1metadata:
2 id: "enforcement-log-bad-clear"
3 type: EnforcementLog
4 gemara-version: "0.20.0"
5 version: "1.0.0"
6 description: "Invalid enforcement log: Clear disposition with Failed assessment result"
7 author:
8 id: enforcement-engine
9 name: "ComplyTime Enforcement Engine"
10 type: Software
11 version: "1.2.0"
12 uri: "https://github.com/gemaraproj/gemara"
13 mapping-references:
14 - id: security-policy
15 title: "Information Security Policy"
16 version: "2.1.0"
17 - id: eval-log
18 title: "pvtr Evaluation Log"
19 version: "2025-08-22"
20
21disposition: Clear
22
23target:
24 id: gemara-repo
25 name: "gemaraproj/gemara"
26 type: Software
27 uri: "https://github.com/gemaraproj/gemara"
28
29actions:
30 - disposition: Clear
31 method:
32 reference-id: security-policy
33 entry-id: EM-PASS-01
34 message: "Falsely cleared despite failed assessment"
35 start: "2025-08-22T16:07:00Z"
36 steps:
37 - github.com/gemaraproj/gemara/enforcement/allow.PassThrough
38 justification:
39 assessments:
40 - result: Failed
41 plan:
42 reference-id: security-policy
43 entry-id: AP-AC-01
44 log:
45 reference-id: eval-log
46 entry-id: OSPS-AC-01