@shiftleftpt/sbd-toe-mcp 0.10.2 → 0.10.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/consumed-bundle.json +11 -11
- package/data/entities/proportionality.json +3 -3
- package/data/entities/sdlc_integration.json +3 -3
- package/data/publish/indexes/bundle_catalog.jsonl +1 -1
- package/data/publish/indexes/canonical_chunks.jsonl +4903 -4902
- package/data/publish/indexes/chunk_entity_mentions.jsonl +9 -25
- package/data/publish/indexes/mcp_chunks.jsonl +125 -124
- package/data/publish/indexes/publication_manifest.json +8 -8
- package/data/publish/overlay/framework_overlay_index.json +18 -0
- package/data/publish/overlay/overlay_mappings.jsonl +120 -45
- package/data/publish/runtime/controls.json +27 -25
- package/data/publish/runtime/deterministic_manifest.json +1 -1
- package/data/publish/runtime/evidence_patterns.json +24 -24
- package/data/publish/runtime/requirement_control_links.json +334 -162
- package/data/publish/runtime/v1/manual_maturity_progression.jsonl +336 -336
- package/data/publish/runtime/v1/manual_rastreabilidade.jsonl +1105 -1105
- package/data/publish/runtime/v1/manual_threat_mitigation.jsonl +523 -523
- package/data/publish/runtime/v1/v1_manifest.json +5 -5
- package/data/reports/run_manifest.json +8 -8
- package/dist/index.js +4 -4
- package/dist/index.js.map +1 -1
- package/dist/tools/plan-repo-governance.d.ts +1 -2
- package/dist/tools/plan-repo-governance.js +19 -49
- package/dist/tools/plan-repo-governance.js.map +1 -1
- package/dist/tools/structured-tools.d.ts +4 -5
- package/dist/tools/structured-tools.js +87 -122
- package/dist/tools/structured-tools.js.map +1 -1
- package/package.json +3 -2
|
@@ -48,16 +48,16 @@
|
|
|
48
48
|
"build-cross-layer-referrals"
|
|
49
49
|
],
|
|
50
50
|
"counts": {
|
|
51
|
-
"chunk_entity_mentions":
|
|
51
|
+
"chunk_entity_mentions": 4074,
|
|
52
52
|
"chunk_relation_hints": 1348,
|
|
53
|
-
"chunks":
|
|
54
|
-
"chunks_with_entity_refs":
|
|
55
|
-
"cross_layer_referrals":
|
|
53
|
+
"chunks": 4903,
|
|
54
|
+
"chunks_with_entity_refs": 926,
|
|
55
|
+
"cross_layer_referrals": 7315,
|
|
56
56
|
"external_frameworks": 6,
|
|
57
57
|
"external_obligations": 39,
|
|
58
58
|
"framework_overlay_profiles": 6,
|
|
59
|
-
"mcp_chunks":
|
|
60
|
-
"overlay_mappings":
|
|
59
|
+
"mcp_chunks": 4903,
|
|
60
|
+
"overlay_mappings": 6457,
|
|
61
61
|
"overlay_playbooks": 20,
|
|
62
62
|
"policy_links": 83,
|
|
63
63
|
"policy_links_resolved": 83,
|
|
@@ -74,14 +74,14 @@
|
|
|
74
74
|
"runtime_metrics": 99,
|
|
75
75
|
"runtime_phases": 8,
|
|
76
76
|
"runtime_practices": 260,
|
|
77
|
-
"runtime_requirement_control_links":
|
|
77
|
+
"runtime_requirement_control_links": 265,
|
|
78
78
|
"runtime_requirements": 256,
|
|
79
79
|
"runtime_roles": 13,
|
|
80
80
|
"runtime_signal_evidence_links": 11,
|
|
81
81
|
"runtime_signals": 23,
|
|
82
82
|
"runtime_threats": 0,
|
|
83
83
|
"runtime_user_stories": 260,
|
|
84
|
-
"vector_chunks":
|
|
84
|
+
"vector_chunks": 4903
|
|
85
85
|
},
|
|
86
86
|
"ontology_roots": {
|
|
87
87
|
"consumer_root": "ontology/sbdtoe-ontology.yaml",
|
|
@@ -54,6 +54,7 @@
|
|
|
54
54
|
"CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af",
|
|
55
55
|
"CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0",
|
|
56
56
|
"CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905",
|
|
57
|
+
"CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b",
|
|
57
58
|
"CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70",
|
|
58
59
|
"CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9",
|
|
59
60
|
"CTRL-supply-chain-inventario-e-analise-de-dependencias-6b0fd9f7fb",
|
|
@@ -326,6 +327,8 @@
|
|
|
326
327
|
"03-threat-modeling:tratamento-explicito-dos-riscos-de-processo-do-threat-modeling",
|
|
327
328
|
"03-threat-modeling:validacao-de-arquitetura-com-threat-modeling",
|
|
328
329
|
"03-threat-modeling:validacao-de-impacto-no-negocio",
|
|
330
|
+
"04-arquitetura-segura:revisao-de-fronteiras-de-confianca-e-integracoes",
|
|
331
|
+
"04-arquitetura-segura:segmentacao-de-ambientes-e-validacao-de-topologia-como-codigo-l3",
|
|
329
332
|
"05-dependencias-sbom-sca:ai-bom-e-gestao-de-providers-de-modelos-ai-us-14",
|
|
330
333
|
"05-dependencias-sbom-sca:alertas-sobre-vulnerabilidades-em-componentes-usados",
|
|
331
334
|
"05-dependencias-sbom-sca:auditoria-periodica-de-bibliotecas-copiadas-manualmente",
|
|
@@ -789,6 +792,7 @@
|
|
|
789
792
|
"CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0",
|
|
790
793
|
"CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af",
|
|
791
794
|
"CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905",
|
|
795
|
+
"CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b",
|
|
792
796
|
"CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70",
|
|
793
797
|
"CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9",
|
|
794
798
|
"CTRL-supply-chain-inventario-e-analise-de-dependencias-6b0fd9f7fb",
|
|
@@ -1050,6 +1054,8 @@
|
|
|
1050
1054
|
"03-threat-modeling:tratamento-explicito-dos-riscos-de-processo-do-threat-modeling",
|
|
1051
1055
|
"03-threat-modeling:validacao-de-arquitetura-com-threat-modeling",
|
|
1052
1056
|
"03-threat-modeling:validacao-de-impacto-no-negocio",
|
|
1057
|
+
"04-arquitetura-segura:revisao-de-fronteiras-de-confianca-e-integracoes",
|
|
1058
|
+
"04-arquitetura-segura:segmentacao-de-ambientes-e-validacao-de-topologia-como-codigo-l3",
|
|
1053
1059
|
"05-dependencias-sbom-sca:ai-bom-e-gestao-de-providers-de-modelos-ai-us-14",
|
|
1054
1060
|
"05-dependencias-sbom-sca:alertas-sobre-vulnerabilidades-em-componentes-usados",
|
|
1055
1061
|
"05-dependencias-sbom-sca:auditoria-periodica-de-bibliotecas-copiadas-manualmente",
|
|
@@ -3003,6 +3009,7 @@
|
|
|
3003
3009
|
"CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4",
|
|
3004
3010
|
"CTRL-governance-capacitacao-e-onboarding-de-seguranca-f84db7abdf",
|
|
3005
3011
|
"CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29",
|
|
3012
|
+
"CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628",
|
|
3006
3013
|
"CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af",
|
|
3007
3014
|
"CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905",
