The program
Worked examples
7 complete, schema-conformant YAML documents showing the grammar in use: an authorization manifest, a threat model, a passive test plan, a guarded change plan, a finding, a security program and an asset inventory. All targets are demonstration placeholders — nothing here describes a real system.
This material is a defensive specification and reference set. It is not an attack tool, a scanner, a certification, or evidence of a completed assessment. It does not automate exploitation; active or state-changing operations require a valid authorization manifest, an in-scope target, an allowed mode, verified preconditions and verified rollback.
- asset-inventor asset inventory Supporting inventory document inventory
- AUTH-DEMO-2026 client authorization Validates against the authorization schema authorization
- FIND-DEMO-001 finding example Validates against the finding schema finding
- AUTH-DEMO-2026 passive test plan Validates against the test-plan schema test-plan
- PROGRAM-DEMO-W security program Validates against the security-program schema security-program
- TM-DEMO-WEB-00 threat model Validates against the threat-model schema threat-model
- AUTH-DEMO-2026 vps change plan Validates against the change-plan schema change-plan
Validate your own document
POST {"schema": "finding", "document": {…}} to /v1/validate and the document is checked against the named schema — required fields, enumerations, ranges and formats.