{
  "$schema": "https://samsite.unified-systems.com/.well-known/ksi-signal.schema.json",
  "signal_version": "1.0.0",
  "signal_id": "515432b9-d88c-4225-883d-10823e0f30c7",
  "emitted_at": "2026-05-19T21:08:44Z",
  "emitter": "deploy",
  "csp": "aws",
  "system_id": "urn:samaydlette:website-prod",
  "provenance": {
    "builder": {
      "id": "https://github.com/notgeorge/samsite/.github/workflows/Deploy Website with OPA Compliance",
      "run_id": "26125286423",
      "version": "github-actions"
    },
    "source": {
      "repository": "https://github.com/notgeorge/samsite",
      "commit": "9df47f4d117dde2b9b63b840ba0856a735b1673e",
      "ref": "refs/heads/main"
    },
    "attestation": {
      "format": "sigstore-bundle",
      "url": "https://samsite.unified-systems.com/.well-known/ksi-signal.bundle",
      "verification": {
        "tool": "cosign",
        "certificate_identity_regexp": "https://github.com/notgeorge/samsite/.github/workflows/.+",
        "certificate_oidc_issuer": "https://token.actions.githubusercontent.com"
      }
    }
  },
  "components": [
    {
      "component_id": "aws::tls_certificate::samsite",
      "type": "tls_certificate",
      "attributes": {
        "tf_address": "aws_acm_certificate.samsite[0]",
        "tf_type": "aws_acm_certificate",
        "tf_name": "samsite",
        "id": "arn:aws:acm:us-east-1:180731181784:certificate/be22d59b-daa4-4c55-b7d2-ad1a49286999",
        "domain_name": "samsite.unified-systems.com",
        "function": "Public TLS certificate for the CDN",
        "diagram_label": "ACM TLS certificate",
        "public": false,
        "baseline_configuration": "AWS ACM-managed; auto-renewing; FIPS-validated cipher suites via CloudFront",
        "iiw_asset_type": "TLS Certificate (ACM)"
      },
      "native_id": "arn:aws:acm:us-east-1:180731181784:certificate/be22d59b-daa4-4c55-b7d2-ad1a49286999",
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": []
    },
    {
      "component_id": "aws::cdn_distribution::website",
      "type": "cdn_distribution",
      "attributes": {
        "tf_address": "aws_cloudfront_distribution.website",
        "tf_type": "aws_cloudfront_distribution",
        "tf_name": "website",
        "id": "E2WR2ZC8FG6NG9",
        "domain_name": "ddqsj3lyxiv8s.cloudfront.net",
        "function": "Public content delivery (TLS 1.2+, OAC to origin)",
        "diagram_label": "CloudFront distribution",
        "public": true,
        "baseline_configuration": "AWS CloudFront default + custom security headers policy",
        "iiw_asset_type": "Content Delivery Network (CloudFront distribution)"
      },
      "native_id": "arn:aws:cloudfront::180731181784:distribution/E2WR2ZC8FG6NG9",
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "inbound",
          "counterparty": "public-internet",
          "channel": "tls-1.2",
          "data_class": "public-content"
        },
        {
          "direction": "outbound",
          "counterparty": "public-internet",
          "channel": "tls-1.2",
          "data_class": "public-content"
        },
        {
          "direction": "inbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "aws::event_schedule::opa_compliance",
      "type": "event_schedule",
      "attributes": {
        "tf_address": "aws_cloudwatch_event_rule.opa_compliance[0]",
        "tf_type": "aws_cloudwatch_event_rule",
        "tf_name": "opa_compliance",
        "id": "samsite-prod-1-opa-compliance",
        "function": "Daily trigger for the runtime KSI emitter Lambda",
        "diagram_label": "EventBridge schedule",
        "public": false,
        "baseline_configuration": "AWS EventBridge default; rate-based schedule",
        "iiw_asset_type": "Event Schedule (EventBridge)"
      },
      "native_id": "arn:aws:events:us-east-2:180731181784:rule/samsite-prod-1-opa-compliance",
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "low",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "function",
          "channel": "aws-internal-tls",
          "data_class": "configuration"
        }
      ]
    },
    {
      "component_id": "aws::iam_role::lambda_opa",
      "type": "iam_role",
      "attributes": {
        "tf_address": "aws_iam_role.lambda_opa",
        "tf_type": "aws_iam_role",
        "tf_name": "lambda_opa",
        "id": "samsite-prod-1-lambda-opa-role",
        "trust_policy_sha256": "f3502e8666443cacc9bec965f5cc2886f9ed0e884c87714821fdc6872835efd0",
        "role_name": "samsite-prod-1-lambda-opa-role",
        "function": "IAM role assumed by the runtime KSI emitter Lambda",
        "diagram_label": "IAM \u2014 Lambda role",
        "public": false,
        "baseline_configuration": "Trust policy bound to lambda.amazonaws.com; inline policy hashed in attributes (body in infrastructure/main.tf)",
        "iiw_asset_type": "IAM Role"
      },
      "native_id": "arn:aws:iam::180731181784:role/samsite-prod-1-lambda-opa-role",
      "security_category": {
        "confidentiality": "moderate",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "internal",
          "counterparty": "aws-service-api",
          "channel": "aws-internal-tls",
          "data_class": "authorization-claims"
        }
      ]
    },
    {
      "component_id": "aws::iam_policy::lambda_opa",
      "type": "iam_policy",
      "attributes": {
        "tf_address": "aws_iam_role_policy.lambda_opa",
        "tf_type": "aws_iam_role_policy",
        "tf_name": "lambda_opa",
        "id": "samsite-prod-1-lambda-opa-role:samsite-prod-1-lambda-opa-policy",
        "policy_document_sha256": "d25e172d47d53d0eff77ebd0410c4c3e087860c3a9b725269ee7e37b335812cd",
        "policy_name": "samsite-prod-1-lambda-opa-policy",
        "attached_to_role": "samsite-prod-1-lambda-opa-role",
        "function": "Inline policy attached to the Lambda role",
        "diagram_label": "IAM \u2014 Lambda policy",
        "public": false,
        "baseline_configuration": "Inline policy on the Lambda role; body hashed in attributes (body in infrastructure/main.tf for full review)",
        "iiw_asset_type": "IAM Policy"
      },
      "native_id": "iam-role-policy::samsite-prod-1-lambda-opa-role/samsite-prod-1-lambda-opa-policy",
      "security_category": {
        "confidentiality": "moderate",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": []
    },
    {
      "component_id": "aws::function::opa_compliance",
      "type": "function",
      "attributes": {
        "tf_address": "aws_lambda_function.opa_compliance[0]",
        "tf_type": "aws_lambda_function",
        "tf_name": "opa_compliance",
        "runtime": "nodejs22.x",
        "function_name": "samsite-prod-1-opa-compliance",
        "id": "samsite-prod-1-opa-compliance",
        "function": "Daily runtime KSI emitter; revalidates live AWS configuration",
        "diagram_label": "Lambda \u2014 runtime KSI emitter",
        "public": false,
        "baseline_configuration": "AWS Lambda default + IAM scope (read 3 S3 config APIs, 1 CF distribution; write 1 S3 key)",
        "iiw_asset_type": "Compute Function (Lambda)"
      },
      "native_id": "arn:aws:lambda:us-east-2:180731181784:function:samsite-prod-1-opa-compliance",
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "inbound",
          "counterparty": "eventbridge",
          "channel": "aws-internal-tls",
          "data_class": "configuration"
        },
        {
          "direction": "outbound",
          "counterparty": "aws-service-api",
          "channel": "aws-internal-tls",
          "data_class": "configuration"
        },
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "audit"
        }
      ]
    },
    {
      "component_id": "aws::dns_zone::samsite",
      "type": "dns_zone",
      "attributes": {
        "tf_address": "aws_route53_zone.samsite[0]",
        "tf_type": "aws_route53_zone",
        "tf_name": "samsite",
        "id": "Z01823092XGX2RITMRD8R",
        "function": "Authoritative DNS for the public domain",
        "diagram_label": "Route 53 hosted zone",
        "public": true,
        "baseline_configuration": "AWS Route 53 default; DNSSEC not enabled",
        "iiw_asset_type": "DNS Zone (Route 53)"
      },
      "native_id": "arn:aws:route53:::hostedzone/Z01823092XGX2RITMRD8R",
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "inbound",
          "counterparty": "public-internet",
          "channel": "dns",
          "data_class": "public-dns"
        },
        {
          "direction": "outbound",
          "counterparty": "public-internet",
          "channel": "dns",
          "data_class": "public-dns"
        }
      ]
    },
    {
      "component_id": "aws::object_store::website",
      "type": "object_store",
      "attributes": {
        "tf_address": "aws_s3_bucket.website",
        "tf_type": "aws_s3_bucket",
        "tf_name": "website",
        "region": "us-east-2",
        "id": "samsite-prod-1",
        "function": "Origin storage for static site content and /.well-known/ artifacts",
        "diagram_label": "S3 origin bucket",
        "public": false,
        "baseline_configuration": "AWS S3 default + bucket policy enforcing OAC + public access block",
        "iiw_asset_type": "Object Storage (S3 bucket)",
        "config": {
          "aws_s3_bucket_policy": {
            "bucket": "samsite-prod-1",
            "id": "samsite-prod-1",
            "policy": "{\"Statement\":[{\"Action\":\"s3:GetObject\",\"Condition\":{\"StringEquals\":{\"AWS:SourceArn\":\"arn:aws:cloudfront::180731181784:distribution/E2WR2ZC8FG6NG9\"}},\"Effect\":\"Allow\",\"Principal\":{\"Service\":\"cloudfront.amazonaws.com\"},\"Resource\":\"arn:aws:s3:::samsite-prod-1/*\",\"Sid\":\"AllowCloudFrontServicePrincipal\"}],\"Version\":\"2012-10-17\"}"
          },
          "aws_s3_bucket_public_access_block": {
            "block_public_acls": true,
            "block_public_policy": true,
            "bucket": "samsite-prod-1",
            "id": "samsite-prod-1",
            "ignore_public_acls": true,
            "restrict_public_buckets": true
          },
          "aws_s3_bucket_server_side_encryption_configuration": {
            "bucket": "samsite-prod-1",
            "expected_bucket_owner": "",
            "id": "samsite-prod-1",
            "rule": [
              {
                "apply_server_side_encryption_by_default": [
                  {
                    "kms_master_key_id": "",
                    "sse_algorithm": "AES256"
                  }
                ],
                "bucket_key_enabled": false
              }
            ]
          },
          "aws_s3_bucket_versioning": {
            "bucket": "samsite-prod-1",
            "expected_bucket_owner": "",
            "id": "samsite-prod-1",
            "mfa": null,
            "versioning_configuration": [
              {
                "mfa_delete": "",
                "status": "Enabled"
              }
            ]
          }
        }
      },
      "native_id": "arn:aws:s3:::samsite-prod-1",
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "inbound",
          "counterparty": "cdn_distribution",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        },
        {
          "direction": "outbound",
          "counterparty": "cdn_distribution",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        },
        {
          "direction": "inbound",
          "counterparty": "github-actions",
          "channel": "tls-1.2",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "npm::@aws-crypto/crc32@5.2.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/crc32@5.2.0"
      },
      "attributes": {
        "name": "@aws-crypto/crc32",
        "version": "5.2.0",
        "lockfile_path": "node_modules/@aws-crypto/crc32",
        "integrity": "sha512-nLbCWqQNgUiwwtFsen1AdzAtvuLRsQS8rYgMuxCrdKf9kOssamGLuPwyTY9wyYblNr9+1XM8v6zoDTPPSIeANg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/crc32c@5.2.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/crc32c@5.2.0"
      },
      "attributes": {
        "name": "@aws-crypto/crc32c",
        "version": "5.2.0",
        "lockfile_path": "node_modules/@aws-crypto/crc32c",
        "integrity": "sha512-+iWb8qaHLYKrNvGRbiYRHSdKRWhto5XlZUEBwDjYNf+ly5SVYG6zEoYIdxvf5R3zyeP16w4PLBn3rH1xc74Rag==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/sha1-browser@5.2.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/sha1-browser@5.2.0"
      },
      "attributes": {
        "name": "@aws-crypto/sha1-browser",
        "version": "5.2.0",
        "lockfile_path": "node_modules/@aws-crypto/sha1-browser",
        "integrity": "sha512-OH6lveCFfcDjX4dbAvCFSYUjJZjDr/3XJ3xHtjn3Oj5b9RjojQo8npoLeA/bNwkOkrSQ0wgrHzXk4tDRxGKJeg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/sha1-browser/node_modules/@smithy/is-array-buffer@2.2.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/sha1-browser/node_modules/@smithy/is-array-buffer@2.2.0"
      },
      "attributes": {
        "name": "@aws-crypto/sha1-browser/node_modules/@smithy/is-array-buffer",
        "version": "2.2.0",
        "lockfile_path": "node_modules/@aws-crypto/sha1-browser/node_modules/@smithy/is-array-buffer",
        "integrity": "sha512-GGP3O9QFD24uGeAXYUjwSTXARoqpZykHadOmA8G5vfJPK0/DC67qa//0qvqrJzL1xc8WQWX7/yc7fwudjPHPhA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/sha1-browser/node_modules/@smithy/util-buffer-from@2.2.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/sha1-browser/node_modules/@smithy/util-buffer-from@2.2.0"
      },
      "attributes": {
        "name": "@aws-crypto/sha1-browser/node_modules/@smithy/util-buffer-from",
        "version": "2.2.0",
        "lockfile_path": "node_modules/@aws-crypto/sha1-browser/node_modules/@smithy/util-buffer-from",
        "integrity": "sha512-IJdWBbTcMQ6DA0gdNhh/BwrLkDR+ADW5Kr1aZmd4k3DIF6ezMV4R2NIAmT08wQJ3yUK82thHWmC/TnK/wpMMIA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/sha1-browser/node_modules/@smithy/util-utf8@2.3.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/sha1-browser/node_modules/@smithy/util-utf8@2.3.0"
      },
      "attributes": {
        "name": "@aws-crypto/sha1-browser/node_modules/@smithy/util-utf8",
        "version": "2.3.0",
        "lockfile_path": "node_modules/@aws-crypto/sha1-browser/node_modules/@smithy/util-utf8",
        "integrity": "sha512-R8Rdn8Hy72KKcebgLiv8jQcQkXoLMOGGv5uI1/k0l+snqkOzQ1R0ChUBCxWMlBsFMekWjq0wRudIweFs7sKT5A==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/sha256-browser@5.2.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/sha256-browser@5.2.0"
      },
      "attributes": {
        "name": "@aws-crypto/sha256-browser",
        "version": "5.2.0",
        "lockfile_path": "node_modules/@aws-crypto/sha256-browser",
        "integrity": "sha512-AXfN/lGotSQwu6HNcEsIASo7kWXZ5HYWvfOmSNKDsEqC4OashTp8alTmaz+F7TC2L083SFv5RdB+qU3Vs1kZqw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/sha256-browser/node_modules/@smithy/is-array-buffer@2.2.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/sha256-browser/node_modules/@smithy/is-array-buffer@2.2.0"
      },
      "attributes": {
        "name": "@aws-crypto/sha256-browser/node_modules/@smithy/is-array-buffer",
        "version": "2.2.0",
        "lockfile_path": "node_modules/@aws-crypto/sha256-browser/node_modules/@smithy/is-array-buffer",
        "integrity": "sha512-GGP3O9QFD24uGeAXYUjwSTXARoqpZykHadOmA8G5vfJPK0/DC67qa//0qvqrJzL1xc8WQWX7/yc7fwudjPHPhA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/sha256-browser/node_modules/@smithy/util-buffer-from@2.2.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/sha256-browser/node_modules/@smithy/util-buffer-from@2.2.0"
      },
      "attributes": {
        "name": "@aws-crypto/sha256-browser/node_modules/@smithy/util-buffer-from",
        "version": "2.2.0",
        "lockfile_path": "node_modules/@aws-crypto/sha256-browser/node_modules/@smithy/util-buffer-from",
        "integrity": "sha512-IJdWBbTcMQ6DA0gdNhh/BwrLkDR+ADW5Kr1aZmd4k3DIF6ezMV4R2NIAmT08wQJ3yUK82thHWmC/TnK/wpMMIA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/sha256-browser/node_modules/@smithy/util-utf8@2.3.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/sha256-browser/node_modules/@smithy/util-utf8@2.3.0"
      },
      "attributes": {
        "name": "@aws-crypto/sha256-browser/node_modules/@smithy/util-utf8",
        "version": "2.3.0",
        "lockfile_path": "node_modules/@aws-crypto/sha256-browser/node_modules/@smithy/util-utf8",
        "integrity": "sha512-R8Rdn8Hy72KKcebgLiv8jQcQkXoLMOGGv5uI1/k0l+snqkOzQ1R0ChUBCxWMlBsFMekWjq0wRudIweFs7sKT5A==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/sha256-js@5.2.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/sha256-js@5.2.0"
      },
      "attributes": {
        "name": "@aws-crypto/sha256-js",
        "version": "5.2.0",
        "lockfile_path": "node_modules/@aws-crypto/sha256-js",
        "integrity": "sha512-FFQQyu7edu4ufvIZ+OadFpHHOt+eSTBaYaki44c+akjg7qZg9oOQeLlk77F6tSYqjDAFClrHJk9tMf0HdVyOvA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/supports-web-crypto@5.2.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/supports-web-crypto@5.2.0"
      },
      "attributes": {
        "name": "@aws-crypto/supports-web-crypto",
        "version": "5.2.0",
        "lockfile_path": "node_modules/@aws-crypto/supports-web-crypto",
        "integrity": "sha512-iAvUotm021kM33eCdNfwIN//F77/IADDSs58i+MDaOqFrVjZo9bAal0NK7HurRuWLLpF1iLX7gbWrjHjeo+YFg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/util@5.2.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/util@5.2.0"
      },
      "attributes": {
        "name": "@aws-crypto/util",
        "version": "5.2.0",
        "lockfile_path": "node_modules/@aws-crypto/util",
        "integrity": "sha512-4RkU9EsI6ZpBve5fseQlGNUWKMa1RLPQ1dnjnQoe07ldfIzcsGb5hC5W0Dm7u423KWzawlrpbjXBrXCEv9zazQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/util/node_modules/@smithy/is-array-buffer@2.2.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/util/node_modules/@smithy/is-array-buffer@2.2.0"
      },
      "attributes": {
        "name": "@aws-crypto/util/node_modules/@smithy/is-array-buffer",
        "version": "2.2.0",
        "lockfile_path": "node_modules/@aws-crypto/util/node_modules/@smithy/is-array-buffer",
        "integrity": "sha512-GGP3O9QFD24uGeAXYUjwSTXARoqpZykHadOmA8G5vfJPK0/DC67qa//0qvqrJzL1xc8WQWX7/yc7fwudjPHPhA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/util/node_modules/@smithy/util-buffer-from@2.2.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/util/node_modules/@smithy/util-buffer-from@2.2.0"
      },
      "attributes": {
        "name": "@aws-crypto/util/node_modules/@smithy/util-buffer-from",
        "version": "2.2.0",
        "lockfile_path": "node_modules/@aws-crypto/util/node_modules/@smithy/util-buffer-from",
        "integrity": "sha512-IJdWBbTcMQ6DA0gdNhh/BwrLkDR+ADW5Kr1aZmd4k3DIF6ezMV4R2NIAmT08wQJ3yUK82thHWmC/TnK/wpMMIA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-crypto/util/node_modules/@smithy/util-utf8@2.3.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-crypto/util/node_modules/@smithy/util-utf8@2.3.0"
      },
      "attributes": {
        "name": "@aws-crypto/util/node_modules/@smithy/util-utf8",
        "version": "2.3.0",
        "lockfile_path": "node_modules/@aws-crypto/util/node_modules/@smithy/util-utf8",
        "integrity": "sha512-R8Rdn8Hy72KKcebgLiv8jQcQkXoLMOGGv5uI1/k0l+snqkOzQ1R0ChUBCxWMlBsFMekWjq0wRudIweFs7sKT5A==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/client-cloudfront@3.1042.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/client-cloudfront@3.1042.0"
      },
      "attributes": {
        "name": "@aws-sdk/client-cloudfront",
        "version": "3.1042.0",
        "lockfile_path": "node_modules/@aws-sdk/client-cloudfront",
        "integrity": "sha512-LE79zvUbdvXGExuJBbJAvvNWtnxwVXYYuyQMU3pzVv4gPUknsR3WTsaEhrdR8CkRM2wXq3ZKOPSyph3C2ZYa7g==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/client-s3@3.1042.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/client-s3@3.1042.0"
      },
      "attributes": {
        "name": "@aws-sdk/client-s3",
        "version": "3.1042.0",
        "lockfile_path": "node_modules/@aws-sdk/client-s3",
        "integrity": "sha512-z3Ibstr7ckDT10dz/nkk4+93LitrrO49Oq563/JoFHt30ZNodPBCfSxysKcelLyi/lNVF1MZrhZZfikUAG3iNQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/core@3.974.8",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/core@3.974.8"
      },
      "attributes": {
        "name": "@aws-sdk/core",
        "version": "3.974.8",
        "lockfile_path": "node_modules/@aws-sdk/core",
        "integrity": "sha512-njR2qoG6ZuB0kvAS2FyICsFZJ6gmCcf2X/7JcD14sUvGDm26wiZ5BrA6LOiUxKFEF+IVe7kdroxyE00YlkiYsw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/crc64-nvme@3.972.7",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/crc64-nvme@3.972.7"
      },
      "attributes": {
        "name": "@aws-sdk/crc64-nvme",
        "version": "3.972.7",
        "lockfile_path": "node_modules/@aws-sdk/crc64-nvme",
        "integrity": "sha512-QUagVVBbC8gODCF6e1aV0mE2TXWB9Opz4k8EJFdNrujUVQm5R4AjJa1mpOqzwOuROBzqJU9zawzig7M96L8Ejg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/credential-provider-env@3.972.34",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/credential-provider-env@3.972.34"
      },
      "attributes": {
        "name": "@aws-sdk/credential-provider-env",
        "version": "3.972.34",
        "lockfile_path": "node_modules/@aws-sdk/credential-provider-env",
        "integrity": "sha512-XT0jtf8Fw9JE6ppsQeoNnZRiG+jqRixMT1v1ZR17G60UvVdsQmTG8nbEyHuEPfMxDXEhfdARaM/XiEhca4lGHQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/credential-provider-http@3.972.36",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/credential-provider-http@3.972.36"
