Add small SaaS profile proof

This commit is contained in:
2026-05-23 04:26:28 +02:00
parent 79e4d10b68
commit 6351ebc627
40 changed files with 1696 additions and 54 deletions

View File

@@ -12,6 +12,20 @@ artifacts:
- model/organization
- model/security
- model/task
- profile/small-saas
- small-saas/control/namespace-per-tenant
- small-saas/dataset/subscription-ledger
- small-saas/deployment/production
- small-saas/evidence/access-review-2026-05
- small-saas/incident/cross-tenant-access-attempt
- small-saas/policy/tenant-isolation
- small-saas/service/billing-portal
- small-saas/system/billing-system
- small-saas/task/onboard-tenant
- small-saas/team/platform
- small-saas/tenant/acme
- small-saas/tenant/globex
- small-saas/user/ada-admin
- standard/caring
- standard/tagging
rows:
@@ -105,6 +119,170 @@ rows:
targets:
kernel/itc-core:
- conforms_to
- artifact: profile/small-saas
targets:
kernel/itc-core:
- conforms_to
model/access-control:
- requires
model/data:
- requires
model/devsecops:
- requires
model/governance:
- requires
model/landscape:
- requires
model/network:
- requires
model/observability:
- requires
model/organization:
- requires
model/security:
- requires
model/task:
- requires
standard/caring:
- requires
standard/tagging:
- requires
- artifact: small-saas/control/namespace-per-tenant
targets:
model/security:
- uses
profile/small-saas:
- instantiates
small-saas/evidence/access-review-2026-05:
- evidenced_by
standard/caring:
- uses
- artifact: small-saas/dataset/subscription-ledger
targets:
model/data:
- uses
profile/small-saas:
- instantiates
small-saas/policy/tenant-isolation:
- governed_by
small-saas/service/billing-portal:
- owned_by
small-saas/tenant/acme:
- partitioned_for
small-saas/tenant/globex:
- partitioned_for
- artifact: small-saas/deployment/production
targets:
model/devsecops:
- uses
model/network:
- uses
profile/small-saas:
- instantiates
small-saas/control/namespace-per-tenant:
- implements
small-saas/service/billing-portal:
- deploys
small-saas/tenant/acme:
- separates
small-saas/tenant/globex:
- separates
- artifact: small-saas/evidence/access-review-2026-05
targets:
model/observability:
- uses
profile/small-saas:
- instantiates
- artifact: small-saas/incident/cross-tenant-access-attempt
targets:
model/security:
- uses
profile/small-saas:
- instantiates
small-saas/control/namespace-per-tenant:
- constrained_by
small-saas/evidence/access-review-2026-05:
- evidenced_by
- artifact: small-saas/policy/tenant-isolation
targets:
model/governance:
- uses
profile/small-saas:
- instantiates
small-saas/control/namespace-per-tenant:
- requires
small-saas/evidence/access-review-2026-05:
- evidenced_by
- artifact: small-saas/service/billing-portal
targets:
model/landscape:
- uses
profile/small-saas:
- instantiates
small-saas/system/billing-system:
- part_of
small-saas/team/platform:
- owned_by
- artifact: small-saas/system/billing-system
targets:
model/landscape:
- uses
profile/small-saas:
- instantiates
small-saas/tenant/acme:
- serves
small-saas/tenant/globex:
- serves
- artifact: small-saas/task/onboard-tenant
targets:
model/task:
- uses
profile/small-saas:
- instantiates
small-saas/policy/tenant-isolation:
- governed_by
small-saas/team/platform:
- owned_by
small-saas/tenant/acme:
- changes
- artifact: small-saas/team/platform
targets:
model/organization:
- uses
profile/small-saas:
- instantiates
- artifact: small-saas/tenant/acme
targets:
model/organization:
- uses
profile/small-saas:
- instantiates
small-saas/control/namespace-per-tenant:
- isolated_by
small-saas/user/ada-admin:
- represented_by
- artifact: small-saas/tenant/globex
targets:
model/organization:
- uses
profile/small-saas:
- instantiates
small-saas/control/namespace-per-tenant:
- isolated_by
- artifact: small-saas/user/ada-admin
targets:
model/access-control:
- uses
model/organization:
- uses
profile/small-saas:
- instantiates
small-saas/evidence/access-review-2026-05:
- access_evidenced_by
small-saas/policy/tenant-isolation:
- has_access_under
small-saas/team/platform:
- member_of
- artifact: standard/caring
targets:
kernel/itc-core: