This commit is contained in:
@@ -0,0 +1,37 @@
|
||||
<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="760" viewBox="0 0 1200 760" role="img" aria-labelledby="title desc">
|
||||
<title id="title">Матрица evidence для учебного аудита</title>
|
||||
<desc id="desc">Четыре synthetic карточки evidence: scope map, owner route, permission limit и remediation gate. Каждая имеет статус не внешне подтверждено. Нижняя полоса разделяет evidence, разрешение, finding и compliance.</desc>
|
||||
<rect width="1200" height="760" fill="#101827"/>
|
||||
<text x="58" y="66" fill="#f8fafc" font-family="Arial, sans-serif" font-size="34" font-weight="700">Evidence matrix: что известно и чего ещё нет</text>
|
||||
<text x="58" y="98" fill="#bae6fd" font-family="Arial, sans-serif" font-size="20">Одна карточка связывает scope, owner, статус и следующий gate. Она не выдаёт permission или finding.</text>
|
||||
<rect x="58" y="138" width="1084" height="70" rx="12" fill="#223247"/>
|
||||
<text x="87" y="183" fill="#e0f2fe" font-family="Arial, sans-serif" font-size="22" font-weight="700">Карточка</text>
|
||||
<text x="430" y="183" fill="#e0f2fe" font-family="Arial, sans-serif" font-size="22" font-weight="700">Связь со scope</text>
|
||||
<text x="700" y="183" fill="#e0f2fe" font-family="Arial, sans-serif" font-size="22" font-weight="700">Owner / status</text>
|
||||
<text x="950" y="183" fill="#e0f2fe" font-family="Arial, sans-serif" font-size="22" font-weight="700">Следующий шаг</text>
|
||||
<g font-family="Arial, sans-serif" font-size="19">
|
||||
<rect x="58" y="218" width="1084" height="88" fill="#16334b" stroke="#5eead4" stroke-width="1"/>
|
||||
<text x="87" y="255" fill="#f8fafc" font-weight="700">scope map</text><text x="87" y="281" fill="#bae6fd">synthetic card</text>
|
||||
<text x="430" y="269" fill="#ccfbf1">asset boundaries</text>
|
||||
<text x="700" y="255" fill="#ccfbf1">web owner</text><text x="700" y="281" fill="#fcd34d">not externally verified</text>
|
||||
<text x="950" y="269" fill="#ccfbf1">confirm map</text>
|
||||
<rect x="58" y="306" width="1084" height="88" fill="#1e3150" stroke="#93c5fd" stroke-width="1"/>
|
||||
<text x="87" y="343" fill="#f8fafc" font-weight="700">owner route</text><text x="87" y="369" fill="#bfdbfe">synthetic card</text>
|
||||
<text x="430" y="357" fill="#dbeafe">identity boundary</text>
|
||||
<text x="700" y="343" fill="#dbeafe">identity owner</text><text x="700" y="369" fill="#fcd34d">not externally verified</text>
|
||||
<text x="950" y="357" fill="#dbeafe">ask owner</text>
|
||||
<rect x="58" y="394" width="1084" height="88" fill="#3b304f" stroke="#c4b5fd" stroke-width="1"/>
|
||||
<text x="87" y="431" fill="#f8fafc" font-weight="700">permission limit</text><text x="87" y="457" fill="#ddd6fe">synthetic card</text>
|
||||
<text x="430" y="445" fill="#ede9fe">declared boundary</text>
|
||||
<text x="700" y="431" fill="#ede9fe">real permission: no</text><text x="700" y="457" fill="#fcd34d">not externally verified</text>
|
||||
<text x="950" y="445" fill="#ede9fe">get approval</text>
|
||||
<rect x="58" y="482" width="1084" height="88" fill="#46311e" stroke="#fbbf24" stroke-width="1"/>
|
||||
<text x="87" y="519" fill="#fef3c7" font-weight="700">remediation gate</text><text x="87" y="545" fill="#fde68a">synthetic card</text>
|
||||
<text x="430" y="533" fill="#fef3c7">change boundary</text>
|
||||
<text x="700" y="519" fill="#fef3c7">web owner</text><text x="700" y="545" fill="#fcd34d">not externally verified</text>