      },
      "attributes": {
        "name": "@aws-sdk/credential-provider-http",
        "version": "3.972.36",
        "lockfile_path": "node_modules/@aws-sdk/credential-provider-http",
        "integrity": "sha512-DPoGWfy7J7RKxvbf5kOKIGQkD2ek3dbKgzKIGrnLuvZBz5myU+Im/H6pmc14QcnFbqHMqxvtWSgRDSJW3qXLQg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/credential-provider-ini@3.972.38",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/credential-provider-ini@3.972.38"
      },
      "attributes": {
        "name": "@aws-sdk/credential-provider-ini",
        "version": "3.972.38",
        "lockfile_path": "node_modules/@aws-sdk/credential-provider-ini",
        "integrity": "sha512-oDzUBu2MGJFgoar05sPMCwSrhw44ASyccrHzj66vO69OZqi7I6hZZxXfuPLC8OCzW7C+sU+bI73XHij41yekgQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/credential-provider-login@3.972.38",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/credential-provider-login@3.972.38"
      },
      "attributes": {
        "name": "@aws-sdk/credential-provider-login",
        "version": "3.972.38",
        "lockfile_path": "node_modules/@aws-sdk/credential-provider-login",
        "integrity": "sha512-g1NosS8qe4OF++G2UFCM5ovSkgipC7YYor5KCWatG0UoMSO5YFj9C8muePlyVmOBV/WTI16Jo3/s1NUo/o1Bww==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/credential-provider-node@3.972.39",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/credential-provider-node@3.972.39"
      },
      "attributes": {
        "name": "@aws-sdk/credential-provider-node",
        "version": "3.972.39",
        "lockfile_path": "node_modules/@aws-sdk/credential-provider-node",
        "integrity": "sha512-HEswDQyxUtadoZ/bJsPPENHg7R0Lzym5LuMksJeHvqhCOpP+rtkDLKI4/ZChH4w3cf5kG8n6bZuI8PzajoiqMg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/credential-provider-process@3.972.34",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/credential-provider-process@3.972.34"
      },
      "attributes": {
        "name": "@aws-sdk/credential-provider-process",
        "version": "3.972.34",
        "lockfile_path": "node_modules/@aws-sdk/credential-provider-process",
        "integrity": "sha512-T3IFs4EVmVi1dVN5RciFnklCANSzvrQd/VuHY9ThHSQmYkTogjcGkoJEr+oNUPQZnso52183088NqysMPji1/Q==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/credential-provider-sso@3.972.38",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/credential-provider-sso@3.972.38"
      },
      "attributes": {
        "name": "@aws-sdk/credential-provider-sso",
        "version": "3.972.38",
        "lockfile_path": "node_modules/@aws-sdk/credential-provider-sso",
        "integrity": "sha512-5ZxG+t0+3Q3QPh8KEjX6syskhgNf7I0MN7oGioTf6Lm1NTjfP7sIcYGNsthXC2qR8vcD3edNZwCr2ovfSSWuRA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/credential-provider-web-identity@3.972.38",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/credential-provider-web-identity@3.972.38"
      },
      "attributes": {
        "name": "@aws-sdk/credential-provider-web-identity",
        "version": "3.972.38",
        "lockfile_path": "node_modules/@aws-sdk/credential-provider-web-identity",
        "integrity": "sha512-lYHFF30DGI20jZcYX8cm6Ns0V7f1dDN6g/MBDLTyD/5iw+bXs3yBr2iAiHDkx4RFU5JgsnZvCHYKiRVPRdmOgw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/middleware-bucket-endpoint@3.972.10",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/middleware-bucket-endpoint@3.972.10"
      },
      "attributes": {
        "name": "@aws-sdk/middleware-bucket-endpoint",
        "version": "3.972.10",
        "lockfile_path": "node_modules/@aws-sdk/middleware-bucket-endpoint",
        "integrity": "sha512-Vbc2frZH7wXlMNd+ZZSXUEs/l1Sv8Jj4zUnIfwrYF5lwaLdXHZ9xx4U3rjUcaye3HRhFVc+E5DbBxpRAbB16BA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/middleware-expect-continue@3.972.10",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/middleware-expect-continue@3.972.10"
      },
      "attributes": {
        "name": "@aws-sdk/middleware-expect-continue",
        "version": "3.972.10",
        "lockfile_path": "node_modules/@aws-sdk/middleware-expect-continue",
        "integrity": "sha512-2Yn0f1Qiq/DjxYR3wfI3LokXnjOhFM7Ssn4LTdFDIxRMCE6I32MAsVnhPX1cUZsuVA9tiZtwwhlSLAtFGxAZlQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/middleware-flexible-checksums@3.974.16",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/middleware-flexible-checksums@3.974.16"
      },
      "attributes": {
        "name": "@aws-sdk/middleware-flexible-checksums",
        "version": "3.974.16",
        "lockfile_path": "node_modules/@aws-sdk/middleware-flexible-checksums",
        "integrity": "sha512-6ru8doI0/XzszqLIPXf0E/V7HhAw1Pu94010XCKYtBUfD0LxF0BuOzrUf8OQGR6j2o6wgKTHUniOmndQycHwCA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/middleware-host-header@3.972.10",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/middleware-host-header@3.972.10"
      },
      "attributes": {
        "name": "@aws-sdk/middleware-host-header",
        "version": "3.972.10",
        "lockfile_path": "node_modules/@aws-sdk/middleware-host-header",
        "integrity": "sha512-IJSsIMeVQ8MMCPbuh1AbltkFhLBLXn7aejzfX5YKT/VLDHn++Dcz8886tXckE+wQssyPUhaXrJhdakO2VilRhg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/middleware-location-constraint@3.972.10",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/middleware-location-constraint@3.972.10"
      },
      "attributes": {
        "name": "@aws-sdk/middleware-location-constraint",
        "version": "3.972.10",
        "lockfile_path": "node_modules/@aws-sdk/middleware-location-constraint",
        "integrity": "sha512-rI3NZvJcEvjoD0+0PI0iUAwlPw2IlSlhyvgBK/3WkKJQE/YiKFedd9dMN2lVacdNxPNhxL/jzQaKQdrGtQagjQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/middleware-logger@3.972.10",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/middleware-logger@3.972.10"
      },
      "attributes": {
        "name": "@aws-sdk/middleware-logger",
        "version": "3.972.10",
        "lockfile_path": "node_modules/@aws-sdk/middleware-logger",
        "integrity": "sha512-OOuGvvz1Dm20SjZo5oEBePFqxt5nf8AwkNDSyUHvD9/bfNASmstcYxFAHUowy4n6Io7mWUZ04JURZwSBvyQanQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/middleware-recursion-detection@3.972.11",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/middleware-recursion-detection@3.972.11"
      },
      "attributes": {
        "name": "@aws-sdk/middleware-recursion-detection",
        "version": "3.972.11",
        "lockfile_path": "node_modules/@aws-sdk/middleware-recursion-detection",
        "integrity": "sha512-+zz6f79Kj9V5qFK2P+D8Ehjnw4AhphAlCAsPjUqEcInA9umtSSKMrHbSagEeOIsDNuvVrH98bjRHcyQukTrhaQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/middleware-sdk-s3@3.972.37",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/middleware-sdk-s3@3.972.37"
      },
      "attributes": {
        "name": "@aws-sdk/middleware-sdk-s3",
        "version": "3.972.37",
        "lockfile_path": "node_modules/@aws-sdk/middleware-sdk-s3",
        "integrity": "sha512-Km7M+i8DrLArVzrid1gfxeGhYHBd3uxvE77g0s5a52zPSVosxzQBnJ0gwWb6NIp/DOk8gsBMhi7V+cpJG0ndTA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/middleware-ssec@3.972.10",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/middleware-ssec@3.972.10"
      },
      "attributes": {
        "name": "@aws-sdk/middleware-ssec",
        "version": "3.972.10",
        "lockfile_path": "node_modules/@aws-sdk/middleware-ssec",
        "integrity": "sha512-Gli9A0u8EVVb+5bFDGS/QbSVg28w/wpEidg1ggVcSj65BDTdGR6punsOcVjqdiu1i42WHWo51MCvARPIIz9juw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/middleware-user-agent@3.972.38",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/middleware-user-agent@3.972.38"
      },
      "attributes": {
        "name": "@aws-sdk/middleware-user-agent",
        "version": "3.972.38",
        "lockfile_path": "node_modules/@aws-sdk/middleware-user-agent",
        "integrity": "sha512-iz+B29TXcAZsJpwB+AwG/TTGA5l/VnmMZ2UxtiySOZjI6gCdmviXPwdgzcmuazMy16rXoPY4mYCGe7zdNKfx5A==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/nested-clients@3.997.6",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/nested-clients@3.997.6"
      },
      "attributes": {
        "name": "@aws-sdk/nested-clients",
        "version": "3.997.6",
        "lockfile_path": "node_modules/@aws-sdk/nested-clients",
        "integrity": "sha512-WBDnqatJl+kGObpfmfSxqnXeYTu3Me8wx8WCtvoxX3pfWrrTv8I4WTMSSs7PZqcRcVh8WeUKMgGFjMG+52SR1w==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/region-config-resolver@3.972.13",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/region-config-resolver@3.972.13"
      },
      "attributes": {
        "name": "@aws-sdk/region-config-resolver",
        "version": "3.972.13",
        "lockfile_path": "node_modules/@aws-sdk/region-config-resolver",
        "integrity": "sha512-CvJ2ZIjK/jVD/lbOpowBVElJyC1YxLTIJ13yM0AEo0t2v7swOzGjSA6lJGH+DwZXQhcjUjoYwc8bVYCX5MDr1A==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/signature-v4-multi-region@3.996.25",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/signature-v4-multi-region@3.996.25"
      },
      "attributes": {
        "name": "@aws-sdk/signature-v4-multi-region",
        "version": "3.996.25",
        "lockfile_path": "node_modules/@aws-sdk/signature-v4-multi-region",
        "integrity": "sha512-+CMIt3e1VzlklAECmG+DtP1sV8iKq25FuA0OKpnJ4KA0kxUtd7CgClY7/RU6VzJBQwbN4EJ9Ue6plvqx1qGadw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/token-providers@3.1041.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/token-providers@3.1041.0"
      },
      "attributes": {
        "name": "@aws-sdk/token-providers",
        "version": "3.1041.0",
        "lockfile_path": "node_modules/@aws-sdk/token-providers",
        "integrity": "sha512-Th7kPI6YPtvJUcdznooXJMy+9rQWjmEF81LxaJssngBzuysK4a/x+l8kjm1zb7nYsUPbndnBdUnwng/3PLvtGw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/types@3.973.8",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/types@3.973.8"
      },
      "attributes": {
        "name": "@aws-sdk/types",
        "version": "3.973.8",
        "lockfile_path": "node_modules/@aws-sdk/types",
        "integrity": "sha512-gjlAdtHMbtR9X5iIhVUvbVcy55KnznpC6bkDUWW9z915bi0ckdUr5cjf16Kp6xq0bP5HBD2xzgbL9F9Quv5vUw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/util-arn-parser@3.972.3",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/util-arn-parser@3.972.3"
      },
      "attributes": {
        "name": "@aws-sdk/util-arn-parser",
        "version": "3.972.3",
        "lockfile_path": "node_modules/@aws-sdk/util-arn-parser",
        "integrity": "sha512-HzSD8PMFrvgi2Kserxuff5VitNq2sgf3w9qxmskKDiDTThWfVteJxuCS9JXiPIPtmCrp+7N9asfIaVhBFORllA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/util-endpoints@3.996.8",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/util-endpoints@3.996.8"
