feat(detection-core): validate closed family declarations

This commit is contained in:
Marius Ciepluch
2026-10-31 14:27:18 +01:00
parent 93aade237e
commit 93404c5e1e
3 changed files with 850 additions and 1 deletions
+1 -1
View File
@@ -73,7 +73,7 @@
- _Requirements: 1.1, 1.2, 1.3, 2.1, 2.2, 2.3, 2.4, 2.5, 10.1_
- [ ] 3. Add vulnerability-family contracts and unlike reference families
- [ ] 3.1 Validate a closed vulnerability-family declaration
- [x] 3.1 Validate a closed vulnerability-family declaration
- Require family/schema versions, ecosystems, security-object fields, roles, decisions, outcome rules, completeness conditions, residual questions, and indeterminate reasons.
- Enforce typed family fields and exact ecosystem/schema scope.
- Declare whether each role accepts product evidence or requires reviewed excluded-dependency facts.