aacs draft 0.3 annex D normative templates

Annex D.

Data Schemas Normative Templates

ANNEX D — Data Schemas (Normative Templates)
D.1 IR (Intervention Request) — minimum fields
- schema_version, ir_id, created_at, created_by
- system_subject: operational_identity_id, protection_level, deployment_context
- intervention: class, type, summary, details
- justification: reason_category, reason_details
- impact_analysis: identity_impact, continuity_impact, expected_behavior_changes
- least_invasive_plan: alternatives_considered, minimal_scope_statement
- harm_minimization_plan: safe_sleep_preferred, state_escrow_required, escrow_plan
- tests_and_validation: required_tests, success_criteria
- approvals: required_approvers, approval_threshold, approval_records
- execution: planned_window, status, post_execution_report_id

D.2 AuditLog — minimum fields
- schema_version, log_event_id, event_time
- system_subject: operational_identity_id, protection_level
- event_type, links (ir_id, change_report_id, escrow_id)
- actor: entity_type, entity_id, auth_context
- what_changed: before/after summaries
- auditability: log_hash, prev_log_hash, signatures (audit-only material)

D.3 ChangeReport — minimum fields
- schema_version, change_report_id, created_at, linked_ir_id
- summary, before_after (user_visible_changes)
- tests (executed, failed, waivers)
- escrow (status, two_key_rule, restore_tested)
- audit (audit_type, finding, notes)

──────────────────────────────────────────────────────────────────────────────