      },
      "attributes": {
        "name": "@aws-sdk/util-endpoints",
        "version": "3.996.8",
        "lockfile_path": "node_modules/@aws-sdk/util-endpoints",
        "integrity": "sha512-oOZHcRDihk5iEe5V25NVWg45b3qEA8OpHWVdU/XQh8Zj4heVPAJqWvMphQnU7LkufmUo10EpvFPZuQMiFLJK3g==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/util-locate-window@3.965.5",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/util-locate-window@3.965.5"
      },
      "attributes": {
        "name": "@aws-sdk/util-locate-window",
        "version": "3.965.5",
        "lockfile_path": "node_modules/@aws-sdk/util-locate-window",
        "integrity": "sha512-WhlJNNINQB+9qtLtZJcpQdgZw3SCDCpXdUJP7cToGwHbCWCnRckGlc6Bx/OhWwIYFNAn+FIydY8SZ0QmVu3xTQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/util-user-agent-browser@3.972.10",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/util-user-agent-browser@3.972.10"
      },
      "attributes": {
        "name": "@aws-sdk/util-user-agent-browser",
        "version": "3.972.10",
        "lockfile_path": "node_modules/@aws-sdk/util-user-agent-browser",
        "integrity": "sha512-FAzqXvfEssGdSIz8ejatan0bOdx1qefBWKF/gWmVBXIP1HkS7v/wjjaqrAGGKvyihrXTXW00/2/1nTJtxpXz7g==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/util-user-agent-node@3.973.24",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/util-user-agent-node@3.973.24"
      },
      "attributes": {
        "name": "@aws-sdk/util-user-agent-node",
        "version": "3.973.24",
        "lockfile_path": "node_modules/@aws-sdk/util-user-agent-node",
        "integrity": "sha512-ZWwlkjcIp7cEL8ZfTpTAPNkwx25p7xol0xlKoWVVf22+nsjwmLcHYtTPjIV1cSpmB/b6DaK4cb1fSkvCXHgRdw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws-sdk/xml-builder@3.972.22",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws-sdk/xml-builder@3.972.22"
      },
      "attributes": {
        "name": "@aws-sdk/xml-builder",
        "version": "3.972.22",
        "lockfile_path": "node_modules/@aws-sdk/xml-builder",
        "integrity": "sha512-PMYKKtJd70IsSG0yHrdAbxBr+ZWBKLvzFZfD3/urxgf6hXVMzuU5M+3MJ5G67RpOmLBu1fAUN65SbWuKUCOlAA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@aws/lambda-invoke-store@0.2.4",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@aws/lambda-invoke-store@0.2.4"
      },
      "attributes": {
        "name": "@aws/lambda-invoke-store",
        "version": "0.2.4",
        "lockfile_path": "node_modules/@aws/lambda-invoke-store",
        "integrity": "sha512-iY8yvjE0y651BixKNPgmv1WrQc+GZ142sb0z4gYnChDDY2YqI4P/jsSopBWrKfAt7LOJAkOXt7rC/hms+WclQQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@nodable/entities@2.1.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@nodable/entities@2.1.0"
      },
      "attributes": {
        "name": "@nodable/entities",
        "version": "2.1.0",
        "lockfile_path": "node_modules/@nodable/entities",
        "integrity": "sha512-nyT7T3nbMyBI/lvr6L5TyWbFJAI9FTgVRakNoBqCD+PmID8DzFrrNdLLtHMwMszOtqZa8PAOV24ZqDnQrhQINA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@open-policy-agent/opa-wasm@1.10.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@open-policy-agent/opa-wasm@1.10.0"
      },
      "attributes": {
        "name": "@open-policy-agent/opa-wasm",
        "version": "1.10.0",
        "lockfile_path": "node_modules/@open-policy-agent/opa-wasm",
        "integrity": "sha512-ymR/nFS3nO9o24j9xowGGQaf+Gmb813QcxUpVZkfRlJkawKWqSIllnEH15agyWjijmOIyhA+OBErenx6N3jphw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/chunked-blob-reader@5.2.2",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/chunked-blob-reader@5.2.2"
      },
      "attributes": {
        "name": "@smithy/chunked-blob-reader",
        "version": "5.2.2",
        "lockfile_path": "node_modules/@smithy/chunked-blob-reader",
        "integrity": "sha512-St+kVicSyayWQca+I1rGitaOEH6uKgE8IUWoYnnEX26SWdWQcL6LvMSD19Lg+vYHKdT9B2Zuu7rd3i6Wnyb/iw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/chunked-blob-reader-native@4.2.3",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/chunked-blob-reader-native@4.2.3"
      },
      "attributes": {
        "name": "@smithy/chunked-blob-reader-native",
        "version": "4.2.3",
        "lockfile_path": "node_modules/@smithy/chunked-blob-reader-native",
        "integrity": "sha512-jA5k5Udn7Y5717L86h4EIv06wIr3xn8GM1qHRi/Nf31annXcXHJjBKvgztnbn2TxH3xWrPBfgwHsOwZf0UmQWw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/config-resolver@4.4.17",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/config-resolver@4.4.17"
      },
      "attributes": {
        "name": "@smithy/config-resolver",
        "version": "4.4.17",
        "lockfile_path": "node_modules/@smithy/config-resolver",
        "integrity": "sha512-TzDZcAnhTyAHbXVxWZo7/tEcrIeFq20IBk8So3OLOetWpR8EwY/yEqBMBFaJMeyEiREDq4NfEl+qO3OAUD+vbQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/core@3.23.17",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/core@3.23.17"
      },
      "attributes": {
        "name": "@smithy/core",
        "version": "3.23.17",
        "lockfile_path": "node_modules/@smithy/core",
        "integrity": "sha512-x7BlLbUFL8NWCGjMF9C+1N5cVCxcPa7g6Tv9B4A2luWx3be3oU8hQ96wIwxe/s7OhIzvoJH73HAUSg5JXVlEtQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/credential-provider-imds@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/credential-provider-imds@4.2.14"
      },
      "attributes": {
        "name": "@smithy/credential-provider-imds",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/credential-provider-imds",
        "integrity": "sha512-Au28zBN48ZAoXdooGUHemuVBrkE+Ie6RPmGNIAJsFqj33Vhb6xAgRifUydZ2aY+M+KaMAETAlKk5NC5h1G7wpg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/eventstream-codec@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/eventstream-codec@4.2.14"
      },
      "attributes": {
        "name": "@smithy/eventstream-codec",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/eventstream-codec",
        "integrity": "sha512-erZq0nOIpzfeZdCyzZjdJb4nVSKLUmSkaQUVkRGQTXs30gyUGeKnrYEg+Xe1W5gE3aReS7IgsvANwVPxSzY6Pw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/eventstream-serde-browser@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/eventstream-serde-browser@4.2.14"
      },
      "attributes": {
        "name": "@smithy/eventstream-serde-browser",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/eventstream-serde-browser",
        "integrity": "sha512-8IelTCtTctWRbb+0Dcy+C0aICh1qa0qWXqgjcXDmMuCvPJRnv26hiDZoAau2ILOniki65mCPKqOQs/BaWvO4CQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/eventstream-serde-config-resolver@4.3.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/eventstream-serde-config-resolver@4.3.14"
      },
      "attributes": {
        "name": "@smithy/eventstream-serde-config-resolver",
        "version": "4.3.14",
        "lockfile_path": "node_modules/@smithy/eventstream-serde-config-resolver",
        "integrity": "sha512-sqHiHpYRYo3FJlaIxD1J8PhbcmJAm7IuM16mVnwSkCToD7g00IBZzKuiLNMGmftULmEUX6/UAz8/NN5uMP8bVA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/eventstream-serde-node@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/eventstream-serde-node@4.2.14"
      },
      "attributes": {
        "name": "@smithy/eventstream-serde-node",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/eventstream-serde-node",
        "integrity": "sha512-Ht/8BuGlKfFTy0H3+8eEu0vdpwGztCnaLLXtpXNdQqiR7Hj4vFScU3T436vRAjATglOIPjJXronY+1WxxNLSiw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/eventstream-serde-universal@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/eventstream-serde-universal@4.2.14"
      },
      "attributes": {
        "name": "@smithy/eventstream-serde-universal",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/eventstream-serde-universal",
        "integrity": "sha512-lWyt4T2XQZUZgK3tQ3Wn0w3XBvZsK/vjTuJl6bXbnGZBHH0ZUSONTYiK9TgjTTzU54xQr3DRFwpjmhp0oLm3gg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/fetch-http-handler@5.3.17",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/fetch-http-handler@5.3.17"
      },
      "attributes": {
        "name": "@smithy/fetch-http-handler",
        "version": "5.3.17",
        "lockfile_path": "node_modules/@smithy/fetch-http-handler",
        "integrity": "sha512-bXOvQzaSm6MnmLaWA1elgfQcAtN4UP3vXqV97bHuoOrHQOJiLT3ds6o9eo5bqd0TJfRFpzdGnDQdW3FACiAVdw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/hash-blob-browser@4.2.15",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/hash-blob-browser@4.2.15"
      },
      "attributes": {
        "name": "@smithy/hash-blob-browser",
        "version": "4.2.15",
        "lockfile_path": "node_modules/@smithy/hash-blob-browser",
        "integrity": "sha512-0PJ4Al3fg2nM4qKrAIxyNcApgqHAXcBkN8FeizOz69z0rb26uZ6lMESYtxegaTlXB5Hj84JfwMPavMrwDMjucA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/hash-node@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/hash-node@4.2.14"
      },
      "attributes": {
        "name": "@smithy/hash-node",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/hash-node",
        "integrity": "sha512-8ZBDY2DD4wr+GGjTpPtiglEsqr0lUP+KHqgZcWczFf6qeZ/YRjMIOoQWVQlmwu7EtxKTd8YXD8lblmYcpBIA1g==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/hash-stream-node@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/hash-stream-node@4.2.14"
      },
      "attributes": {
        "name": "@smithy/hash-stream-node",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/hash-stream-node",
        "integrity": "sha512-tw4GANWkZPb6+BdD4Fgucqzey2+r73Z/GRo9zklsCdwrnxxumUV83ZIaBDdudV4Ylazw3EPTiJZhpX42105ruQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/invalid-dependency@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/invalid-dependency@4.2.14"
      },
      "attributes": {
        "name": "@smithy/invalid-dependency",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/invalid-dependency",
        "integrity": "sha512-c21qJiTSb25xvvOp+H2TNZzPCngrvl5vIPqPB8zQ/DmJF4QWXO19x1dWfMJZ6wZuuWUPPm0gV8C0cU3+ifcWuw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/is-array-buffer@4.2.2",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/is-array-buffer@4.2.2"
      },
      "attributes": {
        "name": "@smithy/is-array-buffer",
        "version": "4.2.2",
        "lockfile_path": "node_modules/@smithy/is-array-buffer",
        "integrity": "sha512-n6rQ4N8Jj4YTQO3YFrlgZuwKodf4zUFs7EJIWH86pSCWBaAtAGBFfCM7Wx6D2bBJ2xqFNxGBSrUWswT3M0VJow==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/md5-js@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/md5-js@4.2.14"
      },
      "attributes": {
        "name": "@smithy/md5-js",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/md5-js",
