Add CARING Kubernetes RBAC benchmark

2026-05-23 06:53:30 +02:00
parent 3f510855ef
commit fb3ac750d5
32 changed files with 1688 additions and 79 deletions
--- a/infospace/agent/briefs/benchmark-caring-kubernetes-rbac-access-descriptors.md
+++ b/infospace/agent/briefs/benchmark-caring-kubernetes-rbac-access-descriptors.md
@@ -0,0 +1,33 @@
+---
+id: agent-brief/benchmark-caring-kubernetes-rbac-access-descriptors
+artifact_id: benchmark/caring/kubernetes-rbac/access-descriptors
+source_path: standards/caring/benchmarks/kubernetes-rbac/access-descriptors.yaml
+source_kind: access-descriptor-set
+generated: true
+---
+
+<!-- GENERATED by info_tech_canon; do not edit by hand. -->
+
+# Agent Brief: Kubernetes RBAC CARING Access Descriptors
+
+- Artifact ID: `benchmark/caring/kubernetes-rbac/access-descriptors`
+- Kind: `access-descriptor-set`
+- Canonical path: `standards/caring/benchmarks/kubernetes-rbac/access-descriptors.yaml`
+- Full source: `standards/caring/benchmarks/kubernetes-rbac/access-descriptors.yaml`
+- Summary: Structured CARING access descriptor set: Kubernetes RBAC CARING Access Descriptors.
+
+## Retrieval Hints
+
+Imports and anchors:
+- `model/access-control`
+- `model/devsecops`
+- `model/security`
+- `standard/caring`
+
+## Owned Concepts
+
+- `Kubernetes RBAC CARING Access Descriptors`
+
+## Related Distinctions
+
+No common distinction is anchored directly on this artifact.
--- a/infospace/agent/briefs/benchmark-caring-kubernetes-rbac-caring-mapping.md
+++ b/infospace/agent/briefs/benchmark-caring-kubernetes-rbac-caring-mapping.md
@@ -0,0 +1,29 @@
+---
+id: agent-brief/benchmark-caring-kubernetes-rbac-caring-mapping
+artifact_id: benchmark/caring/kubernetes-rbac/caring-mapping
+source_path: standards/caring/benchmarks/kubernetes-rbac/caring-mapping.yaml
+source_kind: caring-mapping
+generated: true
+---
+
+<!-- GENERATED by info_tech_canon; do not edit by hand. -->
+
+# Agent Brief: Kubernetes RBAC To CARING Mapping
+
+- Artifact ID: `benchmark/caring/kubernetes-rbac/caring-mapping`
+- Kind: `caring-mapping`
+- Canonical path: `standards/caring/benchmarks/kubernetes-rbac/caring-mapping.yaml`
+- Full source: `standards/caring/benchmarks/kubernetes-rbac/caring-mapping.yaml`
+- Summary: Native access model to CARING mapping: Kubernetes RBAC To CARING Mapping.
+
+## Retrieval Hints
+
+No imports or anchors recorded.
+
+## Owned Concepts
+
+- `Kubernetes RBAC To CARING Mapping`
+
+## Related Distinctions
+
+No common distinction is anchored directly on this artifact.
--- a/infospace/agent/briefs/benchmark-caring-kubernetes-rbac-findings.md
+++ b/infospace/agent/briefs/benchmark-caring-kubernetes-rbac-findings.md
@@ -0,0 +1,29 @@
+---
+id: agent-brief/benchmark-caring-kubernetes-rbac-findings
+artifact_id: benchmark/caring/kubernetes-rbac/findings
+source_path: standards/caring/benchmarks/kubernetes-rbac/findings-and-canon-pressure.yaml
+source_kind: benchmark-findings
+generated: true
+---
+
+<!-- GENERATED by info_tech_canon; do not edit by hand. -->
+
+# Agent Brief: Kubernetes RBAC Benchmark Findings And Canon Pressure
+
+- Artifact ID: `benchmark/caring/kubernetes-rbac/findings`
+- Kind: `benchmark-findings`
+- Canonical path: `standards/caring/benchmarks/kubernetes-rbac/findings-and-canon-pressure.yaml`
+- Full source: `standards/caring/benchmarks/kubernetes-rbac/findings-and-canon-pressure.yaml`
+- Summary: Benchmark findings, gaps, and canon pressure: Kubernetes RBAC Benchmark Findings And Canon Pressure.
