Add small SaaS profile proof

This commit is contained in:
2026-05-23 04:26:28 +02:00
parent 79e4d10b68
commit 6351ebc627
40 changed files with 1696 additions and 54 deletions

View File

@@ -2,7 +2,7 @@
# By Concept
Concept count: **30**
Concept count: **44**
| Concept | Owner | Source |
| --- | --- | --- |
@@ -19,6 +19,20 @@ Concept count: **30**
| InfoTechCanon Organization Model | `model/organization` | `artifact_title` |
| InfoTechCanon Security Model | `model/security` | `artifact_title` |
| InfoTechCanon Task Model | `model/task` | `artifact_title` |
| Small SaaS System Profile | `profile/small-saas` | `artifact_title` |
| Namespace Per Tenant Control | `small-saas/control/namespace-per-tenant` | `artifact_title` |
| Subscription Ledger Dataset | `small-saas/dataset/subscription-ledger` | `artifact_title` |
| Production Deployment | `small-saas/deployment/production` | `artifact_title` |
| Access Review 2026-05 | `small-saas/evidence/access-review-2026-05` | `artifact_title` |
| Cross-Tenant Access Attempt | `small-saas/incident/cross-tenant-access-attempt` | `artifact_title` |
| Tenant Isolation Policy | `small-saas/policy/tenant-isolation` | `artifact_title` |
| Billing Portal Service | `small-saas/service/billing-portal` | `artifact_title` |
| Small SaaS Billing System | `small-saas/system/billing-system` | `artifact_title` |
| Onboard Tenant | `small-saas/task/onboard-tenant` | `artifact_title` |
| Platform Team | `small-saas/team/platform` | `artifact_title` |
| Acme Tenant | `small-saas/tenant/acme` | `artifact_title` |
| Globex Tenant | `small-saas/tenant/globex` | `artifact_title` |
| Ada Admin | `small-saas/user/ada-admin` | `artifact_title` |
| InfoTechCanon CARING Access Governance Standard | `standard/caring` | `artifact_title` |
| CARINGAccessDescriptor | `standard/caring` | `frontmatter.owned_concepts` |
| CARINGCanonicalRole | `standard/caring` | `frontmatter.owned_concepts` |

