    "tenantId": "tenant-7"
+  },
+  "resource": {
+    "type": "incident",
+    "id": "incident-2026-0418",
+    "name": "checkout-latency-degradation",
+    "classification": "internal",
+    "tenantId": "tenant-7"
+  },
+  "relatedResources": [
+    {
+      "type": "service",
+      "id": "service-checkout"
+    },
+    {
+      "type": "service",
+      "id": "service-payments"
+    }
+  ],
+  "application": {
+    "name": "incident-service",
+    "environment": "production",
+    "version": "5.2.0"
+  },
+  "authorization": {
+    "decision": "allow",
+    "policy": "incident-handling",
+    "permissions": ["incident.priority.change"]
+  },
+  "request": {
+    "requestId": "request-4488",
+    "correlationId": "correlation-incident-2026-0418"
+  },
+  "change": {
+    "type": "update",
+    "changedFields": ["priority"],
+    "before": {
+      "priority": "p2"
+    },
+    "after": {
+      "priority": "p1"
+    },
+    "incidentId": "incident-2026-0418"
+  },
+  "reason": {
+    "code": "impact-increase",
+    "text": "A second region began returning checkout errors, widening customer impact."
+  },
+  "controlCategories": ["incident-traceability"],
+  "metadata": {
+    "incident": {
+      "status": "in-progress",
+      "impact": "multi-region",
+      "urgency": "critical"
+    }
+  }
+}

package/examples/profiles/incident-management/invalid/rca-approve-missing-approval.json

@@ -0,0 +1,66 @@
+{
+  "specVersion": "0.1",
+  "id": "018f1c1a-000a-7a2b-9c3d-4e5f60718310",
+  "time": "2026-03-17T09:30:18.240Z",
+  "event": {
+    "name": "incident.rca.approve",
+    "category": "workflow",
+    "type": "approve",
+    "outcome": "success",
+    "severity": "medium",
+    "summary": "Root cause analysis approved by the service owner and the problem manager."
+  },
+  "actor": {
+    "type": "user",
+    "id": "user-1180",
+    "roles": ["service-owner"],
+    "tenantId": "tenant-7"
+  },
+  "resource": {
+    "type": "root-cause-analysis",
+    "id": "rca-2026-0418",
+    "name": "checkout-connection-pool-exhaustion",
+    "classification": "internal",
+    "tenantId": "tenant-7"
+  },
+  "relatedResources": [
+    {
+      "type": "incident",
+      "id": "incident-2026-0418"
+    }
+  ],
+  "application": {
+    "name": "incident-service",
+    "environment": "production",
+    "version": "5.2.0"
+  },
+  "authorization": {
+    "decision": "allow",
+    "policy": "root-cause-review",
+    "permissions": ["incident.rca.approve"]
+  },
+  "request": {
+    "requestId": "request-4731",
+    "correlationId": "correlation-incident-2026-0418"
+  },
+  "evidence": [
+    {
+      "type": "document",
+      "reference": "records/root-cause-analysis/rca-2026-0418"
+    },
+    {
+      "type": "approval",
+      "reference": "workflow-root-cause-review/approval-request-9974"
+    }
+  ],
+  "controlCategories": ["incident-traceability", "change-approval"],
+  "metadata": {
+    "incident": {
+      "status": "approved",
+      "rca": {
+        "method": "five-whys",
+        "completedAt": "2026-03-16T10:00:00Z"
+      }
+    }
+  }
+}

package/examples/profiles/incident-management/invalid/rca-create-missing-method.json

