181 lines
4.2 KiB
JSON
181 lines
4.2 KiB
JSON
{
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
"$id": "urn:awoooi:security-mirror-route-v1",
|
|
"title": "AWOOOI Security Supply Chain Mirror Route (v1)",
|
|
"description": "定義 AwoooP mirror-only 消費資安供應鏈契約時，各契約應進入哪些只讀目的地與 review lane。此契約不授權 runtime execution。",
|
|
"type": "object",
|
|
"required": [
|
|
"schema_version",
|
|
"status",
|
|
"date",
|
|
"mode",
|
|
"runtime_execution_authorized",
|
|
"source_indexes",
|
|
"summary",
|
|
"route_groups",
|
|
"acceptance_gates",
|
|
"forbidden_actions"
|
|
],
|
|
"properties": {
|
|
"schema_version": {
|
|
"const": "security_mirror_route_v1"
|
|
},
|
|
"status": {
|
|
"type": "string",
|
|
"enum": ["draft"]
|
|
},
|
|
"date": {
|
|
"type": "string"
|
|
},
|
|
"mode": {
|
|
"type": "string",
|
|
"enum": ["mirror_only"]
|
|
},
|
|
"runtime_execution_authorized": {
|
|
"type": "boolean",
|
|
"const": false
|
|
},
|
|
"source_indexes": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string"
|
|
},
|
|
"minItems": 1
|
|
},
|
|
"summary": {
|
|
"type": "object",
|
|
"required": [
|
|
"total_contracts",
|
|
"route_group_count",
|
|
"channel_event_policy",
|
|
"approval_queue_policy"
|
|
],
|
|
"properties": {
|
|
"total_contracts": {
|
|
"type": "integer",
|
|
"minimum": 0
|
|
},
|
|
"route_group_count": {
|
|
"type": "integer",
|
|
"minimum": 0
|
|
},
|
|
"channel_event_policy": {
|
|
"type": "string"
|
|
},
|
|
"approval_queue_policy": {
|
|
"type": "string"
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
},
|
|
"route_groups": {
|
|
"type": "array",
|
|
"minItems": 1,
|
|
"items": {
|
|
"type": "object",
|
|
"required": [
|
|
"wave_id",
|
|
"title",
|
|
"contracts",
|
|
"destinations",
|
|
"channel_policy",
|
|
"review_lane",
|
|
"allowed_processing",
|
|
"blocked_processing",
|
|
"exit_gate"
|
|
],
|
|
"properties": {
|
|
"wave_id": {
|
|
"type": "string"
|
|
},
|
|
"title": {
|
|
"type": "string"
|
|
},
|
|
"contracts": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string"
|
|
},
|
|
"minItems": 1,
|
|
"uniqueItems": true
|
|
},
|
|
"destinations": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string",
|
|
"enum": [
|
|
"operator_console",
|
|
"runtime_state",
|
|
"channel_event",
|
|
"approval_queue",
|
|
"audit_evidence"
|
|
]
|
|
},
|
|
"minItems": 1,
|
|
"uniqueItems": true
|
|
},
|
|
"channel_policy": {
|
|
"type": "string",
|
|
"enum": [
|
|
"no_channel_event",
|
|
"low_noise_status",
|
|
"approval_required_only"
|
|
]
|
|
},
|
|
"review_lane": {
|
|
"type": "string",
|
|
"enum": [
|
|
"observe",
|
|
"approval_required",
|
|
"source_control_review",
|
|
"patch_only"
|
|
]
|
|
},
|
|
"allowed_processing": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string"
|
|
},
|
|
"minItems": 1
|
|
},
|
|
"blocked_processing": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string"
|
|
},
|
|
"minItems": 1
|
|
},
|
|
"exit_gate": {
|
|
"type": "string"
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
}
|
|
},
|
|
"acceptance_gates": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"required": ["gate_id", "requirement"],
|
|
"properties": {
|
|
"gate_id": {
|
|
"type": "string"
|
|
},
|
|
"requirement": {
|
|
"type": "string"
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
}
|
|
},
|
|
"forbidden_actions": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string"
|
|
},
|
|
"minItems": 1
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
}
|