@shiftleftpt/sbd-toe-mcp 0.17.0 → 0.18.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/assets/agent-guide.md +1 -0
- package/consumed-bundle.json +9 -9
- package/data/entities/proportionality.json +2 -2
- package/data/entities/sdlc_integration.json +2 -2
- package/data/publish/indexes/canonical_chunks.jsonl +4907 -4907
- package/data/publish/indexes/publication_manifest.json +1 -1
- package/data/publish/ontology/sbdtoe-ontology.yaml +555 -2
- package/data/publish/runtime/deterministic_manifest.json +1 -1
- package/data/publish/runtime/requirements.json +798 -0
- package/data/publish/runtime/v1/manual_rastreabilidade.jsonl +202 -202
- package/data/publish/runtime/v1/v1_manifest.json +19 -3
- package/data/publish/semantic/ctrl_acore_alignment.jsonl +267 -0
- package/data/publish/semantic/requirement_source_coverage.jsonl +274 -0
- package/data/reports/run_manifest.json +4 -4
- package/dist/index.js +32 -0
- package/dist/index.js.map +1 -1
- package/dist/tools/trace-requirement-sources.d.ts +32 -0
- package/dist/tools/trace-requirement-sources.js +105 -0
- package/dist/tools/trace-requirement-sources.js.map +1 -0
- package/package.json +4 -2
|
@@ -0,0 +1,267 @@
|
|
|
1
|
+
{"confidence": {"exact": 0.95, "partial": 0.85, "related": 0.7}, "counts": {"aco_covered": 66, "aco_related_only": 9, "acp_with_supports_edge": 69, "alignments": 102, "emitted_base": 102, "emitted_derived_acp": 164, "exact": 52, "partial": 21, "related": 29}, "coverage_rule": "um CO conta como coberto se tiver >=1 alinhamento exact ou partial; related não cobre", "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": {"acm": null, "acp": "cada ACP herda os alinhamentos dos ACO em supports_objectives (69/69 têm a aresta); derivação determinística, não curada"}, "epistemic_status": {"asserts": "model_correspondence", "composed_traceability": "coverage_compensated", "does_not_assert": "content_authorship"}, "layer": "ctrl_acore_alignment", "note": "ACM nunca emitidos (deferido F-W1); não-alinhados declarados aqui — nunca silêncio. Composto REQ->CTRL->ACO->ES é cobertura compensada, não autoria.", "pins": {"appsec_core_tag": "ontology-v1.1-fair-baseline", "sbdtoe_ontology_tag": "sbdtoe-ontology-v2.4"}, "record_type": "layer_manifest", "schema_version": "1.0", "source_models": {"acore": {"commit": "84fe8bf", "entities": {"control_objectives": 75, "mechanisms": 58, "practices": 69}, "ontology": "appsec-core", "tag": "ontology-v1.1-fair-baseline", "version": "V1.1"}, "ctrl": {"entities": 20, "ontology": "sbdtoe-ontology", "tag": "sbdtoe-ontology-v2.3", "version": "2.3"}}, "taxonomy": {"exact": "o CTRL e o CO afirmam o mesmo objecto de controlo; correspondência 1:1 no essencial", "partial": "sobreposição material sem cobertura total (CO repartido por vários CTRL, ou CTRL que excede o CO)", "related": "adjacência semântica que suporta rastreabilidade composta sem afirmar cobertura; inclui os CO de coerência de slice (*-007)"}, "unaligned": {"acm": [{"ids_count": 58, "reason": "a superfície V1 servida não materializa a aresta ACM→CO (supports/implements vazio nos components-drafts); deferido até F-W1 (materializar mecanismo→objectivo no V1) e então derivar como as ACP"}], "aco": [], "aco_related_only": [{"ids": ["ACO-IAT-007", "ACO-ATB-007", "ACO-TSV-007", "ACO-TMR-007", "ACO-SPC-007", "ACO-IVF-007", "ACO-ITS-007", "ACO-RPR-007", "ACO-SLG-007"], "reason": "CO de coerência de slice — agregam CO específicos já alinhados; cobertura chega pelos constituintes"}], "ctrl": [{"id": "CTRL-governance-capacitacao-e-onboarding-de-seguranca-f84db7abdf", "reason": "AppSec Core V1 não modela capacitação/formação — domínio organizacional fora do âmbito do Core"}, {"id": "CTRL-governance-governacao-organizacional-ownership-e-conformidade-761d416ead", "reason": "o Core V1 exclui governação organizacional/maturidade por desenho (module_split: só semântica AppSec reutilizável)"}, {"id": "CTRL-code-integrity-ambiente-e-tooling-de-desenvolvimento-governados-77015fa38a", "reason": "sem slice de ambiente/tooling de desenvolvimento no Core V1; candidato a ACR-watch se surgir pressão multi-fonte"}]}}
|
|
2
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACO-ITS-003", "rationale": "validação de pares autorizados origem/destino (INT-006) — o CO junta os dois", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACO-ITS-003", "target_type": "AppSecCoreControlObjective"}
|
|
3
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACO-IVF-001", "rationale": "validação de contrato de input nas entradas (VAL-001)", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACO-IVF-001", "target_type": "AppSecCoreControlObjective"}
|
|
4
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACO-IVF-002", "rationale": "schema, tipos e allowlists (VAL-002/003)", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACO-IVF-002", "target_type": "AppSecCoreControlObjective"}
|
|
5
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACO-IVF-003", "rationale": "resistência a injecção e exclusão de padrões perigosos (VAL-004)", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACO-IVF-003", "target_type": "AppSecCoreControlObjective"}
|
|
6
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACO-IVF-004", "rationale": "validação antes do uso interno e de cruzamentos de confiança (VAL-005)", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACO-IVF-004", "target_type": "AppSecCoreControlObjective"}
|
|
7
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACO-IVF-005", "rationale": "falha controlada e erros não-reveladores (ERR-001..004/VAL-006)", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACO-IVF-005", "target_type": "AppSecCoreControlObjective"}
|
|
8
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACO-IVF-006", "rationale": "gestão centralizada de erros com higiene de logging sensível (ERR-005/007)", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACO-IVF-006", "target_type": "AppSecCoreControlObjective"}
|
|
9
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACO-IVF-007", "rationale": "CO de coerência do slice ASC-07", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACO-IVF-007", "target_type": "AppSecCoreControlObjective"}
|
|
10
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACO-IVF-008", "rationale": "output encoding context-aware na renderização (VAL-008)", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACO-IVF-008", "target_type": "AppSecCoreControlObjective"}
|
|
11
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACO-TSV-002", "rationale": "SAST também corre como validação de código no fluxo de desenvolvimento", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACO-TSV-002", "target_type": "AppSecCoreControlObjective"}
|
|
12
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2|aligns_with|ACO-RPR-001", "rationale": "não-repúdio de promoções no pipeline", "record_type": "alignment", "source_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2", "source_type": "Control", "target_id": "ACO-RPR-001", "target_type": "AppSecCoreControlObjective"}
|
|
13
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2|aligns_with|ACO-RPR-002", "rationale": "verificação de assinatura/proveniência a montante", "record_type": "alignment", "source_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2", "source_type": "Control", "target_id": "ACO-RPR-002", "target_type": "AppSecCoreControlObjective"}
|
|
14
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2|aligns_with|ACO-SCBI-004", "rationale": "builds como código revisto, execução determinística controlada — desenho seguro dos pipelines", "record_type": "alignment", "source_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2", "source_type": "Control", "target_id": "ACO-SCBI-004", "target_type": "AppSecCoreControlObjective"}
|
|
15
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2|aligns_with|ACO-SCBI-005", "rationale": "gates de promoção e separação sinal/decisão no pipeline", "record_type": "alignment", "source_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2", "source_type": "Control", "target_id": "ACO-SCBI-005", "target_type": "AppSecCoreControlObjective"}
|
|
16
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2|aligns_with|ACO-SCBI-006", "rationale": "proveniência verificável e assinatura/attestation de artefactos — assinatura e proveniência (PIPE)", "record_type": "alignment", "source_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2", "source_type": "Control", "target_id": "ACO-SCBI-006", "target_type": "AppSecCoreControlObjective"}
|
|
17
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACO-ITS-001", "rationale": "mTLS como meio de transporte", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACO-ITS-001", "target_type": "AppSecCoreControlObjective"}
|
|
18
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACO-ITS-002", "rationale": "transporte seguro e exclusão de protocolos inseguros (INT-003/004)", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACO-ITS-002", "target_type": "AppSecCoreControlObjective"}
|
|
19
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACO-ITS-003", "rationale": "integridade de mensagens (INT-005/011)", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACO-ITS-003", "target_type": "AppSecCoreControlObjective"}
|
|
20
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACO-ITS-007", "rationale": "idem", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACO-ITS-007", "target_type": "AppSecCoreControlObjective"}
|
|
21
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACO-IVF-006", "rationale": "mascaramento de dados sensíveis em logs (ENC-005)", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACO-IVF-006", "target_type": "AppSecCoreControlObjective"}
|
|
22
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4|aligns_with|ACO-ATB-001", "rationale": "baseline versionada, ADRs e padrões aprovados — o objecto de ARQ", "record_type": "alignment", "source_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4", "source_type": "Control", "target_id": "ACO-ATB-001", "target_type": "AppSecCoreControlObjective"}
|
|
23
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4|aligns_with|ACO-ATB-005", "rationale": "revisão de arquitectura com triggers de mudança disciplinados", "record_type": "alignment", "source_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4", "source_type": "Control", "target_id": "ACO-ATB-005", "target_type": "AppSecCoreControlObjective"}
|
|
24
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4|aligns_with|ACO-ATB-006", "rationale": "conformidade com padrões aprovados e validação automatizável em CI/CD (governança)", "record_type": "alignment", "source_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4", "source_type": "Control", "target_id": "ACO-ATB-006", "target_type": "AppSecCoreControlObjective"}
|
|
25
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4|aligns_with|ACO-ATB-007", "rationale": "CO de coerência do slice ASC-03", "record_type": "alignment", "source_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4", "source_type": "Control", "target_id": "ACO-ATB-007", "target_type": "AppSecCoreControlObjective"}
|
|
26
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29|aligns_with|ACO-TMR-004", "rationale": "aceitação formal de risco/risco residual (CLA-007)", "record_type": "alignment", "source_id": "CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29", "source_type": "Control", "target_id": "ACO-TMR-004", "target_type": "AppSecCoreControlObjective"}
|
|
27
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29|aligns_with|ACO-TMR-005", "rationale": "rastreabilidade risco→requisito→controlo→validação (REQ-006) — o CO atravessa os dois", "record_type": "alignment", "source_id": "CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29", "source_type": "Control", "target_id": "ACO-TMR-005", "target_type": "AppSecCoreControlObjective"}
|
|
28
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29|aligns_with|ACO-TMR-008", "rationale": "ciclo de vida de requisitos de segurança: identificar, documentar, comunicar, manter (processo de requisitos do cap. 02, lane CLA)", "record_type": "alignment", "source_id": "CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29", "source_type": "Control", "target_id": "ACO-TMR-008", "target_type": "AppSecCoreControlObjective"}
|
|
29
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628|aligns_with|ACO-ITS-005", "rationale": "garantias contratuais de segurança em integrações (INT-008 curada → FORN)", "record_type": "alignment", "source_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628", "source_type": "Control", "target_id": "ACO-ITS-005", "target_type": "AppSecCoreControlObjective"}
|
|
30
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628|aligns_with|ACO-RPR-010", "rationale": "excepções aprovadas com TTL (processo formal de excepções)", "record_type": "alignment", "source_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628", "source_type": "Control", "target_id": "ACO-RPR-010", "target_type": "AppSecCoreControlObjective"}
|
|
31
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628|aligns_with|ACO-TMR-008", "rationale": "comunicação de requisitos a terceiros", "record_type": "alignment", "source_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628", "source_type": "Control", "target_id": "ACO-TMR-008", "target_type": "AppSecCoreControlObjective"}
|
|
32
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACO-TMR-001", "rationale": "âmbito e triggers de threat modeling por nível de risco", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACO-TMR-001", "target_type": "AppSecCoreControlObjective"}
|
|
33
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACO-TMR-002", "rationale": "representação da arquitectura real (DFDs, fronteiras) como base da análise", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACO-TMR-002", "target_type": "AppSecCoreControlObjective"}
|
|
34
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACO-TMR-003", "rationale": "método estruturado com cobertura mínima", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACO-TMR-003", "target_type": "AppSecCoreControlObjective"}
|
|
35
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACO-TMR-004", "rationale": "disposição, aceitação de risco e ownership por ameaça", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACO-TMR-004", "target_type": "AppSecCoreControlObjective"}
|
|
36
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACO-TMR-005", "rationale": "rastreabilidade ameaça→mitigação do lado do modelo", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACO-TMR-005", "target_type": "AppSecCoreControlObjective"}
|
|
37
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACO-TMR-006", "rationale": "revisão independente e ciclo de vida do modelo", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACO-TMR-006", "target_type": "AppSecCoreControlObjective"}
|
|
38
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACO-TMR-007", "rationale": "CO de coerência do slice ASC-05", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACO-TMR-007", "target_type": "AppSecCoreControlObjective"}
|
|
39
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af|aligns_with|ACO-IAT-002", "rationale": "modelos de permissão de toolchain", "record_type": "alignment", "source_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af", "source_type": "Control", "target_id": "ACO-IAT-002", "target_type": "AppSecCoreControlObjective"}
|
|
40
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af|aligns_with|ACO-IAT-003", "rationale": "ciclo de vida de privilégios e revisões em toolchains/operações — o CO cobre ambos os planos", "record_type": "alignment", "source_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af", "source_type": "Control", "target_id": "ACO-IAT-003", "target_type": "AppSecCoreControlObjective"}
|
|
41
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af|aligns_with|ACO-SPC-004", "rationale": "binding de identidades operacionais de pipeline/workload/deploy — o CO cobre ambos", "record_type": "alignment", "source_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af", "source_type": "Control", "target_id": "ACO-SPC-004", "target_type": "AppSecCoreControlObjective"}
|
|
42
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af|aligns_with|ACO-SPC-005", "rationale": "segregação de identidades operacionais", "record_type": "alignment", "source_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af", "source_type": "Control", "target_id": "ACO-SPC-005", "target_type": "AppSecCoreControlObjective"}
|
|
43
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACO-IAT-001", "rationale": "força de autenticação: MFA, brute-force, federação, step-up — AUT-* de C1", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACO-IAT-001", "target_type": "AppSecCoreControlObjective"}
|
|
44
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACO-IAT-002", "rationale": "política de autorização explícita e least privilege (RBAC/ABAC) — ACC-* de C1", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACO-IAT-002", "target_type": "AppSecCoreControlObjective"}
|
|
45
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACO-IAT-003", "rationale": "revogação e revisão de acessos da aplicação (ACC-008/010)", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACO-IAT-003", "target_type": "AppSecCoreControlObjective"}
|
|
46
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACO-IAT-004", "rationale": "fronteiras de confiança de sessões e tokens (SES-*)", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACO-IAT-004", "target_type": "AppSecCoreControlObjective"}
|
|
47
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACO-IAT-005", "rationale": "autenticação/autorização de chamadas na fronteira API (API-001)", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACO-IAT-005", "target_type": "AppSecCoreControlObjective"}
|
|
48
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACO-IAT-006", "rationale": "AUT-010/ACC-003 geram o sinal na aplicação", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACO-IAT-006", "target_type": "AppSecCoreControlObjective"}
|
|
49
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACO-IAT-007", "rationale": "CO de coerência do slice ASC-02 — agrega os CO específicos já alinhados; não afirma um objecto próprio", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACO-IAT-007", "target_type": "AppSecCoreControlObjective"}
|
|
50
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACO-ITS-001", "rationale": "autenticação mútua/identidade de máquina em interacções serviço-a-serviço (INT-002 → C1; C1 cobre principals não-humanos)", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACO-ITS-001", "target_type": "AppSecCoreControlObjective"}
|
|
51
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACO-RPR-001", "rationale": "autorização explícita e responsabilizável de release irreversível", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACO-RPR-001", "target_type": "AppSecCoreControlObjective"}
|
|
52
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACO-RPR-002", "rationale": "promoção apenas de artefactos verificados (deploy só de assinados)", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACO-RPR-002", "target_type": "AppSecCoreControlObjective"}
|
|
53
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACO-RPR-003", "rationale": "gates pré-promoção e validação em staging", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACO-RPR-003", "target_type": "AppSecCoreControlObjective"}
|
|
54
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACO-RPR-004", "rationale": "rastreabilidade end-to-end do deploy (prática movida para DEPL em v2.1)", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACO-RPR-004", "target_type": "AppSecCoreControlObjective"}