+
+## Retrieval Hints
+
+No imports or anchors recorded.
+
+## Owned Concepts
+
+- `Kubernetes RBAC Benchmark Findings And Canon Pressure`
+
+## Related Distinctions
+
+No common distinction is anchored directly on this artifact.
--- a/infospace/agent/briefs/benchmark-caring-kubernetes-rbac-native-concepts.md
+++ b/infospace/agent/briefs/benchmark-caring-kubernetes-rbac-native-concepts.md
@@ -0,0 +1,29 @@
+---
+id: agent-brief/benchmark-caring-kubernetes-rbac-native-concepts
+artifact_id: benchmark/caring/kubernetes-rbac/native-concepts
+source_path: standards/caring/benchmarks/kubernetes-rbac/native-concepts.yaml
+source_kind: native-concept-map
+generated: true
+---
+
+<!-- GENERATED by info_tech_canon; do not edit by hand. -->
+
+# Agent Brief: Kubernetes RBAC Native Concept Map
+
+- Artifact ID: `benchmark/caring/kubernetes-rbac/native-concepts`
+- Kind: `native-concept-map`
+- Canonical path: `standards/caring/benchmarks/kubernetes-rbac/native-concepts.yaml`
+- Full source: `standards/caring/benchmarks/kubernetes-rbac/native-concepts.yaml`
+- Summary: Native source concept map for assimilation or benchmark work: Kubernetes RBAC Native Concept Map.
+
+## Retrieval Hints
+
+No imports or anchors recorded.
+
+## Owned Concepts
+
+- `Kubernetes RBAC Native Concept Map`
+
+## Related Distinctions
+
+No common distinction is anchored directly on this artifact.
--- a/infospace/agent/briefs/benchmark-caring-kubernetes-rbac.md
+++ b/infospace/agent/briefs/benchmark-caring-kubernetes-rbac.md
@@ -0,0 +1,31 @@
+---
+id: agent-brief/benchmark-caring-kubernetes-rbac
+artifact_id: benchmark/caring/kubernetes-rbac
+source_path: standards/caring/benchmarks/kubernetes-rbac/benchmark.yaml
+source_kind: benchmark-workspace
+generated: true
+---
+
+<!-- GENERATED by info_tech_canon; do not edit by hand. -->
+
+# Agent Brief: CARING Kubernetes RBAC Benchmark
+
+- Artifact ID: `benchmark/caring/kubernetes-rbac`
+- Kind: `benchmark-workspace`
+- Canonical path: `standards/caring/benchmarks/kubernetes-rbac/benchmark.yaml`
+- Full source: `standards/caring/benchmarks/kubernetes-rbac/benchmark.yaml`
+- Summary: Benchmark workspace definition and review criteria: CARING Kubernetes RBAC Benchmark.
+
+## Retrieval Hints
+
+Imports and anchors:
+- `standard/caring`
+- `standard/tagging`
+
+## Owned Concepts
+
+- `CARING Kubernetes RBAC Benchmark`
+
+## Related Distinctions
+
+No common distinction is anchored directly on this artifact.
--- a/infospace/agent/global-agent-brief.md
+++ b/infospace/agent/global-agent-brief.md
@@ -5,8 +5,8 @@
 This brief summarizes the current canon service surface for agents.

 - Infospace slug: `canon`
- Artifact count: 49
- Retrieval index items: 49
+- Artifact count: 54
+- Retrieval index items: 54
 - Primary confidence command: `make validate`
 - Refresh generated indexes and views with: `make index`
 - Refresh agent briefs and interface templates with: `make agent-briefs`
--- a/infospace/agent/retrieval-index.json
+++ b/infospace/agent/retrieval-index.json
@@ -43,8 +43,195 @@
    }
  ],
  "infospace": "canon",
-  "item_count": 49,
+  "item_count": 54,
  "items": [
+    {
+      "canonical_path": "standards/caring/benchmarks/kubernetes-rbac/benchmark.yaml",
+      "id": "benchmark/caring/kubernetes-rbac",
+      "imports": [
+        "standard/caring",
+        "standard/tagging"
+      ],
+      "kind": "benchmark-workspace",
+      "owned_concepts": [
+        "CARING Kubernetes RBAC Benchmark"
+      ],
+      "relationships": [
+        {
+          "target": "standard/caring",
+          "type": "conforms_to"
+        },
+        {
+          "target": "model/access-control",
+          "type": "stress_tests"
+        },
+        {
+          "target": "model/governance",
+          "type": "stress_tests"
+        },
+        {
+          "target": "model/security",
+          "type": "stress_tests"
+        },
+        {
+          "target": "model/devsecops",
+          "type": "stress_tests"
+        },
+        {
+          "target": "model/network",
+          "type": "stress_tests"
+        },
+        {
+          "target": "model/observability",
+          "type": "stress_tests"
+        },
+        {
+          "target": "standard/tagging",
+          "type": "uses"
+        }
+      ],
+      "source_path": "infospace/standards/caring/benchmarks/kubernetes-rbac/benchmark.yaml",
+      "summary": "Benchmark workspace definition and review criteria: CARING Kubernetes RBAC Benchmark.",
+      "title": "CARING Kubernetes RBAC Benchmark",
+      "warnings": []
+    },
+    {
+      "canonical_path": "standards/caring/benchmarks/kubernetes-rbac/access-descriptors.yaml",
+      "id": "benchmark/caring/kubernetes-rbac/access-descriptors",
+      "imports": [
+        "model/access-control",
+        "model/devsecops",
+        "model/security",
+        "standard/caring"
+      ],
+      "kind": "access-descriptor-set",
+      "owned_concepts": [
+        "Kubernetes RBAC CARING Access Descriptors"
+      ],
+      "relationships": [
+        {
+          "target": "benchmark/caring/kubernetes-rbac",
+          "type": "part_of"
+        },
+        {
+          "target": "standard/caring",
+          "type": "uses"
+        },
+        {
+          "target": "model/access-control",
+          "type": "uses"
+        },
+        {
+          "target": "model/security",
+          "type": "uses"
+        },
+        {
+          "target": "model/devsecops",
+          "type": "uses"
+        }
+      ],
+      "source_path": "infospace/standards/caring/benchmarks/kubernetes-rbac/access-descriptors.yaml",
+      "summary": "Structured CARING access descriptor set: Kubernetes RBAC CARING Access Descriptors.",
+      "title": "Kubernetes RBAC CARING Access Descriptors",
+      "warnings": []
+    },
+    {
+      "canonical_path": "standards/caring/benchmarks/kubernetes-rbac/caring-mapping.yaml",
+      "id": "benchmark/caring/kubernetes-rbac/caring-mapping",
+      "imports": [],
+      "kind": "caring-mapping",
+      "owned_concepts": [
+        "Kubernetes RBAC To CARING Mapping"
+      ],
+      "relationships": [
+        {
+          "target": "benchmark/caring/kubernetes-rbac",
