RFC-002: Normalized Policy Schema (NPS)

RFC-002: Normalized Policy Schema (NPS)

PRIVATE AND PROPRIETARY — NOT A PUBLIC RFC. Owned by Kanjani AI Research & Causum. See NOTICE.md.

1. Purpose

Defines a platform-agnostic representation of policy intent.

2. Schema Definition

| {

“resource”: “string”,

“conditions”: [

{

  "field": "string",

  "operator": "string",

  "value": "any"

}

],

“context”: {

"cloud": "string",

"region": "optional"

},

“severity”: “string”

}

3. Requirements

• The NPS MUST abstract away:

  • API names
  • vendor-specific syntax

• The NPS MUST preserve:

  • logical intent
  • condition structure

4. Example

| {

“resource”: “S3Bucket”,

“conditions”: [

{

  "field": "publicAccess",

  "operator": "equals",

  "value": true

}

],

“severity”: “high”

}