View File

@@ -16,6 +16,7 @@
- `model/organization` via `conforms_to`
- `model/security` via `conforms_to`
- `model/task` via `conforms_to`
- `profile/small-saas` via `conforms_to`
- `standard/caring` via `conforms_to`
- `standard/tagging` via `conforms_to`
@@ -23,16 +24,22 @@
- `kernel/itc-kernel-map` via `maps`
- `model/security` via `uses`
- `profile/small-saas` via `requires`
- `small-saas/user/ada-admin` via `uses`
- `standard/caring` via `imports`
## `model/data`
- `kernel/itc-kernel-map` via `maps`
- `profile/small-saas` via `requires`
- `small-saas/dataset/subscription-ledger` via `uses`
- `standard/caring` via `imports`
## `model/devsecops`
- `kernel/itc-kernel-map` via `maps`
- `profile/small-saas` via `requires`
- `small-saas/deployment/production` via `uses`
- `standard/caring` via `imports`
## `model/governance`
@@ -40,6 +47,8 @@
- `kernel/itc-kernel-map` via `maps`
- `model/access-control` via `uses`
- `model/data` via `uses`
- `profile/small-saas` via `requires`
- `small-saas/policy/tenant-isolation` via `uses`
- `standard/caring` via `imports`
## `model/information-space`
@@ -49,21 +58,33 @@
## `model/landscape`
- `kernel/itc-kernel-map` via `maps`
- `profile/small-saas` via `requires`
- `small-saas/service/billing-portal` via `uses`
- `small-saas/system/billing-system` via `uses`
## `model/network`
- `kernel/itc-kernel-map` via `maps`
- `profile/small-saas` via `requires`
- `small-saas/deployment/production` via `uses`
- `standard/caring` via `imports`
## `model/observability`
- `kernel/itc-kernel-map` via `maps`
- `profile/small-saas` via `requires`
- `small-saas/evidence/access-review-2026-05` via `uses`
- `standard/caring` via `imports`
## `model/organization`
- `kernel/itc-kernel-map` via `maps`
- `model/access-control` via `uses`
- `profile/small-saas` via `requires`
- `small-saas/team/platform` via `uses`
- `small-saas/tenant/acme` via `uses`
- `small-saas/tenant/globex` via `uses`
- `small-saas/user/ada-admin` via `uses`
- `standard/caring` via `imports`
## `model/security`
@@ -71,20 +92,97 @@
- `kernel/itc-kernel-map` via `maps`
- `model/devsecops` via `uses`
- `model/network` via `uses`
- `profile/small-saas` via `requires`
- `small-saas/control/namespace-per-tenant` via `uses`
- `small-saas/incident/cross-tenant-access-attempt` via `uses`
- `standard/caring` via `imports`
## `model/task`
- `kernel/itc-kernel-map` via `maps`
- `model/observability` via `uses`
- `profile/small-saas` via `requires`
- `small-saas/task/onboard-tenant` via `uses`
- `standard/caring` via `imports`
- `standard/tagging` via `imports`
## `profile/small-saas`
- `small-saas/control/namespace-per-tenant` via `instantiates`
- `small-saas/dataset/subscription-ledger` via `instantiates`
- `small-saas/deployment/production` via `instantiates`
- `small-saas/evidence/access-review-2026-05` via `instantiates`
- `small-saas/incident/cross-tenant-access-attempt` via `instantiates`
- `small-saas/policy/tenant-isolation` via `instantiates`
- `small-saas/service/billing-portal` via `instantiates`
- `small-saas/system/billing-system` via `instantiates`
- `small-saas/task/onboard-tenant` via `instantiates`
- `small-saas/team/platform` via `instantiates`
- `small-saas/tenant/acme` via `instantiates`
- `small-saas/tenant/globex` via `instantiates`
- `small-saas/user/ada-admin` via `instantiates`
## `small-saas/control/namespace-per-tenant`
- `small-saas/deployment/production` via `implements`
- `small-saas/incident/cross-tenant-access-attempt` via `constrained_by`
- `small-saas/policy/tenant-isolation` via `requires`
- `small-saas/tenant/acme` via `isolated_by`
- `small-saas/tenant/globex` via `isolated_by`
## `small-saas/evidence/access-review-2026-05`
- `small-saas/control/namespace-per-tenant` via `evidenced_by`
- `small-saas/incident/cross-tenant-access-attempt` via `evidenced_by`
- `small-saas/policy/tenant-isolation` via `evidenced_by`
- `small-saas/user/ada-admin` via `access_evidenced_by`
## `small-saas/policy/tenant-isolation`
- `small-saas/dataset/subscription-ledger` via `governed_by`
- `small-saas/task/onboard-tenant` via `governed_by`
- `small-saas/user/ada-admin` via `has_access_under`
## `small-saas/service/billing-portal`
- `small-saas/dataset/subscription-ledger` via `owned_by`
- `small-saas/deployment/production` via `deploys`
## `small-saas/system/billing-system`
- `small-saas/service/billing-portal` via `part_of`
## `small-saas/team/platform`
- `small-saas/service/billing-portal` via `owned_by`
- `small-saas/task/onboard-tenant` via `owned_by`
- `small-saas/user/ada-admin` via `member_of`
## `small-saas/tenant/acme`
- `small-saas/dataset/subscription-ledger` via `partitioned_for`
- `small-saas/deployment/production` via `separates`
- `small-saas/system/billing-system` via `serves`
- `small-saas/task/onboard-tenant` via `changes`
## `small-saas/tenant/globex`
- `small-saas/dataset/subscription-ledger` via `partitioned_for`
- `small-saas/deployment/production` via `separates`
- `small-saas/system/billing-system` via `serves`
## `small-saas/user/ada-admin`
- `small-saas/tenant/acme` via `represented_by`
## `standard/caring`
- `kernel/itc-kernel-map` via `maps`
- `profile/small-saas` via `requires`
- `small-saas/control/namespace-per-tenant` via `uses`
## `standard/tagging`
- `kernel/itc-kernel-map` via `maps`
- `profile/small-saas` via `requires`
- `standard/caring` via `imports`

View File

@@ -2,4 +2,6 @@
# By Profile
No profiles have been registered yet.
## small-saas
- Path: `profiles/small-saas/profile.yaml`

