generated from coulomb/repo-seed
307 lines
14 KiB
Markdown
307 lines
14 KiB
Markdown
<!-- GENERATED by info_tech_canon; do not edit by hand. -->
|
|
|
|
# Retrieval Index
|
|
|
|
Schema: `info-tech-canon.retrieval-index.v1`
|
|
Infospace: `canon`
|
|
Items: **29**
|
|
|
|
## Common Distinctions
|
|
|
|
- **Actor vs Subject vs Principal**: Use actor for the acting entity in a context, subject for the entity a policy evaluates, and principal for the authenticated identity bound to access decisions. Sources: `model/organization`, `model/access-control`, `standard/caring`
|
|
- **Organization Role vs AccessRole vs CARING role**: Organization roles describe responsibility or position; access roles describe permissions; CARING roles classify access-governance needs and analysis. Sources: `model/organization`, `model/access-control`, `standard/caring`
|
|
- **Policy vs Control vs Evidence**: Policy states intent or rule, control implements or enforces that rule, and evidence records why the claim should be trusted. Sources: `model/governance`, `model/security`, `model/observability`
|
|
- **Intent vs Scope vs Purpose**: Intent captures why an actor wants something, scope bounds what is included, and purpose captures consumer demand or use case pressure on the repo. Sources: `kernel/itc-core`, `model/governance`, `profile/small-saas`
|
|
|
|
## Items
|
|
|
|
### InfoTechCanon Core
|
|
|
|
- ID: `kernel/itc-core`
|
|
- Kind: `kernel`
|
|
- Canonical path: `kernel/InfoTechCanonCore.md`
|
|
- Source path: `seeds/InfoTechCanonCore_RC1_seed.md`
|
|
- Summary: Kernel artifact that defines canon structure or integration: InfoTechCanon Core.
|
|
- Imports and anchors: none
|
|
- Owned concepts: `InfoTechCanon Core`
|
|
|
|
### InfoTechCanon Kernel Map
|
|
|
|
- ID: `kernel/itc-kernel-map`
|
|
- Kind: `kernel`
|
|
- Canonical path: `kernel/InfoTechCanonKernelMap.md`
|
|
- Source path: `seeds/InfoTechCanonKernelMap_RC1.md`
|
|
- Summary: Kernel artifact that defines canon structure or integration: InfoTechCanon Kernel Map.
|
|
- Imports and anchors: none
|
|
- Owned concepts: `InfoTechCanon Kernel Map`
|
|
|
|
### InfoTechCanon Access Control Model
|
|
|
|
- ID: `model/access-control`
|
|
- Kind: `model`
|
|
- Canonical path: `models/access-control/InfoTechCanonAccessControlModel.md`
|
|
- Source path: `seeds/InfoTechCanonAccessControlModel_RC1_seed.md`
|
|
- Summary: Domain model used by canon profiles and standards: InfoTechCanon Access Control Model.
|
|
- Imports and anchors: `kernel/itc-core`, `model/governance`, `model/organization`
|
|
- Owned concepts: `InfoTechCanon Access Control Model`
|
|
|
|
### InfoTechCanon Data Model
|
|
|
|
- ID: `model/data`
|
|
- Kind: `model`
|
|
- Canonical path: `models/data/InfoTechCanonDataModel.md`
|
|
- Source path: `seeds/InfoTechCanonDataModel_RC1_seed.md`
|
|
- Summary: Domain model used by canon profiles and standards: InfoTechCanon Data Model.
|
|
- Imports and anchors: `kernel/itc-core`, `model/governance`
|
|
- Owned concepts: `InfoTechCanon Data Model`
|
|
|
|
### InfoTechCanon DevSecOps Model
|
|
|
|
- ID: `model/devsecops`
|
|
- Kind: `model`
|
|
- Canonical path: `models/devsecops/InfoTechCanonDevSecOpsModel.md`
|
|
- Source path: `seeds/InfoTechCanonDevSecOpsModel_RC1_seed.md`
|
|
- Summary: Domain model used by canon profiles and standards: InfoTechCanon DevSecOps Model.
|
|
- Imports and anchors: `kernel/itc-core`, `model/security`
|
|
- Owned concepts: `InfoTechCanon DevSecOps Model`
|
|
|
|
### InfoTechCanon Governance Model
|
|
|
|
- ID: `model/governance`
|
|
- Kind: `model`
|
|
- Canonical path: `models/governance/InfoTechCanonGovernanceModel.md`
|
|
- Source path: `seeds/InfoTechCanonGovernanceModel_RC1_seed.md`
|
|
- Summary: Domain model used by canon profiles and standards: InfoTechCanon Governance Model.
