Submit Assertions
submit_assertionsSubmit typed security assertions for controls and assumptions to Mipiti for later CI verification.
Instructions
Typed claims about a control or an assumption; CI checks them later, not now. get_assertion_types returns it all as data.
By class, strongest first, as name(required) [opt: optional]: [by_construction]
typed_boundary(scope, sinks, boundary_type, constructors, property) [opt: allowlist, wrappers] [sound_over_approximation]
sink_default_deny(scope, sinks, safe_forms, property) [opt: allowlist, wrappers] [existential_witness]
test_attested(test) [opt: env, mechanism] [under_approximating_scan]
pattern_matches(file, pattern) [opt: scope_start, scope_end, multiline, dotall, target]
pattern_absent(file, pattern) [opt: scope_start, scope_end, multiline, dotall, target]
no_plaintext_secret(file, patterns) [presence]
function_exists(file, name)
class_exists(file, name)
decorator_present(file, function, decorator)
function_calls(file, caller, callee)
import_present(file, module)
file_exists(file)
file_hash(file, algorithm, expected_hash, scope_file) [opt: scope_start, scope_end]
config_key_exists(file, key)
config_value_matches(file, key, pattern)
env_var_referenced(file, variable)
dependency_exists(manifest, package)
dependency_version(manifest, package, constraint)
parameter_validated(file, function, parameter)
error_handled(file, function)
middleware_registered(file, middleware)
http_header_set(file, header)
test_exists(pattern)
module_exists(file, name)
module_instantiated(file, parent, child)
port_exists(file, module, port) [opt: direction]
parameter_defined(file, parameter) [opt: module, pattern]
signal_exists(file, name) [opt: module, kind]
sva_assertion_present(file, name)
register_reset(file, signal) [opt: reset]
Each: type, params, description, repo ("/" or "no_repo"), covers beside them, never in params: the CO-NN or cls_ ids proved. A for-all clause takes only typed_boundary (sinks accept one boundary type) or, when they do not, sink_default_deny, bound with covers.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| model_id | Yes | ||
| control_id | No | ||
| assumption_id | No | ||
| server_version | Yes | ||
| assertions_json | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||