|
|
55
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACO-RPR-005", "rationale": "rollback pré-definido, testado e com SLA", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACO-RPR-005", "target_type": "AppSecCoreControlObjective"}
|
|
56
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACO-RPR-006", "rationale": "rollout progressivo e contenção de blast radius (canary/blue-green)", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACO-RPR-006", "target_type": "AppSecCoreControlObjective"}
|
|
57
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACO-RPR-007", "rationale": "CO de coerência do slice ASC-09", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACO-RPR-007", "target_type": "AppSecCoreControlObjective"}
|
|
58
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACO-RPR-009", "rationale": "protecção na preparação do deploy", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACO-RPR-009", "target_type": "AppSecCoreControlObjective"}
|
|
59
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACO-SCBI-005", "rationale": "a aprovação humana de promoção também vive no deploy", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACO-SCBI-005", "target_type": "AppSecCoreControlObjective"}
|
|
60
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905|aligns_with|ACO-RPR-008", "rationale": "baselines endurecidas como código/policy", "record_type": "alignment", "source_id": "CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905", "source_type": "Control", "target_id": "ACO-RPR-008", "target_type": "AppSecCoreControlObjective"}
|
|
61
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905|aligns_with|ACO-RPR-009", "rationale": "integridade de configuração security-relevant e controlo de overrides (policy-as-code, hash de plan/manifests)", "record_type": "alignment", "source_id": "CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905", "source_type": "Control", "target_id": "ACO-RPR-009", "target_type": "AppSecCoreControlObjective"}
|
|
62
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905|aligns_with|ACO-RPR-010", "rationale": "revisão periódica de baseline/módulos e visibilidade de desvios", "record_type": "alignment", "source_id": "CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905", "source_type": "Control", "target_id": "ACO-RPR-010", "target_type": "AppSecCoreControlObjective"}
|
|
63
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACO-ATB-002", "rationale": "zonas de confiança e fluxos protegidos com controlos nos cruzamentos", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACO-ATB-002", "target_type": "AppSecCoreControlObjective"}
|
|
64
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACO-ATB-003", "rationale": "exposição externa minimizada, justificada e mediada na fronteira", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACO-ATB-003", "target_type": "AppSecCoreControlObjective"}
|
|
65
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACO-ATB-004", "rationale": "segmentação técnica e isolamento de domínios sensíveis", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACO-ATB-004", "target_type": "AppSecCoreControlObjective"}
|
|
66
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACO-ATB-006", "rationale": "validação de topologia como código (técnica)", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACO-ATB-006", "target_type": "AppSecCoreControlObjective"}
|
|
67
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACO-ATB-007", "rationale": "idem — agrega os CO já alinhados", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACO-ATB-007", "target_type": "AppSecCoreControlObjective"}
|
|
68
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACO-ITS-004", "rationale": "exposição mediada por fronteira e controlo de caminhos de integração", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACO-ITS-004", "target_type": "AppSecCoreControlObjective"}
|
|
69
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACO-ITS-005", "rationale": "revisão técnica de fronteiras/integrações (par curado de INT-008)", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACO-ITS-005", "target_type": "AppSecCoreControlObjective"}
|
|
70
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACO-ITS-007", "rationale": "CO de coerência do slice ASC-08", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACO-ITS-007", "target_type": "AppSecCoreControlObjective"}
|
|
71
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACO-TMR-002", "rationale": "os modelos de fronteira são artefactos de SEG", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACO-TMR-002", "target_type": "AppSecCoreControlObjective"}
|
|
72
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACO-IAT-006", "rationale": "telemetria e detecção de abuso de acesso", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACO-IAT-006", "target_type": "AppSecCoreControlObjective"}
|
|
73
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACO-ITS-006", "rationale": "auditabilidade de chamadas externas (API-007/INT-007 → MON)", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACO-ITS-006", "target_type": "AppSecCoreControlObjective"}
|
|
74
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACO-SLG-001", "rationale": "catálogo de eventos críticos efectivamente emitidos", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACO-SLG-001", "target_type": "AppSecCoreControlObjective"}
|
|
75
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACO-SLG-002", "rationale": "logs estruturados machine-readable com campos consistentes", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACO-SLG-002", "target_type": "AppSecCoreControlObjective"}
|
|
76
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACO-SLG-003", "rationale": "integridade e disciplina de acesso aos logs", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACO-SLG-003", "target_type": "AppSecCoreControlObjective"}
|
|
77
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACO-SLG-004", "rationale": "retenção e ciclo de vida de registos de auditoria", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACO-SLG-004", "target_type": "AppSecCoreControlObjective"}
|
|
78
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACO-SLG-005", "rationale": "ingestão centralizada com accountability de fontes", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACO-SLG-005", "target_type": "AppSecCoreControlObjective"}
|
|
79
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACO-SLG-006", "rationale": "saúde do pipeline de logging e visibilidade de falha silenciosa", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACO-SLG-006", "target_type": "AppSecCoreControlObjective"}
|
|
80
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACO-SLG-007", "rationale": "CO de coerência do slice ASC-10", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACO-SLG-007", "target_type": "AppSecCoreControlObjective"}
|
|
81
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACO-SPC-001", "rationale": "prevenção de fuga e exclusão de segredos hardcoded (CFG-003/ENC-006 na lane SECR)", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACO-SPC-001", "target_type": "AppSecCoreControlObjective"}
|
|
82
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACO-SPC-002", "rationale": "armazenamento protegido em cofres e retrieval controlado (CFG-006)", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACO-SPC-002", "target_type": "AppSecCoreControlObjective"}
|
|
83
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACO-SPC-003", "rationale": "rotação e expiração disciplinadas (ENC-007 curada → SECR)", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACO-SPC-003", "target_type": "AppSecCoreControlObjective"}
|
|
84
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACO-SPC-004", "rationale": "credenciais efémeras e OIDC", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACO-SPC-004", "target_type": "AppSecCoreControlObjective"}
|
|
85
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACO-SPC-005", "rationale": "isolamento de uso de segredos por ambiente/superfície", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACO-SPC-005", "target_type": "AppSecCoreControlObjective"}
|
|
86
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACO-SPC-006", "rationale": "auditabilidade e governança de mudanças de segredos — SECR cobre a gestão; o registo auditável excede-o", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACO-SPC-006", "target_type": "AppSecCoreControlObjective"}
|
|
87
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACO-SPC-007", "rationale": "CO de coerência do slice ASC-06", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACO-SPC-007", "target_type": "AppSecCoreControlObjective"}
|
|
88
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-supply-chain-inventario-e-analise-de-dependencias-6b0fd9f7fb|aligns_with|ACO-SCBI-001", "rationale": "inventário de dependências ligado ao build + SBOM rastreável — o objecto de DEPS", "record_type": "alignment", "source_id": "CTRL-supply-chain-inventario-e-analise-de-dependencias-6b0fd9f7fb", "source_type": "Control", "target_id": "ACO-SCBI-001", "target_type": "AppSecCoreControlObjective"}
|
|
89
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-supply-chain-inventario-e-analise-de-dependencias-6b0fd9f7fb|aligns_with|ACO-SCBI-002", "rationale": "avaliação automática de risco de dependências com bloqueio por política = SCA com gates (DEPS)", "record_type": "alignment", "source_id": "CTRL-supply-chain-inventario-e-analise-de-dependencias-6b0fd9f7fb", "source_type": "Control", "target_id": "ACO-SCBI-002", "target_type": "AppSecCoreControlObjective"}
|
|
90
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-supply-chain-inventario-e-analise-de-dependencias-6b0fd9f7fb|aligns_with|ACO-SCBI-003", "rationale": "fontes de dependências aprovadas (repositórios internos como fonte única)", "record_type": "alignment", "source_id": "CTRL-supply-chain-inventario-e-analise-de-dependencias-6b0fd9f7fb", "source_type": "Control", "target_id": "ACO-SCBI-003", "target_type": "AppSecCoreControlObjective"}
|
|
91
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d|aligns_with|ACO-RPR-008", "rationale": "golden base images como baseline endurecida de imagens", "record_type": "alignment", "source_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d", "source_type": "Control", "target_id": "ACO-RPR-008", "target_type": "AppSecCoreControlObjective"}
|
|
92
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d|aligns_with|ACO-SCBI-001", "rationale": "a vertente SBOM/inventário de imagens vive em IMG", "record_type": "alignment", "source_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d", "source_type": "Control", "target_id": "ACO-SCBI-001", "target_type": "AppSecCoreControlObjective"}
|
|
93
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d|aligns_with|ACO-SCBI-002", "rationale": "scanning de imagens como gate", "record_type": "alignment", "source_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d", "source_type": "Control", "target_id": "ACO-SCBI-002", "target_type": "AppSecCoreControlObjective"}
|
|
94
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d|aligns_with|ACO-SCBI-003", "rationale": "fontes de imagens aprovadas (registries allowlist, golden bases) — o CO reparte-se pelos dois", "record_type": "alignment", "source_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d", "source_type": "Control", "target_id": "ACO-SCBI-003", "target_type": "AppSecCoreControlObjective"}
|
|
95
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d|aligns_with|ACO-SCBI-006", "rationale": "cosign/rekor para imagens", "record_type": "alignment", "source_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d", "source_type": "Control", "target_id": "ACO-SCBI-006", "target_type": "AppSecCoreControlObjective"}
|
|
96
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d|aligns_with|ACO-SCBI-007", "rationale": "integridade de supply de imagens de container — o objecto de IMG", "record_type": "alignment", "source_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d", "source_type": "Control", "target_id": "ACO-SCBI-007", "target_type": "AppSecCoreControlObjective"}
|
|
97
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACO-TSV-001", "rationale": "estratégia de testes proporcional ao risco", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACO-TSV-001", "target_type": "AppSecCoreControlObjective"}
|
|
98
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACO-TSV-002", "rationale": "perfis SAST geridos com baseline de falsos positivos", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACO-TSV-002", "target_type": "AppSecCoreControlObjective"}
|
|
99
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACO-TSV-003", "rationale": "triagem, SLA e fecho de findings com revalidação", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACO-TSV-003", "target_type": "AppSecCoreControlObjective"}
|
|
100
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACO-TSV-004", "rationale": "evidência de teste reproduzível e ligada ao build", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACO-TSV-004", "target_type": "AppSecCoreControlObjective"}
|
|
101
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACO-TSV-005", "rationale": "validação dinâmica em staging sob política de gates", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACO-TSV-005", "target_type": "AppSecCoreControlObjective"}
|
|
102
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACO-TSV-006", "rationale": "regressões de segurança + pentesting/fuzzing por risco", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACO-TSV-006", "target_type": "AppSecCoreControlObjective"}
|
|
103
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACO-TSV-007", "rationale": "CO de coerência do slice ASC-04", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACO-TSV-007", "target_type": "AppSecCoreControlObjective"}
|
|
104
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-003", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-ITS-004", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-ITS-004", "target_type": "AppSecCorePractice"}
|
|
105
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-001", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-IVF-001", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-IVF-001", "target_type": "AppSecCorePractice"}
|
|
106
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-007", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-IVF-001", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-IVF-001", "target_type": "AppSecCorePractice"}
|
|
107
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-002", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-IVF-002", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-IVF-002", "target_type": "AppSecCorePractice"}
|
|
108
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-007", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-IVF-002", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-IVF-002", "target_type": "AppSecCorePractice"}
|
|
109
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-003", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-IVF-003", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-IVF-003", "target_type": "AppSecCorePractice"}
|
|
110
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-007", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-IVF-003", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-IVF-003", "target_type": "AppSecCorePractice"}
|
|
111
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-004", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-IVF-004", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-IVF-004", "target_type": "AppSecCorePractice"}
|
|
112
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-007", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-IVF-004", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-IVF-004", "target_type": "AppSecCorePractice"}
|
|
113
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-005", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-IVF-005", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-IVF-005", "target_type": "AppSecCorePractice"}
|
|
114
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-007", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-IVF-005", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-IVF-005", "target_type": "AppSecCorePractice"}
|
|
115
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-006", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-IVF-006", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-IVF-006", "target_type": "AppSecCorePractice"}
|
|
116
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-007", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-IVF-006", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-IVF-006", "target_type": "AppSecCorePractice"}
|
|
117
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-007", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-IVF-007", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-IVF-007", "target_type": "AppSecCorePractice"}
|
|
118
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-008", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-IVF-007", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-IVF-007", "target_type": "AppSecCorePractice"}
|
|
119
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-002", "link_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460|aligns_with|ACP-TSV-002", "record_type": "alignment", "source_id": "CTRL-code-integrity-desenvolvimento-seguro-e-validacao-de-codigo-63dedd7460", "source_type": "Control", "target_id": "ACP-TSV-002", "target_type": "AppSecCorePractice"}
|
|
120
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-001", "link_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2|aligns_with|ACP-RPR-001", "record_type": "alignment", "source_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2", "source_type": "Control", "target_id": "ACP-RPR-001", "target_type": "AppSecCorePractice"}
|
|
121
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-002", "link_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2|aligns_with|ACP-RPR-002", "record_type": "alignment", "source_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2", "source_type": "Control", "target_id": "ACP-RPR-002", "target_type": "AppSecCorePractice"}
|
|
122
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SCBI-004", "link_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2|aligns_with|ACP-SCBI-004", "record_type": "alignment", "source_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2", "source_type": "Control", "target_id": "ACP-SCBI-004", "target_type": "AppSecCorePractice"}
|
|
123
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SCBI-005", "link_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2|aligns_with|ACP-SCBI-005", "record_type": "alignment", "source_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2", "source_type": "Control", "target_id": "ACP-SCBI-005", "target_type": "AppSecCorePractice"}
|
|
124
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SCBI-006", "link_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2|aligns_with|ACP-SCBI-006", "record_type": "alignment", "source_id": "CTRL-code-integrity-integridade-e-governacao-de-pipelines-d5b14eeef2", "source_type": "Control", "target_id": "ACP-SCBI-006", "target_type": "AppSecCorePractice"}
|
|
125
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-007", "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACP-ITS-001", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACP-ITS-001", "target_type": "AppSecCorePractice"}
|
|
126
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-001", "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACP-ITS-002", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACP-ITS-002", "target_type": "AppSecCorePractice"}
|
|
127
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-007", "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACP-ITS-002", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACP-ITS-002", "target_type": "AppSecCorePractice"}
|
|
128
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-002", "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACP-ITS-003", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACP-ITS-003", "target_type": "AppSecCorePractice"}
|
|
129
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-007", "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACP-ITS-003", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACP-ITS-003", "target_type": "AppSecCorePractice"}
|
|
130
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-003", "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACP-ITS-004", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACP-ITS-004", "target_type": "AppSecCorePractice"}
|
|
131
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-007", "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACP-ITS-004", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACP-ITS-004", "target_type": "AppSecCorePractice"}
|
|
132
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-007", "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACP-ITS-005", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACP-ITS-005", "target_type": "AppSecCorePractice"}
|
|
133
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-007", "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACP-ITS-006", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACP-ITS-006", "target_type": "AppSecCorePractice"}
|
|
134
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IVF-006", "link_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411|aligns_with|ACP-IVF-006", "record_type": "alignment", "source_id": "CTRL-data-protection-criptografia-aplicacional-e-proteccao-de-dados-a4afa5b411", "source_type": "Control", "target_id": "ACP-IVF-006", "target_type": "AppSecCorePractice"}
|
|
135
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-001", "link_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4|aligns_with|ACP-ATB-001", "record_type": "alignment", "source_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4", "source_type": "Control", "target_id": "ACP-ATB-001", "target_type": "AppSecCorePractice"}
|
|
136
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-001", "link_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4|aligns_with|ACP-ATB-002", "record_type": "alignment", "source_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4", "source_type": "Control", "target_id": "ACP-ATB-002", "target_type": "AppSecCorePractice"}
|
|
137
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-007", "link_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4|aligns_with|ACP-ATB-002", "record_type": "alignment", "source_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4", "source_type": "Control", "target_id": "ACP-ATB-002", "target_type": "AppSecCorePractice"}
|
|
138
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-005", "link_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4|aligns_with|ACP-ATB-005", "record_type": "alignment", "source_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4", "source_type": "Control", "target_id": "ACP-ATB-005", "target_type": "AppSecCorePractice"}
|
|
139
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-007", "link_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4|aligns_with|ACP-ATB-005", "record_type": "alignment", "source_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4", "source_type": "Control", "target_id": "ACP-ATB-005", "target_type": "AppSecCorePractice"}
|
|
140
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-005", "link_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4|aligns_with|ACP-ATB-006", "record_type": "alignment", "source_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4", "source_type": "Control", "target_id": "ACP-ATB-006", "target_type": "AppSecCorePractice"}
|
|
141
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-006", "link_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4|aligns_with|ACP-ATB-007", "record_type": "alignment", "source_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4", "source_type": "Control", "target_id": "ACP-ATB-007", "target_type": "AppSecCorePractice"}
|
|
142
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-007", "link_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4|aligns_with|ACP-ATB-007", "record_type": "alignment", "source_id": "CTRL-governance-arquitetura-segura-e-rastreavel-74562442c4", "source_type": "Control", "target_id": "ACP-ATB-007", "target_type": "AppSecCorePractice"}
|
|
143
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-004", "link_id": "CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29|aligns_with|ACP-TMR-004", "record_type": "alignment", "source_id": "CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29", "source_type": "Control", "target_id": "ACP-TMR-004", "target_type": "AppSecCorePractice"}
|
|
144
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-005", "link_id": "CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29|aligns_with|ACP-TMR-005", "record_type": "alignment", "source_id": "CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29", "source_type": "Control", "target_id": "ACP-TMR-005", "target_type": "AppSecCorePractice"}
|
|
145
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-008", "link_id": "CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29|aligns_with|ACP-TMR-008", "record_type": "alignment", "source_id": "CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29", "source_type": "Control", "target_id": "ACP-TMR-008", "target_type": "AppSecCorePractice"}
|
|
146
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-008", "link_id": "CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29|aligns_with|ACP-TMR-009", "record_type": "alignment", "source_id": "CTRL-governance-classificacao-e-governacao-por-risco-97aceecf29", "source_type": "Control", "target_id": "ACP-TMR-009", "target_type": "AppSecCorePractice"}
|
|
147
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-005", "link_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628|aligns_with|ACP-ITS-001", "record_type": "alignment", "source_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628", "source_type": "Control", "target_id": "ACP-ITS-001", "target_type": "AppSecCorePractice"}
|
|
148
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-005", "link_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628|aligns_with|ACP-ITS-005", "record_type": "alignment", "source_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628", "source_type": "Control", "target_id": "ACP-ITS-005", "target_type": "AppSecCorePractice"}
|
|
149
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-010", "link_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628|aligns_with|ACP-RPR-009", "record_type": "alignment", "source_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628", "source_type": "Control", "target_id": "ACP-RPR-009", "target_type": "AppSecCorePractice"}
|
|
150
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-010", "link_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628|aligns_with|ACP-RPR-010", "record_type": "alignment", "source_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628", "source_type": "Control", "target_id": "ACP-RPR-010", "target_type": "AppSecCorePractice"}
|
|
151
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-008", "link_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628|aligns_with|ACP-TMR-008", "record_type": "alignment", "source_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628", "source_type": "Control", "target_id": "ACP-TMR-008", "target_type": "AppSecCorePractice"}
|
|
152
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-008", "link_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628|aligns_with|ACP-TMR-009", "record_type": "alignment", "source_id": "CTRL-governance-governacao-de-fornecedores-e-excecoes-a9a9ab3628", "source_type": "Control", "target_id": "ACP-TMR-009", "target_type": "AppSecCorePractice"}
|
|
153
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-001", "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACP-TMR-001", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACP-TMR-001", "target_type": "AppSecCorePractice"}
|
|
154
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-006", "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACP-TMR-001", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACP-TMR-001", "target_type": "AppSecCorePractice"}
|
|
155
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-002", "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACP-TMR-002", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACP-TMR-002", "target_type": "AppSecCorePractice"}
|
|
156
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-007", "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACP-TMR-002", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACP-TMR-002", "target_type": "AppSecCorePractice"}
|
|
157
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-003", "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACP-TMR-003", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACP-TMR-003", "target_type": "AppSecCorePractice"}
|
|
158
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-007", "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACP-TMR-003", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACP-TMR-003", "target_type": "AppSecCorePractice"}
|
|
159
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-004", "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACP-TMR-004", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACP-TMR-004", "target_type": "AppSecCorePractice"}
|
|
160
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-007", "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACP-TMR-004", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACP-TMR-004", "target_type": "AppSecCorePractice"}
|
|
161
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-005", "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACP-TMR-005", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACP-TMR-005", "target_type": "AppSecCorePractice"}
|
|
162
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-007", "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACP-TMR-005", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACP-TMR-005", "target_type": "AppSecCorePractice"}
|
|
163
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-006", "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACP-TMR-006", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACP-TMR-006", "target_type": "AppSecCorePractice"}
|
|
164
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-007", "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACP-TMR-006", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACP-TMR-006", "target_type": "AppSecCorePractice"}
|
|
165
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-006", "link_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0|aligns_with|ACP-TMR-007", "record_type": "alignment", "source_id": "CTRL-governance-threat-modeling-e-gestao-de-risco-272c9a8ed0", "source_type": "Control", "target_id": "ACP-TMR-007", "target_type": "AppSecCorePractice"}
|
|
166
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IAT-002", "link_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af|aligns_with|ACP-IAT-002", "record_type": "alignment", "source_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af", "source_type": "Control", "target_id": "ACP-IAT-002", "target_type": "AppSecCorePractice"}
|
|
167
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IAT-003", "link_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af|aligns_with|ACP-IAT-003", "record_type": "alignment", "source_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af", "source_type": "Control", "target_id": "ACP-IAT-003", "target_type": "AppSecCorePractice"}
|
|
168
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-004", "link_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af|aligns_with|ACP-SPC-004", "record_type": "alignment", "source_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af", "source_type": "Control", "target_id": "ACP-SPC-004", "target_type": "AppSecCorePractice"}
|
|
169
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-005", "link_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af|aligns_with|ACP-SPC-004", "record_type": "alignment", "source_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af", "source_type": "Control", "target_id": "ACP-SPC-004", "target_type": "AppSecCorePractice"}
|
|
170
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-005", "link_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af|aligns_with|ACP-SPC-005", "record_type": "alignment", "source_id": "CTRL-identity-gestao-de-identidades-acessos-e-ownership-d0919c69af", "source_type": "Control", "target_id": "ACP-SPC-005", "target_type": "AppSecCorePractice"}
|
|
171
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IAT-001", "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACP-IAT-001", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACP-IAT-001", "target_type": "AppSecCorePractice"}
|
|
172
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IAT-002", "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACP-IAT-002", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACP-IAT-002", "target_type": "AppSecCorePractice"}
|
|
173
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IAT-007", "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACP-IAT-002", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACP-IAT-002", "target_type": "AppSecCorePractice"}
|
|
174
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IAT-003", "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACP-IAT-003", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACP-IAT-003", "target_type": "AppSecCorePractice"}
|
|
175
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IAT-007", "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACP-IAT-003", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACP-IAT-003", "target_type": "AppSecCorePractice"}
|
|
176
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IAT-004", "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACP-IAT-004", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACP-IAT-004", "target_type": "AppSecCorePractice"}
|
|
177
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IAT-005", "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACP-IAT-005", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACP-IAT-005", "target_type": "AppSecCorePractice"}
|
|
178
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IAT-007", "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACP-IAT-005", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACP-IAT-005", "target_type": "AppSecCorePractice"}
|
|
179
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IAT-006", "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACP-IAT-006", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACP-IAT-006", "target_type": "AppSecCorePractice"}
|
|
180
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IAT-007", "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACP-IAT-006", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACP-IAT-006", "target_type": "AppSecCorePractice"}
|
|
181
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-001", "link_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82|aligns_with|ACP-ITS-002", "record_type": "alignment", "source_id": "CTRL-identity-identidade-autenticacao-e-sessoes-aplicacionais-c9d3f51e82", "source_type": "Control", "target_id": "ACP-ITS-002", "target_type": "AppSecCorePractice"}
|
|
182
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-001", "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACP-RPR-001", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACP-RPR-001", "target_type": "AppSecCorePractice"}
|
|
183
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-007", "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACP-RPR-001", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACP-RPR-001", "target_type": "AppSecCorePractice"}
|
|
184
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-002", "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACP-RPR-002", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACP-RPR-002", "target_type": "AppSecCorePractice"}
|
|
185
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-007", "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACP-RPR-002", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACP-RPR-002", "target_type": "AppSecCorePractice"}
|
|
186
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-003", "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACP-RPR-003", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACP-RPR-003", "target_type": "AppSecCorePractice"}
|
|
187
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-007", "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACP-RPR-003", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACP-RPR-003", "target_type": "AppSecCorePractice"}
|
|
188
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-004", "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACP-RPR-004", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACP-RPR-004", "target_type": "AppSecCorePractice"}
|
|
189
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-007", "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACP-RPR-004", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACP-RPR-004", "target_type": "AppSecCorePractice"}
|
|
190
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-005", "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACP-RPR-005", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACP-RPR-005", "target_type": "AppSecCorePractice"}
|
|
191
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-007", "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACP-RPR-005", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACP-RPR-005", "target_type": "AppSecCorePractice"}
|
|
192
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-006", "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACP-RPR-006", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACP-RPR-006", "target_type": "AppSecCorePractice"}
|
|
193
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-007", "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACP-RPR-006", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACP-RPR-006", "target_type": "AppSecCorePractice"}
|
|
194
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-009", "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACP-RPR-009", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACP-RPR-009", "target_type": "AppSecCorePractice"}
|
|
195
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SCBI-005", "link_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0|aligns_with|ACP-SCBI-005", "record_type": "alignment", "source_id": "CTRL-infrastructure-deploy-seguro-e-reversivel-ae204be5f0", "source_type": "Control", "target_id": "ACP-SCBI-005", "target_type": "AppSecCorePractice"}