@@ -0,0 +1,72 @@
+{
+  "specVersion": "0.1",
+  "id": "018f1c1a-0009-7a2b-9c3d-4e5f60718309",
+  "time": "2026-03-16T10:05:41.660Z",
+  "event": {
+    "name": "incident.rca.create",
+    "category": "workflow",
+    "type": "create",
+    "outcome": "success",
+    "severity": "medium",
+    "summary": "Root cause analysis recorded for the checkout latency incident."
+  },
+  "actor": {
+    "type": "user",
+    "id": "user-5140",
+    "roles": ["platform-engineer"],
+    "tenantId": "tenant-7"
+  },
+  "resource": {
+    "type": "root-cause-analysis",
+    "id": "rca-2026-0418",
+    "name": "checkout-connection-pool-exhaustion",
+    "classification": "internal",
+    "tenantId": "tenant-7"
+  },
+  "relatedResources": [
+    {
+      "type": "incident",
+      "id": "incident-2026-0418"
+    },
+    {
+      "type": "service",
+      "id": "service-checkout"
+    }
+  ],
+  "application": {
+    "name": "incident-service",
+    "environment": "production",
+    "version": "5.2.0"
+  },
+  "authorization": {
+    "decision": "allow",
+    "policy": "incident-handling",
+    "permissions": ["incident.rca.create"]
+  },
+  "request": {
+    "requestId": "request-4702",
+    "correlationId": "correlation-incident-2026-0418"
+  },
+  "reason": {
+    "code": "major-incident-followup",
+    "text": "A root cause analysis is produced for every incident declared major."
+  },
+  "evidence": [
+    {
+      "type": "document",
+      "reference": "records/root-cause-analysis/rca-2026-0418",
+      "contentType": "application/pdf",
+      "createdAt": "2026-03-16T10:00:00Z"
+    }
+  ],
+  "controlCategories": ["incident-traceability"],
+  "metadata": {
+    "incident": {
+      "status": "draft",
+      "rca": {
+        "completedAt": "2026-03-16T10:00:00Z",
+        "contributingFactorCount": 3
+      }
+    }
+  }
+}

package/examples/profiles/incident-management/invalid/sla-breach-missing-target.json

@@ -0,0 +1,49 @@
+{
+  "specVersion": "0.1",
+  "id": "018f1c1a-000d-7a2b-9c3d-4e5f60718313",
+  "time": "2026-03-14T13:02:10.000Z",
+  "event": {
+    "name": "incident.sla.breach",
+    "category": "workflow",
+    "outcome": "success",
+    "severity": "high",
+    "summary": "The restoration commitment for this incident was missed."
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-incident-sla-monitor"
+  },
+  "resource": {
+    "type": "incident",
+    "id": "incident-2026-0418",
+    "name": "checkout-latency-degradation",
+    "classification": "internal",
+    "tenantId": "tenant-7"
+  },
+  "relatedResources": [
+    {
+      "type": "service",
+      "id": "service-checkout"
+    }
+  ],
+  "application": {
+    "name": "incident-service",
+    "environment": "production",
+    "version": "5.2.0",
+    "component": "commitment-monitor"
+  },
+  "request": {
+    "correlationId": "correlation-incident-2026-0418"
+  },
+  "controlCategories": ["incident-traceability"],
+  "metadata": {
+    "incident": {
+      "status": "major",
+      "priority": "p1",
+      "sla": {
+        "breachedAt": "2026-03-14T13:02:10Z",
+        "elapsedMinutes": 241
+      }
+    }
+  }
+}

package/examples/profiles/incident-management/not-applicable/case-view.json

@@ -0,0 +1,40 @@
+{
+  "specVersion": "0.1",
+  "id": "018f1c1a-0103-7a2b-9c3d-4e5f60718403",
+  "time": "2026-03-25T14:07:39.020Z",
+  "event": {
+    "name": "incident.case.view",
+    "category": "data-access",
+    "type": "read",
+    "outcome": "success",
+    "severity": "debug",
+    "summary": "Closed incident record opened in the service management console."
+  },
+  "actor": {
+    "type": "user",
+    "id": "user-2245",
+    "roles": ["problem-manager"],
+    "tenantId": "tenant-7"
+  },
+  "resource": {
+    "type": "incident",
+    "id": "incident-2026-0418",
+    "name": "checkout-latency-degradation",
+    "classification": "internal",
+    "tenantId": "tenant-7"
+  },
+  "application": {
+    "name": "incident-service",
+    "environment": "production",
+    "version": "5.2.0"
+  },
+  "request": {
+    "requestId": "request-4855"
+  },
+  "metadata": {
+    "incident": {
+      "status": "closed",
+      "priority": "p1"
+    }
+  }
+}

package/examples/profiles/incident-management/not-applicable/monitoring-alert-raise.json

@@ -0,0 +1,40 @@
+{
+  "specVersion": "0.1",
+  "id": "018f1c1a-0101-7a2b-9c3d-4e5f60718401",
+  "time": "2026-03-14T02:41:07.480Z",
+  "event": {
+    "name": "monitoring.alert.raise",
+    "category": "monitoring",
+    "type": "create",
+    "outcome": "success",
+    "severity": "info",
+    "summary": "Latency alert raised and cleared automatically; no case was opened."
+  },
+  "actor": {
+    "type": "service",
+    "id": "service-monitoring"
+  },
+  "resource": {
+    "type": "alert",
+    "id": "alert-2026-0314-11842"
+  },
+  "relatedResources": [
+    {
+      "type": "service",
+      "id": "service-checkout"
+    }
+  ],
+  "application": {
+    "name": "monitoring-service",
+    "environment": "production",
+    "version": "3.8.1"
+  },
+  "metadata": {
+    "alert": {
+      "rule": "checkout-latency-threshold",
+      "state": "cleared",
+      "durationSeconds": 45,
+      "escalated": false
+    }
+  }
+}

package/examples/profiles/incident-management/not-applicable/note-create.json

@@ -0,0 +1,46 @@
+{
+  "specVersion": "0.1",
+  "id": "018f1c1a-0102-7a2b-9c3d-4e5f60718402",
+  "time": "2026-03-14T10:18:02.910Z",
+  "event": {
+    "name": "incident.note.create",
+    "category": "workflow",
+    "type": "create",
+    "outcome": "success",
+    "severity": "debug",
+    "summary": "Working note appended to the incident timeline."
+  },
+  "actor": {
+    "type": "user",
+    "id": "user-5140",
+    "roles": ["platform-engineer"],
+    "tenantId": "tenant-7"
+  },
+  "resource": {
+    "type": "incident-note",
+    "id": "incident-note-2026-0418-0037",
+    "classification": "internal",
+    "tenantId": "tenant-7"
+  },
+  "relatedResources": [
+    {
+      "type": "incident",
+      "id": "incident-2026-0418"
+    }
+  ],
+  "application": {
+    "name": "incident-service",
+    "environment": "production",
+    "version": "5.2.0"
+  },
+  "request": {
+    "correlationId": "correlation-incident-2026-0418"
+  },
+  "metadata": {
+    "incidentNote": {
+      "channel": "chat-bridge",
+      "visibility": "internal",
+      "characterCount": 148
+    }
+  }
+}

package/examples/profiles/incident-management/valid/assignment-change.json

@@ -0,0 +1,70 @@
+{
+  "specVersion": "0.1",
+  "id": "018f1c1a-0003-7a2b-9c3d-4e5f60718303",
+  "time": "2026-03-14T09:48:19.220Z",
+  "event": {
+    "name": "incident.assignment.change",
+    "category": "workflow",
+    "type": "update",
+    "outcome": "success",
+    "severity": "low",
+    "summary": "Incident reassigned from the service desk to the platform team."
+  },
+  "actor": {
+    "type": "user",
+    "id": "user-3301",
+    "roles": ["incident-manager"],
+    "tenantId": "tenant-7"
+  },
+  "resource": {
+    "type": "incident",
+    "id": "incident-2026-0418",
+    "name": "checkout-latency-degradation",
+    "classification": "internal",
+    "tenantId": "tenant-7"
+  },
+  "relatedResources": [
+    {
+      "type": "service",
+      "id": "service-checkout"
+    }
+  ],
+  "application": {
+    "name": "incident-service",
+    "environment": "production",
+    "version": "5.2.0"
+  },
+  "authorization": {
+    "decision": "allow",
+    "policy": "incident-handling",
+    "permissions": ["incident.assignment.change"]
+  },
+  "request": {
+    "requestId": "request-4493",
+    "correlationId": "correlation-incident-2026-0418"
+  },
+  "change": {
+    "type": "update",
+    "changedFields": ["assignedTeam", "assignedTo"],
+    "before": {
+      "assignedTeam": "team-service-desk"
+    },
+    "after": {
+      "assignedTeam": "team-platform"
+    },
+    "incidentId": "incident-2026-0418"
+  },
+  "reason": {
+    "code": "specialist-required",
+    "text": "Diagnosis moved to the team that owns the checkout connection pool."
+  },
+  "controlCategories": ["incident-traceability"],
+  "metadata": {
+    "incident": {
+      "status": "in-progress",
+      "priority": "p1",
+      "assignedTeam": "team-platform",
+      "assigneeId": "user-5140"
+    }
+  }
+}

package/examples/profiles/incident-management/valid/case-close.json

@@ -0,0 +1,114 @@
+{
+  "specVersion": "0.1",
+  "id": "018f1c1a-0006-7a2b-9c3d-4e5f60718306",
+  "time": "2026-03-24T08:15:03.000Z",
+  "observedTime": "2026-03-24T08:15:04.221Z",
+  "event": {
+    "name": "incident.case.close",
+    "category": "workflow",
+    "type": "update",
+    "outcome": "success",
+    "severity": "medium",
+    "summary": "Major incident closed after the root cause analysis was approved."
+  },
+  "actor": {
+    "type": "user",
+    "id": "user-3301",
+    "roles": ["incident-manager"],
+    "tenantId": "tenant-7"
+  },
+  "resource": {
+    "type": "incident",
+    "id": "incident-2026-0418",
+    "name": "checkout-latency-degradation",
+    "classification": "internal",
+    "tenantId": "tenant-7"
+  },
+  "relatedResources": [
+    {
+      "type": "service",
+      "id": "service-checkout"
+    },
+    {
+      "type": "root-cause-analysis",
+      "id": "rca-2026-0418"
+    }
+  ],
+  "application": {
+    "name": "incident-service",
+    "environment": "production",
+    "version": "5.2.0"
+  },
+  "authorization": {
+    "decision": "allow",
+    "policy": "incident-closure",
+    "policyVersion": "4",
+    "permissions": ["incident.case.close"]
+  },
+  "approval": {
+    "status": "approved",
+    "workflowId": "workflow-incident-closure",
+    "requestId": "approval-request-9921",
+    "requiredApprovals": 2,
+    "receivedApprovals": 2,
+    "approvers": [
+      {
+        "type": "user",
+        "id": "user-1180",
+        "roles": ["service-owner"]
+      },
+      {
+        "type": "user",
+        "id": "user-2245",
+        "roles": ["problem-manager"]
+      }
+    ],
+    "approvedAt": "2026-03-24T08:12:40Z"
+  },
+  "request": {
+    "requestId": "request-4790",
+    "correlationId": "correlation-incident-2026-0418",
+    "traceId": "0af7651916cd43dd8448eb211c80319c",
+    "spanId": "b7ad6b7169203331"
+  },
+  "change": {
+    "type": "update",
+    "changedFields": ["status", "closedAt"],
+    "before": {
+      "status": "resolved"
+    },
+    "after": {
+      "status": "closed"
+    },
+    "incidentId": "incident-2026-0418"
+  },
+  "reason": {
+    "code": "resolution-verified",
+    "text": "Corrective action verified in production for seven consecutive days.",
+    "reference": "rca-2026-0418"
+  },
+  "evidence": [
+    {
+      "type": "document",
+      "reference": "records/root-cause-analysis/rca-2026-0418",
+      "contentType": "application/pdf",
+      "createdAt": "2026-03-17T09:30:00Z"
+    },
+    {
+      "type": "approval",
+      "reference": "workflow-incident-closure/approval-request-9921"
+    }
+  ],
+  "controlCategories": ["incident-traceability", "change-approval"],
+  "metadata": {
+    "incident": {
+      "status": "closed",
+      "priority": "p1",
+      "approvalRequired": true,
+      "resolutionType": "permanent-fix",
+      "correctiveAction": {
+        "id": "corrective-action-2026-0418"
+      }
+    }
+  }
+}