+          "type": "part_of"
+        },
+        {
+          "target": "standard/caring",
+          "type": "maps"
+        },
+        {
+          "target": "model/access-control",
+          "type": "maps"
+        },
+        {
+          "target": "model/governance",
+          "type": "maps"
+        },
+        {
+          "target": "model/security",
+          "type": "maps"
+        }
+      ],
+      "source_path": "infospace/standards/caring/benchmarks/kubernetes-rbac/caring-mapping.yaml",
+      "summary": "Native access model to CARING mapping: Kubernetes RBAC To CARING Mapping.",
+      "title": "Kubernetes RBAC To CARING Mapping",
+      "warnings": []
+    },
+    {
+      "canonical_path": "standards/caring/benchmarks/kubernetes-rbac/findings-and-canon-pressure.yaml",
+      "id": "benchmark/caring/kubernetes-rbac/findings",
+      "imports": [],
+      "kind": "benchmark-findings",
+      "owned_concepts": [
+        "Kubernetes RBAC Benchmark Findings And Canon Pressure"
+      ],
+      "relationships": [
+        {
+          "target": "benchmark/caring/kubernetes-rbac",
+          "type": "part_of"
+        },
+        {
+          "target": "standard/caring",
+          "type": "proposes"
+        },
+        {
+          "target": "model/governance",
+          "type": "proposes"
+        },
+        {
+          "target": "model/security",
+          "type": "proposes"
+        }
+      ],
+      "source_path": "infospace/standards/caring/benchmarks/kubernetes-rbac/findings-and-canon-pressure.yaml",
+      "summary": "Benchmark findings, gaps, and canon pressure: Kubernetes RBAC Benchmark Findings And Canon Pressure.",
+      "title": "Kubernetes RBAC Benchmark Findings And Canon Pressure",
+      "warnings": []
+    },
+    {
+      "canonical_path": "standards/caring/benchmarks/kubernetes-rbac/native-concepts.yaml",
+      "id": "benchmark/caring/kubernetes-rbac/native-concepts",
+      "imports": [],
+      "kind": "native-concept-map",
+      "owned_concepts": [
+        "Kubernetes RBAC Native Concept Map"
+      ],
+      "relationships": [
+        {
+          "target": "benchmark/caring/kubernetes-rbac",
+          "type": "part_of"
+        },
+        {
+          "target": "standard/caring",
+          "type": "maps"
+        },
+        {
+          "target": "model/access-control",
+          "type": "maps"
+        },
+        {
+          "target": "model/landscape",
+          "type": "maps"
+        }
+      ],
+      "source_path": "infospace/standards/caring/benchmarks/kubernetes-rbac/native-concepts.yaml",
+      "summary": "Native source concept map for assimilation or benchmark work: Kubernetes RBAC Native Concept Map.",
+      "title": "Kubernetes RBAC Native Concept Map",
+      "warnings": []
+    },
    {
      "canonical_path": "evaluations/repo-scoping/canon-benefit-analysis.yaml",
      "id": "comparison/repo-scoping/canon-benefit-analysis",
--- a/infospace/agent/retrieval-index.md
+++ b/infospace/agent/retrieval-index.md
@@ -4,7 +4,7 @@

 Schema: `info-tech-canon.retrieval-index.v1`
 Infospace: `canon`
-Items: **49**
+Items: **54**

 ## Common Distinctions

@@ -15,6 +15,56 @@ Items: **49**

 ## Items

+### CARING Kubernetes RBAC Benchmark
+
+- ID: `benchmark/caring/kubernetes-rbac`
+- Kind: `benchmark-workspace`
+- Canonical path: `standards/caring/benchmarks/kubernetes-rbac/benchmark.yaml`
+- Source path: `infospace/standards/caring/benchmarks/kubernetes-rbac/benchmark.yaml`
+- Summary: Benchmark workspace definition and review criteria: CARING Kubernetes RBAC Benchmark.
