APA Artifact Repository Controls Catalog

Repository controls for immutable versioned releases, explicit runtime pins, and publication change control.

ControlCatalogv0.1.0draft

Controls for publishing and serving the shared Governance Model from the Artifact Repository. Catalog content itself remains at the Gemara root; this twin covers repository posture only.

Showing 3 of 3

ungrouped

apa-artifact-immutable-releasesImmutable Versioned Model Releases

Objective

Publish Governance Model releases as immutable, versioned artifact sets so consumers can pin and audit the exact catalogs in force.

Assessment Requirements

• apa-artifact-immutable-releases-ar01

  Each published Governance Model release MUST be immutable and uniquely versioned; mutation of an existing release identifier MUST be prohibited.

  Applicability: all

Threats apa-artifact-repository-threats

• apa-artifact-unauthorized-modify
• apa-artifact-stale-or-wrong-version

apa-artifact-runtime-pinRuntime Pins an Explicit Model Release

Objective

Ensure the Governance Runtime evaluates against a configured, pinned Artifact Repository release rather than a floating or implicit latest.

Assessment Requirements

• apa-artifact-runtime-pin-ar01

  Governance Runtime configuration MUST identify an explicit Artifact Repository model release version used for evaluation.

  Applicability: all

Threats apa-artifact-repository-threats

• apa-artifact-stale-or-wrong-version
• apa-artifact-model-unavailable

apa-artifact-publish-change-controlChange Control for Model Publication

Objective

Restrict who may publish Governance Model releases and require reviewed change control before a new release is served to the runtime.

Assessment Requirements

• apa-artifact-publish-change-control-ar01

  Publication of a new Governance Model release MUST require authorised change control; unauthenticated or broad write access to the Artifact Repository MUST be denied.

  Applicability: all

Threats apa-artifact-repository-threats

• apa-artifact-unauthorized-modify