Skip to content
7lens Docs
7lens.io Register to Test

Canonical Asset Type reference examples

This is the quality bar for Services, Offerings, Asset Types, Providers, and Platforms. It is not yet implemented in the schema.

Worked records for Providers, three Platforms, and three Services. Segments are snake_case. An Offering id is three segments, and the first two equal its Service id. An Asset Type id is <service_id>.<segment>, and the type belongs to that one Service.

How a record is shaped

Section titled “How a record is shaped”
  • The Offering list on a Service is offerings. Asset Types stay the sibling list asset_types.
  • A declaration names its pinned list with vocabulary_id. The value of that field is the list id, such as data_classification.
  • A declaration has no value field. On a Service or Offering the stored value is the fixed sibling key configured_value. The declaration name is not the YAML property key. An Asset Type declaration carries no value. The Asset stores the value inside attributes[].
  • A quantity’s stored shape is { value, unit }. That inner value is the quantity convention. It is not a declaration field.
  • definition_uri, when present, is a plain URL.
  • requirement_tier is mandatory, recommended, or optional, and it pairs with required:
    • mandatory pairs with required: true. A missing value errors on new writes and warns on existing data.
    • recommended pairs with required: false. A missing value warns and does not block save.
    • optional pairs with required: false. A missing value is silent.
  • Every declaration below uses min_cardinality: 1, max_cardinality: 1, mutability: updatable, and status: active. Characteristics are configurable: true. Asset Type declarations are configurable: false.
  • Provenance on these records uses authoritative_source, source_system, source_record_id, last_verified (a calendar date), discovery_method, and confidence.
  • A new Offering has id, name, description, and at least one providers entry. These Offering ids do not end in self_hosted or custom_built, so each has a provider. lifecycle_state, adoption_status, characteristics, and provenance are present because a complete record carries them. Price and contract terms stay off the Offering.
  • A Provider has id, name, type, and description. It has no Owner. It also carries headquarters and processing_locations (ISO 3166-1 alpha-2, lowercase), risk_level (critical, high, medium, low), substitutability (high, medium, low, none), certifications, gdpr_applicable, dora_ict_third_party, and provenance.
  • Declaration name matches ^[a-z][a-z0-9_]*\.[a-z][a-z0-9_.]*$ and uses a reserved prefix. For the repository and automation sets, the planning-benchmark tokens are the local segment: repository_url, default_branch, repository_visibility, automation_mechanism, trigger_type, human_oversight.
# Characteristic: declaration fields, then configured_value.
- name: ops.availability_target
  value_type: quantity
  unit: '%'
  requirement_tier: recommended
  required: false
  configured_value:
    value: 99.9
    unit: '%'


# Asset Type declaration: same fields, no value.
- name: hosting.architecture
  value_type: string
  vocabulary_id: cpu_architecture
  requirement_tier: mandatory
  required: true

Closed lists these examples use

Section titled “Closed lists these examples use”

Pinned already for attribute definitions:

vocabulary_id Tokens
cpu_architecture amd64, arm64, arm, 386, ppc64le, s390x, riscv64
os_family linux, windows, darwin, freebsd
data_classification public, internal, restricted, confidential, secret
exposure public, internal, vpn, partner
human_oversight human_in_the_loop, human_on_the_loop, human_in_command, none

Bound here from the planning benchmark and the existing profiles:

vocabulary_id Tokens
service_model iaas, paas, saas
repository_visibility public, internal, private, unknown
automation_mechanism workflow, script, api, self_service, pipeline, runbook
trigger_type user, scheduled, api, agent, event
operation_effect read, create, update, delete, execute

patch_state and itil_practice are vocabulary_id strings only. These examples do not close their tokens.

Record fields:

Field Tokens
Provider type hyperscaler, saas_vendor, software_vendor, hardware_vendor, managed_service_provider, open_source_community
adoption_status approved, tolerated, prohibited
lifecycle_state draft, pilot, production, sunset, retired
discovery_method declared, imported, discovered, manual
confidence high, medium, low
risk_level critical, high, medium, low
substitutability high, medium, low, none

Service characteristics on these three Services are core.service_model, ops.availability_target, ops.rto_target, ops.rpo_target, and security.max_data_classification. Each is recommended. The stored value is configured_value. Offering characteristics carry that Offering’s own availability target in the same shape.

Providers

Section titled “Providers”
providers:
  - id: aws
    name: Amazon Web Services
    type: hyperscaler
    description: Cloud infrastructure from Amazon Web Services.
    headquarters: us
    processing_locations: [us, ie]
    risk_level: high
    substitutability: low
    certifications: [iso_iec_27001, soc_2]
    gdpr_applicable: true
    dora_ict_third_party: true
    provenance:
      authoritative_source: enterprise_catalog
      source_system: catalog
      source_record_id: aws
      last_verified: 2026-10-31
      discovery_method: declared
      confidence: high
  - id: azure
    name: Microsoft Azure
    type: hyperscaler
    description: Cloud infrastructure from Microsoft.
    headquarters: us
    processing_locations: [us, nl]
    risk_level: high
    substitutability: medium
    certifications: [iso_iec_27001]
    gdpr_applicable: true
    dora_ict_third_party: true
    provenance:
      authoritative_source: enterprise_catalog
      source_system: catalog
      source_record_id: azure
      last_verified: 2026-10-31
      discovery_method: declared
      confidence: high
  - id: oci
    name: Oracle Cloud Infrastructure
    type: hyperscaler
    description: Cloud infrastructure from Oracle.
    headquarters: us
    processing_locations: [us, de]
    risk_level: medium
    substitutability: high
    certifications: [iso_iec_27001]
    gdpr_applicable: true
    dora_ict_third_party: true
    provenance:
      authoritative_source: enterprise_catalog
      source_system: catalog
      source_record_id: oci
      last_verified: 2026-10-31
      discovery_method: declared
      confidence: medium
  - id: github
    name: GitHub
    type: saas_vendor
    description: Source-control product from GitHub.
    headquarters: us
    processing_locations: [us, ie]
    risk_level: medium
    substitutability: low
    certifications: [soc_2]
    gdpr_applicable: true
    dora_ict_third_party: true
    provenance:
      authoritative_source: enterprise_catalog
      source_system: catalog
      source_record_id: github
      last_verified: 2026-10-31
      discovery_method: declared
      confidence: high
  - id: servicenow
    name: ServiceNow
    type: saas_vendor
    description: Workflow and service-management product from ServiceNow.
    headquarters: us
    processing_locations: [us, nl]
    risk_level: critical
    substitutability: none
    certifications: [iso_iec_27001, soc_2]
    gdpr_applicable: true
    dora_ict_third_party: true
    provenance:
      authoritative_source: enterprise_catalog
      source_system: catalog
      source_record_id: servicenow
      last_verified: 2026-10-31
      discovery_method: declared
      confidence: high

Platforms

Section titled “Platforms”

Worked Platforms cloud_landing_zone, github_enterprise, and servicenow_platform. Each record has id, name, description, accountable_person, sourcing_model, delivery_model, lifecycle_state, domainId, legalEntityId, serviceIds, offeringIds, deployments, characteristics, and provenance. offeringIds use the qualified form <service_id>/<offering_id>. domainId, legalEntityId, serviceIds, and offeringIds keep those published names. A characteristic value is configured_value.

platforms:
  - id: cloud_landing_zone
    name: Cloud landing zone
    description: The enterprise landing zone that business users work in to obtain virtual machines.
    accountable_person:
      name: Ana
      surname: Ruiz
      email: ana.ruiz@example.com
      role: Platform owner
    sourcing_model: in_house
    delivery_model: self_deployed
    lifecycle_state: production
    domainId: platform_engineering
    legalEntityId: es_holdco
    serviceIds: [compute.virtual_machines]
    offeringIds: [compute.virtual_machines/compute.virtual_machines.aws_ec2]
    deployments:
      - id: eu_production
        name: EU production
        environments: [pro]
    characteristics:
      - name: core.service_model
        description: Service model of this platform.
        value_type: string
        vocabulary_id: service_model
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: true
        mutability: updatable
        status: active
        configured_value: iaas
    provenance:
      authoritative_source: enterprise_catalog
      source_system: catalog
      source_record_id: cloud_landing_zone
      last_verified: 2026-10-31
      discovery_method: declared
      confidence: high
  - id: github_enterprise
    name: GitHub Enterprise
    description: The enterprise source-control platform business users work in.
    accountable_person:
      name: Luis
      surname: Pérez
      email: luis.perez@example.com
      role: Platform owner
    sourcing_model: third_party
    delivery_model: saas
    lifecycle_state: production
    domainId: software_engineering
    legalEntityId: es_holdco
    serviceIds: [devops.source_control]
    offeringIds: [devops.source_control/devops.source_control.github_enterprise_cloud]
    deployments:
      - id: eu_production
        name: EU production
        environments: [pro]
    characteristics:
      - name: core.service_model
        description: Service model of this platform.
        value_type: string
        vocabulary_id: service_model
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: true
        mutability: updatable
        status: active
        configured_value: saas
    provenance:
      authoritative_source: enterprise_catalog
      source_system: catalog
      source_record_id: github_enterprise
      last_verified: 2026-10-31
      discovery_method: declared
      confidence: high
  - id: servicenow_platform
    name: ServiceNow
    description: The enterprise workflow platform business users work in.
    accountable_person:
      name: Marta
      surname: Soler
      email: marta.soler@example.com
      role: Platform owner
    sourcing_model: third_party
    delivery_model: saas
    lifecycle_state: production
    domainId: service_management
    legalEntityId: es_holdco
    serviceIds: [auto.workflow_orchestration]
    offeringIds: [auto.workflow_orchestration/auto.workflow_orchestration.servicenow_flow_designer]
    deployments:
      - id: eu_production
        name: EU production
        environments: [pro]
    characteristics:
      - name: core.service_model
        description: Service model of this platform.
        value_type: string
        vocabulary_id: service_model
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: true
        mutability: updatable
        status: active
        configured_value: saas
    provenance:
      authoritative_source: enterprise_catalog
      source_system: catalog
      source_record_id: servicenow_platform
      last_verified: 2026-10-31
      discovery_method: declared
      confidence: high

compute.virtual_machines

Section titled “compute.virtual_machines”

Offerings aws_ec2, azure_vm, and oci_compute. OCI adoption_status is tolerated. Asset Type compute.virtual_machines.compute_instance, template_id: compute_instance.

id: compute.virtual_machines
name: Virtual machines
description: Virtual machines supplied as a capability, independent of which provider hosts them.
accountable_person:
  name: Ana
  surname: Ruiz
  email: ana.ruiz@example.com
  role: Service owner
technology_stack: compute
lifecycle_state: production
characteristics:
  - name: core.service_model
    description: Service model of this capability.
    definition_uri: 'https://csrc.nist.gov/pubs/sp/800/145/final'
    value_type: string
    vocabulary_id: service_model
    min_cardinality: 1
    max_cardinality: 1
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value: iaas
  - name: ops.availability_target
    description: Availability the enterprise expects from this capability, on a 0-100 percent scale.
    definition_uri: 'https://ucum.org/ucum'
    value_type: quantity
    unit: '%'
    min_cardinality: 1
    max_cardinality: 1
    constraints:
      min: 0
      max: 100
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value:
      value: 99.9
      unit: '%'
  - name: ops.rto_target
    description: Recovery time objective for this capability. Hours, minutes, and seconds only.
    definition_uri: 'https://www.rfc-editor.org/rfc/rfc3339'
    value_type: duration
    min_cardinality: 1
    max_cardinality: 1
    constraints:
      pattern: '^PT([0-9]+H)?([0-9]+M)?([0-9]+S)?$'
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value: PT4H
  - name: ops.rpo_target
    description: Recovery point objective for this capability. Hours, minutes, and seconds only.
    definition_uri: 'https://www.rfc-editor.org/rfc/rfc3339'
    value_type: duration
    min_cardinality: 1
    max_cardinality: 1
    constraints:
      pattern: '^PT([0-9]+H)?([0-9]+M)?([0-9]+S)?$'
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value: PT1H
  - name: security.max_data_classification
    description: Highest data classification this capability is approved to hold.
    definition_uri: 'https://docs.7lens.io/conventions/vocabularies/data-classification'
    value_type: string
    vocabulary_id: data_classification
    min_cardinality: 1
    max_cardinality: 1
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value: confidential
offerings:
  - id: compute.virtual_machines.aws_ec2
    name: Amazon EC2
    description: Virtual machines on Amazon Web Services.
    providers: [aws]
    lifecycle_state: production
    adoption_status: approved
    characteristics:
      - name: ops.availability_target
        description: Availability this product publishes, on a 0-100 percent scale.
        definition_uri: 'https://ucum.org/ucum'
        value_type: quantity
        unit: '%'
        min_cardinality: 1
        max_cardinality: 1
        constraints:
          min: 0
          max: 100
        requirement_tier: recommended
        required: false
        configurable: true
        mutability: updatable
        status: active
        configured_value:
          value: 99.99
          unit: '%'
    provenance:
      authoritative_source: enterprise_catalog
      source_system: catalog
      source_record_id: compute.virtual_machines.aws_ec2
      last_verified: 2026-10-30
      discovery_method: declared
      confidence: high
  - id: compute.virtual_machines.azure_vm
    name: Azure Virtual Machines
    description: Virtual machines on Microsoft Azure.
    providers: [azure]
    lifecycle_state: production
    adoption_status: approved
    characteristics:
      - name: ops.availability_target
        description: Availability this product publishes, on a 0-100 percent scale.
        definition_uri: 'https://ucum.org/ucum'
        value_type: quantity
        unit: '%'
        min_cardinality: 1
        max_cardinality: 1
        constraints:
          min: 0
          max: 100
        requirement_tier: recommended
        required: false
        configurable: true
        mutability: updatable
        status: active
        configured_value:
          value: 99.95
          unit: '%'
    provenance:
      authoritative_source: enterprise_catalog
      source_system: catalog
      source_record_id: compute.virtual_machines.azure_vm
      last_verified: 2026-10-30
      discovery_method: declared
      confidence: high
  - id: compute.virtual_machines.oci_compute
    name: OCI Compute
    description: Virtual machines on Oracle Cloud Infrastructure.
    providers: [oci]
    lifecycle_state: production
    adoption_status: tolerated
    characteristics:
      - name: ops.availability_target
        description: Availability this product publishes, on a 0-100 percent scale.
        definition_uri: 'https://ucum.org/ucum'
        value_type: quantity
        unit: '%'
        min_cardinality: 1
        max_cardinality: 1
        constraints:
          min: 0
          max: 100
        requirement_tier: recommended
        required: false
        configurable: true
        mutability: updatable
        status: active
        configured_value:
          value: 99.9
          unit: '%'
    provenance:
      authoritative_source: enterprise_catalog
      source_system: catalog
      source_record_id: compute.virtual_machines.oci_compute
      last_verified: 2026-10-30
      discovery_method: declared
      confidence: high
asset_types:
  - id: compute.virtual_machines.compute_instance
    name: Compute instance
    description: One virtual machine.
    template_id: compute_instance
    template_version: '1'
    declarations:
      - name: hosting.architecture
        description: CPU architecture of the instance.
        definition_uri: 'https://github.com/opencontainers/image-spec/blob/main/image-index.md'
        value_type: string
        vocabulary_id: cpu_architecture
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: mandatory
        required: true
        configurable: false
        mutability: updatable
        status: active
      - name: software.os_family
        description: Operating system family of the instance.
        definition_uri: 'https://github.com/opencontainers/image-spec/blob/main/image-index.md'
        value_type: string
        vocabulary_id: os_family
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: mandatory
        required: true
        configurable: false
        mutability: updatable
        status: active
      - name: capacity.vcpu_count
        description: Number of virtual CPUs.
        definition_uri: 'https://ucum.org/ucum'
        value_type: quantity
        unit: '{1}'
        min_cardinality: 1
        max_cardinality: 1
        constraints:
          min: 1
          max_fractional_digits: 0
        requirement_tier: mandatory
        required: true
        configurable: false
        mutability: updatable
        status: active
      - name: capacity.memory_size
        description: Memory provisioned for the instance.
        definition_uri: 'https://ucum.org/ucum'
        value_type: quantity
        unit_dimension: data_size
        allowed_units: [MiBy, GiBy, TiBy]
        min_cardinality: 1
        max_cardinality: 1
        constraints:
          min: 0
        requirement_tier: mandatory
        required: true
        configurable: false
        mutability: updatable
        status: active
      - name: hosting.region
        description: Provider region code, for example eu-west-1.
        value_type: string
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: mandatory
        required: true
        configurable: false
        mutability: updatable
        status: active
      - name: hosting.account_id
        description: Provider account, subscription, or compartment that owns the instance.
        value_type: string
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: hosting.instance_type
        description: Provider instance type name, for example m6i.large.
        value_type: string
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: software.os_distro
        description: Operating system distribution id, the os-release ID.
        definition_uri: 'https://www.freedesktop.org/software/systemd/man/latest/os-release.html'
        value_type: string
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: software.os_version
        description: Operating system version, the os-release VERSION_ID.
        definition_uri: 'https://www.freedesktop.org/software/systemd/man/latest/os-release.html'
        value_type: version
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: security.patch_state
        description: Patch state of the instance.
        value_type: string
        vocabulary_id: patch_state
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: security.edr_coverage
        description: Endpoint detection and response agent is installed and reporting.
        value_type: boolean
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: security.storage_encrypted
        description: Block storage for the instance is encrypted.
        value_type: boolean
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: security.network_exposure
        description: How the instance is exposed on the network.
        value_type: string
        vocabulary_id: exposure
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: hosting.availability_zone
        description: Provider availability zone.
        value_type: string
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: optional
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: capacity.storage_size
        description: Storage provisioned for the instance.
        definition_uri: 'https://ucum.org/ucum'
        value_type: quantity
        unit_dimension: data_size
        allowed_units: [MiBy, GiBy, TiBy]
        min_cardinality: 1
        max_cardinality: 1
        constraints:
          min: 0
        requirement_tier: optional
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: hosting.image_ref
        description: Provider machine-image id.
        value_type: string
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: optional
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: security.public_ip_assigned
        description: The instance has a public IP address.
        value_type: boolean
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: optional
        required: false
        configurable: false
        mutability: updatable
        status: active
provenance:
  authoritative_source: enterprise_catalog
  source_system: catalog
  source_record_id: compute.virtual_machines
  last_verified: 2026-10-30
  discovery_method: declared
  confidence: high

The Asset Type declaration for capacity.vcpu_count stops at the declaration fields. One Inventory Asset holds the number. offering_id is the qualified pair service_id/offering_id. The inner value is the quantity’s number.

asset_id: a-4c8e1b7a9d2f06e3
name: procur-e web server
asset_type_id: compute.virtual_machines.compute_instance
offering_id: compute.virtual_machines/compute.virtual_machines.aws_ec2
attributes:
  - name: capacity.vcpu_count
    value:
      value: 4
      unit: '{1}'
    declaration_version: 1
    last_confirmed: 2026-10-30T12:00:00.000Z
    origin: observed

devops.source_control

Section titled “devops.source_control”

Offering github_enterprise_cloud. Asset Type devops.source_control.code_repository. Mandatory declarations: software.repository_url, software.default_branch, software.repository_visibility. Recommended: software.primary_language, security.branch_protection_enabled, security.sca_scanning_enabled, security.secret_scanning_enabled, security.sast_scanning_enabled, security.data_classification. Optional: software.vcs_organization, software.monorepo, security.signed_commits_required, ops.last_commit_at.

id: devops.source_control
name: Source control
description: Source repositories supplied as a capability.
accountable_person:
  name: Luis
  surname: Pérez
  email: luis.perez@example.com
  role: Service owner
technology_stack: devops
lifecycle_state: production
characteristics:
  - name: core.service_model
    description: Service model of this capability.
    definition_uri: 'https://csrc.nist.gov/pubs/sp/800/145/final'
    value_type: string
    vocabulary_id: service_model
    min_cardinality: 1
    max_cardinality: 1
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value: saas
  - name: ops.availability_target
    description: Availability the enterprise expects from this capability, on a 0-100 percent scale.
    definition_uri: 'https://ucum.org/ucum'
    value_type: quantity
    unit: '%'
    min_cardinality: 1
    max_cardinality: 1
    constraints:
      min: 0
      max: 100
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value:
      value: 99.9
      unit: '%'
  - name: ops.rto_target
    description: Recovery time objective for this capability. Hours, minutes, and seconds only.
    definition_uri: 'https://www.rfc-editor.org/rfc/rfc3339'
    value_type: duration
    min_cardinality: 1
    max_cardinality: 1
    constraints:
      pattern: '^PT([0-9]+H)?([0-9]+M)?([0-9]+S)?$'
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value: PT8H
  - name: ops.rpo_target
    description: Recovery point objective for this capability. Hours, minutes, and seconds only.
    definition_uri: 'https://www.rfc-editor.org/rfc/rfc3339'
    value_type: duration
    min_cardinality: 1
    max_cardinality: 1
    constraints:
      pattern: '^PT([0-9]+H)?([0-9]+M)?([0-9]+S)?$'
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value: PT24H
  - name: security.max_data_classification
    description: Highest data classification this capability is approved to hold.
    definition_uri: 'https://docs.7lens.io/conventions/vocabularies/data-classification'
    value_type: string
    vocabulary_id: data_classification
    min_cardinality: 1
    max_cardinality: 1
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value: confidential
offerings:
  - id: devops.source_control.github_enterprise_cloud
    name: GitHub Enterprise Cloud
    description: Hosted source control from GitHub.
    providers: [github]
    lifecycle_state: production
    adoption_status: approved
    characteristics:
      - name: ops.availability_target
        description: Availability this product publishes, on a 0-100 percent scale.
        definition_uri: 'https://ucum.org/ucum'
        value_type: quantity
        unit: '%'
        min_cardinality: 1
        max_cardinality: 1
        constraints:
          min: 0
          max: 100
        requirement_tier: recommended
        required: false
        configurable: true
