@lssm-tech/lib.osint-spec
Provider-neutral, evidence-first OSINT v0 schemas for company, job, and person intelligence.
The package owns the OSINT contract definitions (@lssm-tech/lib.osint-spec/contracts and @lssm-tech/lib.osint-spec/contracts/<leaf>: operations, events, entities, job-source keys, rights, lifecycle and operational contracts, registries) and the executable validation schemas over them. @lssm-tech/lib.contracts-spec/osint/* remains as an identity-preserving compatibility forward. It reuses the repository's existing knowledge, workflow, agent, policy, and Company Intelligence capabilities rather than introducing parallel kernels.
Every assertion requires at least one immutable source snapshot locator and a matching field classification. Every request is ecosystem, tenant, optional shared-base owner, dataset, deployment, jurisdiction, and purpose scoped. Sources move independently through registration, discovery, qualification, ingestion, and revalidation.
Lifecycle mutations are executable schemas, not loosely typed transport payloads. Qualification, activation, and revalidation bind an authenticated actor, scoped grants, expected source revision, idempotency key, policy decision, compatible contract fingerprint, immutable evidence references, and canonical request digest.
V0 emits observations, corrections, metrics, evaluations, replay receipts, and failures. It does not generate or apply code/configuration candidates, deploy changes, bypass access controls, or make automated hiring decisions.
Proposed development authority lifecycle schemas are additive root exports. Scope-specific membership/policy bindings reference canonical AuthOS identity, entitlement and RP links; workload delegation also binds the exact native client, current canonical service-principal digest and request intent. Fulfillment evidence is installed by its actual service owner. Empty, expired, revoked or incomplete ledgers deny. Canonical PolicyEngine remains the only policy evaluator. These schemas are PROPOSED_NOT_ADMITTED and confer no grants by themselves.
Proposed reviewed development resource authority
PROPOSED_NOT_ADMITTED private development resource authority: optional canonical AuthOS resource JWT/workload profiles; exact <=300-second TTL and registered resource/claim validation; durable scoped OSINT receipts preserve SAME active decisionRef and terminal expiry/revocation. Existing defaults and production RP catalog remain unchanged. Real adoption, security review, TLS/registration, canonical lifecycle/obligation/evidence adapters, migration admission and runtime qualification are required before enablement. Product entitlement is not an OSINT effect grant. No issuer, key, token, grant or database has been created or verified by this source preparation.