|
|
- Imports and anchors: `kernel/itc-core`
|
|
- Owned concepts: `InfoTechCanon Governance Model`
|
|
|
|
### InfoTechCanon Information Space Model
|
|
|
|
- ID: `model/information-space`
|
|
- Kind: `model`
|
|
- Canonical path: `models/information-space/InfoTechCanonInformationSpaceModel.md`
|
|
- Source path: `seeds/InfoTechCanonInformationSpaceModel_RC1_seed.md`
|
|
- Summary: Domain model used by canon profiles and standards: InfoTechCanon Information Space Model.
|
|
- Imports and anchors: `kernel/itc-core`
|
|
- Owned concepts: `InfoTechCanon Information Space Model`
|
|
|
|
### InfoTechCanon Landscape Model
|
|
|
|
- ID: `model/landscape`
|
|
- Kind: `model`
|
|
- Canonical path: `models/landscape/InfoTechCanonLandscapeModel.md`
|
|
- Source path: `seeds/InfoTechCanonLandscapeModel_RC1_seed.md`
|
|
- Summary: Domain model used by canon profiles and standards: InfoTechCanon Landscape Model.
|
|
- Imports and anchors: `kernel/itc-core`
|
|
- Owned concepts: `InfoTechCanon Landscape Model`
|
|
|
|
### InfoTechCanon Network Model
|
|
|
|
- ID: `model/network`
|
|
- Kind: `model`
|
|
- Canonical path: `models/network/InfoTechCanonNetworkModel.md`
|
|
- Source path: `seeds/InfoTechCanonNetworkModel_RC1_seed.md`
|
|
- Summary: Domain model used by canon profiles and standards: InfoTechCanon Network Model.
|
|
- Imports and anchors: `kernel/itc-core`, `model/security`
|
|
- Owned concepts: `InfoTechCanon Network Model`
|
|
|
|
### InfoTechCanon Observability Model
|
|
|
|
- ID: `model/observability`
|
|
- Kind: `model`
|
|
- Canonical path: `models/observability/InfoTechCanonObservabilityModel.md`
|
|
- Source path: `seeds/InfoTechCanonObservabilityModel_RC1_seed.md`
|
|
- Summary: Domain model used by canon profiles and standards: InfoTechCanon Observability Model.
|
|
- Imports and anchors: `kernel/itc-core`, `model/task`
|
|
- Owned concepts: `InfoTechCanon Observability Model`
|
|
|
|
### InfoTechCanon Organization Model
|
|
|
|
- ID: `model/organization`
|
|
- Kind: `model`
|
|
- Canonical path: `models/organization/InfoTechCanonOrganizationModel.md`
|
|
- Source path: `seeds/InfoTechCanonOrganizationModel_RC1_seed.md`
|
|
- Summary: Domain model used by canon profiles and standards: InfoTechCanon Organization Model.
|
|
- Imports and anchors: `kernel/itc-core`
|
|
- Owned concepts: `InfoTechCanon Organization Model`
|
|
|
|
### InfoTechCanon Security Model
|
|
|
|
- ID: `model/security`
|
|
- Kind: `model`
|
|
- Canonical path: `models/security/InfoTechCanonSecurityModel.md`
|
|
- Source path: `seeds/InfoTechCanonSecurityModel_RC1_seed.md`
|
|
- Summary: Domain model used by canon profiles and standards: InfoTechCanon Security Model.
|
|
- Imports and anchors: `kernel/itc-core`, `model/access-control`
|
|
- Owned concepts: `InfoTechCanon Security Model`
|
|
|
|
### InfoTechCanon Task Model
|
|
|
|
- ID: `model/task`
|
|
- Kind: `model`
|
|
- Canonical path: `models/task/InfoTechCanonTaskModel.md`
|
|
- Source path: `seeds/InfoTechCanonTaskModel_RC1_seed.md`
|
|
- Summary: Domain model used by canon profiles and standards: InfoTechCanon Task Model.
|
|
- Imports and anchors: `kernel/itc-core`
|
|
- Owned concepts: `InfoTechCanon Task Model`
|
|
|
|
### Small SaaS System Profile
|
|
|
|
- ID: `profile/small-saas`
|
|
- Kind: `profile`
|
|
- Canonical path: `profiles/small-saas/profile.yaml`
|
|
- Source path: `infospace/profiles/small-saas/profile.yaml`
|
|
- Summary: Profile that constrains canon artifacts for a practical implementation slice: Small SaaS System Profile.
