asset inventory
inventory asset-inventory.yaml
This material is a defensive specification and reference set. It is not an attack tool, a scanner, a certification, or evidence of a completed assessment. It does not automate exploitation; active or state-changing operations require a valid authorization manifest, an in-scope target, an allowed mode, verified preconditions and verified rollback.
A supporting inventory document; no dedicated schema.
The document (YAML original)
client_id: client-demo
assets:
- asset_id: demo-drive-01
kind: encrypted_working_drive
owner: ryan
custodian: bow-tie-kreative
criticality: 4
classification: client-confidential
environment: workstation
location: controlled-office
trust_boundary: operator-endpoint
internet_exposed: false
dependencies: [demo-backup]
- asset_id: demo-vps-01
kind: vps
owner: platform-team
criticality: 5
classification: client-confidential
environment: production
location: provider-region-ca
trust_boundary: client-demo-production
internet_exposed: true
dependencies: [demo-domain, demo-database, demo-backup]
As JSON
{
"client_id": "client-demo",
"assets": [
{
"asset_id": "demo-drive-01",
"kind": "encrypted_working_drive",
"owner": "ryan",
"custodian": "bow-tie-kreative",
"criticality": 4,
"classification": "client-confidential",
"environment": "workstation",
"location": "controlled-office",
"trust_boundary": "operator-endpoint",
"internet_exposed": false,
"dependencies": [
"demo-backup"
]
},
{
"asset_id": "demo-vps-01",
"kind": "vps",
"owner": "platform-team",
"criticality": 5,
"classification": "client-confidential",
"environment": "production",
"location": "provider-region-ca",
"trust_boundary": "client-demo-production",
"internet_exposed": true,
"dependencies": [
"demo-domain",
"demo-database",
"demo-backup"
]
}
]
}