Add small SaaS profile proof

2026-05-23 04:26:28 +02:00
parent 79e4d10b68
commit 6351ebc627
40 changed files with 1696 additions and 54 deletions
--- a/infospace/profiles/small-saas/artifacts/policy.tenant-isolation.yaml
+++ b/infospace/profiles/small-saas/artifacts/policy.tenant-isolation.yaml
@@ -0,0 +1,15 @@
+id: small-saas/policy/tenant-isolation
+kind: policy
+title: Tenant Isolation Policy
+profile: small-saas
+scope: service-and-data-plane
+statement: Tenant requests, namespaces, access grants, and data partitions must not cross tenant boundaries.
+control_ids:
+  - small-saas/control/namespace-per-tenant
+evidence_ids:
+  - small-saas/evidence/access-review-2026-05
+relationships:
+  - type: requires
+    target: small-saas/control/namespace-per-tenant
+  - type: evidenced_by
+    target: small-saas/evidence/access-review-2026-05