|
|
- Imports and anchors: `kernel/itc-core`, `model/access-control`, `model/data`, `model/devsecops`, `model/governance`, `model/landscape`, `model/network`, `model/observability`, `model/organization`, `model/security`, `model/task`, `standard/caring`, `standard/tagging`
|
|
- Owned concepts: `Small SaaS System Profile`
|
|
|
|
### Namespace Per Tenant Control
|
|
|
|
- ID: `small-saas/control/namespace-per-tenant`
|
|
- Kind: `profile-artifact`
|
|
- Canonical path: `profiles/small-saas/artifacts/control.namespace-per-tenant.yaml`
|
|
- Source path: `profiles/small-saas/artifacts/control.namespace-per-tenant.yaml`
|
|
- Summary: Example artifact for the small-saas profile: Namespace Per Tenant Control.
|
|
- Imports and anchors: `model/security`, `standard/caring`
|
|
- Owned concepts: `Namespace Per Tenant Control`
|
|
|
|
### Subscription Ledger Dataset
|
|
|
|
- ID: `small-saas/dataset/subscription-ledger`
|
|
- Kind: `profile-artifact`
|
|
- Canonical path: `profiles/small-saas/artifacts/dataset.subscription-ledger.yaml`
|
|
- Source path: `profiles/small-saas/artifacts/dataset.subscription-ledger.yaml`
|
|
- Summary: Example artifact for the small-saas profile: Subscription Ledger Dataset.
|
|
- Imports and anchors: `model/data`
|
|
- Owned concepts: `Subscription Ledger Dataset`
|
|
|
|
### Production Deployment
|
|
|
|
- ID: `small-saas/deployment/production`
|
|
- Kind: `profile-artifact`
|
|
- Canonical path: `profiles/small-saas/artifacts/deployment.production.yaml`
|
|
- Source path: `profiles/small-saas/artifacts/deployment.production.yaml`
|
|
- Summary: Example artifact for the small-saas profile: Production Deployment.
|
|
- Imports and anchors: `model/devsecops`, `model/network`
|
|
- Owned concepts: `Production Deployment`
|
|
|
|
### Access Review 2026-05
|
|
|
|
- ID: `small-saas/evidence/access-review-2026-05`
|
|
- Kind: `profile-artifact`
|
|
- Canonical path: `profiles/small-saas/artifacts/evidence.access-review-2026-05.yaml`
|
|
- Source path: `profiles/small-saas/artifacts/evidence.access-review-2026-05.yaml`
|
|
- Summary: Example artifact for the small-saas profile: Access Review 2026-05.
|
|
- Imports and anchors: `model/observability`
|
|
- Owned concepts: `Access Review 2026-05`
|
|
|
|
### Cross-Tenant Access Attempt
|
|
|
|
- ID: `small-saas/incident/cross-tenant-access-attempt`
|
|
- Kind: `profile-artifact`
|
|
- Canonical path: `profiles/small-saas/artifacts/incident.cross-tenant-access-attempt.yaml`
|
|
- Source path: `profiles/small-saas/artifacts/incident.cross-tenant-access-attempt.yaml`
|
|
- Summary: Example artifact for the small-saas profile: Cross-Tenant Access Attempt.
|
|
- Imports and anchors: `model/security`
|
|
- Owned concepts: `Cross-Tenant Access Attempt`
|
|
|
|
### Tenant Isolation Policy
|
|
|
|
- ID: `small-saas/policy/tenant-isolation`
|
|
- Kind: `profile-artifact`
|
|
- Canonical path: `profiles/small-saas/artifacts/policy.tenant-isolation.yaml`
|
|
- Source path: `profiles/small-saas/artifacts/policy.tenant-isolation.yaml`
|
|
- Summary: Example artifact for the small-saas profile: Tenant Isolation Policy.
|
|
- Imports and anchors: `model/governance`, `small-saas/control/namespace-per-tenant`
|
|
- Owned concepts: `Tenant Isolation Policy`
|
|
|
|
### Billing Portal Service
|
|
|
|
- ID: `small-saas/service/billing-portal`
|
|
- Kind: `profile-artifact`
|
|
- Canonical path: `profiles/small-saas/artifacts/service.billing-portal.yaml`
|
|
- Source path: `profiles/small-saas/artifacts/service.billing-portal.yaml`
|
|
- Summary: Example artifact for the small-saas profile: Billing Portal Service.
|
|
- Imports and anchors: `model/landscape`
|
|
- Owned concepts: `Billing Portal Service`
|
|
|
|
### Small SaaS Billing System
|
|
|
|
- ID: `small-saas/system/billing-system`
|
|
- Kind: `profile-artifact`
|
|
- Canonical path: `profiles/small-saas/artifacts/system.billing-system.yaml`
|
|
- Source path: `profiles/small-saas/artifacts/system.billing-system.yaml`
|
|
- Summary: Example artifact for the small-saas profile: Small SaaS Billing System.
|
|
- Imports and anchors: `model/landscape`
|
|
- Owned concepts: `Small SaaS Billing System`
|
|
|
|
### Onboard Tenant
|
|
|
|
- ID: `small-saas/task/onboard-tenant`
|
|
- Kind: `profile-artifact`
|
|
- Canonical path: `profiles/small-saas/artifacts/task.onboard-tenant.yaml`
|
|
- Source path: `profiles/small-saas/artifacts/task.onboard-tenant.yaml`
|
|
- Summary: Example artifact for the small-saas profile: Onboard Tenant.
|
|
- Imports and anchors: `model/task`
|
|
- Owned concepts: `Onboard Tenant`
|
|
|
|
### Platform Team
|
|
|
|
- ID: `small-saas/team/platform`
|
|
- Kind: `profile-artifact`
|
|
- Canonical path: `profiles/small-saas/artifacts/team.platform.yaml`
|
|
- Source path: `profiles/small-saas/artifacts/team.platform.yaml`
|
|
- Summary: Example artifact for the small-saas profile: Platform Team.
|
|
- Imports and anchors: `model/organization`
|
|
- Owned concepts: `Platform Team`
|
|
|
|
### Acme Tenant
|
|
|
|
- ID: `small-saas/tenant/acme`
|
|
- Kind: `profile-artifact`
|
|
- Canonical path: `profiles/small-saas/artifacts/tenant.acme.yaml`
|
|
- Source path: `profiles/small-saas/artifacts/tenant.acme.yaml`
|
|
- Summary: Example artifact for the small-saas profile: Acme Tenant.
|
|
- Imports and anchors: `model/organization`
|
|
- Owned concepts: `Acme Tenant`
|
|
|
|
### Globex Tenant
|
|
|
|
- ID: `small-saas/tenant/globex`
|
|
- Kind: `profile-artifact`
|
|
- Canonical path: `profiles/small-saas/artifacts/tenant.globex.yaml`
|
|
- Source path: `profiles/small-saas/artifacts/tenant.globex.yaml`
|
|
- Summary: Example artifact for the small-saas profile: Globex Tenant.
|
|
- Imports and anchors: `model/organization`
|
|
- Owned concepts: `Globex Tenant`
|
|
|
|
### Ada Admin
|
|
|
|
- ID: `small-saas/user/ada-admin`
|
|
- Kind: `profile-artifact`
|
|
- Canonical path: `profiles/small-saas/artifacts/user.ada-admin.yaml`
|
|
- Source path: `profiles/small-saas/artifacts/user.ada-admin.yaml`
|
|
- Summary: Example artifact for the small-saas profile: Ada Admin.
|
|
- Imports and anchors: `model/access-control`, `model/organization`
|
|
- Owned concepts: `Ada Admin`
|
|
|
|
### InfoTechCanon CARING Access Governance Standard
|
|
|
|
- ID: `standard/caring`
|
|
- Kind: `standard`
|
|
- Canonical path: `standards/caring/InfoTechCanonCaringAccessGovernanceStandard.md`
|
|
- Source path: `seeds/InfoTechCanonCaringAccessGovernanceStandard.md`
|
|
- Summary: Cross-cutting canon standard: InfoTechCanon CARING Access Governance Standard.
|
|
- Imports and anchors: `kernel/itc-core`, `model/access-control`, `model/data`, `model/devsecops`, `model/governance`, `model/network`, `model/observability`, `model/organization`, `model/security`, `model/task`, `standard/tagging`
|
|
- Owned concepts: `CARINGAccessDescriptor`, `CARINGAnalysisFitnessTest`, `CARINGAnalysisProcedure`, `CARINGCanonicalRole`, `CARINGCapabilityProfile`, `CARINGDeclaredAccessMap`, `CARINGDerivedCapability`, `CARINGEffectiveAccessMap`, `CARINGExposureEvent`, `CARINGExposureMode`, `CARINGInducedAccess`, `CARINGOrganizationRelation`, `CARINGPlane`, `CARINGRedesignProcedure`, `CARINGRestrictionPrecedence`, `InfoTechCanon CARING Access Governance Standard`
|
|
|
|
### InfoTechCanon Tagging Standard
|
|
|
|
- ID: `standard/tagging`
|
|
- Kind: `standard`
|
|
- Canonical path: `standards/tagging/InfoTechCanonTaggingStandard.md`
|
|
- Source path: `seeds/InfoTechCanonTaggingStandard_RC1_seed.md`
|
|
- Summary: Cross-cutting canon standard: InfoTechCanon Tagging Standard.
|
|
- Imports and anchors: `kernel/itc-core`, `model/task`
|
|
- Owned concepts: `InfoTechCanon Tagging Standard`
|