CCoE conformance: OID identification, CBOM releases, attestation register and policy packs - #2

Open

rajnishprecogs wants to merge 32 commits into

mainfrom

feat/ccoe-conformance-attestation

Commits on Aug 1, 2026

feat(ccoe): OID registry, service profiles and attestation register

rajnishprecogs
and
claude
committed
d2621bd
feat(gen-009): per-component SSH cryptographic configuration profile

rajnishprecogs
and
claude
committed
0cfdd24
feat(gen-005): semantic CBOM diff, versioning and signed change log

rajnishprecogs
and
claude
committed
afdd4b0
feat(clm): certificate lifecycle connector and CLM-001/003/004 profiles

rajnishprecogs
and
claude
committed
c90b0a2
feat(hsm): agent CBOM ingest, artefact identity and HSM/PCAM profiles

rajnishprecogs
and
claude
committed
5ae36b2
fix(hsm): treat an unreported PKCS#11 attribute as undetermined, not false

rajnishprecogs
and
claude
committed
aa009a3

Commits on Aug 2, 2026

feat(gen-006): ML-DSA-65 CBOM signing, with hybrid transition support

rajnishprecogs
and
claude
committed
ed454f8
feat(gen-001): version-parameterised CycloneDX emit and ingest

rajnishprecogs
and
claude
committed
61dcb20
feat(gen-001,gen-004): CycloneDX 1.7 support and OIDs in emitted CBOMs

rajnishprecogs
and
claude
committed
66747d7

Commits on Aug 11, 2026

GEN-005: a first CBOM release is 1.0.0, not 0.1.0

rajnishprecogs
and
claude
committed
eb74a98
Add organisational cryptographic policy packs

rajnishprecogs
and
claude
committed
b9eba9f

Commits on Aug 12, 2026

Expose policy packs through the compliance module

rajnishprecogs
and
claude
committed
fc2dbba
feat(gen-004): identify all 96 registered algorithm families from the CycloneDX registry

rajnishprecogs
and
claude
committed
34b931e
feat(gen-004): assess all 96 registry families in the Precogs overlay

rajnishprecogs
and
claude
committed
0ab4337
feat(gen-004): resolve all 246 registry curves, not a curated nine

rajnishprecogs
and
claude
committed
196f419
fix(scanners): identify findings against the registry, not a fifty-entry table

rajnishprecogs
and
claude
committed
a53ce45
feat(gen-004): cite the standard behind every family in Appendix A

rajnishprecogs
and
claude
committed
e32925d
fix(gen-004): identify bare family names, pre-standardisation names, and fix the AES tiebreak

rajnishprecogs
and
claude
committed
d1cc3b6
feat(pqc): identify the post-quantum families the CycloneDX registry omits

rajnishprecogs
and
claude
committed
fa34c8c
fix(output): emit CBOM algorithm properties from the registry

rajnishprecogs
and
claude
committed
c5feb8c
feat(docs): generate the CycloneDX registry appendix instead of transcribing it

rajnishprecogs
and
claude
committed
ca222bd
Give certificates an identity, and judge every key on its real strength

AbhishekPrecogsAI
and
claude
committed
a2d70a1
fix(gen-004): identify unqualified RSA, and stop treating one family's variants as ambiguity

rajnishprecogs
and
claude
committed
e6a72c7
Merge branch 'feat/ccoe-conformance-attestation' of https://github.com/PrecogsAI/precogs-ai-cbom into feat/ccoe-conformance-attestation
rajnishprecogs
committed
5d47d27
Record the certificate chain an endpoint actually presents

AbhishekPrecogsAI
and
claude
committed
a018c47
Ask servers which cipher suites they accept, rather than watching one handshake

AbhishekPrecogsAI
and
claude
committed
4a510d3

Commits on Aug 13, 2026

fix(hsm): identify HSM keys against the registry and emit them as assets

rajnishprecogs
and
claude
committed
952a737

Commits on Aug 14, 2026

Commits on Aug 18, 2026

feat(gen-004): resolve the national and legacy OID arcs, 26 families to 41

rajnishprecogs
and
claude
committed
04ff3c5