Add small SaaS profile proof

infospace/indexes/artifact-tree.yaml

@@ -1,5 +1,5 @@
 root: infospace
-file_count: 50
+file_count: 67
 files:
 - path: README.md
   directory: .
@@ -19,6 +19,12 @@ files:
 - path: examples/README.md
   directory: examples
   name: README.md
+- path: examples/small-saas/README.md
+  directory: examples/small-saas
+  name: README.md
+- path: examples/small-saas/demo-commands.yaml
+  directory: examples/small-saas
+  name: demo-commands.yaml
 - path: indexes/README.md
   directory: indexes
   name: README.md
@@ -82,9 +88,54 @@ files:
 - path: profiles/README.md
   directory: profiles
   name: README.md
+- path: profiles/small-saas/artifacts/control.namespace-per-tenant.yaml
+  directory: profiles/small-saas/artifacts
+  name: control.namespace-per-tenant.yaml
+- path: profiles/small-saas/artifacts/dataset.subscription-ledger.yaml
+  directory: profiles/small-saas/artifacts
+  name: dataset.subscription-ledger.yaml
+- path: profiles/small-saas/artifacts/deployment.production.yaml
+  directory: profiles/small-saas/artifacts
+  name: deployment.production.yaml
+- path: profiles/small-saas/artifacts/evidence.access-review-2026-05.yaml
+  directory: profiles/small-saas/artifacts
+  name: evidence.access-review-2026-05.yaml
+- path: profiles/small-saas/artifacts/incident.cross-tenant-access-attempt.yaml
+  directory: profiles/small-saas/artifacts
+  name: incident.cross-tenant-access-attempt.yaml
+- path: profiles/small-saas/artifacts/policy.tenant-isolation.yaml
+  directory: profiles/small-saas/artifacts
+  name: policy.tenant-isolation.yaml
+- path: profiles/small-saas/artifacts/service.billing-portal.yaml
+  directory: profiles/small-saas/artifacts
+  name: service.billing-portal.yaml
+- path: profiles/small-saas/artifacts/system.billing-system.yaml
+  directory: profiles/small-saas/artifacts
+  name: system.billing-system.yaml
+- path: profiles/small-saas/artifacts/task.onboard-tenant.yaml
+  directory: profiles/small-saas/artifacts
+  name: task.onboard-tenant.yaml
+- path: profiles/small-saas/artifacts/team.platform.yaml
+  directory: profiles/small-saas/artifacts
+  name: team.platform.yaml
+- path: profiles/small-saas/artifacts/tenant.acme.yaml
+  directory: profiles/small-saas/artifacts
+  name: tenant.acme.yaml
+- path: profiles/small-saas/artifacts/tenant.globex.yaml
+  directory: profiles/small-saas/artifacts
+  name: tenant.globex.yaml
+- path: profiles/small-saas/artifacts/user.ada-admin.yaml
+  directory: profiles/small-saas/artifacts
+  name: user.ada-admin.yaml
+- path: profiles/small-saas/profile.yaml
+  directory: profiles/small-saas
+  name: profile.yaml
 - path: reports/scaffold-placement.md
   directory: reports
   name: scaffold-placement.md
+- path: reports/small-saas-profile-proof.md
+  directory: reports
+  name: small-saas-profile-proof.md
 - path: schemas/README.md
   directory: schemas
   name: README.md

infospace/indexes/concept-ownership.yaml

@@ -1,4 +1,4 @@
-concept_count: 30
+concept_count: 44
 concepts:
 - concept: InfoTechCanon Core
   owner: kernel/itc-core
@@ -52,6 +52,62 @@ concepts:
   owner: model/task
   path: models/task/InfoTechCanonTaskModel.md
   source: artifact_title
+- concept: Small SaaS System Profile
+  owner: profile/small-saas
+  path: profiles/small-saas/profile.yaml
+  source: artifact_title
+- concept: Namespace Per Tenant Control
+  owner: small-saas/control/namespace-per-tenant
+  path: profiles/small-saas/artifacts/control.namespace-per-tenant.yaml
+  source: artifact_title
+- concept: Subscription Ledger Dataset
+  owner: small-saas/dataset/subscription-ledger
+  path: profiles/small-saas/artifacts/dataset.subscription-ledger.yaml
+  source: artifact_title
+- concept: Production Deployment
+  owner: small-saas/deployment/production
+  path: profiles/small-saas/artifacts/deployment.production.yaml
+  source: artifact_title
+- concept: Access Review 2026-05
+  owner: small-saas/evidence/access-review-2026-05
+  path: profiles/small-saas/artifacts/evidence.access-review-2026-05.yaml
+  source: artifact_title
+- concept: Cross-Tenant Access Attempt
+  owner: small-saas/incident/cross-tenant-access-attempt
+  path: profiles/small-saas/artifacts/incident.cross-tenant-access-attempt.yaml
+  source: artifact_title
+- concept: Tenant Isolation Policy
+  owner: small-saas/policy/tenant-isolation
+  path: profiles/small-saas/artifacts/policy.tenant-isolation.yaml
+  source: artifact_title
+- concept: Billing Portal Service
+  owner: small-saas/service/billing-portal
+  path: profiles/small-saas/artifacts/service.billing-portal.yaml
+  source: artifact_title
+- concept: Small SaaS Billing System
+  owner: small-saas/system/billing-system
+  path: profiles/small-saas/artifacts/system.billing-system.yaml
+  source: artifact_title
+- concept: Onboard Tenant
+  owner: small-saas/task/onboard-tenant
+  path: profiles/small-saas/artifacts/task.onboard-tenant.yaml
+  source: artifact_title
+- concept: Platform Team
+  owner: small-saas/team/platform
+  path: profiles/small-saas/artifacts/team.platform.yaml
+  source: artifact_title
+- concept: Acme Tenant
+  owner: small-saas/tenant/acme
+  path: profiles/small-saas/artifacts/tenant.acme.yaml
+  source: artifact_title
+- concept: Globex Tenant
+  owner: small-saas/tenant/globex
+  path: profiles/small-saas/artifacts/tenant.globex.yaml
+  source: artifact_title
+- concept: Ada Admin
+  owner: small-saas/user/ada-admin
+  path: profiles/small-saas/artifacts/user.ada-admin.yaml
+  source: artifact_title
 - concept: InfoTechCanon CARING Access Governance Standard
   owner: standard/caring
   path: standards/caring/InfoTechCanonCaringAccessGovernanceStandard.md

