Add small SaaS profile proof

infospace/artifacts/index.yaml

@@ -224,3 +224,252 @@ artifacts:
         target: model/task
       - type: imports
         target: standard/tagging
+  - id: profile/small-saas
+    path: profiles/small-saas/profile.yaml
+    kind: profile
+    title: Small SaaS System Profile
+    provenance:
+      source_path: infospace/profiles/small-saas/profile.yaml
+      profile: small-saas
+      placement_workplan: ITC-WP-0004
+    relationships:
+      - type: conforms_to
+        target: kernel/itc-core
+      - type: requires
+        target: model/landscape
+      - type: requires
+        target: model/organization
+      - type: requires
+        target: model/governance
+      - type: requires
+        target: model/access-control
+      - type: requires
+        target: model/security
+      - type: requires
+        target: model/data
+      - type: requires
+        target: model/devsecops
+      - type: requires
+        target: model/network
+      - type: requires
+        target: model/observability
+      - type: requires
+        target: model/task
+      - type: requires
+        target: standard/tagging
+      - type: requires
+        target: standard/caring
+  - id: small-saas/service/billing-portal
+    path: profiles/small-saas/artifacts/service.billing-portal.yaml
+    kind: profile-artifact
+    title: Billing Portal Service
+    provenance:
+      profile: small-saas
+      placement_workplan: ITC-WP-0004
+    relationships:
+      - type: instantiates
+        target: profile/small-saas
+      - type: uses
+        target: model/landscape
+      - type: part_of
+        target: small-saas/system/billing-system
+      - type: owned_by
+        target: small-saas/team/platform
+  - id: small-saas/system/billing-system
+    path: profiles/small-saas/artifacts/system.billing-system.yaml
+    kind: profile-artifact
+    title: Small SaaS Billing System
+    provenance:
+      profile: small-saas
+      placement_workplan: ITC-WP-0004
+    relationships:
+      - type: instantiates
+        target: profile/small-saas
+      - type: uses
+        target: model/landscape
+      - type: serves
+        target: small-saas/tenant/acme
+      - type: serves
+        target: small-saas/tenant/globex
+  - id: small-saas/tenant/acme
+    path: profiles/small-saas/artifacts/tenant.acme.yaml
+    kind: profile-artifact
+    title: Acme Tenant
+    provenance:
+      profile: small-saas
+      placement_workplan: ITC-WP-0004
+    relationships:
+      - type: instantiates
+        target: profile/small-saas
+      - type: uses
+        target: model/organization
+      - type: represented_by
+        target: small-saas/user/ada-admin
+      - type: isolated_by
+        target: small-saas/control/namespace-per-tenant
+  - id: small-saas/tenant/globex
+    path: profiles/small-saas/artifacts/tenant.globex.yaml
+    kind: profile-artifact
+    title: Globex Tenant
+    provenance:
+      profile: small-saas
+      placement_workplan: ITC-WP-0004
+    relationships:
+      - type: instantiates
+        target: profile/small-saas
+      - type: uses
+        target: model/organization
+      - type: isolated_by
+        target: small-saas/control/namespace-per-tenant
+  - id: small-saas/user/ada-admin
+    path: profiles/small-saas/artifacts/user.ada-admin.yaml
+    kind: profile-artifact
+    title: Ada Admin
+    provenance:
+      profile: small-saas
+      placement_workplan: ITC-WP-0004
+    relationships:
+      - type: instantiates
+        target: profile/small-saas
+      - type: uses
+        target: model/organization
+      - type: uses
+        target: model/access-control
+      - type: member_of
+        target: small-saas/team/platform
+      - type: has_access_under
+        target: small-saas/policy/tenant-isolation
+      - type: access_evidenced_by
+        target: small-saas/evidence/access-review-2026-05
+  - id: small-saas/team/platform
+    path: profiles/small-saas/artifacts/team.platform.yaml
+    kind: profile-artifact
+    title: Platform Team
+    provenance:
+      profile: small-saas
+      placement_workplan: ITC-WP-0004
+    relationships:
+      - type: instantiates
+        target: profile/small-saas