+- Imports and anchors: `standard/caring`, `standard/tagging`
+- Owned concepts: `CARING Kubernetes RBAC Benchmark`
+
+### Kubernetes RBAC CARING Access Descriptors
+
+- ID: `benchmark/caring/kubernetes-rbac/access-descriptors`
+- Kind: `access-descriptor-set`
+- Canonical path: `standards/caring/benchmarks/kubernetes-rbac/access-descriptors.yaml`
+- Source path: `infospace/standards/caring/benchmarks/kubernetes-rbac/access-descriptors.yaml`
+- Summary: Structured CARING access descriptor set: Kubernetes RBAC CARING Access Descriptors.
+- Imports and anchors: `model/access-control`, `model/devsecops`, `model/security`, `standard/caring`
+- Owned concepts: `Kubernetes RBAC CARING Access Descriptors`
+
+### Kubernetes RBAC To CARING Mapping
+
+- ID: `benchmark/caring/kubernetes-rbac/caring-mapping`
+- Kind: `caring-mapping`
+- Canonical path: `standards/caring/benchmarks/kubernetes-rbac/caring-mapping.yaml`
+- Source path: `infospace/standards/caring/benchmarks/kubernetes-rbac/caring-mapping.yaml`
+- Summary: Native access model to CARING mapping: Kubernetes RBAC To CARING Mapping.
+- Imports and anchors: none
+- Owned concepts: `Kubernetes RBAC To CARING Mapping`
+
+### Kubernetes RBAC Benchmark Findings And Canon Pressure
+
+- ID: `benchmark/caring/kubernetes-rbac/findings`
+- Kind: `benchmark-findings`
+- Canonical path: `standards/caring/benchmarks/kubernetes-rbac/findings-and-canon-pressure.yaml`
+- Source path: `infospace/standards/caring/benchmarks/kubernetes-rbac/findings-and-canon-pressure.yaml`
+- Summary: Benchmark findings, gaps, and canon pressure: Kubernetes RBAC Benchmark Findings And Canon Pressure.
+- Imports and anchors: none
+- Owned concepts: `Kubernetes RBAC Benchmark Findings And Canon Pressure`
+
+### Kubernetes RBAC Native Concept Map
+
+- ID: `benchmark/caring/kubernetes-rbac/native-concepts`
+- Kind: `native-concept-map`
+- Canonical path: `standards/caring/benchmarks/kubernetes-rbac/native-concepts.yaml`
+- Source path: `infospace/standards/caring/benchmarks/kubernetes-rbac/native-concepts.yaml`
+- Summary: Native source concept map for assimilation or benchmark work: Kubernetes RBAC Native Concept Map.
+- Imports and anchors: none
+- Owned concepts: `Kubernetes RBAC Native Concept Map`
+
 ### Repo Scoping Canon Benefit Analysis

 - ID: `comparison/repo-scoping/canon-benefit-analysis`
--- a/infospace/agent/retrieval-index.yaml
+++ b/infospace/agent/retrieval-index.yaml
@@ -1,7 +1,124 @@
 schema: info-tech-canon.retrieval-index.v1
 infospace: canon
-item_count: 49
+item_count: 54
 items:
+- id: benchmark/caring/kubernetes-rbac
+  kind: benchmark-workspace
+  title: CARING Kubernetes RBAC Benchmark
+  canonical_path: standards/caring/benchmarks/kubernetes-rbac/benchmark.yaml
+  source_path: infospace/standards/caring/benchmarks/kubernetes-rbac/benchmark.yaml
+  summary: 'Benchmark workspace definition and review criteria: CARING Kubernetes
+    RBAC Benchmark.'