infospace/indexes/import-matrix.yaml

@@ -12,6 +12,20 @@ artifacts:
 - model/organization
 - model/security
 - model/task
+- profile/small-saas
+- small-saas/control/namespace-per-tenant
+- small-saas/dataset/subscription-ledger
+- small-saas/deployment/production
+- small-saas/evidence/access-review-2026-05
+- small-saas/incident/cross-tenant-access-attempt
+- small-saas/policy/tenant-isolation
+- small-saas/service/billing-portal
+- small-saas/system/billing-system
+- small-saas/task/onboard-tenant
+- small-saas/team/platform
+- small-saas/tenant/acme
+- small-saas/tenant/globex
+- small-saas/user/ada-admin
 - standard/caring
 - standard/tagging
 rows:
@@ -105,6 +119,170 @@ rows:
   targets:
     kernel/itc-core:
     - conforms_to
+- artifact: profile/small-saas
+  targets:
+    kernel/itc-core:
+    - conforms_to
+    model/access-control:
+    - requires
+    model/data:
+    - requires
+    model/devsecops:
+    - requires
+    model/governance:
+    - requires
+    model/landscape:
+    - requires
+    model/network:
+    - requires
+    model/observability:
+    - requires
+    model/organization:
+    - requires
+    model/security:
+    - requires
+    model/task:
+    - requires
+    standard/caring:
+    - requires
+    standard/tagging:
+    - requires
+- artifact: small-saas/control/namespace-per-tenant
+  targets:
+    model/security:
+    - uses
+    profile/small-saas:
+    - instantiates
+    small-saas/evidence/access-review-2026-05:
+    - evidenced_by
+    standard/caring:
+    - uses
+- artifact: small-saas/dataset/subscription-ledger
+  targets:
+    model/data:
+    - uses
+    profile/small-saas:
+    - instantiates
+    small-saas/policy/tenant-isolation:
+    - governed_by
+    small-saas/service/billing-portal:
+    - owned_by
+    small-saas/tenant/acme:
+    - partitioned_for
+    small-saas/tenant/globex:
+    - partitioned_for
+- artifact: small-saas/deployment/production
+  targets:
+    model/devsecops:
+    - uses
+    model/network:
+    - uses
+    profile/small-saas:
+    - instantiates
+    small-saas/control/namespace-per-tenant:
+    - implements
+    small-saas/service/billing-portal:
+    - deploys
+    small-saas/tenant/acme:
+    - separates
+    small-saas/tenant/globex:
+    - separates
+- artifact: small-saas/evidence/access-review-2026-05
+  targets:
+    model/observability:
+    - uses
+    profile/small-saas:
+    - instantiates
+- artifact: small-saas/incident/cross-tenant-access-attempt
+  targets:
+    model/security:
+    - uses
+    profile/small-saas:
+    - instantiates
+    small-saas/control/namespace-per-tenant:
+    - constrained_by
+    small-saas/evidence/access-review-2026-05:
+    - evidenced_by
+- artifact: small-saas/policy/tenant-isolation
+  targets:
+    model/governance:
+    - uses
+    profile/small-saas:
+    - instantiates
+    small-saas/control/namespace-per-tenant:
+    - requires
+    small-saas/evidence/access-review-2026-05:
+    - evidenced_by
+- artifact: small-saas/service/billing-portal
+  targets:
+    model/landscape:
+    - uses
+    profile/small-saas:
+    - instantiates
+    small-saas/system/billing-system:
+    - part_of
+    small-saas/team/platform:
+    - owned_by
+- artifact: small-saas/system/billing-system
+  targets:
+    model/landscape:
+    - uses
+    profile/small-saas:
+    - instantiates
+    small-saas/tenant/acme:
+    - serves
+    small-saas/tenant/globex:
+    - serves
+- artifact: small-saas/task/onboard-tenant
+  targets:
+    model/task:
+    - uses
+    profile/small-saas:
+    - instantiates
+    small-saas/policy/tenant-isolation:
+    - governed_by
+    small-saas/team/platform:
+    - owned_by
+    small-saas/tenant/acme:
+    - changes
+- artifact: small-saas/team/platform
+  targets:
+    model/organization:
+    - uses
+    profile/small-saas:
+    - instantiates
+- artifact: small-saas/tenant/acme
+  targets:
+    model/organization:
+    - uses
+    profile/small-saas:
+    - instantiates
+    small-saas/control/namespace-per-tenant:
+    - isolated_by
+    small-saas/user/ada-admin:
+    - represented_by
+- artifact: small-saas/tenant/globex
+  targets:
+    model/organization:
+    - uses
+    profile/small-saas:
+    - instantiates
+    small-saas/control/namespace-per-tenant:
+    - isolated_by
+- artifact: small-saas/user/ada-admin
+  targets:
+    model/access-control:
+    - uses
+    model/organization:
+    - uses
+    profile/small-saas:
+    - instantiates
+    small-saas/evidence/access-review-2026-05:
+    - access_evidenced_by
+    small-saas/policy/tenant-isolation:
+    - has_access_under
+    small-saas/team/platform:
+    - member_of
 - artifact: standard/caring
   targets:
     kernel/itc-core: