菜单
Identity pillar (JIT elevation, Break Glass, RBAC). Use before changing auth, privileged access, or break-glass flows. Write identity.contract.test.js first.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Data pillar — classification, DLP ingest (backlog). Use when adding Purview/ Macie-style signals or app-layer DLP. Write data.contract.test.js first.
Network pillar — segmentation, exposure scanning (backlog). Use when adding topology or port-exposure features. Write network.contract.test.js first.
Resilience engine — Git-to-cloud DR, RTO/RPO measurement. Use before recovery orchestrator or DR field changes. Write resilience.contract.test.js first.
Software supply chain pillar — CASB catalog, shadow IT, SBOM gating. Use before CASB ingest or app catalog changes. Write software.contract.test.js first.
SecOps engine — Sentinel ingest, incident lifecycle, FAIR trigger, SecOps UI. Use before incident API, SLA, or CISO dashboard changes. Write secops.contract.test.js first.
Devices pillar — multi-cloud asset register, DR posture, incident binding. Use before asset sync, CASB correlation, or register UI changes. Write devices.contract.test.js first.
| name | pillar-identity |
| description | Identity pillar (JIT elevation, Break Glass, RBAC). Use before changing auth, privileged access, or break-glass flows. Write identity.contract.test.js first. |
NIST: PR.AA, GV.RR
Status: Delivered (June 2026) — contract maintenance and Phase 3 validation
| Area | Paths |
|---|---|
| JIT elevation | services/jit-elevation.js, api/jit-router.js, app/jit-elevation/ |
| Break Glass | api/break-glass-router.js, app/break-glass/, services/break-glass-* |
| Auth / RBAC | middleware/auth.js, middleware/auth-jit-enforcer.js |
ict-governance-framework/tests/contracts/identity.contract.test.js
JIT_ENFORCEMENT_ENABLED=truenpm run verify:jit
npm run verify:break-glass
npm run verify:analytics