|
|
196
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-008", "link_id": "CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905|aligns_with|ACP-RPR-008", "record_type": "alignment", "source_id": "CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905", "source_type": "Control", "target_id": "ACP-RPR-008", "target_type": "AppSecCorePractice"}
|
|
197
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-009", "link_id": "CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905|aligns_with|ACP-RPR-009", "record_type": "alignment", "source_id": "CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905", "source_type": "Control", "target_id": "ACP-RPR-009", "target_type": "AppSecCorePractice"}
|
|
198
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-010", "link_id": "CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905|aligns_with|ACP-RPR-009", "record_type": "alignment", "source_id": "CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905", "source_type": "Control", "target_id": "ACP-RPR-009", "target_type": "AppSecCorePractice"}
|
|
199
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-010", "link_id": "CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905|aligns_with|ACP-RPR-010", "record_type": "alignment", "source_id": "CTRL-infrastructure-infraestrutura-como-codigo-governada-5228bca905", "source_type": "Control", "target_id": "ACP-RPR-010", "target_type": "AppSecCorePractice"}
|
|
200
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-007", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ATB-002", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ATB-002", "target_type": "AppSecCorePractice"}
|
|
201
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-002", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ATB-003", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ATB-003", "target_type": "AppSecCorePractice"}
|
|
202
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-004", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ATB-003", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ATB-003", "target_type": "AppSecCorePractice"}
|
|
203
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-003", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ATB-004", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ATB-004", "target_type": "AppSecCorePractice"}
|
|
204
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-007", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ATB-005", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ATB-005", "target_type": "AppSecCorePractice"}
|
|
205
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-006", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ATB-007", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ATB-007", "target_type": "AppSecCorePractice"}
|
|
206
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ATB-007", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ATB-007", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ATB-007", "target_type": "AppSecCorePractice"}
|
|
207
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-004", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ITS-001", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ITS-001", "target_type": "AppSecCorePractice"}
|
|
208
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-005", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ITS-001", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ITS-001", "target_type": "AppSecCorePractice"}
|
|
209
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-007", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ITS-001", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ITS-001", "target_type": "AppSecCorePractice"}
|
|
210
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-007", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ITS-002", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ITS-002", "target_type": "AppSecCorePractice"}
|
|
211
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-007", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ITS-003", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ITS-003", "target_type": "AppSecCorePractice"}
|
|
212
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-007", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ITS-004", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ITS-004", "target_type": "AppSecCorePractice"}
|
|
213
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-005", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ITS-005", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ITS-005", "target_type": "AppSecCorePractice"}
|
|
214
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-007", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ITS-005", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ITS-005", "target_type": "AppSecCorePractice"}
|
|
215
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-007", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-ITS-006", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-ITS-006", "target_type": "AppSecCorePractice"}
|
|
216
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TMR-002", "link_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b|aligns_with|ACP-TMR-002", "record_type": "alignment", "source_id": "CTRL-infrastructure-segmentacao-e-controlo-arquitetural-dceb3c1f0b", "source_type": "Control", "target_id": "ACP-TMR-002", "target_type": "AppSecCorePractice"}
|
|
217
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-IAT-006", "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACP-IAT-006", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACP-IAT-006", "target_type": "AppSecCorePractice"}
|
|
218
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-ITS-006", "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACP-ITS-006", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACP-ITS-006", "target_type": "AppSecCorePractice"}
|
|
219
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SLG-001", "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACP-SLG-001", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACP-SLG-001", "target_type": "AppSecCorePractice"}
|
|
220
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SLG-007", "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACP-SLG-001", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACP-SLG-001", "target_type": "AppSecCorePractice"}
|
|
221
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SLG-002", "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACP-SLG-002", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACP-SLG-002", "target_type": "AppSecCorePractice"}
|
|
222
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SLG-005", "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACP-SLG-002", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACP-SLG-002", "target_type": "AppSecCorePractice"}
|
|
223
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SLG-007", "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACP-SLG-002", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACP-SLG-002", "target_type": "AppSecCorePractice"}
|
|
224
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SLG-003", "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACP-SLG-003", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACP-SLG-003", "target_type": "AppSecCorePractice"}
|
|
225
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SLG-007", "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACP-SLG-003", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACP-SLG-003", "target_type": "AppSecCorePractice"}
|
|
226
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SLG-004", "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACP-SLG-004", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACP-SLG-004", "target_type": "AppSecCorePractice"}
|
|
227
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SLG-007", "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACP-SLG-004", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACP-SLG-004", "target_type": "AppSecCorePractice"}
|
|
228
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SLG-006", "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACP-SLG-005", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACP-SLG-005", "target_type": "AppSecCorePractice"}
|
|
229
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SLG-007", "link_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70|aligns_with|ACP-SLG-005", "record_type": "alignment", "source_id": "CTRL-monitoring-monitorizacao-e-resposta-operacional-1797f0af70", "source_type": "Control", "target_id": "ACP-SLG-005", "target_type": "AppSecCorePractice"}
|
|
230
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-001", "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACP-SPC-001", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACP-SPC-001", "target_type": "AppSecCorePractice"}
|
|
231
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-007", "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACP-SPC-001", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACP-SPC-001", "target_type": "AppSecCorePractice"}
|
|
232
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-002", "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACP-SPC-002", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACP-SPC-002", "target_type": "AppSecCorePractice"}
|
|
233
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-007", "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACP-SPC-002", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACP-SPC-002", "target_type": "AppSecCorePractice"}
|
|
234
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-003", "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACP-SPC-003", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACP-SPC-003", "target_type": "AppSecCorePractice"}