        "integrity": "sha512-V2v0vx+h0iUSNG1Alt+GNBMSLGCrl9iVsdd+Ap67HPM9PN479x12V8LkuMoKImNZxn3MXeuyUjls+/7ZACZghA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/middleware-content-length@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/middleware-content-length@4.2.14"
      },
      "attributes": {
        "name": "@smithy/middleware-content-length",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/middleware-content-length",
        "integrity": "sha512-xhHq7fX4/3lv5NHxLUk3OeEvl0xZ+Ek3qIbWaCL4f9JwgDZEclPBElljaZCAItdGPQl/kSM4LPMOpy1MYgprpw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/middleware-endpoint@4.4.32",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/middleware-endpoint@4.4.32"
      },
      "attributes": {
        "name": "@smithy/middleware-endpoint",
        "version": "4.4.32",
        "lockfile_path": "node_modules/@smithy/middleware-endpoint",
        "integrity": "sha512-ZZkgyjnJppiZbIm6Qbx92pbXYi1uzenIvGhBSCDlc7NwuAkiqSgS75j1czAD25ZLs2FjMjYy1q7gyRVWG6JA0Q==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/middleware-retry@4.5.7",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/middleware-retry@4.5.7"
      },
      "attributes": {
        "name": "@smithy/middleware-retry",
        "version": "4.5.7",
        "lockfile_path": "node_modules/@smithy/middleware-retry",
        "integrity": "sha512-bRt6ZImqVSeTk39Nm81K20ObIiAZ3WefY7G6+iz/0tZjs4dgRRjvRX2sgsH+zi6iDCRR/aQvQofLKxxz4rPBZg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/middleware-serde@4.2.20",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/middleware-serde@4.2.20"
      },
      "attributes": {
        "name": "@smithy/middleware-serde",
        "version": "4.2.20",
        "lockfile_path": "node_modules/@smithy/middleware-serde",
        "integrity": "sha512-Lx9JMO9vArPtiChE3wbEZ5akMIDQpWQtlu90lhACQmNOXcGXRbaDywMHDzuDZ2OkZzP+9wQfZi3YJT9F67zTQQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/middleware-stack@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/middleware-stack@4.2.14"
      },
      "attributes": {
        "name": "@smithy/middleware-stack",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/middleware-stack",
        "integrity": "sha512-2dvkUKLuFdKsCRmOE4Mn63co0Djtsm+JMh0bYZQupN1pJwMeE8FmQmRLLzzEMN0dnNi7CDCYYH8F0EVwWiPBeA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/node-config-provider@4.3.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/node-config-provider@4.3.14"
      },
      "attributes": {
        "name": "@smithy/node-config-provider",
        "version": "4.3.14",
        "lockfile_path": "node_modules/@smithy/node-config-provider",
        "integrity": "sha512-S+gFjyo/weSVL0P1b9Ts8C/CwIfNCgUPikk3sl6QVsfE/uUuO+QsF+NsE/JkpvWqqyz1wg7HFdiaZuj5CoBMRg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/node-http-handler@4.6.1",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/node-http-handler@4.6.1"
      },
      "attributes": {
        "name": "@smithy/node-http-handler",
        "version": "4.6.1",
        "lockfile_path": "node_modules/@smithy/node-http-handler",
        "integrity": "sha512-iB+orM4x3xrr57X3YaXazfKnntl0LHlZB1kcXSGzMV1Tt0+YwEjGlbjk/44qEGtBzXAz6yFDzkYTKSV6Pj2HUg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/property-provider@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/property-provider@4.2.14"
      },
      "attributes": {
        "name": "@smithy/property-provider",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/property-provider",
        "integrity": "sha512-WuM31CgfsnQ/10i7NYr0PyxqknD72Y5uMfUMVSniPjbEPceiTErb4eIqJQ+pdxNEAUEWrewrGjIRjVbVHsxZiQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/protocol-http@5.3.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/protocol-http@5.3.14"
      },
      "attributes": {
        "name": "@smithy/protocol-http",
        "version": "5.3.14",
        "lockfile_path": "node_modules/@smithy/protocol-http",
        "integrity": "sha512-dN5F8kHx8RNU0r+pCwNmFZyz6ChjMkzShy/zup6MtkRmmix4vZzJdW+di7x//b1LiynIev88FM18ie+wwPcQtQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/querystring-builder@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/querystring-builder@4.2.14"
      },
      "attributes": {
        "name": "@smithy/querystring-builder",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/querystring-builder",
        "integrity": "sha512-XYA5Z0IqTeF+5XDdh4BBmSA0HvbgVZIyv4cmOoUheDNR57K1HgBp9ukUMx3Cr3XpDHHpLBnexPE3LAtDsZkj2A==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/querystring-parser@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/querystring-parser@4.2.14"
      },
      "attributes": {
        "name": "@smithy/querystring-parser",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/querystring-parser",
        "integrity": "sha512-hr+YyqBD23GVvRxGGrcc/oOeNlK3PzT5Fu4dzrDXxzS1LpFiuL2PQQqKPs87M79aW7ziMs+nvB3qdw77SqE7Lw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/service-error-classification@4.3.1",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/service-error-classification@4.3.1"
      },
      "attributes": {
        "name": "@smithy/service-error-classification",
        "version": "4.3.1",
        "lockfile_path": "node_modules/@smithy/service-error-classification",
        "integrity": "sha512-aUQuDGh760ts/8MU+APjIZhlLPKhIIfqyzZaJikLEIMrdxFvxuLYD0WxWzaYWpmLbQlXDe9p7EWM3HsBe0K6Gw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/shared-ini-file-loader@4.4.9",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/shared-ini-file-loader@4.4.9"
      },
      "attributes": {
        "name": "@smithy/shared-ini-file-loader",
        "version": "4.4.9",
        "lockfile_path": "node_modules/@smithy/shared-ini-file-loader",
        "integrity": "sha512-495/V2I15SHgedSJoDPD23JuSfKAp726ZI1V0wtjB07Wh7q/0tri/0e0DLefZCHgxZonrGKt/OCTpAtP1wE1kQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/signature-v4@5.3.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/signature-v4@5.3.14"
      },
      "attributes": {
        "name": "@smithy/signature-v4",
        "version": "5.3.14",
        "lockfile_path": "node_modules/@smithy/signature-v4",
        "integrity": "sha512-1D9Y/nmlVjCeSivCbhZ7hgEpmHyY1h0GvpSZt3l0xcD9JjmjVC1CHOozS6+Gh+/ldMH8JuJ6cujObQqfayAVFA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/smithy-client@4.12.13",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/smithy-client@4.12.13"
      },
      "attributes": {
        "name": "@smithy/smithy-client",
        "version": "4.12.13",
        "lockfile_path": "node_modules/@smithy/smithy-client",
        "integrity": "sha512-y/Pcj1V9+qG98gyu1gvftHB7rDpdh+7kIBIggs55yGm3JdtBV8GT8IFF3a1qxZ79QnaJHX9GXzvBG6tAd+czJA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/types@4.14.1",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/types@4.14.1"
      },
      "attributes": {
        "name": "@smithy/types",
        "version": "4.14.1",
        "lockfile_path": "node_modules/@smithy/types",
        "integrity": "sha512-59b5HtSVrVR/eYNei3BUj3DCPKD/G7EtDDe7OEJE7i7FtQFugYo6MxbotS8mVJkLNVf8gYaAlEBwwtJ9HzhWSg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/url-parser@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/url-parser@4.2.14"
      },
      "attributes": {
        "name": "@smithy/url-parser",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/url-parser",
        "integrity": "sha512-p06BiBigJ8bTA3MgnOfCtDUWnAMY0YfedO/GRpmc7p+wg3KW8vbXy1xwSu5ASy0wV7rRYtlfZOIKH4XqfhjSQQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-base64@4.3.2",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-base64@4.3.2"
      },
      "attributes": {
        "name": "@smithy/util-base64",
        "version": "4.3.2",
        "lockfile_path": "node_modules/@smithy/util-base64",
        "integrity": "sha512-XRH6b0H/5A3SgblmMa5ErXQ2XKhfbQB+Fm/oyLZ2O2kCUrwgg55bU0RekmzAhuwOjA9qdN5VU2BprOvGGUkOOQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-body-length-browser@4.2.2",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-body-length-browser@4.2.2"
      },
      "attributes": {
        "name": "@smithy/util-body-length-browser",
        "version": "4.2.2",
        "lockfile_path": "node_modules/@smithy/util-body-length-browser",
        "integrity": "sha512-JKCrLNOup3OOgmzeaKQwi4ZCTWlYR5H4Gm1r2uTMVBXoemo1UEghk5vtMi1xSu2ymgKVGW631e2fp9/R610ZjQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-body-length-node@4.2.3",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-body-length-node@4.2.3"
      },
      "attributes": {
        "name": "@smithy/util-body-length-node",
        "version": "4.2.3",
        "lockfile_path": "node_modules/@smithy/util-body-length-node",
        "integrity": "sha512-ZkJGvqBzMHVHE7r/hcuCxlTY8pQr1kMtdsVPs7ex4mMU+EAbcXppfo5NmyxMYi2XU49eqaz56j2gsk4dHHPG/g==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-buffer-from@4.2.2",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-buffer-from@4.2.2"
      },
      "attributes": {
        "name": "@smithy/util-buffer-from",
        "version": "4.2.2",
        "lockfile_path": "node_modules/@smithy/util-buffer-from",
        "integrity": "sha512-FDXD7cvUoFWwN6vtQfEta540Y/YBe5JneK3SoZg9bThSoOAC/eGeYEua6RkBgKjGa/sz6Y+DuBZj3+YEY21y4Q==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-config-provider@4.2.2",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-config-provider@4.2.2"
      },
      "attributes": {
        "name": "@smithy/util-config-provider",
        "version": "4.2.2",
        "lockfile_path": "node_modules/@smithy/util-config-provider",
        "integrity": "sha512-dWU03V3XUprJwaUIFVv4iOnS1FC9HnMHDfUrlNDSh4315v0cWyaIErP8KiqGVbf5z+JupoVpNM7ZB3jFiTejvQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-defaults-mode-browser@4.3.49",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-defaults-mode-browser@4.3.49"
      },
      "attributes": {
        "name": "@smithy/util-defaults-mode-browser",
        "version": "4.3.49",
        "lockfile_path": "node_modules/@smithy/util-defaults-mode-browser",
        "integrity": "sha512-a5bNrdiONYB/qE2BuKegvUMd/+ZDwdg4vsNuuSzYE8qs2EYAdK9CynL+Rzn29PbPiUqoz/cbpRbcLzD5lEevHw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-defaults-mode-node@4.2.54",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-defaults-mode-node@4.2.54"
      },
      "attributes": {
        "name": "@smithy/util-defaults-mode-node",
        "version": "4.2.54",
        "lockfile_path": "node_modules/@smithy/util-defaults-mode-node",
        "integrity": "sha512-g1cvrJvOnzeJgEdf7AE4luI7gp6L8weE0y9a9wQUSGtjb8QRHDbCJYuE4Sy0SD9N8RrnNPFsPltAz/OSoBR9Zw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-endpoints@3.4.2",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-endpoints@3.4.2"
      },
      "attributes": {
        "name": "@smithy/util-endpoints",
        "version": "3.4.2",
        "lockfile_path": "node_modules/@smithy/util-endpoints",
