diff --git a/audit/AA_ROLE_EVIDENCE_INVENTORY.json b/audit/AA_ROLE_EVIDENCE_INVENTORY.json new file mode 100644 index 0000000..370db4a --- /dev/null +++ b/audit/AA_ROLE_EVIDENCE_INVENTORY.json @@ -0,0 +1,71 @@ +{ + "inventoryId": "AA_ROLE_EVIDENCE_INVENTORY", + "role": "AA", + "version": "v7", + "generatedDate": "2026-07-14", + "inputSources": [ + { + "sourceId": "IS-001", + "sourceName": "AA_ROLE_SPEC", + "description": "AA 역할 정의 명세서", + "location": "role-aa/specs/aa_role_spec.yaml", + "type": "SPECIFICATION", + "version": "1.0.0" + }, + { + "sourceId": "IS-002", + "sourceName": "PERMISSION_MATRIX", + "description": "권한 매트릭스 문서", + "location": "role-aa/specs/permission_matrix.json", + "type": "MATRIX", + "version": "1.0.0" + }, + { + "sourceId": "IS-003", + "sourceName": "WORKFLOW_DEF", + "description": "워크플로우 정의", + "location": "role-aa/workflows/aa_workflow.yaml", + "type": "WORKFLOW", + "version": "1.0.0" + }, + { + "sourceId": "IS-004", + "sourceName": "API_CONTRACT", + "description": "API 계약 정의", + "location": "role-aa/contracts/aa_api_contract.yaml", + "type": "CONTRACT", + "version": "1.0.0" + } + ], + "evidenceLocations": [ + { + "evidenceId": "EV-001", + "sourceId": "IS-001", + "type": "ROLE_DEFINITION", + "verificationMethod": "스키마 검증" + }, + { + "evidenceId": "EV-002", + "sourceId": "IS-002", + "type": "PERMISSION_MATRIX", + "verificationMethod": "매트릭스 교차 검증" + }, + { + "evidenceId": "EV-003", + "sourceId": "IS-003", + "type": "WORKFLOW_LOG", + "verificationMethod": "실행 추적 검증" + }, + { + "evidenceId": "EV-004", + "sourceId": "IS-004", + "type": "API_CALL_LOG", + "verificationMethod": "요청/응답 검증" + } + ], + "auditRequirements": { + "versionControl": true, + "changeTracking": true, + "retentionPeriod": "7years" + } +}