- Created draft documentation for enabling reachability, CLI authentication, EntryTrace heuristics, Go stripped binaries, Java and Python lockfiles, Rust fingerprint enrichment, SAST integration, Windows/macOS analyzer coverage, scanner engine surface, multi-tenancy operations, RLS and data isolation, ABAC overlays, VEX trust model, VEX ops runbook, VEX mapping, scopes and roles, tenancy overview, VEX signatures, contract testing, VEX consensus algorithm, VEX consensus API, VEX consensus console, VEX consensus overview, and VEX issuer directory. - Each document includes a status placeholder, purpose, and open TODOs for future updates.
463 B
463 B
ABAC Overlays — Draft Skeleton (2025-12-05 UTC)
Status: draft placeholder. Inputs pending: finalized scope grammar and example policies.
Purpose
- Show how to layer ABAC on top of role/scope model.
Examples (to fill)
- Attribute-based allow/deny overlays.
- Tenant/role-specific examples with placeholders.
Testing
- How to validate overlays with policy simulator.
Open TODOs
- Add real policy snippets once DVDO0110 monitoring plan arrives.