View File

@@ -2,20 +2,34 @@
# Import Matrix
| Artifact | `kernel/itc-core` | `kernel/itc-kernel-map` | `model/access-control` | `model/data` | `model/devsecops` | `model/governance` | `model/information-space` | `model/landscape` | `model/network` | `model/observability` | `model/organization` | `model/security` | `model/task` | `standard/caring` | `standard/tagging` |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| `kernel/itc-core` | | | | | | | | | | | | | | | |
| `kernel/itc-kernel-map` | `maps` | | `maps` | `maps` | `maps` | `maps` | `maps` | `maps` | `maps` | `maps` | `maps` | `maps` | `maps` | `maps` | `maps` |
| `model/access-control` | `conforms_to` | | | | | `uses` | | | | | `uses` | | | | |
| `model/data` | `conforms_to` | | | | | `uses` | | | | | | | | | |
| `model/devsecops` | `conforms_to` | | | | | | | | | | | `uses` | | | |
| `model/governance` | `conforms_to` | | | | | | | | | | | | | | |
| `model/information-space` | `conforms_to` | | | | | | | | | | | | | | |
| `model/landscape` | `conforms_to` | | | | | | | | | | | | | | |
| `model/network` | `conforms_to` | | | | | | | | | | | `uses` | | | |
| `model/observability` | `conforms_to` | | | | | | | | | | | | `uses` | | |
| `model/organization` | `conforms_to` | | | | | | | | | | | | | | |
| `model/security` | `conforms_to` | | `uses` | | | | | | | | | | | | |
| `model/task` | `conforms_to` | | | | | | | | | | | | | | |
| `standard/caring` | `conforms_to` | | `imports` | `imports` | `imports` | `imports` | | | `imports` | `imports` | `imports` | `imports` | `imports` | | `imports` |
| `standard/tagging` | `conforms_to` | | | | | | | | | | | | `imports` | | |
| Artifact | `kernel/itc-core` | `kernel/itc-kernel-map` | `model/access-control` | `model/data` | `model/devsecops` | `model/governance` | `model/information-space` | `model/landscape` | `model/network` | `model/observability` | `model/organization` | `model/security` | `model/task` | `profile/small-saas` | `small-saas/control/namespace-per-tenant` | `small-saas/dataset/subscription-ledger` | `small-saas/deployment/production` | `small-saas/evidence/access-review-2026-05` | `small-saas/incident/cross-tenant-access-attempt` | `small-saas/policy/tenant-isolation` | `small-saas/service/billing-portal` | `small-saas/system/billing-system` | `small-saas/task/onboard-tenant` | `small-saas/team/platform` | `small-saas/tenant/acme` | `small-saas/tenant/globex` | `small-saas/user/ada-admin` | `standard/caring` | `standard/tagging` |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| `kernel/itc-core` | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
| `kernel/itc-kernel-map` | `maps` | | `maps` | `maps` | `maps` | `maps` | `maps` | `maps` | `maps` | `maps` | `maps` | `maps` | `maps` | | | | | | | | | | | | | | | `maps` | `maps` |
| `model/access-control` | `conforms_to` | | | | | `uses` | | | | | `uses` | | | | | | | | | | | | | | | | | | |
| `model/data` | `conforms_to` | | | | | `uses` | | | | | | | | | | | | | | | | | | | | | | | |
| `model/devsecops` | `conforms_to` | | | | | | | | | | | `uses` | | | | | | | | | | | | | | | | | |
| `model/governance` | `conforms_to` | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
| `model/information-space` | `conforms_to` | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
| `model/landscape` | `conforms_to` | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
| `model/network` | `conforms_to` | | | | | | | | | | | `uses` | | | | | | | | | | | | | | | | | |
| `model/observability` | `conforms_to` | | | | | | | | | | | | `uses` | | | | | | | | | | | | | | | | |
| `model/organization` | `conforms_to` | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
| `model/security` | `conforms_to` | | `uses` | | | | | | | | | | | | | | | | | | | | | | | | | | |
| `model/task` | `conforms_to` | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
| `profile/small-saas` | `conforms_to` | | `requires` | `requires` | `requires` | `requires` | | `requires` | `requires` | `requires` | `requires` | `requires` | `requires` | | | | | | | | | | | | | | | `requires` | `requires` |
| `small-saas/control/namespace-per-tenant` | | | | | | | | | | | | `uses` | | `instantiates` | | | | `evidenced_by` | | | | | | | | | | `uses` | |
| `small-saas/dataset/subscription-ledger` | | | | `uses` | | | | | | | | | | `instantiates` | | | | | | `governed_by` | `owned_by` | | | | `partitioned_for` | `partitioned_for` | | | |
| `small-saas/deployment/production` | | | | | `uses` | | | | `uses` | | | | | `instantiates` | `implements` | | | | | | `deploys` | | | | `separates` | `separates` | | | |
| `small-saas/evidence/access-review-2026-05` | | | | | | | | | | `uses` | | | | `instantiates` | | | | | | | | | | | | | | | |
| `small-saas/incident/cross-tenant-access-attempt` | | | | | | | | | | | | `uses` | | `instantiates` | `constrained_by` | | | `evidenced_by` | | | | | | | | | | | |
| `small-saas/policy/tenant-isolation` | | | | | | `uses` | | | | | | | | `instantiates` | `requires` | | | `evidenced_by` | | | | | | | | | | | |
| `small-saas/service/billing-portal` | | | | | | | | `uses` | | | | | | `instantiates` | | | | | | | | `part_of` | | `owned_by` | | | | | |
| `small-saas/system/billing-system` | | | | | | | | `uses` | | | | | | `instantiates` | | | | | | | | | | | `serves` | `serves` | | | |
| `small-saas/task/onboard-tenant` | | | | | | | | | | | | | `uses` | `instantiates` | | | | | | `governed_by` | | | | `owned_by` | `changes` | | | | |
| `small-saas/team/platform` | | | | | | | | | | | `uses` | | | `instantiates` | | | | | | | | | | | | | | | |
| `small-saas/tenant/acme` | | | | | | | | | | | `uses` | | | `instantiates` | `isolated_by` | | | | | | | | | | | | `represented_by` | | |
| `small-saas/tenant/globex` | | | | | | | | | | | `uses` | | | `instantiates` | `isolated_by` | | | | | | | | | | | | | | |
| `small-saas/user/ada-admin` | | | `uses` | | | | | | | | `uses` | | | `instantiates` | | | | `access_evidenced_by` | | `has_access_under` | | | | `member_of` | | | | | |
| `standard/caring` | `conforms_to` | | `imports` | `imports` | `imports` | `imports` | | | `imports` | `imports` | `imports` | `imports` | `imports` | | | | | | | | | | | | | | | | `imports` |
| `standard/tagging` | `conforms_to` | | | | | | | | | | | | `imports` | | | | | | | | | | | | | | | | |

