Git Product home page Git Product logo

open-credentialing-initiative / conformance-program Goto Github PK

View Code? Open in Web Editor NEW
0.0 0.0 0.0 153 KB

OCI sets Conformance Criteria for participant groups within the OCI ecosystem. This Conformance Program lays out the framework for OCI’s monitoring of participants’ adherence to these criteria.

Home Page: https://open-credentialing-initiative.github.io/Conformance-Program/

License: Apache License 2.0

HTML 100.00%

conformance-program's People

Contributors

bluesteens avatar daniyal-khalil avatar

Watchers

 avatar  avatar

conformance-program's Issues

update Conformance Prgrm with trusted provider links

the prgram has only placeholder text instead of hyperlink to the repos atm. since we now have those addresses, we should add them
https://open-credentialing-initiative.github.io/Conformance-Program/latest/index.html#trusted-service-provider-registries

suggest that

Requirement for signature in all Self-Attestations

Steering: Proposal Summary

This is for the Steering work START approval step. Discuss the proposed work or change.

The Confo Prgrm requires a signature for Self-Attestaions. This does not seem practical in all cases, especially for wallet NFR reporting. I suggest to re-scope the requirement.

Steering: Publication Summary

Used to present completed work to Steering for approval to publish.
Discuss the work that was completed in reference to the above proposal. Include any differences from the proposal and why.
use [GitHub Preview](https://htmlpreview.github.io/) to show final state of documents along with pull requests (if needed).


Detailed Description:
Signature requirement:

Such representations SHALL be signed by the Service Provider’s senior management and provided to the OCI Steering Committee for publication

NFR006 and NFR007 in the Wallet Criteria require wallets to self-report certain performance data. This does not necessarily require a document like a signed PDF because a public website-based status display constitutes a practical hands-off option. Such a website would not be signed

I suggest we specify which type of Self-Attestations require a signature, e.g. explicit assurances concerning OCI compliance but not operational reports that make no claim beyond the presented data.


Triage:

  • Is Issue appropriate for OCI Architecture
  • Assign Size
  • Assign Priority
  • Assign Label (include Type of change and Steering "Review" or "FYI")
  • OCI affected Artifacts Identified
  • Assign Triage - Artifact Version Target (v x.x.x Milestone)
  • Assign Triage - Interop Profile Version Target (v x.x.x Milestone)
  • Create sub-project (if needed)

Affected Parties (help determine Sunrise/Sunset):

  • Trading Partners
  • Issuers
  • Wallet Solutions
  • PI Verification Solutions

Affected OCI Artifact

  • Schema Document
  • Identity Schema
  • ATP Schema
  • Issuer Conformance Criteria
  • Wallet Conformance Criteria
  • VRS Solution Conformance Criteria
  • Wallet API Specification
  • Governance Document
  • Conformance Program
  • OCI Website
  • Internal Process

Change Category (Guides Steering Review)

- Steering/Industry Review

Needs Steering Consensus

  • Business-Level (May affect business operations)
  • OCI Governance, Policy or website feature

- Steering/Industry Notification

Does not need Steering Consensus (Steering may require a Consensus decision or futher clarification prior to issue being resolved by P&A

  • Technical-Level (Does not affect business operations)
  • OCI Internal Process or Infrastructure

Timing of operational self-attestations by wallets

Steering: Proposal Summary

Used to propose a change or addition to Steering.
This is for the Steering work START approval step. Discuss the proposed work or change.

The Conformance Program requires wallets to submit Self-Attestations for NFR006 & 007. It does not specify when wallets should begin to self-report and at which cadence. P&A should define this.

Steering: Publication Summary

Used to present completed work to Steering for approval to publish.
Discuss the work that was completed in reference to the above proposal. Include any differences from the proposal and why.
use [GitHub Preview](https://htmlpreview.github.io/) to show final state of documents along with pull requests (if needed).


Detailed Description:


Triage:

  • Is Issue appropriate for OCI Architecture
  • Assign Size
  • Assign Priority
  • Assign Label (include Type of change and Steering "Review" or "FYI")
  • OCI affected Artifacts Identified
  • Assign Triage - Artifact Version Target (v x.x.x Milestone)
  • Assign Triage - Interop Profile Version Target (v x.x.x Milestone)
  • Create sub-project (if needed)

Affected Parties (help determine Sunrise/Sunset):

  • Trading Partners
  • Issuers
  • Wallet Solutions
  • PI Verification Solutions

Affected OCI Artifact

  • Schema Document
  • Identity Schema
  • ATP Schema
  • Issuer Conformance Criteria
  • Wallet Conformance Criteria
  • VRS Solution Conformance Criteria
  • Wallet API Specification
  • Governance Document
  • Conformance Program
  • OCI Website
  • Internal Process

Change Category (Guides Steering Review)

- Steering/Industry Review

Needs Steering Consensus

  • Business-Level (May affect business operations)
  • OCI Governance, Policy or website feature

- Steering/Industry Notification

Does not need Steering Consensus (Steering may require a Consensus decision or futher clarification prior to issue being resolved by P&A

  • Technical-Level (Does not affect business operations)
  • OCI Internal Process or Infrastructure

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.