Skip to content

Complete methodology subtype inventory#70

Open
juzigu40-ui wants to merge 1 commit into
CloudSecurityAlliance:mainfrom
juzigu40-ui:subtype-completeness-inventory
Open

Complete methodology subtype inventory#70
juzigu40-ui wants to merge 1 commit into
CloudSecurityAlliance:mainfrom
juzigu40-ui:subtype-completeness-inventory

Conversation

@juzigu40-ui

Copy link
Copy Markdown

Summary

Addresses the bounded methodology part of #53 and adds a validator mode for the remaining completeness gap.

Changes:

  • tag registry/methodology/gov/fedramp.json with subtype: ["scoring"]
  • add docs/reference/SUBTYPE-INVENTORY-2026-05-22.md with current methodology/reference counts
  • add --completeness-policy {off,warn,fail} to scripts/validate-subtypes.py
  • run the subtype workflow in warn-only completeness mode for now

I did not backfill reference tags in this PR. The inventory shows 214 untagged reference match_nodes, but not all are glossaries, so that should be a separate classification pass instead of a blind subtype: ["glossary"] sweep.

Verification

  • python3 scripts/validate-subtypes.py
  • python3 scripts/validate-subtypes.py --completeness-policy warn
  • python3 -m py_compile scripts/validate-subtypes.py
  • python3 -m json.tool registry/methodology/gov/fedramp.json >/dev/null
  • git diff --check

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant