71 lines
1.7 KiB
JSON
71 lines
1.7 KiB
JSON
{
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
"$id": "urn:awoooi:security-rollout-policy-v1",
|
|
"title": "AWOOOI 低摩擦資安 Rollout Policy (v1)",
|
|
"description": "定義 Security Supply Chain 初期如何以 observe / warn / approve_required / block_candidate 分階段收斂，避免一開始把資安限制拉太高。",
|
|
"type": "object",
|
|
"required": [
|
|
"schema_version",
|
|
"status",
|
|
"default_mode",
|
|
"enforcement_level",
|
|
"policy_items"
|
|
],
|
|
"properties": {
|
|
"schema_version": {
|
|
"const": "security_rollout_policy_v1"
|
|
},
|
|
"status": {
|
|
"type": "string",
|
|
"enum": ["draft"]
|
|
},
|
|
"default_mode": {
|
|
"type": "string",
|
|
"enum": ["observe"]
|
|
},
|
|
"enforcement_level": {
|
|
"type": "string",
|
|
"enum": ["mirror_only", "read_only_policy", "approval_gate", "enforced"]
|
|
},
|
|
"policy_items": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"required": [
|
|
"condition",
|
|
"mode",
|
|
"allowed",
|
|
"forbidden",
|
|
"reason"
|
|
],
|
|
"properties": {
|
|
"condition": {
|
|
"type": "string"
|
|
},
|
|
"mode": {
|
|
"type": "string",
|
|
"enum": ["observe", "warn", "approve_required", "block_candidate"]
|
|
},
|
|
"allowed": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string"
|
|
}
|
|
},
|
|
"forbidden": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string"
|
|
}
|
|
},
|
|
"reason": {
|
|
"type": "string"
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
}
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
}
|