mirror of https://github.com/SHOGGOTH-SECTOR/sica-fondt.git synced 2026-08-01 08:30:20 +00:00

Consolidate 22 sibling repos into layered organism structure

Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):

- brain/        LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
                dispatch, A51 channels, and the OSINT cluster
- knowledge/    LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
                MITRE ATT&CK data
- reference/    defensive threat-reference (C3, shhbruh doc) + AdaYaml parser

License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.

Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.

https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c

2026-06-10 06:53:01 +00:00

1.7 KiB

Raw Blame History

API Reference: Role Mining for RBAC Optimization

Input Format (CSV)

user,entitlement,system
john.doe,read_files,FileServer
john.doe,write_files,FileServer
jane.smith,read_files,FileServer

Role Mining Algorithms

Bottom-Up Mining

Finds exact permission sets shared by >= N users.

Input: user-permission matrix
Output: candidate roles with exact permission sets
Parameter: min_users (default: 2)

Top-Down Mining (Jaccard Clustering)

Groups users by permission similarity.

Jaccard(A, B) = |A ∩ B| / |A ∪ B|

Threshold >= 0.8: strict similarity
Threshold >= 0.6: moderate clustering

Optimization Metrics

Metric	Description
Total Assignments	Sum of all user-permission pairs
Candidate Roles	Discovered role count
Role Coverage	Users assigned to candidate roles
Avg Permissions/User	Assignment density
Outlier Count	Users with unique permissions

SailPoint IdentityNow Role Mining API

POST https://{tenant}.api.identitynow.com/beta/role-mining-sessions
Authorization: Bearer TOKEN
{
  "scope": {"included": {"identityIds": [...]}},
  "minEntitlementPopularity": 2,
  "pruneThreshold": 50
}

SailPoint Role Mining Status

GET /beta/role-mining-sessions/{sessionId}
GET /beta/role-mining-sessions/{sessionId}/potential-roles

CyberArk Identity Role Optimization

GET /Roles/GetRoleMembers?name={role}
POST /Roles/OptimizeRoles
{"minUsers": 3, "maxRoles": 50}

NIST RBAC Model Levels

Level	Description
Core RBAC	Users, roles, permissions, sessions
Hierarchical	Role inheritance
Constrained	Separation of duty (SoD)
Symmetric	Permission-role review

1.7 KiB Raw Blame History Unescape Escape