|
|
3008
3015
|
"CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b",
|
|
@@ -3209,6 +3216,7 @@
|
|
|
3209
3216
|
"02-requisitos-seguranca:gates-automaticos-em-ci-cd-para-requisitos-de-seguranca",
|
|
3210
3217
|
"02-requisitos-seguranca:geracao-de-sbom-e-assinatura-de-artefactos-de-build",
|
|
3211
3218
|
"02-requisitos-seguranca:gestao-de-excecoes-com-ttl-e-revalidacao-obrigatoria",
|
|
3219
|
+
"02-requisitos-seguranca:incorporacao-de-restricoes-legais-normativas-e-contratuais",
|
|
3212
3220
|
"02-requisitos-seguranca:intent-declaration-por-tool-call-destrutivo-de-agente-ai",
|
|
3213
3221
|
"02-requisitos-seguranca:politica-formacao-e-procedimentos-operacionais",
|
|
3214
3222
|
"02-requisitos-seguranca:rastreabilidade-de-requisitos",
|
|
@@ -3373,15 +3381,25 @@
|
|
|
3373
3381
|
"13-formacao-onboarding:war-room-e-simulacoes-de-incidentes",
|
|
3374
3382
|
"14-governanca-contratacao:aprovacao-formal-e-auditoria-periodica-das-politicas-organizacionais-us-22",
|
|
3375
3383
|
"14-governanca-contratacao:ciclo-continuo-de-revisao-e-reavaliacao-de-excecoes",
|
|
3384
|
+
"14-governanca-contratacao:clausulas-contratuais-de-seguranca",
|
|
3385
|
+
"14-governanca-contratacao:consolidacao-de-kpis-de-governacao-e-maturidade",
|
|
3386
|
+
"14-governanca-contratacao:contratacao-de-provedores-de-modelos-ai-us-21",
|
|
3376
3387
|
"14-governanca-contratacao:controlo-sistematico-e-periodico-por-capitulo-sbd-toe",
|
|
3377
3388
|
"14-governanca-contratacao:designacao-formal-de-owners-de-seguranca-por-aplicacao",
|
|
3389
|
+
"14-governanca-contratacao:execucao-de-fluxo-formal-de-validacao-de-fornecedores",
|
|
3390
|
+
"14-governanca-contratacao:feedback-pos-projeto-e-rating-de-contractors",
|
|
3378
3391
|
"14-governanca-contratacao:formalizacao-de-modelo-de-governacao-por-nivel-de-risco",
|
|
3392
|
+
"14-governanca-contratacao:kpis-de-governacao",
|
|
3393
|
+
"14-governanca-contratacao:monitorizacao-continua-de-conformidade-de-fornecedores-alertas-e-escalacao",
|
|
3394
|
+
"14-governanca-contratacao:offboarding-seguro-de-contractors-e-rescisao-de-fornecedores",
|
|
3379
3395
|
"14-governanca-contratacao:preparacao-tecnica-e-validacao-de-contractors-pre-acesso",
|
|
3380
3396
|
"14-governanca-contratacao:processo-formal-de-excecoes-com-alcadas-por-nivel-de-risco",
|
|
3381
3397
|
"14-governanca-contratacao:rastreabilidade-organizacional",
|
|
3398
|
+
"14-governanca-contratacao:reavaliacao-continua-e-rotacao-de-fornecedores-pos-onboarding",
|
|
3382
3399
|
"14-governanca-contratacao:repositorio-de-conformidade-por-aplicacao-controlo-sistematico",
|
|
3383
3400
|
"14-governanca-contratacao:revisao-trimestral-de-acesso-de-contractors-least-privilege",
|
|
3384
3401
|
"14-governanca-contratacao:trilho-de-formacao-obrigatoria-pre-acesso-contractors",
|
|
3402
|
+
"14-governanca-contratacao:validacao-continua-de-fornecedores",
|
|
3385
3403
|
"14-governanca-contratacao:validacao-periodica-de-aplicacoes-ciclo-de-conformidade"
|
|
3386
3404
|
],
|
|
3387
3405
|
"target_requirement_ids": [
|