|
||||
<text x="950" y="533" fill="#fef3c7">review before change</text>
|
||||
</g>
|
||||
<rect x="58" y="608" width="1084" height="104" rx="14" fill="#3a1720" stroke="#fb7185" stroke-width="2"/>
|
||||
<text x="87" y="649" fill="#fecdd3" font-family="Arial, sans-serif" font-size="22" font-weight="700">Evidence ≠ permission ≠ finding ≠ coverage/compliance</text>
|
||||
<text x="87" y="685" fill="#fecdd3" font-family="Arial, sans-serif" font-size="19">Synthetic records не читают код, логи и secrets; они не выполняют тест и не подтверждают реальный продукт.</text>
|
||||
</svg>
|
||||
|
After Width: | Height: | Size: 4.1 KiB |
@@ -0,0 +1,56 @@
|
||||
<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="760" viewBox="0 0 1200 760" role="img" aria-labelledby="title desc">
|
||||
<title id="title">Безопасный маршрут triage для учебного аудита</title>
|
||||
<desc id="desc">Три synthetic карточки идут по порядку к проверочным gate: authz boundary к подтверждению evidence и owner, identity contract к подтверждению scope, upload delivery к плану валидации и rollback. Ни один путь не ведёт к автоматическому исправлению.</desc>
|
||||
<rect width="1200" height="760" fill="#0e1726"/>
|
||||
<text x="54" y="66" fill="#f8fafc" font-family="Arial, sans-serif" font-size="34" font-weight="700">Triage: сначала gate, потом изменение</text>
|
||||
<text x="54" y="99" fill="#bae6fd" font-family="Arial, sans-serif" font-size="20">Порядок объясняется evidence, boundary, owner и обратимостью. Это не риск-оценка и не remediation.</text>
|
||||
<defs>
|
||||
<marker id="routeArrow" markerWidth="10" markerHeight="10" refX="8" refY="5" orient="auto"><path d="M0,0 L10,5 L0,10 z" fill="#67e8f9"/></marker>
|
||||
</defs>
|
||||
<g font-family="Arial, sans-serif">
|
||||
<rect x="58" y="156" width="302" height="154" rx="16" fill="#3d2031" stroke="#fb7185" stroke-width="2"/>
|
||||
<text x="82" y="197" fill="#fff1f2" font-size="24" font-weight="700">1. authz boundary</text>
|
||||
<text x="82" y="231" fill="#fecdd3" font-size="18">evidence gap</text>
|
||||
<text x="82" y="260" fill="#fecdd3" font-size="18">public entry</text>
|
||||
<text x="82" y="289" fill="#fecdd3" font-size="18">reversible draft</text>
|
||||
<rect x="450" y="156" width="302" height="154" rx="16" fill="#193d4a" stroke="#5eead4" stroke-width="2"/>
|
||||
<text x="474" y="197" fill="#ecfeff" font-size="24" font-weight="700">Gate 1</text>
|
||||
<text x="474" y="232" fill="#ccfbf1" font-size="18">confirm evidence</text>
|
||||
<text x="474" y="261" fill="#ccfbf1" font-size="18">and owner</text>
|
||||
<text x="474" y="290" fill="#fcd34d" font-size="18">before change</text>
|
||||
<path d="M360 233 L450 233" fill="none" stroke="#67e8f9" stroke-width="5" marker-end="url(#routeArrow)"/>
|
||||
<rect x="58" y="354" width="302" height="154" rx="16" fill="#30244f" stroke="#c4b5fd" stroke-width="2"/>
|
||||
<text x="82" y="395" fill="#f5f3ff" font-size="24" font-weight="700">2. identity contract</text>
|
||||
<text x="82" y="429" fill="#ddd6fe" font-size="18">owner confirmation</text>
|
||||
<text x="82" y="458" fill="#ddd6fe" font-size="18">third-party boundary</text>
|
||||
<text x="82" y="487" fill="#ddd6fe" font-size="18">scope unknown</text>
|
||||
<rect x="450" y="354" width="302" height="154" rx="16" fill="#193d4a" stroke="#5eead4" stroke-width="2"/>
|
||||
<text x="474" y="395" fill="#ecfeff" font-size="24" font-weight="700">Gate 2</text>
|
||||
<text x="474" y="430" fill="#ccfbf1" font-size="18">confirm scope</text>
