Files
progcode/web/public/assets/editorial/2023/security-audit-2023-evidence-matrix.svg
huncode 201dc7bd54
Build and deploy / deploy (push) Successful in 15s
revise December 2023 security audit articles
2026-07-31 15:24:14 +03:00

38 lines
4.1 KiB
XML

<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="760" viewBox="0 0 1200 760" role="img" aria-labelledby="title desc">
<title id="title">Матрица evidence для учебного аудита</title>
<desc id="desc">Четыре synthetic карточки evidence: scope map, owner route, permission limit и remediation gate. Каждая имеет статус не внешне подтверждено. Нижняя полоса разделяет evidence, разрешение, finding и compliance.</desc>
<rect width="1200" height="760" fill="#101827"/>
<text x="58" y="66" fill="#f8fafc" font-family="Arial, sans-serif" font-size="34" font-weight="700">Evidence matrix: что известно и чего ещё нет</text>
<text x="58" y="98" fill="#bae6fd" font-family="Arial, sans-serif" font-size="20">Одна карточка связывает scope, owner, статус и следующий gate. Она не выдаёт permission или finding.</text>
<rect x="58" y="138" width="1084" height="70" rx="12" fill="#223247"/>
<text x="87" y="183" fill="#e0f2fe" font-family="Arial, sans-serif" font-size="22" font-weight="700">Карточка</text>
<text x="430" y="183" fill="#e0f2fe" font-family="Arial, sans-serif" font-size="22" font-weight="700">Связь со scope</text>
<text x="700" y="183" fill="#e0f2fe" font-family="Arial, sans-serif" font-size="22" font-weight="700">Owner / status</text>
<text x="950" y="183" fill="#e0f2fe" font-family="Arial, sans-serif" font-size="22" font-weight="700">Следующий шаг</text>
<g font-family="Arial, sans-serif" font-size="19">
<rect x="58" y="218" width="1084" height="88" fill="#16334b" stroke="#5eead4" stroke-width="1"/>
<text x="87" y="255" fill="#f8fafc" font-weight="700">scope map</text><text x="87" y="281" fill="#bae6fd">synthetic card</text>
<text x="430" y="269" fill="#ccfbf1">asset boundaries</text>
<text x="700" y="255" fill="#ccfbf1">web owner</text><text x="700" y="281" fill="#fcd34d">not externally verified</text>
<text x="950" y="269" fill="#ccfbf1">confirm map</text>
<rect x="58" y="306" width="1084" height="88" fill="#1e3150" stroke="#93c5fd" stroke-width="1"/>
<text x="87" y="343" fill="#f8fafc" font-weight="700">owner route</text><text x="87" y="369" fill="#bfdbfe">synthetic card</text>
<text x="430" y="357" fill="#dbeafe">identity boundary</text>
<text x="700" y="343" fill="#dbeafe">identity owner</text><text x="700" y="369" fill="#fcd34d">not externally verified</text>
<text x="950" y="357" fill="#dbeafe">ask owner</text>
<rect x="58" y="394" width="1084" height="88" fill="#3b304f" stroke="#c4b5fd" stroke-width="1"/>
<text x="87" y="431" fill="#f8fafc" font-weight="700">permission limit</text><text x="87" y="457" fill="#ddd6fe">synthetic card</text>
<text x="430" y="445" fill="#ede9fe">declared boundary</text>
<text x="700" y="431" fill="#ede9fe">real permission: no</text><text x="700" y="457" fill="#fcd34d">not externally verified</text>
<text x="950" y="445" fill="#ede9fe">get approval</text>
<rect x="58" y="482" width="1084" height="88" fill="#46311e" stroke="#fbbf24" stroke-width="1"/>
<text x="87" y="519" fill="#fef3c7" font-weight="700">remediation gate</text><text x="87" y="545" fill="#fde68a">synthetic card</text>
<text x="430" y="533" fill="#fef3c7">change boundary</text>
<text x="700" y="519" fill="#fef3c7">web owner</text><text x="700" y="545" fill="#fcd34d">not externally verified</text>
<text x="950" y="533" fill="#fef3c7">review before change</text>
</g>
<rect x="58" y="608" width="1084" height="104" rx="14" fill="#3a1720" stroke="#fb7185" stroke-width="2"/>
<text x="87" y="649" fill="#fecdd3" font-family="Arial, sans-serif" font-size="22" font-weight="700">Evidence ≠ permission ≠ finding ≠ coverage/compliance</text>
<text x="87" y="685" fill="#fecdd3" font-family="Arial, sans-serif" font-size="19">Synthetic records не читают код, логи и secrets; они не выполняют тест и не подтверждают реальный продукт.</text>
</svg>