Bow Tie Kreative SECURITY Grammar

Worked examples

asset inventory

inventory asset-inventory.yaml

This material is a defensive specification and reference set. It is not an attack tool, a scanner, a certification, or evidence of a completed assessment. It does not automate exploitation; active or state-changing operations require a valid authorization manifest, an in-scope target, an allowed mode, verified preconditions and verified rollback.

A supporting inventory document; no dedicated schema.

The document (YAML original)

examples/asset-inventory.yaml — all identifiers and targets are demonstration placeholders
client_id: client-demo
assets:
  - asset_id: demo-drive-01
    kind: encrypted_working_drive
    owner: ryan
    custodian: bow-tie-kreative
    criticality: 4
    classification: client-confidential
    environment: workstation
    location: controlled-office
    trust_boundary: operator-endpoint
    internet_exposed: false
    dependencies: [demo-backup]
  - asset_id: demo-vps-01
    kind: vps
    owner: platform-team
    criticality: 5
    classification: client-confidential
    environment: production
    location: provider-region-ca
    trust_boundary: client-demo-production
    internet_exposed: true
    dependencies: [demo-domain, demo-database, demo-backup]

As JSON

Converted at build time; served at /v1/examples/asset-inventory
{
  "client_id": "client-demo",
  "assets": [
    {
      "asset_id": "demo-drive-01",
      "kind": "encrypted_working_drive",
      "owner": "ryan",
      "custodian": "bow-tie-kreative",
      "criticality": 4,
      "classification": "client-confidential",
      "environment": "workstation",
      "location": "controlled-office",
      "trust_boundary": "operator-endpoint",
      "internet_exposed": false,
      "dependencies": [
        "demo-backup"
      ]
    },
    {
      "asset_id": "demo-vps-01",
      "kind": "vps",
      "owner": "platform-team",
      "criticality": 5,
      "classification": "client-confidential",
      "environment": "production",
      "location": "provider-region-ca",
      "trust_boundary": "client-demo-production",
      "internet_exposed": true,
      "dependencies": [
        "demo-domain",
        "demo-database",
        "demo-backup"
      ]
    }
  ]
}

This example as JSON →