{
  "id": "lib-process:security-compliance--security-attestation-workflow",
  "_kind": "LibraryProcess",
  "_file": "generated-library/processes.yaml",
  "_cluster": "generated-library",
  "attributes": {
    "displayName": "specializations/security-compliance/security-attestation-workflow",
    "description": "Security certification and attestation end-to-end workflow (SOC 2 / ISO 27001\n  shape). Scope + system-boundary definition -> framework control mapping -> scope-integrity\n  adversarial gate -> parallel per-control evidence collection (ctx.parallel.map) fanned out\n  alongside parallel scan-family evidence (ctx.parallel.all over sast/dast/sca/container/iac)\n  -> bounded gap-remediation loop that always returns to the gate -> adversarial\n  evidence-sufficiency gate whose critics INDEPENDENTLY RE-COLLECT a sampled subset of\n  control evidence by executing the check themselves -> policy-gated control exceptions and\n  residual-risk acceptances -> attestation package draft -> policy-gated management sign-off\n  -> policy-gated external evidence release / report issuance -> continuous-monitoring\n  handoff -> kip assert of the attestation register.",
    "libraryPath": "library/specializations/security-compliance/security-attestation-workflow.js",
    "specialization": "security-compliance",
    "usesAgents": [
      "attestation-scope-architect",
      "control-framework-mapper",
      "control-gap-assessor",
      "scope-artifact-compiler",
      "control-evidence-collector",
      "security-scan-evidence-collector",
      "control-gap-remediator",
      "evidence-index-compiler",
      "residual-risk-assessor",
      "attestation-package-author",
      "attestation-signoff-recorder",
      "evidence-release-curator",
      "external-report-issuer",
      "continuous-monitoring-planner"
    ]
  },
  "outgoingEdges": [
    {
      "from": "lib-process:security-compliance--security-attestation-workflow",
      "to": "skill-area:compliance-automation",
      "kind": "lib_requires_skill_area",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--security-attestation-workflow",
      "to": "domain:security",
      "kind": "lib_applies_to_domain",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--security-attestation-workflow",
      "to": "role:ciso",
      "kind": "lib_involves_role",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--security-attestation-workflow",
      "to": "role:compliance-officer",
      "kind": "lib_involves_role",
      "attributes": {
        "weight": 0.7
      }
    },
    {
      "from": "lib-process:security-compliance--security-attestation-workflow",
      "to": "role:security-engineer",
      "kind": "lib_involves_role",
      "attributes": {
        "weight": 0.5
      }
    },
    {
      "from": "lib-process:security-compliance--security-attestation-workflow",
      "to": "workflow:compliance-audit",
      "kind": "lib_implements_workflow",
      "attributes": {
        "weight": 1
      }
    },
    {
      "from": "lib-process:security-compliance--security-attestation-workflow",
      "to": "specialization:security-compliance",
      "kind": "lib_belongs_to_specialization",
      "attributes": {
        "weight": 1
      }
    }
  ],
  "incomingEdges": []
}