141 lines
3.5 KiB
JSON
141 lines
3.5 KiB
JSON
{
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
"$id": "urn:awoooi:security-rollout-policy-v1",
|
|
"title": "AWOOOI 低摩擦資安 Rollout Policy (v1)",
|
|
"description": "定義 Security Supply Chain 初期如何以 observe / warn / approve_required / block_candidate 分階段收斂，避免一開始把資安限制拉太高。",
|
|
"type": "object",
|
|
"required": [
|
|
"schema_version",
|
|
"status",
|
|
"default_mode",
|
|
"enforcement_level",
|
|
"non_blocking_escalation_lane_count",
|
|
"non_blocking_escalation_lanes",
|
|
"allowed_awooop_outputs",
|
|
"policy_items"
|
|
],
|
|
"properties": {
|
|
"schema_version": {
|
|
"const": "security_rollout_policy_v1"
|
|
},
|
|
"status": {
|
|
"type": "string",
|
|
"enum": ["draft"]
|
|
},
|
|
"default_mode": {
|
|
"type": "string",
|
|
"enum": ["observe"]
|
|
},
|
|
"enforcement_level": {
|
|
"type": "string",
|
|
"enum": ["mirror_only", "read_only_policy", "approval_gate", "enforced"]
|
|
},
|
|
"non_blocking_escalation_lane_count": {
|
|
"type": "integer",
|
|
"minimum": 0
|
|
},
|
|
"non_blocking_escalation_lanes": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"required": [
|
|
"lane_id",
|
|
"display_order",
|
|
"trigger",
|
|
"initial_mode",
|
|
"allowed_action",
|
|
"forbidden_escalation",
|
|
"owner_review_required_before_blocking",
|
|
"runtime_blocking_allowed",
|
|
"awooop_display_mode",
|
|
"not_authorization"
|
|
],
|
|
"properties": {
|
|
"lane_id": {
|
|
"type": "string"
|
|
},
|
|
"display_order": {
|
|
"type": "integer",
|
|
"minimum": 1
|
|
},
|
|
"trigger": {
|
|
"type": "string"
|
|
},
|
|
"initial_mode": {
|
|
"type": "string",
|
|
"enum": ["observe", "warn"]
|
|
},
|
|
"allowed_action": {
|
|
"type": "string"
|
|
},
|
|
"forbidden_escalation": {
|
|
"type": "string"
|
|
},
|
|
"owner_review_required_before_blocking": {
|
|
"type": "boolean",
|
|
"const": true
|
|
},
|
|
"runtime_blocking_allowed": {
|
|
"type": "boolean",
|
|
"const": false
|
|
},
|
|
"awooop_display_mode": {
|
|
"type": "string",
|
|
"enum": ["display_low_friction_non_blocking_lane_only"]
|
|
},
|
|
"not_authorization": {
|
|
"type": "boolean",
|
|
"const": true
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
}
|
|
},
|
|
"allowed_awooop_outputs": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string"
|
|
}
|
|
},
|
|
"policy_items": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"required": [
|
|
"condition",
|
|
"mode",
|
|
"allowed",
|
|
"forbidden",
|
|
"reason"
|
|
],
|
|
"properties": {
|
|
"condition": {
|
|
"type": "string"
|
|
},
|
|
"mode": {
|
|
"type": "string",
|
|
"enum": ["observe", "warn", "approve_required", "block_candidate"]
|
|
},
|
|
"allowed": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string"
|
|
}
|
|
},
|
|
"forbidden": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string"
|
|
}
|
|
},
|
|
"reason": {
|
|
"type": "string"
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
}
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
}
|