info-tech-canon/infospace/agent/retrieval-index.md

Retrieval Index

Schema: info-tech-canon.retrieval-index.v1 Infospace: canon Items: 29

Common Distinctions

• Actor vs Subject vs Principal: Use actor for the acting entity in a context, subject for the entity a policy evaluates, and principal for the authenticated identity bound to access decisions. Sources: model/organization, model/access-control, standard/caring
• Organization Role vs AccessRole vs CARING role: Organization roles describe responsibility or position; access roles describe permissions; CARING roles classify access-governance needs and analysis. Sources: model/organization, model/access-control, standard/caring
• Policy vs Control vs Evidence: Policy states intent or rule, control implements or enforces that rule, and evidence records why the claim should be trusted. Sources: model/governance, model/security, model/observability
• Intent vs Scope vs Purpose: Intent captures why an actor wants something, scope bounds what is included, and purpose captures consumer demand or use case pressure on the repo. Sources: kernel/itc-core, model/governance, profile/small-saas

Items

InfoTechCanon Core

• ID: kernel/itc-core
• Kind: kernel
• Canonical path: kernel/InfoTechCanonCore.md
• Source path: seeds/InfoTechCanonCore_RC1_seed.md
• Summary: Kernel artifact that defines canon structure or integration: InfoTechCanon Core.
• Imports and anchors: none
• Owned concepts: InfoTechCanon Core

InfoTechCanon Kernel Map

• ID: kernel/itc-kernel-map
• Kind: kernel
• Canonical path: kernel/InfoTechCanonKernelMap.md
• Source path: seeds/InfoTechCanonKernelMap_RC1.md
• Summary: Kernel artifact that defines canon structure or integration: InfoTechCanon Kernel Map.
• Imports and anchors: none
• Owned concepts: InfoTechCanon Kernel Map

InfoTechCanon Access Control Model

• ID: model/access-control
• Kind: model
• Canonical path: models/access-control/InfoTechCanonAccessControlModel.md
• Source path: seeds/InfoTechCanonAccessControlModel_RC1_seed.md
• Summary: Domain model used by canon profiles and standards: InfoTechCanon Access Control Model.
• Imports and anchors: kernel/itc-core, model/governance, model/organization
• Owned concepts: InfoTechCanon Access Control Model

InfoTechCanon Data Model

• ID: model/data
• Kind: model
• Canonical path: models/data/InfoTechCanonDataModel.md
• Source path: seeds/InfoTechCanonDataModel_RC1_seed.md
• Summary: Domain model used by canon profiles and standards: InfoTechCanon Data Model.
• Imports and anchors: kernel/itc-core, model/governance
• Owned concepts: InfoTechCanon Data Model

InfoTechCanon DevSecOps Model

• ID: model/devsecops
• Kind: model
• Canonical path: models/devsecops/InfoTechCanonDevSecOpsModel.md
• Source path: seeds/InfoTechCanonDevSecOpsModel_RC1_seed.md
• Summary: Domain model used by canon profiles and standards: InfoTechCanon DevSecOps Model.
• Imports and anchors: kernel/itc-core, model/security
• Owned concepts: InfoTechCanon DevSecOps Model

InfoTechCanon Governance Model

• ID: model/governance
• Kind: model
• Canonical path: models/governance/InfoTechCanonGovernanceModel.md
• Source path: seeds/InfoTechCanonGovernanceModel_RC1_seed.md
• Summary: Domain model used by canon profiles and standards: InfoTechCanon Governance Model.
• Imports and anchors: kernel/itc-core
• Owned concepts: InfoTechCanon Governance Model

InfoTechCanon Information Space Model

• ID: model/information-space
• Kind: model
• Canonical path: models/information-space/InfoTechCanonInformationSpaceModel.md
• Source path: seeds/InfoTechCanonInformationSpaceModel_RC1_seed.md
• Summary: Domain model used by canon profiles and standards: InfoTechCanon Information Space Model.
• Imports and anchors: kernel/itc-core
• Owned concepts: InfoTechCanon Information Space Model

InfoTechCanon Landscape Model

• ID: model/landscape
• Kind: model
• Canonical path: models/landscape/InfoTechCanonLandscapeModel.md
• Source path: seeds/InfoTechCanonLandscapeModel_RC1_seed.md
• Summary: Domain model used by canon profiles and standards: InfoTechCanon Landscape Model.
• Imports and anchors: kernel/itc-core
• Owned concepts: InfoTechCanon Landscape Model

InfoTechCanon Network Model

• ID: model/network
• Kind: model
• Canonical path: models/network/InfoTechCanonNetworkModel.md
• Source path: seeds/InfoTechCanonNetworkModel_RC1_seed.md
• Summary: Domain model used by canon profiles and standards: InfoTechCanon Network Model.
• Imports and anchors: kernel/itc-core, model/security
• Owned concepts: InfoTechCanon Network Model

InfoTechCanon Observability Model

• ID: model/observability
• Kind: model
• Canonical path: models/observability/InfoTechCanonObservabilityModel.md
• Source path: seeds/InfoTechCanonObservabilityModel_RC1_seed.md
• Summary: Domain model used by canon profiles and standards: InfoTechCanon Observability Model.
• Imports and anchors: kernel/itc-core, model/task
• Owned concepts: InfoTechCanon Observability Model

InfoTechCanon Organization Model

• ID: model/organization
• Kind: model
• Canonical path: models/organization/InfoTechCanonOrganizationModel.md
• Source path: seeds/InfoTechCanonOrganizationModel_RC1_seed.md
• Summary: Domain model used by canon profiles and standards: InfoTechCanon Organization Model.
• Imports and anchors: kernel/itc-core
• Owned concepts: InfoTechCanon Organization Model

InfoTechCanon Security Model

• ID: model/security
• Kind: model
• Canonical path: models/security/InfoTechCanonSecurityModel.md
• Source path: seeds/InfoTechCanonSecurityModel_RC1_seed.md
• Summary: Domain model used by canon profiles and standards: InfoTechCanon Security Model.
• Imports and anchors: kernel/itc-core, model/access-control
• Owned concepts: InfoTechCanon Security Model

InfoTechCanon Task Model

• ID: model/task
• Kind: model
• Canonical path: models/task/InfoTechCanonTaskModel.md
• Source path: seeds/InfoTechCanonTaskModel_RC1_seed.md
• Summary: Domain model used by canon profiles and standards: InfoTechCanon Task Model.
• Imports and anchors: kernel/itc-core
• Owned concepts: InfoTechCanon Task Model

Small SaaS System Profile

• ID: profile/small-saas
• Kind: profile
• Canonical path: profiles/small-saas/profile.yaml
• Source path: infospace/profiles/small-saas/profile.yaml
• Summary: Profile that constrains canon artifacts for a practical implementation slice: Small SaaS System Profile.
• Imports and anchors: kernel/itc-core, model/access-control, model/data, model/devsecops, model/governance, model/landscape, model/network, model/observability, model/organization, model/security, model/task, standard/caring, standard/tagging
• Owned concepts: Small SaaS System Profile

Namespace Per Tenant Control

• ID: small-saas/control/namespace-per-tenant
• Kind: profile-artifact
• Canonical path: profiles/small-saas/artifacts/control.namespace-per-tenant.yaml
• Source path: profiles/small-saas/artifacts/control.namespace-per-tenant.yaml
• Summary: Example artifact for the small-saas profile: Namespace Per Tenant Control.
• Imports and anchors: model/security, standard/caring
• Owned concepts: Namespace Per Tenant Control

Subscription Ledger Dataset

• ID: small-saas/dataset/subscription-ledger
• Kind: profile-artifact
• Canonical path: profiles/small-saas/artifacts/dataset.subscription-ledger.yaml
• Source path: profiles/small-saas/artifacts/dataset.subscription-ledger.yaml
• Summary: Example artifact for the small-saas profile: Subscription Ledger Dataset.
• Imports and anchors: model/data
• Owned concepts: Subscription Ledger Dataset

Production Deployment

• ID: small-saas/deployment/production
• Kind: profile-artifact
• Canonical path: profiles/small-saas/artifacts/deployment.production.yaml
• Source path: profiles/small-saas/artifacts/deployment.production.yaml
• Summary: Example artifact for the small-saas profile: Production Deployment.
• Imports and anchors: model/devsecops, model/network
• Owned concepts: Production Deployment

Access Review 2026-05

• ID: small-saas/evidence/access-review-2026-05
• Kind: profile-artifact
• Canonical path: profiles/small-saas/artifacts/evidence.access-review-2026-05.yaml
• Source path: profiles/small-saas/artifacts/evidence.access-review-2026-05.yaml
• Summary: Example artifact for the small-saas profile: Access Review 2026-05.
• Imports and anchors: model/observability
• Owned concepts: Access Review 2026-05

Cross-Tenant Access Attempt

• ID: small-saas/incident/cross-tenant-access-attempt
• Kind: profile-artifact
• Canonical path: profiles/small-saas/artifacts/incident.cross-tenant-access-attempt.yaml
• Source path: profiles/small-saas/artifacts/incident.cross-tenant-access-attempt.yaml
• Summary: Example artifact for the small-saas profile: Cross-Tenant Access Attempt.
• Imports and anchors: model/security
• Owned concepts: Cross-Tenant Access Attempt

Tenant Isolation Policy

• ID: small-saas/policy/tenant-isolation
• Kind: profile-artifact
• Canonical path: profiles/small-saas/artifacts/policy.tenant-isolation.yaml
• Source path: profiles/small-saas/artifacts/policy.tenant-isolation.yaml
• Summary: Example artifact for the small-saas profile: Tenant Isolation Policy.
• Imports and anchors: model/governance, small-saas/control/namespace-per-tenant
• Owned concepts: Tenant Isolation Policy

Billing Portal Service

• ID: small-saas/service/billing-portal
• Kind: profile-artifact
• Canonical path: profiles/small-saas/artifacts/service.billing-portal.yaml
• Source path: profiles/small-saas/artifacts/service.billing-portal.yaml
• Summary: Example artifact for the small-saas profile: Billing Portal Service.
• Imports and anchors: model/landscape
• Owned concepts: Billing Portal Service

Small SaaS Billing System

• ID: small-saas/system/billing-system
• Kind: profile-artifact
• Canonical path: profiles/small-saas/artifacts/system.billing-system.yaml
• Source path: profiles/small-saas/artifacts/system.billing-system.yaml
• Summary: Example artifact for the small-saas profile: Small SaaS Billing System.
• Imports and anchors: model/landscape
• Owned concepts: Small SaaS Billing System

Onboard Tenant

• ID: small-saas/task/onboard-tenant
• Kind: profile-artifact
• Canonical path: profiles/small-saas/artifacts/task.onboard-tenant.yaml
• Source path: profiles/small-saas/artifacts/task.onboard-tenant.yaml
• Summary: Example artifact for the small-saas profile: Onboard Tenant.
• Imports and anchors: model/task
• Owned concepts: Onboard Tenant

Platform Team

• ID: small-saas/team/platform
• Kind: profile-artifact
• Canonical path: profiles/small-saas/artifacts/team.platform.yaml
• Source path: profiles/small-saas/artifacts/team.platform.yaml
• Summary: Example artifact for the small-saas profile: Platform Team.
• Imports and anchors: model/organization
• Owned concepts: Platform Team

Acme Tenant

• ID: small-saas/tenant/acme
• Kind: profile-artifact
• Canonical path: profiles/small-saas/artifacts/tenant.acme.yaml
• Source path: profiles/small-saas/artifacts/tenant.acme.yaml
• Summary: Example artifact for the small-saas profile: Acme Tenant.
• Imports and anchors: model/organization
• Owned concepts: Acme Tenant

Globex Tenant

• ID: small-saas/tenant/globex
• Kind: profile-artifact
• Canonical path: profiles/small-saas/artifacts/tenant.globex.yaml
• Source path: profiles/small-saas/artifacts/tenant.globex.yaml
• Summary: Example artifact for the small-saas profile: Globex Tenant.
• Imports and anchors: model/organization
• Owned concepts: Globex Tenant

Ada Admin

• ID: small-saas/user/ada-admin
• Kind: profile-artifact
• Canonical path: profiles/small-saas/artifacts/user.ada-admin.yaml
• Source path: profiles/small-saas/artifacts/user.ada-admin.yaml
• Summary: Example artifact for the small-saas profile: Ada Admin.
• Imports and anchors: model/access-control, model/organization
• Owned concepts: Ada Admin

InfoTechCanon CARING Access Governance Standard

• ID: standard/caring
• Kind: standard
• Canonical path: standards/caring/InfoTechCanonCaringAccessGovernanceStandard.md
• Source path: seeds/InfoTechCanonCaringAccessGovernanceStandard.md
• Summary: Cross-cutting canon standard: InfoTechCanon CARING Access Governance Standard.
• Imports and anchors: kernel/itc-core, model/access-control, model/data, model/devsecops, model/governance, model/network, model/observability, model/organization, model/security, model/task, standard/tagging
• Owned concepts: CARINGAccessDescriptor, CARINGAnalysisFitnessTest, CARINGAnalysisProcedure, CARINGCanonicalRole, CARINGCapabilityProfile, CARINGDeclaredAccessMap, CARINGDerivedCapability, CARINGEffectiveAccessMap, CARINGExposureEvent, CARINGExposureMode, CARINGInducedAccess, CARINGOrganizationRelation, CARINGPlane, CARINGRedesignProcedure, CARINGRestrictionPrecedence, InfoTechCanon CARING Access Governance Standard

InfoTechCanon Tagging Standard

• ID: standard/tagging
• Kind: standard
• Canonical path: standards/tagging/InfoTechCanonTaggingStandard.md
• Source path: seeds/InfoTechCanonTaggingStandard_RC1_seed.md
• Summary: Cross-cutting canon standard: InfoTechCanon Tagging Standard.
• Imports and anchors: kernel/itc-core, model/task
• Owned concepts: InfoTechCanon Tagging Standard