+  owned_concepts:
+  - CARING Kubernetes RBAC Benchmark
+  imports:
+  - standard/caring
+  - standard/tagging
+  relationships:
+  - type: conforms_to
+    target: standard/caring
+  - type: stress_tests
+    target: model/access-control
+  - type: stress_tests
+    target: model/governance
+  - type: stress_tests
+    target: model/security
+  - type: stress_tests
+    target: model/devsecops
+  - type: stress_tests
+    target: model/network
+  - type: stress_tests
+    target: model/observability
+  - type: uses
+    target: standard/tagging
+  warnings: []
+- id: benchmark/caring/kubernetes-rbac/access-descriptors
+  kind: access-descriptor-set
+  title: Kubernetes RBAC CARING Access Descriptors
+  canonical_path: standards/caring/benchmarks/kubernetes-rbac/access-descriptors.yaml
+  source_path: infospace/standards/caring/benchmarks/kubernetes-rbac/access-descriptors.yaml
+  summary: 'Structured CARING access descriptor set: Kubernetes RBAC CARING Access
+    Descriptors.'
+  owned_concepts:
+  - Kubernetes RBAC CARING Access Descriptors
+  imports:
+  - model/access-control
+  - model/devsecops
+  - model/security
+  - standard/caring
+  relationships:
+  - type: part_of
+    target: benchmark/caring/kubernetes-rbac
+  - type: uses
+    target: standard/caring
+  - type: uses
+    target: model/access-control
+  - type: uses
+    target: model/security
+  - type: uses
+    target: model/devsecops
+  warnings: []
+- id: benchmark/caring/kubernetes-rbac/caring-mapping
+  kind: caring-mapping
+  title: Kubernetes RBAC To CARING Mapping
+  canonical_path: standards/caring/benchmarks/kubernetes-rbac/caring-mapping.yaml
+  source_path: infospace/standards/caring/benchmarks/kubernetes-rbac/caring-mapping.yaml
+  summary: 'Native access model to CARING mapping: Kubernetes RBAC To CARING Mapping.'
+  owned_concepts:
+  - Kubernetes RBAC To CARING Mapping
+  imports: []
+  relationships:
+  - type: part_of
+    target: benchmark/caring/kubernetes-rbac
+  - type: maps
+    target: standard/caring
+  - type: maps
+    target: model/access-control
+  - type: maps
+    target: model/governance
+  - type: maps
+    target: model/security
+  warnings: []
+- id: benchmark/caring/kubernetes-rbac/findings
+  kind: benchmark-findings
+  title: Kubernetes RBAC Benchmark Findings And Canon Pressure
+  canonical_path: standards/caring/benchmarks/kubernetes-rbac/findings-and-canon-pressure.yaml
+  source_path: infospace/standards/caring/benchmarks/kubernetes-rbac/findings-and-canon-pressure.yaml
+  summary: 'Benchmark findings, gaps, and canon pressure: Kubernetes RBAC Benchmark
+    Findings And Canon Pressure.'
+  owned_concepts:
+  - Kubernetes RBAC Benchmark Findings And Canon Pressure
+  imports: []
+  relationships:
+  - type: part_of
+    target: benchmark/caring/kubernetes-rbac
+  - type: proposes
+    target: standard/caring
+  - type: proposes
+    target: model/governance
+  - type: proposes
+    target: model/security
+  warnings: []
+- id: benchmark/caring/kubernetes-rbac/native-concepts
+  kind: native-concept-map
+  title: Kubernetes RBAC Native Concept Map
+  canonical_path: standards/caring/benchmarks/kubernetes-rbac/native-concepts.yaml
+  source_path: infospace/standards/caring/benchmarks/kubernetes-rbac/native-concepts.yaml
+  summary: 'Native source concept map for assimilation or benchmark work: Kubernetes
+    RBAC Native Concept Map.'
+  owned_concepts:
+  - Kubernetes RBAC Native Concept Map
+  imports: []
+  relationships:
+  - type: part_of
+    target: benchmark/caring/kubernetes-rbac
+  - type: maps
+    target: standard/caring
+  - type: maps
+    target: model/access-control
+  - type: maps
+    target: model/landscape
+  warnings: []
 - id: comparison/repo-scoping/canon-benefit-analysis
  kind: benefit-analysis
  title: Repo Scoping Canon Benefit Analysis