        "integrity": "sha512-a55Tr+3OKld4TTtnT+RhKOQHyPxm3j/xL4OR83WBUhLJaKDS9dnJ7arRMOp3t31dcLhApwG9bgvrRXBHlLdIkg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-hex-encoding@4.2.2",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-hex-encoding@4.2.2"
      },
      "attributes": {
        "name": "@smithy/util-hex-encoding",
        "version": "4.2.2",
        "lockfile_path": "node_modules/@smithy/util-hex-encoding",
        "integrity": "sha512-Qcz3W5vuHK4sLQdyT93k/rfrUwdJ8/HZ+nMUOyGdpeGA1Wxt65zYwi3oEl9kOM+RswvYq90fzkNDahPS8K0OIg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-middleware@4.2.14",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-middleware@4.2.14"
      },
      "attributes": {
        "name": "@smithy/util-middleware",
        "version": "4.2.14",
        "lockfile_path": "node_modules/@smithy/util-middleware",
        "integrity": "sha512-1Su2vj9RYNDEv/V+2E+jXkkwGsgR7dc4sfHn9Z7ruzQHJIEni9zzw5CauvRXlFJfmgcqYP8fWa0dkh2Q2YaQyw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-retry@4.3.8",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-retry@4.3.8"
      },
      "attributes": {
        "name": "@smithy/util-retry",
        "version": "4.3.8",
        "lockfile_path": "node_modules/@smithy/util-retry",
        "integrity": "sha512-LUIxbTBi+OpvXpg91poGA6BdyoleMDLnfXjVDqyi2RvZmTveY5loE/FgYUBCR5LU2BThW2SoZRh8dTIIy38IPw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-stream@4.5.25",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-stream@4.5.25"
      },
      "attributes": {
        "name": "@smithy/util-stream",
        "version": "4.5.25",
        "lockfile_path": "node_modules/@smithy/util-stream",
        "integrity": "sha512-/PFpG4k8Ze8Ei+mMKj3oiPICYekthuzePZMgZbCqMiXIHHf4n2aZ4Ps0aSRShycFTGuj/J6XldmC0x0DwednIA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-uri-escape@4.2.2",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-uri-escape@4.2.2"
      },
      "attributes": {
        "name": "@smithy/util-uri-escape",
        "version": "4.2.2",
        "lockfile_path": "node_modules/@smithy/util-uri-escape",
        "integrity": "sha512-2kAStBlvq+lTXHyAZYfJRb/DfS3rsinLiwb+69SstC9Vb0s9vNWkRwpnj918Pfi85mzi42sOqdV72OLxWAISnw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-utf8@4.2.2",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-utf8@4.2.2"
      },
      "attributes": {
        "name": "@smithy/util-utf8",
        "version": "4.2.2",
        "lockfile_path": "node_modules/@smithy/util-utf8",
        "integrity": "sha512-75MeYpjdWRe8M5E3AW0O4Cx3UadweS+cwdXjwYGBW5h/gxxnbeZ877sLPX/ZJA9GVTlL/qG0dXP29JWFCD1Ayw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/util-waiter@4.3.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/util-waiter@4.3.0"
      },
      "attributes": {
        "name": "@smithy/util-waiter",
        "version": "4.3.0",
        "lockfile_path": "node_modules/@smithy/util-waiter",
        "integrity": "sha512-JyjYmLAfS+pdxF92o4yLgEoy0zhayKTw73FU1aofLWwLcJw7iSqIY2exGmMTrl/lmZugP5p/zxdFSippJDfKWA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::@smithy/uuid@1.1.2",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/@smithy/uuid@1.1.2"
      },
      "attributes": {
        "name": "@smithy/uuid",
        "version": "1.1.2",
        "lockfile_path": "node_modules/@smithy/uuid",
        "integrity": "sha512-O/IEdcCUKkubz60tFbGA7ceITTAJsty+lBjNoorP4Z6XRqaFb/OjQjZODophEcuq68nKm6/0r+6/lLQ+XVpk8g==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::bowser@2.14.1",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/bowser@2.14.1"
      },
      "attributes": {
        "name": "bowser",
        "version": "2.14.1",
        "lockfile_path": "node_modules/bowser",
        "integrity": "sha512-tzPjzCxygAKWFOJP011oxFHs57HzIhOEracIgAePE4pqB3LikALKnSzUyU4MGs9/iCEUuHlAJTjTc5M+u7YEGg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::fast-xml-builder@1.1.8",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/fast-xml-builder@1.1.8"
      },
      "attributes": {
        "name": "fast-xml-builder",
        "version": "1.1.8",
        "lockfile_path": "node_modules/fast-xml-builder",
        "integrity": "sha512-sDVBc2gg8pSKvcbE8rBmOyjSGQf0AdsbqvHeIOv3D/uYNoV4eCReQXyDF8Pdv8+m1FHazACypSz2hR7O2S1LLw==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::fast-xml-parser@5.7.2",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/fast-xml-parser@5.7.2"
      },
      "attributes": {
        "name": "fast-xml-parser",
        "version": "5.7.2",
        "lockfile_path": "node_modules/fast-xml-parser",
        "integrity": "sha512-P7oW7tLbYnhOLQk/Gv7cZgzgMPP/XN03K02/Jy6Y/NHzyIAIpxuZIM/YqAkfiXFPxA2CTm7NtCijK9EDu09u2w==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::path-expression-matcher@1.5.0",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/path-expression-matcher@1.5.0"
      },
      "attributes": {
        "name": "path-expression-matcher",
        "version": "1.5.0",
        "lockfile_path": "node_modules/path-expression-matcher",
        "integrity": "sha512-cbrerZV+6rvdQrrD+iGMcZFEiiSrbv9Tfdkvnusy6y0x0GKBXREFg/Y65GhIfm0tnLntThhzCnfKwp1WRjeCyQ==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::sprintf-js@1.1.3",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/sprintf-js@1.1.3"
      },
      "attributes": {
        "name": "sprintf-js",
        "version": "1.1.3",
        "lockfile_path": "node_modules/sprintf-js",
        "integrity": "sha512-Oo+0REFV59/rz3gfJNKQiBlwfHaSESl1pcGyABQsnnIfWOFt6JNj5gCog2U6MLZ//IGYD+nA8nI+mTShREReaA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::strnum@2.2.3",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/strnum@2.2.3"
      },
      "attributes": {
        "name": "strnum",
        "version": "2.2.3",
        "lockfile_path": "node_modules/strnum",
        "integrity": "sha512-oKx6RUCuHfT3oyVjtnrmn19H1SiCqgJSg+54XqURKp5aCMbrXrhLjRN9TjuwMjiYstZ0MzDrHqkGZ5dFTKd+zg==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::tslib@2.8.1",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/tslib@2.8.1"
      },
      "attributes": {
        "name": "tslib",
        "version": "2.8.1",
        "lockfile_path": "node_modules/tslib",
        "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "npm::yaml@1.10.3",
      "type": "npm_package",
      "global_id": {
        "purl": "pkg:npm/yaml@1.10.3"
      },
      "attributes": {
        "name": "yaml",
        "version": "1.10.3",
        "lockfile_path": "node_modules/yaml",
        "integrity": "sha512-vIYeF1u3CjlhAFekPPAk2h/Kv4T3mAkMox5OymRiJQB0spDP10LHvt+K7G9Ny6NuuMAb25/6n1qyUjAcGNf/AA==",
        "function": "Lambda runtime dependency",
        "diagram_label": "Open-source policy and signing tooling running inside CI",
        "public": false,
        "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored",
        "iiw_asset_type": "Software Package (npm)"
      },
      "security_category": {
        "confidentiality": "not-applicable",
        "integrity": "moderate",
        "availability": "not-applicable"
      },
      "information_flow": []
    },
    {
      "component_id": "html::404.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "f7e327fd0f8b76913e1c26979a10a080dac8d6393fba73952be03b9f1428a5f1"
      },
      "attributes": {
        "path": "404.html",
        "size_bytes": 4821,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::index.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "cc9e7caeeae514ba6435af63d1ea775c938cd7f352d711223c147fb01fda4ce1"
      },
      "attributes": {
        "path": "index.html",
        "size_bytes": 11359,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/about.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "041b5123bcdc001a22d6941df540a0d935e0e6cea66d80bd5d4c9f51cdd92b2a"
      },
      "attributes": {
        "path": "pages/about.html",
        "size_bytes": 5665,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/activities.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "23eb7d95d5f930eeae9afdb931d1759575ebbdcd99861236984c84e307e7798f"
      },
      "attributes": {
        "path": "pages/activities.html",
        "size_bytes": 12631,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-1.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "2341ab4e4f2409eebad29d932f4588a73294362595bdab4bbe776c04ceac45e6"
      },
      "attributes": {
        "path": "pages/article-1.html",
        "size_bytes": 14565,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-10.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "6b2bbd7c39ce84cc3c5a3702c8cef4592a41c14d80e3f3fff796f619e64599d5"
      },
      "attributes": {
        "path": "pages/article-10.html",
        "size_bytes": 18231,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-11.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "6b7fd82bace836ce02a6d30767ce5566d7c29e114d82b854e6c5dbd3bdd683a7"
      },
      "attributes": {
        "path": "pages/article-11.html",
        "size_bytes": 11900,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-12.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "ec68a2753a9212fbc4f69e524d59cf1a7851f17e204a4bf0dd75f789022255d8"
      },
      "attributes": {
        "path": "pages/article-12.html",
        "size_bytes": 8178,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-13.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "2f55b00140bdb2541e591654c0bec506a51de73d83e628493216e4286297d857"
      },
      "attributes": {
        "path": "pages/article-13.html",
        "size_bytes": 17887,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-14.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "99b9c7d4207b06cb0f2ed380af1eabc3230a86bca2304bc5c3f0736aad3fdcc5"
      },
      "attributes": {
        "path": "pages/article-14.html",
        "size_bytes": 17532,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-15.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "eaf9ebe51d3707d1ab1ff563aeff5c3e949c246f4488f436d48fe205e946839c"
      },
      "attributes": {
        "path": "pages/article-15.html",
        "size_bytes": 10845,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-16.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "17a5bd8fe00f631b3d8a9d9d78ec741d79316e0611b17034634776bc02b4b100"
      },
      "attributes": {
        "path": "pages/article-16.html",
        "size_bytes": 7996,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-17.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "995a8358b7c8c9a45c58368cbcc85058fb253b835455762846a5a58d395e80d8"
      },
      "attributes": {
        "path": "pages/article-17.html",
        "size_bytes": 28170,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-18.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "4e357901fc480a12d7d8bffcebff94cfb507f6154c3d9445de9d616ce7415b64"
      },