|
|
235
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-006", "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACP-SPC-003", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACP-SPC-003", "target_type": "AppSecCorePractice"}
|
|
236
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-004", "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACP-SPC-004", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACP-SPC-004", "target_type": "AppSecCorePractice"}
|
|
237
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-005", "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACP-SPC-004", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACP-SPC-004", "target_type": "AppSecCorePractice"}
|
|
238
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-007", "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACP-SPC-004", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACP-SPC-004", "target_type": "AppSecCorePractice"}
|
|
239
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-005", "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACP-SPC-005", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACP-SPC-005", "target_type": "AppSecCorePractice"}
|
|
240
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-007", "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACP-SPC-005", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACP-SPC-005", "target_type": "AppSecCorePractice"}
|
|
241
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-002", "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACP-SPC-006", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACP-SPC-006", "target_type": "AppSecCorePractice"}
|
|
242
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SPC-006", "link_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9|aligns_with|ACP-SPC-006", "record_type": "alignment", "source_id": "CTRL-secrets-gestao-de-segredos-e-identidades-operacionais-e2c86cdfe9", "source_type": "Control", "target_id": "ACP-SPC-006", "target_type": "AppSecCorePractice"}
|
|
243
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SCBI-001", "link_id": "CTRL-supply-chain-inventario-e-analise-de-dependencias-6b0fd9f7fb|aligns_with|ACP-SCBI-001", "record_type": "alignment", "source_id": "CTRL-supply-chain-inventario-e-analise-de-dependencias-6b0fd9f7fb", "source_type": "Control", "target_id": "ACP-SCBI-001", "target_type": "AppSecCorePractice"}
|
|
244
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SCBI-002", "link_id": "CTRL-supply-chain-inventario-e-analise-de-dependencias-6b0fd9f7fb|aligns_with|ACP-SCBI-002", "record_type": "alignment", "source_id": "CTRL-supply-chain-inventario-e-analise-de-dependencias-6b0fd9f7fb", "source_type": "Control", "target_id": "ACP-SCBI-002", "target_type": "AppSecCorePractice"}
|
|
245
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SCBI-003", "link_id": "CTRL-supply-chain-inventario-e-analise-de-dependencias-6b0fd9f7fb|aligns_with|ACP-SCBI-003", "record_type": "alignment", "source_id": "CTRL-supply-chain-inventario-e-analise-de-dependencias-6b0fd9f7fb", "source_type": "Control", "target_id": "ACP-SCBI-003", "target_type": "AppSecCorePractice"}
|
|
246
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-RPR-008", "link_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d|aligns_with|ACP-RPR-008", "record_type": "alignment", "source_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d", "source_type": "Control", "target_id": "ACP-RPR-008", "target_type": "AppSecCorePractice"}
|
|
247
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SCBI-001", "link_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d|aligns_with|ACP-SCBI-001", "record_type": "alignment", "source_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d", "source_type": "Control", "target_id": "ACP-SCBI-001", "target_type": "AppSecCorePractice"}
|
|
248
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SCBI-002", "link_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d|aligns_with|ACP-SCBI-002", "record_type": "alignment", "source_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d", "source_type": "Control", "target_id": "ACP-SCBI-002", "target_type": "AppSecCorePractice"}
|
|
249
|
+
{"alignment_type": "partial", "confidence": 0.85, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SCBI-003", "link_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d|aligns_with|ACP-SCBI-003", "record_type": "alignment", "source_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d", "source_type": "Control", "target_id": "ACP-SCBI-003", "target_type": "AppSecCorePractice"}
|
|
250
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SCBI-007", "link_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d|aligns_with|ACP-SCBI-003", "record_type": "alignment", "source_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d", "source_type": "Control", "target_id": "ACP-SCBI-003", "target_type": "AppSecCorePractice"}
|
|
251
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SCBI-006", "link_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d|aligns_with|ACP-SCBI-006", "record_type": "alignment", "source_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d", "source_type": "Control", "target_id": "ACP-SCBI-006", "target_type": "AppSecCorePractice"}
|
|
252
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SCBI-007", "link_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d|aligns_with|ACP-SCBI-006", "record_type": "alignment", "source_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d", "source_type": "Control", "target_id": "ACP-SCBI-006", "target_type": "AppSecCorePractice"}
|
|
253
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-SCBI-007", "link_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d|aligns_with|ACP-SCBI-007", "record_type": "alignment", "source_id": "CTRL-supply-chain-supply-chain-segura-de-imagens-e-containers-8a8af25a4d", "source_type": "Control", "target_id": "ACP-SCBI-007", "target_type": "AppSecCorePractice"}
|
|
254
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-001", "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACP-TSV-001", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACP-TSV-001", "target_type": "AppSecCorePractice"}
|
|
255
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-002", "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACP-TSV-002", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACP-TSV-002", "target_type": "AppSecCorePractice"}
|
|
256
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-007", "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACP-TSV-002", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACP-TSV-002", "target_type": "AppSecCorePractice"}
|
|
257
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-003", "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACP-TSV-003", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACP-TSV-003", "target_type": "AppSecCorePractice"}
|
|
258
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-007", "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACP-TSV-003", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACP-TSV-003", "target_type": "AppSecCorePractice"}
|
|
259
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-004", "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACP-TSV-004", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACP-TSV-004", "target_type": "AppSecCorePractice"}
|
|
260
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-007", "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACP-TSV-004", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACP-TSV-004", "target_type": "AppSecCorePractice"}
|
|
261
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-005", "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACP-TSV-005", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACP-TSV-005", "target_type": "AppSecCorePractice"}
|
|
262
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-007", "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACP-TSV-005", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACP-TSV-005", "target_type": "AppSecCorePractice"}
|
|
263
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-006", "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACP-TSV-006", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACP-TSV-006", "target_type": "AppSecCorePractice"}
|
|
264
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-007", "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACP-TSV-006", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACP-TSV-006", "target_type": "AppSecCorePractice"}
|
|
265
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-003", "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACP-TSV-007", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACP-TSV-007", "target_type": "AppSecCorePractice"}
|
|
266
|
+
{"alignment_type": "exact", "confidence": 0.95, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-005", "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACP-TSV-007", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACP-TSV-007", "target_type": "AppSecCorePractice"}
|
|
267
|
+
{"alignment_type": "related", "confidence": 0.7, "curation": {"curator": "archon-2026-09-03", "ratified_by": "programme-lead", "ratified_on": "2026-09-03", "source": "agentic/briefs/2026-09-03-archon-walkthrough-ctrl-acore-alinhamento.md"}, "derivation": "supports_objectives", "derived_from": "ACO-TSV-007", "link_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34|aligns_with|ACP-TSV-007", "record_type": "alignment", "source_id": "CTRL-testing-testes-de-seguranca-baseados-em-risco-55dcb62d34", "source_type": "Control", "target_id": "ACP-TSV-007", "target_type": "AppSecCorePractice"}
|