        mutability: updatable
        status: active
        configured_value:
          value: 99.95
          unit: '%'
    provenance:
      authoritative_source: enterprise_catalog
      source_system: catalog
      source_record_id: devops.source_control.github_enterprise_cloud
      last_verified: 2026-10-30
      discovery_method: declared
      confidence: high
asset_types:
  - id: devops.source_control.code_repository
    name: Code repository
    description: One source repository in one source-control system.
    template_id: code_repository
    template_version: '1'
    declarations:
      - name: software.repository_url
        description: Canonical URL of the repository.
        definition_uri: 'https://www.rfc-editor.org/rfc/rfc3986'
        value_type: uri
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: mandatory
        required: true
        configurable: false
        mutability: updatable
        status: active
      - name: software.default_branch
        description: Branch used when a caller does not name one.
        value_type: string
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: mandatory
        required: true
        configurable: false
        mutability: updatable
        status: active
      - name: software.repository_visibility
        description: Who can see the repository.
        value_type: string
        vocabulary_id: repository_visibility
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: mandatory
        required: true
        configurable: false
        mutability: updatable
        status: active
      - name: software.primary_language
        description: Primary programming language of the repository.
        value_type: string
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: security.branch_protection_enabled
        description: Whether the default branch rejects a direct push.
        value_type: boolean
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: security.sca_scanning_enabled
        description: Whether software-composition analysis runs on the repository.
        value_type: boolean
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: security.secret_scanning_enabled
        description: Whether secret scanning runs on the repository.
        value_type: boolean
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: security.sast_scanning_enabled
        description: Whether static analysis runs on the repository.
        value_type: boolean
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: security.data_classification
        description: Data classification of the repository contents.
        value_type: string
        vocabulary_id: data_classification
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: software.vcs_organization
        description: Organization or group that owns the repository in the source-control product.
        value_type: string
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: optional
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: software.monorepo
        description: Whether this repository holds more than one product.
        value_type: boolean
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: optional
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: security.signed_commits_required
        description: Whether a commit must be signed before it is accepted.
        value_type: boolean
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: optional
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: ops.last_commit_at
        description: Timestamp of the latest commit on the default branch.
        value_type: datetime
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: optional
        required: false
        configurable: false
        mutability: updatable
        status: active
provenance:
  authoritative_source: enterprise_catalog
  source_system: catalog
  source_record_id: devops.source_control
  last_verified: 2026-10-30
  discovery_method: declared
  confidence: high