View File

@@ -3,17 +3,37 @@
# Kernel Overview
- Infospace: `canon`
- Artifacts: 15
- Artifacts: 29
## Artifact Kinds
- `kernel`: 2
- `model`: 11
- `profile`: 1
- `profile-artifact`: 13
- `standard`: 2
## Relationship Types
- `conforms_to`: 13
- `access_evidenced_by`: 1
- `changes`: 1
- `conforms_to`: 14
- `constrained_by`: 1
- `deploys`: 1
- `evidenced_by`: 3
- `governed_by`: 2
- `has_access_under`: 1
- `implements`: 1
- `imports`: 11
- `instantiates`: 13
- `isolated_by`: 2
- `maps`: 14
- `uses`: 7
- `member_of`: 1
- `owned_by`: 3
- `part_of`: 1
- `partitioned_for`: 2
- `represented_by`: 1
- `requires`: 13
- `separates`: 2
- `serves`: 2
- `uses`: 23

View File

@@ -2,7 +2,7 @@
# Repository Tree
File count: **50**
File count: **67**
- `README.md`
- `agent/README.md`
@@ -10,6 +10,8 @@ File count: **50**
- `artifacts/index.yaml`
- `assimilation/README.md`
- `examples/README.md`
- `examples/small-saas/README.md`
- `examples/small-saas/demo-commands.yaml`
- `indexes/README.md`
- `indexes/artifact-tree.yaml`
- `indexes/concept-ownership.yaml`
@@ -31,7 +33,22 @@ File count: **50**
- `models/task/InfoTechCanonTaskModel.md`
- `patterns/README.md`
- `profiles/README.md`
- `profiles/small-saas/artifacts/control.namespace-per-tenant.yaml`
- `profiles/small-saas/artifacts/dataset.subscription-ledger.yaml`
- `profiles/small-saas/artifacts/deployment.production.yaml`
- `profiles/small-saas/artifacts/evidence.access-review-2026-05.yaml`
- `profiles/small-saas/artifacts/incident.cross-tenant-access-attempt.yaml`
- `profiles/small-saas/artifacts/policy.tenant-isolation.yaml`
- `profiles/small-saas/artifacts/service.billing-portal.yaml`
- `profiles/small-saas/artifacts/system.billing-system.yaml`
- `profiles/small-saas/artifacts/task.onboard-tenant.yaml`
- `profiles/small-saas/artifacts/team.platform.yaml`
- `profiles/small-saas/artifacts/tenant.acme.yaml`
- `profiles/small-saas/artifacts/tenant.globex.yaml`
- `profiles/small-saas/artifacts/user.ada-admin.yaml`
- `profiles/small-saas/profile.yaml`
- `reports/scaffold-placement.md`
- `reports/small-saas-profile-proof.md`
- `schemas/README.md`
- `schemas/agent-brief.schema.yaml`
- `schemas/assimilation.schema.yaml`