mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
2.2 KiB
2.2 KiB
Device Posture Assessment - Standards & References
NIST SP 800-207: Zero Trust Architecture
- Section 2, Tenet 5: "The enterprise monitors and measures the integrity and security posture of all owned and associated assets"
- Section 3.3: Agent/Gateway Model includes device health as access input
- URL: https://csrc.nist.gov/publications/detail/sp/800-207/final
CISA Zero Trust Maturity Model v2.0 - Device Pillar
- Traditional: Limited visibility into device health
- Initial: Compliance enforcement via MDM
- Advanced: Continuous monitoring with automated remediation
- Optimal: Real-time posture integrated into every access decision
- URL: https://www.cisa.gov/zero-trust-maturity-model
NIST SP 800-124r2: Guidelines for Managing Mobile Device Security
- Section 3.2: Device compliance checking requirements
- Section 4.1: MDM security capabilities for posture enforcement
- URL: https://csrc.nist.gov/publications/detail/sp/800-124/rev-2/final
CrowdStrike ZTA Documentation
- ZTA Overview: https://www.crowdstrike.com/products/zero-trust-protection/
- ZTA API: https://falcon.crowdstrike.com/documentation/156/zero-trust-assessment-apis
- ZTA Scoring Methodology: OS signals + sensor configuration signals
Microsoft Intune Compliance
- Compliance Policies: https://learn.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started
- Conditional Access Integration: https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-grant
- Device Health Attestation: https://learn.microsoft.com/en-us/windows/security/operating-system-security/system-security/protect-high-value-assets-by-controlling-the-health-of-windows-10-based-devices
Jamf Pro Compliance
- Smart Groups: https://learn.jamf.com/en-US/bundle/jamf-pro-documentation-current/page/Smart_Groups.html
- Compliance Reporter: https://learn.jamf.com/en-US/bundle/jamf-compliance-editor-documentation/page/Jamf_Compliance_Editor.html
HIPAA Security Rule (45 CFR 164.312)
- (a)(1): Access control - device posture as access control mechanism
- (d): Device and media controls - encryption and integrity requirements