Standards
20 security standards — normative requirements, each addressable by URI.
Legacy / CI 20
- Hypermedia Security: ADBOM Specificationv1.0.0 · JSONArbitrary Risk Bill of Materials - Cryptographic attestation for arbitrary data blobs
- Hypermedia Security: Analysis Provenance Specificationv1.0.0 · attestation · JSONThe analysis-provenance attestation: the authentication set for an AI-produced finding. Signed by the finding's author, created with the ana…
- Hypermedia Security: Artifact Entry Specificationv1.0.0 · JSONThe L0 artifact entry: the hash-only record of one piece of evidence (an original file, stored exactly as received and never changed) or one…
- Hypermedia Security: Build Provenance Requirementsv1.0 · attestation · JSONSecurity requirements for establishing verifiable provenance of container image builds, ensuring traceability from source code to deployed a…
- Hypermedia Security: Case Catalog Integrity Specificationv1.0.0 · attestation · JSONThe catalog-integrity attestation: one per seal, the signed statement that the catalog version produced by that seal is complete (every arti…
- Hypermedia Security: Case Provenance BOM Specificationv1.0.0 · JSONThe L1 Case Provenance BOM: the signed, versioned catalog of everything in a case — the spine every other object hangs off. One document per…
- Hypermedia Security: Catalog Approval Requirementsv1.0 · attestation · JSONHuman-in-the-loop approval requirements for catalog deployment to secured environments
- Hypermedia Security: Catalog Integrity Requirementsv1.0 · attestation · JSONAutomated validation requirements for catalog structure and integrity
- Hypermedia Security: Container Vulnerability Scan Requirementsv1.0 · attestation · JSONSecurity requirements for container image vulnerability scanning prior to deployment
- Hypermedia Security: Custody Chain Specificationv1.0.0 · attestation · JSONThe custody-chain attestation: the case's history log. One event per action taken on a piece of evidence, hash-linked from genesis, strictly…
- Hypermedia Security: Evidence Record Specificationv1.0.0 · JSONThe RFC 4998 Evidence Record (ERS) as used by CyberBench: the long-term integrity layer of the case record. One Evidence Record is built at…
- Hypermedia Security: Finding Approval Specificationv1.0.0 · attestation · JSONThe finding-approval attestation: the checker side of maker-checker. The author signs the finding and its analysis-provenance (the maker sid…
- Hypermedia Security: Finding BOM Specificationv1.0.0 · JSONThe L2 Finding BOM: one per promoted finding, signed by its author, born at promotion. It turns a disposable transient analysis into a durab…
- Hypermedia Security: Method Validation Specificationv1.0.0 · attestation · JSONThe method-validation attestation: the reliability lever. ISO/IEC 27041 §7.1 states the threat exactly — digital evidence can be challenged…
- Hypermedia Security: Publication BOM Specificationv1.0.0 · JSONThe L3 Publication BOM: the signed disclosure — the externally-facing artifact of record. It binds the rendered report to exactly the findin…
- Hypermedia Security: Publish Approval Requirementsv1.0 · JSONRequirements for attestations that approve ADBOMs for publication or delivery to stakeholders
- Hypermedia Security: Publish Approval Specificationv1.0.0 · attestation · JSONThe publish-approval attestation: maker-checker at the release boundary. The report author signs the Publication (the maker side); here an a…
- Hypermedia Security: Static Analysis Requirementsv1.0 · attestation · JSONSecurity requirements for static application security testing (SAST) of containerized applications prior to production deployment.
- Hypermedia Security: Timestamp Token Specificationv1.0.0 · JSONThe RFC 3161 timestamp token as used by CyberBench: the primary independent-time anchor of the case record. One token is obtained from a rea…
- Hypermedia Security: Transparency Receipt Specificationv1.0.0 · JSONThe transparency receipt as used by CyberBench: an OPTIONAL, cross-org-only referenced artifact. The sovereign default ships NO transparency…