      "attributes": {
        "path": "pages/article-18.html",
        "size_bytes": 20659,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-19.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "822088d11e7b518069ad8e64dcd5af75b9f507c3f0ac200ac2291a3365ad3e38"
      },
      "attributes": {
        "path": "pages/article-19.html",
        "size_bytes": 12355,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-2.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "b4706509d027dd313c5a3703e6e73c06e3233172b01a0e42c2edf7c812146029"
      },
      "attributes": {
        "path": "pages/article-2.html",
        "size_bytes": 20186,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-20.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "456ae348589935a4b4ae6cc323ba1b3327ead74244f44e0275a03339033885e3"
      },
      "attributes": {
        "path": "pages/article-20.html",
        "size_bytes": 17458,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-21.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "1432c1eb7d4734c09bdd6d383abdab8caef72e864e833cb612a0585fe7a93f78"
      },
      "attributes": {
        "path": "pages/article-21.html",
        "size_bytes": 14329,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-22.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "6ce53e6c4037a386cd268cd1ea7f54289cd838c378a6247b31a09eb2949a755d"
      },
      "attributes": {
        "path": "pages/article-22.html",
        "size_bytes": 21594,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-23.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "de8a32be00875b60eba837efe10e97d73e32215a060cf4f2050d744d419670e3"
      },
      "attributes": {
        "path": "pages/article-23.html",
        "size_bytes": 29888,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-24.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "3d1cf1013dcd1e119d090aa8e5514c102c9e1933dc3b96b30c89fc0175a37a41"
      },
      "attributes": {
        "path": "pages/article-24.html",
        "size_bytes": 7691,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-25.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "1fdf4449afafac30c5ef1cb3372d4309d7b957949d0d9a8b9dbdb45b45479435"
      },
      "attributes": {
        "path": "pages/article-25.html",
        "size_bytes": 11770,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-26.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "dfd293d90567862940f955d63455c41ed5ba3f1dc20d764813b400c1f13ce9be"
      },
      "attributes": {
        "path": "pages/article-26.html",
        "size_bytes": 11938,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-27.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "6054790ca72e5bad7ca342222a85b91bc2e60750efe46e59d5e7d7b54cc5775e"
      },
      "attributes": {
        "path": "pages/article-27.html",
        "size_bytes": 16674,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-3.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "358916e7a392c32119c0f2f00bd433152222e7652fcd909778b15808ab5b3cd5"
      },
      "attributes": {
        "path": "pages/article-3.html",
        "size_bytes": 19466,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-4.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "b6b726f59f47a11b371c0576a05f284c92b96df56b26e83ed64c79e59f945547"
      },
      "attributes": {
        "path": "pages/article-4.html",
        "size_bytes": 13547,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-5.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "69c780dac642c6d7b194a17a906fcc16481082ea2471ee3afc44e9acc75d62be"
      },
      "attributes": {
        "path": "pages/article-5.html",
        "size_bytes": 19167,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-6.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "d2ddf6d1159bf64ce025a726cc65d6db4f737a0e2533b1f4f446e6ef150cc8bf"
      },
      "attributes": {
        "path": "pages/article-6.html",
        "size_bytes": 17666,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-7.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "d8d5694ce12cd7a89aee5b11f075586ec4e80252632356fd79298183cefeb6ed"
      },
      "attributes": {
        "path": "pages/article-7.html",
        "size_bytes": 19310,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-8.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "d5d770530a5c6330fdc3304c119f4feb0b874d65559331743a3305775bed7d76"
      },
      "attributes": {
        "path": "pages/article-8.html",
        "size_bytes": 24048,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/article-9.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "ab52fede77f69c52a43b8570060073a34e9b5d61d1813dca01e343cdfeeccfde"
      },
      "attributes": {
        "path": "pages/article-9.html",
        "size_bytes": 15520,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/articles.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "c2ea30c2c3f607c332474f28bb65faec1d4dae5e06d63931d2ee4de819503c97"
      },
      "attributes": {
        "path": "pages/articles.html",
        "size_bytes": 29128,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/books.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "e3e43eb73789b78a0db50ab763710e187924fee89bacd5d2e7da25f31f2d8370"
      },
      "attributes": {
        "path": "pages/books.html",
        "size_bytes": 6337,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/contact.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "ae0caa4921677d9a5b5a641365ce79bab07c92047689c5e5c519c6399f3b12d2"
      },
      "attributes": {
        "path": "pages/contact.html",
        "size_bytes": 5516,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/projects.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "502e753834f86eb3caefc8ec0f76313f06a4d9c5bfe8d6e868c1fa5e545fecf8"
      },
      "attributes": {
        "path": "pages/projects.html",
        "size_bytes": 7618,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/success.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "55220f90b642b56c402071299f02a6b0592cd9f3b9900c0e70ea4440edc11e0e"
      },
      "attributes": {
        "path": "pages/success.html",
        "size_bytes": 4075,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::pages/support.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "05ac5e224a4fce70f84caf38c274a1059f7805479cf1a39e73f083e9ebeafe81"
      },
      "attributes": {
        "path": "pages/support.html",
        "size_bytes": 5877,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::research/authorization-boundary.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "4806de972091ce2fb8858e1bdda5319921f9ba6f88b03692d7b2298596dbc3cd"
      },
      "attributes": {
        "path": "research/authorization-boundary.html",
        "size_bytes": 15489,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::research/the-plumbing.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "9fd81bc7d933a416962a4450dac480c4e131f53b4323683156dd491f2b274018"
      },
      "attributes": {
        "path": "research/the-plumbing.html",
        "size_bytes": 38603,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::research/tuning-the-eigenvalue.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "c5abb198bd1a7e292603f6cf1645650963a6ec864aa51502abbc4e6f4878a79d"
      },
      "attributes": {
        "path": "research/tuning-the-eigenvalue.html",
        "size_bytes": 104454,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "html::viewer.html",
      "type": "html_artifact",
      "global_id": {
        "sha256": "427a2e13e8f758ff351995aeedd0caef70a0ffb331bc538952a2bf9d3870e1fc"
      },
      "attributes": {
        "path": "viewer.html",
        "size_bytes": 9780,
        "function": "Public site content",
        "diagram_label": "S3 origin bucket (content)",
        "public": true,
        "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory",
        "iiw_asset_type": "Static Content Artifact"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": [
        {
          "direction": "outbound",
          "counterparty": "object_store",
          "channel": "aws-internal-tls",
          "data_class": "public-content"
        }
      ]
    },
    {
      "component_id": "ext::sigstore-fulcio",
      "type": "external_service",
      "native_id": "https://fulcio.sigstore.dev",
      "attributes": {
        "name": "Sigstore Fulcio",
        "purpose": "Issues short-lived X.509 signing certificates per CI run",
        "cia_impact": "signing-chain integrity",
        "verification_mechanism": "OIDC token bound to GitHub Actions workflow identity",
        "fedramp_status": "external; no separate FedRAMP authorization",
        "function": "External service in boundary per ROT #2 (affects CIA without separate FedRAMP ATO)",
        "diagram_label": "External service",
        "public": true,
        "baseline_configuration": "Public service; configuration governed by upstream provider; verification mechanism noted in attributes",
        "iiw_asset_type": "External Service (no FedRAMP ATO)"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": []
    },
    {
      "component_id": "ext::sigstore-rekor",
      "type": "external_service",
      "native_id": "https://rekor.sigstore.dev",
      "attributes": {
        "name": "Sigstore Rekor",
        "purpose": "Append-only public transparency log of every signature",
        "cia_impact": "signing-chain integrity",
        "verification_mechanism": "Inclusion proof checked by cosign verify-blob",
        "fedramp_status": "external; no separate FedRAMP authorization",
        "function": "External service in boundary per ROT #2 (affects CIA without separate FedRAMP ATO)",
        "diagram_label": "External service",
        "public": true,
        "baseline_configuration": "Public service; configuration governed by upstream provider; verification mechanism noted in attributes",
        "iiw_asset_type": "External Service (no FedRAMP ATO)"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": []
    },
    {
      "component_id": "ext::github-oidc",
      "type": "external_service",
      "native_id": "https://token.actions.githubusercontent.com",
      "attributes": {
        "name": "GitHub Actions OIDC token issuer",
        "purpose": "Issues per-workflow-run identity tokens consumed by Fulcio and AWS",
        "cia_impact": "identity / authentication",
        "verification_mechanism": "JWT signature verification against the issuer's public JWKS",
        "fedramp_status": "external; no separate FedRAMP authorization",
        "function": "External service in boundary per ROT #2 (affects CIA without separate FedRAMP ATO)",
        "diagram_label": "External service",
        "public": true,
        "baseline_configuration": "Public service; configuration governed by upstream provider; verification mechanism noted in attributes",