|
||||
<text x="474" y="459" fill="#ccfbf1" font-size="18">with owner</text>
|
||||
<text x="474" y="488" fill="#fcd34d" font-size="18">before change</text>
|
||||
<path d="M360 431 L450 431" fill="none" stroke="#67e8f9" stroke-width="5" marker-end="url(#routeArrow)"/>
|
||||
<rect x="58" y="552" width="302" height="154" rx="16" fill="#4a351d" stroke="#fbbf24" stroke-width="2"/>
|
||||
<text x="82" y="593" fill="#fffbeb" font-size="24" font-weight="700">3. upload delivery</text>
|
||||
<text x="82" y="627" fill="#fde68a" font-size="18">test plan absent</text>
|
||||
<text x="82" y="656" fill="#fde68a" font-size="18">user-content boundary</text>
|
||||
<text x="82" y="685" fill="#fde68a" font-size="18">rollback required</text>
|
||||
<rect x="450" y="552" width="302" height="154" rx="16" fill="#193d4a" stroke="#5eead4" stroke-width="2"/>
|
||||
<text x="474" y="593" fill="#ecfeff" font-size="24" font-weight="700">Gate 3</text>
|
||||
<text x="474" y="628" fill="#ccfbf1" font-size="18">write validation</text>
|
||||
<text x="474" y="657" fill="#ccfbf1" font-size="18">and rollback plan</text>
|
||||
<text x="474" y="686" fill="#fcd34d" font-size="18">before change</text>
|
||||
<path d="M360 629 L450 629" fill="none" stroke="#67e8f9" stroke-width="5" marker-end="url(#routeArrow)"/>
|
||||
</g>
|
||||
<rect x="810" y="156" width="332" height="550" rx="18" fill="#1b2738" stroke="#94a3b8" stroke-width="2"/>
|
||||
<text x="842" y="203" fill="#f8fafc" font-family="Arial, sans-serif" font-size="25" font-weight="700">Не происходит</text>
|
||||
<text x="842" y="250" fill="#cbd5e1" font-family="Arial, sans-serif" font-size="20">× automatic change</text>
|
||||
<text x="842" y="291" fill="#cbd5e1" font-family="Arial, sans-serif" font-size="20">× scan / brute force</text>
|
||||
<text x="842" y="332" fill="#cbd5e1" font-family="Arial, sans-serif" font-size="20">× URL / network access</text>
|
||||
<text x="842" y="373" fill="#cbd5e1" font-family="Arial, sans-serif" font-size="20">× finding claim</text>
|
||||
<text x="842" y="414" fill="#cbd5e1" font-family="Arial, sans-serif" font-size="20">× coverage claim</text>
|
||||
<text x="842" y="455" fill="#cbd5e1" font-family="Arial, sans-serif" font-size="20">× compliance claim</text>
|
||||
<text x="842" y="535" fill="#a5f3fc" font-family="Arial, sans-serif" font-size="20" font-weight="700">Synthetic fixture</text>
|
||||
<text x="842" y="570" fill="#bae6fd" font-family="Arial, sans-serif" font-size="18">фиксирует только порядок</text>
|
||||
<text x="842" y="598" fill="#bae6fd" font-family="Arial, sans-serif" font-size="18">вопросов и rollback draft.</text>
|
||||
</svg>
|
||||
|
After Width: | Height: | Size: 5.5 KiB |
@@ -0,0 +1,36 @@
|
||||
<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="760" viewBox="0 0 1200 760" role="img" aria-labelledby="title desc">
|
||||
<title id="title">Карта scope для учебного аудита веб-проекта</title>
|
||||
<desc id="desc">Четыре synthetic актива: browser UI, web API, identity boundary и upload delivery. На стрелках указаны граница и владелец; внизу крупно отмечено, что карта не является картой реальной сети и не даёт разрешения на тестирование.</desc>
|
||||
<rect width="1200" height="760" fill="#0b1220"/>
|
||||
<rect x="42" y="34" width="1116" height="96" rx="18" fill="#10253d" stroke="#5eead4" stroke-width="2"/>
|
||||
<text x="78" y="77" fill="#f8fafc" font-family="Arial, sans-serif" font-size="33" font-weight="700">Scope до первого теста: активы, границы, владельцы</text>
|
||||
<text x="78" y="109" fill="#a5f3fc" font-family="Arial, sans-serif" font-size="20">Учебная карта фиксирует вопросы для review, а не адреса, доступы или результат проверки.</text>
|
||||
<defs>
|
||||
<marker id="arrow" markerWidth="10" markerHeight="10" refX="8" refY="5" orient="auto"><path d="M0,0 L10,5 L0,10 z" fill="#67e8f9"/></marker>
|
||||
</defs>
|
||||
<path d="M294 276 C360 276 388 276 452 276" fill="none" stroke="#67e8f9" stroke-width="5" marker-end="url(#arrow)"/>
|
||||
<path d="M748 276 C816 276 842 276 902 276" fill="none" stroke="#67e8f9" stroke-width="5" marker-end="url(#arrow)"/>
|
||||
<path d="M600 374 L600 485" fill="none" stroke="#67e8f9" stroke-width="5" marker-end="url(#arrow)"/>
|
||||
<rect x="78" y="198" width="216" height="156" rx="16" fill="#19324d" stroke="#5eead4" stroke-width="2"/>
|
||||
<text x="102" y="240" fill="#f8fafc" font-family="Arial, sans-serif" font-size="25" font-weight="700">Browser UI</text>
|
||||
<text x="102" y="274" fill="#bae6fd" font-family="Arial, sans-serif" font-size="17">synthetic-public</text>
|
||||
<text x="102" y="301" fill="#bae6fd" font-family="Arial, sans-serif" font-size="17">owner: web</text>
|
||||
<text x="102" y="328" fill="#bae6fd" font-family="Arial, sans-serif" font-size="17">вопрос: entry</text>
|
||||
<rect x="452" y="198" width="296" height="156" rx="16" fill="#153f4a" stroke="#5eead4" stroke-width="2"/>
|
||||
<text x="476" y="240" fill="#f8fafc" font-family="Arial, sans-serif" font-size="25" font-weight="700">Web API</text>
|
||||
<text x="476" y="274" fill="#ccfbf1" font-family="Arial, sans-serif" font-size="17">browser → API boundary</text>
|
||||
<text x="476" y="301" fill="#ccfbf1" font-family="Arial, sans-serif" font-size="17">owner: web</text>
|
||||
<text x="476" y="328" fill="#ccfbf1" font-family="Arial, sans-serif" font-size="17">вопрос: authz contract</text>
|
||||
<rect x="902" y="198" width="220" height="156" rx="16" fill="#382c56" stroke="#c4b5fd" stroke-width="2"/>
|
||||
<text x="926" y="240" fill="#f8fafc" font-family="Arial, sans-serif" font-size="24" font-weight="700">Identity</text>
|
||||
<text x="926" y="274" fill="#ddd6fe" font-family="Arial, sans-serif" font-size="17">third-party</text>
|
||||
<text x="926" y="301" fill="#ddd6fe" font-family="Arial, sans-serif" font-size="17">owner: identity</text>
|
||||
<text x="926" y="328" fill="#ddd6fe" font-family="Arial, sans-serif" font-size="17">вопрос: scope</text>
|
||||
<rect x="420" y="485" width="360" height="152" rx="16" fill="#4a2f1b" stroke="#fbbf24" stroke-width="2"/>
|
||||
<text x="446" y="526" fill="#fef3c7" font-family="Arial, sans-serif" font-size="25" font-weight="700">Upload delivery</text>
|
||||
<text x="446" y="560" fill="#fde68a" font-family="Arial, sans-serif" font-size="17">upload → delivery boundary</text>
|
||||
<text x="446" y="587" fill="#fde68a" font-family="Arial, sans-serif" font-size="17">owner: web</text>
|
||||
<text x="446" y="614" fill="#fde68a" font-family="Arial, sans-serif" font-size="17">вопрос: serve contract</text>
|
||||
<rect x="42" y="677" width="1116" height="51" rx="12" fill="#3a1720" stroke="#fb7185" stroke-width="2"/>
|
||||
<text x="78" y="711" fill="#fecdd3" font-family="Arial, sans-serif" font-size="21" font-weight="700">Synthetic only: это не карта сети, не перечень URL и не permission to test.</text>
|
||||
</svg>
|
||||
|
After Width: | Height: | Size: 4.2 KiB |
Reference in New Issue
Block a user