auto.workflow_orchestration

Section titled “auto.workflow_orchestration”

Offering servicenow_flow_designer. Asset Type auto.workflow_orchestration.automation. This template belongs to this Service. The CI/CD automation template on devops.ci_cd is a separate marketplace entry. Mandatory declarations: ops.automation_mechanism, ops.trigger_type, agents.human_oversight. Recommended: ops.itil_practice (vocabulary_id: itil_practice), security.max_operation_effect (vocabulary_id: operation_effect), ops.idempotent, roi.baseline_manual_effort. Optional: ops.schedule_cron, ops.timeout_target, software.definition_uri.

id: auto.workflow_orchestration
name: Workflow orchestration
description: Workflow automations supplied as a capability.
accountable_person:
  name: Marta
  surname: Soler
  email: marta.soler@example.com
  role: Service owner
technology_stack: auto
lifecycle_state: production
characteristics:
  - name: core.service_model
    description: Service model of this capability.
    definition_uri: 'https://csrc.nist.gov/pubs/sp/800/145/final'
    value_type: string
    vocabulary_id: service_model
    min_cardinality: 1
    max_cardinality: 1
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value: saas
  - name: ops.availability_target
    description: Availability the enterprise expects from this capability, on a 0-100 percent scale.
    definition_uri: 'https://ucum.org/ucum'
    value_type: quantity
    unit: '%'
    min_cardinality: 1
    max_cardinality: 1
    constraints:
      min: 0
      max: 100
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value:
      value: 99.5
      unit: '%'
  - name: ops.rto_target
    description: Recovery time objective for this capability. Hours, minutes, and seconds only.
    definition_uri: 'https://www.rfc-editor.org/rfc/rfc3339'
    value_type: duration
    min_cardinality: 1
    max_cardinality: 1
    constraints:
      pattern: '^PT([0-9]+H)?([0-9]+M)?([0-9]+S)?$'
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value: PT4H
  - name: ops.rpo_target
    description: Recovery point objective for this capability. Hours, minutes, and seconds only.
    definition_uri: 'https://www.rfc-editor.org/rfc/rfc3339'
    value_type: duration
    min_cardinality: 1
    max_cardinality: 1
    constraints:
      pattern: '^PT([0-9]+H)?([0-9]+M)?([0-9]+S)?$'
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value: PT4H
  - name: security.max_data_classification
    description: Highest data classification this capability is approved to hold.
    definition_uri: 'https://docs.7lens.io/conventions/vocabularies/data-classification'
    value_type: string
    vocabulary_id: data_classification
    min_cardinality: 1
    max_cardinality: 1
    requirement_tier: recommended
    required: false
    configurable: true
    mutability: updatable
    status: active
    configured_value: confidential
offerings:
  - id: auto.workflow_orchestration.servicenow_flow_designer
    name: ServiceNow Flow Designer
    description: Workflow automation on ServiceNow.
    providers: [servicenow]
    lifecycle_state: production
    adoption_status: approved
    characteristics:
      - name: ops.availability_target
        description: Availability this product publishes, on a 0-100 percent scale.
        definition_uri: 'https://ucum.org/ucum'
        value_type: quantity
        unit: '%'
        min_cardinality: 1
        max_cardinality: 1
        constraints:
          min: 0
          max: 100
        requirement_tier: recommended
        required: false
        configurable: true
        mutability: updatable
        status: active
        configured_value:
          value: 99.9
          unit: '%'
    provenance:
      authoritative_source: enterprise_catalog
      source_system: catalog
      source_record_id: auto.workflow_orchestration.servicenow_flow_designer
      last_verified: 2026-10-30
      discovery_method: declared
      confidence: high
asset_types:
  - id: auto.workflow_orchestration.automation
    name: Automation
    description: One deployed workflow automation.
    template_id: automation
    template_version: '1'
    declarations:
      - name: ops.automation_mechanism
        description: How the automation performs its operation.
        value_type: string
        vocabulary_id: automation_mechanism
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: mandatory
        required: true
        configurable: false
        mutability: updatable
        status: active
      - name: ops.trigger_type
        description: What starts a run of this automation.
        value_type: string
        vocabulary_id: trigger_type
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: mandatory
        required: true
        configurable: false
        mutability: updatable
        status: active
      - name: agents.human_oversight
        description: How a person supervises this automation.
        definition_uri: 'https://eur-lex.europa.eu/eli/reg/2024/1689/oj'
        value_type: string
        vocabulary_id: human_oversight
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: mandatory
        required: true
        configurable: false
        mutability: updatable
        status: active
      - name: ops.itil_practice
        description: ITIL practice this automation carries out.
        value_type: string
        vocabulary_id: itil_practice
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: security.max_operation_effect
        description: Strongest effect this automation is allowed to perform.
        value_type: string
        vocabulary_id: operation_effect
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: ops.idempotent
        description: Whether a repeated run with the same input leaves the same result.
        value_type: boolean
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: roi.baseline_manual_effort
        description: Manual effort one run replaces. Hours, minutes, and seconds only.
        value_type: duration
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: recommended
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: ops.schedule_cron
        description: Cron expression for a scheduled run. Absent when the automation is not scheduled.
        value_type: string
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: optional
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: ops.timeout_target
        description: How long a run may take before it is stopped. Hours, minutes, and seconds only.
        value_type: duration
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: optional
        required: false
        configurable: false
        mutability: updatable
        status: active
      - name: software.definition_uri
        description: URL of the automation definition.
        value_type: uri
        min_cardinality: 1
        max_cardinality: 1
        requirement_tier: optional
        required: false
        configurable: false
        mutability: updatable
        status: active
provenance:
  authoritative_source: enterprise_catalog
  source_system: catalog
  source_record_id: auto.workflow_orchestration
  last_verified: 2026-10-30
  discovery_method: declared
  confidence: high