All issues

Search results

Extension proposal: accounting_decision object + normalized containment reason — the decision half of the evidence contract

Status: Open.

#1760 In ocsf/ocsf-schema;

· Levaj2000 opened on Sep 17, 2026

[Schema Enhancement] Add a constraint object: the terms of a delegation, and consumption against them

Status: Open.

#1756 In ocsf/ocsf-schema;

· Levaj2000 opened on Sep 10, 2026

Add is_final to the attestation object: producer-declared end of an append-only chain

Status: Open.

#1755 In ocsf/ocsf-schema;

· Levaj2000 opened on Sep 9, 2026

[RFC] A standalone class for agent-originated control-plane activity

Status: Open.

#1753 In ocsf/ocsf-schema;

· Levaj2000 opened on Sep 7, 2026

endpoint.owner conflates accountable owner with last logged-in account

system_activityIssues related to System Activity CategoryIssues related to System Activity Category

Status: Open.

#1752 In ocsf/ocsf-schema;

· r-bedekar opened on Sep 6, 2026

[Schema Enhancement] Make delegation lineage reconstructable from records: parent_uid requirement and a root identifier on delegation

Status: Open.

#1739 In ocsf/ocsf-schema;

· Levaj2000 opened on Aug 25, 2026

[Schema Enhancement] Producer-recorded causal attribution: optional caused_by on base_event

Status: Open.

#1738 In ocsf/ocsf-schema;

· aryanval opened on Aug 24, 2026

[metaschema] Invalid attribute sibling property use is not detected

Status: Open.

#1737 In ocsf/ocsf-schema;

· rmouritzen-splunk opened on Aug 23, 2026

Map Agent Harness Behavior to OCSF

Status: Open.

#1736 In ocsf/ocsf-schema;

· zedoraps opened on Aug 20, 2026

Proposal: Physical Security operational events (patrol, post staffing, alarm disposition, response, incident reporting)

Status: Open.

#1735 In ocsf/ocsf-schema;

· leeandrews9 opened on Aug 18, 2026

Distinguish ML-only vs rule/signature vs corroborated findings for remediation gating

Status: Open.

#1731 In ocsf/ocsf-schema;

· AAH20 opened on Aug 16, 2026

[Schema Enhancement] Close the MCP tool-metadata gap: add an ai_tool object to the ai_operation profile

Status: Open.

#1728 In ocsf/ocsf-schema;

· Levaj2000 opened on Aug 13, 2026