+      - type: uses
+        target: model/organization
+  - id: small-saas/dataset/subscription-ledger
+    path: profiles/small-saas/artifacts/dataset.subscription-ledger.yaml
+    kind: profile-artifact
+    title: Subscription Ledger Dataset
+    provenance:
+      profile: small-saas
+      placement_workplan: ITC-WP-0004
+    relationships:
+      - type: instantiates
+        target: profile/small-saas
+      - type: uses
+        target: model/data
+      - type: owned_by
+        target: small-saas/service/billing-portal
+      - type: partitioned_for
+        target: small-saas/tenant/acme
+      - type: partitioned_for
+        target: small-saas/tenant/globex
+      - type: governed_by
+        target: small-saas/policy/tenant-isolation
+  - id: small-saas/deployment/production
+    path: profiles/small-saas/artifacts/deployment.production.yaml
+    kind: profile-artifact
+    title: Production Deployment
+    provenance:
+      profile: small-saas
+      placement_workplan: ITC-WP-0004
+    relationships:
+      - type: instantiates
+        target: profile/small-saas
+      - type: uses
+        target: model/devsecops
+      - type: uses
+        target: model/network
+      - type: deploys
+        target: small-saas/service/billing-portal
+      - type: separates
+        target: small-saas/tenant/acme
+      - type: separates
+        target: small-saas/tenant/globex
+      - type: implements
+        target: small-saas/control/namespace-per-tenant
+  - id: small-saas/task/onboard-tenant
+    path: profiles/small-saas/artifacts/task.onboard-tenant.yaml
+    kind: profile-artifact
+    title: Onboard Tenant
+    provenance:
+      profile: small-saas
+      placement_workplan: ITC-WP-0004
+    relationships:
+      - type: instantiates
+        target: profile/small-saas
+      - type: uses
+        target: model/task
+      - type: owned_by
+        target: small-saas/team/platform
+      - type: changes
+        target: small-saas/tenant/acme
+      - type: governed_by
+        target: small-saas/policy/tenant-isolation
+  - id: small-saas/policy/tenant-isolation
+    path: profiles/small-saas/artifacts/policy.tenant-isolation.yaml
+    kind: profile-artifact
+    title: Tenant Isolation Policy
+    provenance:
+      profile: small-saas
+      placement_workplan: ITC-WP-0004
+    relationships:
+      - type: instantiates
+        target: profile/small-saas
+      - type: uses
+        target: model/governance
+      - type: requires
+        target: small-saas/control/namespace-per-tenant
+      - type: evidenced_by
+        target: small-saas/evidence/access-review-2026-05
+  - id: small-saas/control/namespace-per-tenant
+    path: profiles/small-saas/artifacts/control.namespace-per-tenant.yaml
+    kind: profile-artifact
+    title: Namespace Per Tenant Control
+    provenance:
+      profile: small-saas
+      placement_workplan: ITC-WP-0004
+    relationships:
+      - type: instantiates
+        target: profile/small-saas
+      - type: uses
+        target: model/security
+      - type: uses
+        target: standard/caring
+      - type: evidenced_by
+        target: small-saas/evidence/access-review-2026-05
+  - id: small-saas/evidence/access-review-2026-05
+    path: profiles/small-saas/artifacts/evidence.access-review-2026-05.yaml
+    kind: profile-artifact
+    title: Access Review 2026-05
+    provenance:
+      profile: small-saas
+      placement_workplan: ITC-WP-0004
+    relationships:
+      - type: instantiates
+        target: profile/small-saas
+      - type: uses
+        target: model/observability
+  - id: small-saas/incident/cross-tenant-access-attempt
+    path: profiles/small-saas/artifacts/incident.cross-tenant-access-attempt.yaml
+    kind: profile-artifact
+    title: Cross-Tenant Access Attempt
+    provenance:
+      profile: small-saas
+      placement_workplan: ITC-WP-0004
+    relationships:
+      - type: instantiates
+        target: profile/small-saas
+      - type: uses
+        target: model/security
+      - type: constrained_by
+        target: small-saas/control/namespace-per-tenant
+      - type: evidenced_by
+        target: small-saas/evidence/access-review-2026-05