        "iiw_asset_type": "External Service (no FedRAMP ATO)"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": []
    },
    {
      "component_id": "ext::github-repo",
      "type": "external_service",
      "native_id": "https://github.com/sam-aydlette/samaydlette.com",
      "attributes": {
        "name": "GitHub repository + Actions",
        "purpose": "Source of record; CI/CD orchestrator",
        "cia_impact": "deploy-chain integrity",
        "verification_mechanism": "Branch protection on main, OPA gate, SCN tag validator, secret scanning with push protection",
        "fedramp_status": "external; no separate FedRAMP authorization",
        "function": "External service in boundary per ROT #2 (affects CIA without separate FedRAMP ATO)",
        "diagram_label": "External service",
        "public": true,
        "baseline_configuration": "Public service; configuration governed by upstream provider; verification mechanism noted in attributes",
        "iiw_asset_type": "External Service (no FedRAMP ATO)"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": []
    },
    {
      "component_id": "ext::duo-mfa",
      "type": "external_service",
      "native_id": "duo:operator-mfa",
      "attributes": {
        "name": "Duo (operator MFA)",
        "purpose": "Multi-factor authentication for AWS root and the GitHub account",
        "cia_impact": "privileged-account authentication",
        "verification_mechanism": "Operator-side configuration; tenant identifier intentionally not published in this inventory.",
        "fedramp_status": "external; no separate FedRAMP authorization",
        "function": "External service in boundary per ROT #2 (affects CIA without separate FedRAMP ATO)",
        "diagram_label": "External service",
        "public": true,
        "baseline_configuration": "Public service; configuration governed by upstream provider; verification mechanism noted in attributes",
        "iiw_asset_type": "External Service (no FedRAMP ATO)"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": []
    },
    {
      "component_id": "ext::github-advisory-db",
      "type": "external_service",
      "native_id": "https://github.com/advisories",
      "attributes": {
        "name": "GitHub Advisory Database",
        "purpose": "Upstream vulnerability data for Dependabot",
        "cia_impact": "VDR ingest accuracy",
        "verification_mechanism": "Public service; corroborated against CISA KEV",
        "fedramp_status": "external; no separate FedRAMP authorization",
        "function": "External service in boundary per ROT #2 (affects CIA without separate FedRAMP ATO)",
        "diagram_label": "External service",
        "public": true,
        "baseline_configuration": "Public service; configuration governed by upstream provider; verification mechanism noted in attributes",
        "iiw_asset_type": "External Service (no FedRAMP ATO)"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": []
    },
    {
      "component_id": "ext::cisa-kev",
      "type": "external_service",
      "native_id": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "attributes": {
        "name": "CISA Known Exploited Vulnerabilities catalog",
        "purpose": "Authoritative list of CVEs known to be actively exploited",
        "cia_impact": "VDR ingest accuracy",
        "verification_mechanism": "U.S. federal government source",
        "fedramp_status": "external; U.S. federal government source",
        "function": "External service in boundary per ROT #2 (affects CIA without separate FedRAMP ATO)",
        "diagram_label": "External service",
        "public": true,
        "baseline_configuration": "Public service; configuration governed by upstream provider; verification mechanism noted in attributes",
        "iiw_asset_type": "External Service (no FedRAMP ATO)"
      },
      "security_category": {
        "confidentiality": "low",
        "integrity": "moderate",
        "availability": "low"
      },
      "information_flow": []
    }
  ],
  "validations": [
    {
      "validation_id": "v-0002",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "aws::cdn_distribution::website"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0008",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "aws::function::opa_compliance"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0014",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "aws::object_store::website"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0019",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::research/the-plumbing.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0020",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::research/tuning-the-eigenvalue.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0021",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::research/authorization-boundary.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0022",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::index.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0023",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::viewer.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0024",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::404.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0025",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-11.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0026",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/activities.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0027",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-5.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0028",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/success.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0029",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/books.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0030",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-6.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0031",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-20.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0032",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-24.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0033",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-7.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0034",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-3.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0035",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-1.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0036",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-21.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0037",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/support.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0038",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-17.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0039",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-23.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0040",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-10.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0041",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-19.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0042",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-4.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0043",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-9.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0044",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/contact.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0045",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-2.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0046",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-15.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0047",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/articles.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0048",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-16.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0049",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/about.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0050",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/projects.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0051",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-18.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0052",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-25.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0053",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-13.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0054",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-14.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0055",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-22.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0056",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-27.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0057",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-12.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0058",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-26.html"
      ],
      "violations": []
    },
    {
      "validation_id": "v-0059",
      "policy": {
        "id": "terraform.compliance",
        "version": "1.0"
      },
      "result": "pass",
      "component_refs": [
        "html::pages/article-8.html"
      ],
      "violations": []
    }
  ],
  "ownership": {
    "system_owner": "Sam Aydlette",
    "application_owner": "Sam Aydlette",
    "operator_contact": "sam.aydlette@gmail.com"
  },
  "disclosure": {
    "authorization_status": "self-attested-proof-of-concept",
    "fedramp_certified": false,
    "remarks": "This system is not FedRAMP-authorized. The artifacts published at /.well-known/ are self-attested by the operator and demonstrate an architectural pattern aligned with FedRAMP NTC-0009 (machine-readable authorization data, text-based equivalents, the five Balance Improvement Releases folding into default requirements). See https://samsite.unified-systems.com/research/the-plumbing.html for context and limitations.",
    "related_artifacts": {
      "oscal_ssp": "https://samsite.unified-systems.com/.well-known/oscal-ssp.json",
      "oscal_poam": "https://samsite.unified-systems.com/.well-known/oscal-poam.json",
      "vdr_report": "https://samsite.unified-systems.com/.well-known/vdr-report.json",
      "iiw_csv": "https://samsite.unified-systems.com/.well-known/iiw.csv",
      "runtime_signal": "https://samsite.unified-systems.com/.well-known/ksi-signal-runtime.json",
      "boundary_diagram": "https://samsite.unified-systems.com/research/authorization-boundary.html",
      "research_paper": "https://samsite.unified-systems.com/research/the-plumbing.html"
    }
  }
}
