القائمة
Devices pillar — multi-cloud asset register, DR posture, incident binding. Use before asset sync, CASB correlation, or register UI changes. Write devices.contract.test.js first.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Data pillar — classification, DLP ingest (backlog). Use when adding Purview/ Macie-style signals or app-layer DLP. Write data.contract.test.js first.
Network pillar — segmentation, exposure scanning (backlog). Use when adding topology or port-exposure features. Write network.contract.test.js first.
Resilience engine — Git-to-cloud DR, RTO/RPO measurement. Use before recovery orchestrator or DR field changes. Write resilience.contract.test.js first.
Software supply chain pillar — CASB catalog, shadow IT, SBOM gating. Use before CASB ingest or app catalog changes. Write software.contract.test.js first.
SecOps engine — Sentinel ingest, incident lifecycle, FAIR trigger, SecOps UI. Use before incident API, SLA, or CISO dashboard changes. Write secops.contract.test.js first.
Identity pillar (JIT elevation, Break Glass, RBAC). Use before changing auth, privileged access, or break-glass flows. Write identity.contract.test.js first.
| name | pillar-devices |
| description | Devices pillar — multi-cloud asset register, DR posture, incident binding. Use before asset sync, CASB correlation, or register UI changes. Write devices.contract.test.js first. |
NIST: ID.AM
Status: Substantial (G-B1)
| Area | Paths |
|---|---|
| Asset register (cloud) | services/asset-discovery-sync.js, api/asset-router.js, app/asset-register/ |
| Endpoint devices | services/device-registration.js, api/devices-router.js, sql/managed_devices.sql |
| Incident binding | services/governance-incident-ingest.js, sql/incident_asset_binding.sql |
| DR fields | scripts/setup-asset-dr-fields.js |
ict-governance-framework/tests/contracts/devices.contract.test.js
POST /api/devices/register — owner required, controlled device type taxonomy, default pending compliancePOST /api/devices/:id/compliance-check — derived posture, SecOps incident on non_compliantGET /api/devices/:id — authoritative persisted state, 404 when missingasset_id per tenant (cloud register)npm run setup:managed-devices
npm run test:contracts:devices
npm run verify:post-feature
npm run verify:assets
npm run verify:gb2
GET /api/devices/:idPOST /api/devices/:id/compliance-checkPOST /api/devices/:id/decommission