From 8c3ec41368febd866c990d47be87408f9965e6dd Mon Sep 17 00:00:00 2001 From: Renae Metcalf Date: Thu, 12 Feb 2026 14:46:21 -0500 Subject: [PATCH 1/3] WIP after whitepaper draft --- src/cisa_bod_harm-1.csv | 13 +++++++++ src/cisa_bod_harm-2.csv | 13 +++++++++ src/cisa_bod_harm.csv | 37 ++++++++++++++++++++++++ src/cisa_bod_harm.py | 64 +++++++++++++++++++++++++++++++++++++++++ 4 files changed, 127 insertions(+) create mode 100644 src/cisa_bod_harm-1.csv create mode 100644 src/cisa_bod_harm-2.csv create mode 100644 src/cisa_bod_harm.csv create mode 100644 src/cisa_bod_harm.py diff --git a/src/cisa_bod_harm-1.csv b/src/cisa_bod_harm-1.csv new file mode 100644 index 00000000..75df3428 --- /dev/null +++ b/src/cisa_bod_harm-1.csv @@ -0,0 +1,13 @@ +In KEV v1.0.0 (cisa),System Exposure v1.0.1,High Value Asset v1.0.0,CISA Levels v1.1.0 (cisa) +no,small,no,track +yes,small,no,track +no,controlled,no,track +no,small,yes,track* +yes,controlled,no,track* +no,open,no,track* +yes,small,yes,attend +no,controlled,yes,attend +yes,open,no,attend +yes,controlled,yes,act +no,open,yes,act +yes,open,yes,act diff --git a/src/cisa_bod_harm-2.csv b/src/cisa_bod_harm-2.csv new file mode 100644 index 00000000..d297dbf3 --- /dev/null +++ b/src/cisa_bod_harm-2.csv @@ -0,0 +1,13 @@ +In KEV v1.0.0 (cisa),System Exposure v1.0.1,High Value Asset v1.0.0,"Defer, Scheduled, Out-of-Cycle, Immediate v1.0.0" +no,small,no,defer +yes,small,no,defer +no,controlled,no,defer +no,small,yes,scheduled +yes,controlled,no,scheduled +no,open,no,scheduled +yes,small,yes,out-of-cycle +no,controlled,yes,out-of-cycle +yes,open,no,out-of-cycle +yes,controlled,yes,immediate +no,open,yes,immediate +yes,open,yes,immediate diff --git a/src/cisa_bod_harm.csv b/src/cisa_bod_harm.csv new file mode 100644 index 00000000..b52a2005 --- /dev/null +++ b/src/cisa_bod_harm.csv @@ -0,0 +1,37 @@ +In KEV v1.0.0 (cisa),Exploitation v1.1.0,System Exposure v1.0.1,High Value Asset v1.0.0,CISA Levels v1.1.0 (cisa) +no,none,small,no,track +yes,none,small,no,track +no,public poc,small,no,track +no,none,controlled,no,track +no,none,small,yes,track +yes,public poc,small,no,track +no,active,small,no,track +yes,none,controlled,no,track +no,public poc,controlled,no,track +no,none,open,no,track* +yes,none,small,yes,track* +no,public poc,small,yes,track* +no,none,controlled,yes,track* +yes,active,small,no,track* +yes,public poc,controlled,no,track* +no,active,controlled,no,track* +yes,none,open,no,track* +no,public poc,open,no,track* +yes,public poc,small,yes,attend +no,active,small,yes,attend +yes,none,controlled,yes,attend +no,public poc,controlled,yes,attend +no,none,open,yes,attend +yes,active,controlled,no,attend +yes,public poc,open,no,attend +no,active,open,no,attend +yes,active,small,yes,attend +yes,public poc,controlled,yes,act +no,active,controlled,yes,act +yes,none,open,yes,act +no,public poc,open,yes,act +yes,active,open,no,act +yes,active,controlled,yes,act +yes,public poc,open,yes,act +no,active,open,yes,act +yes,active,open,yes,act diff --git a/src/cisa_bod_harm.py b/src/cisa_bod_harm.py new file mode 100644 index 00000000..3ae5fd9e --- /dev/null +++ b/src/cisa_bod_harm.py @@ -0,0 +1,64 @@ +#!/usr/bin/env python +""" +Models an example to play or not to play decision table for SSVC. +""" +# Copyright (c) 2025 Carnegie Mellon University. +# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE +# ENGINEERING INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. +# CARNEGIE MELLON UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, +# EITHER EXPRESSED OR IMPLIED, AS TO ANY MATTER INCLUDING, BUT +# NOT LIMITED TO, WARRANTY OF FITNESS FOR PURPOSE OR +# MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE +# OF THE MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE +# ANY WARRANTY OF ANY KIND WITH RESPECT TO FREEDOM FROM +# PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. +# Licensed under a MIT (SEI)-style license, please see LICENSE or contact +# permission@sei.cmu.edu for full terms. +# [DISTRIBUTION STATEMENT A] This material has been approved for +# public release and unlimited distribution. Please see Copyright notice +# for non-US Government use and distribution. +# This Software includes and/or makes use of Third-Party Software each +# subject to its own license. +# DM24-0278 + +from ssvc.decision_points.cisa.in_kev import LATEST as InKEV +from ssvc.decision_points.ssvc.system_exposure import LATEST as EXPOSURE +from ssvc.decision_points.ssvc.high_value_asset import LATEST as HVA +from ssvc.decision_tables.example.base import ExampleDecisionTable +from ssvc.outcomes.ssvc.dsoi import LATEST as OUTCOMES + +dp_dict = {dp.id: dp for dp in [InKEV, EXPOSURE, HVA, OUTCOMES]} + + +BODs_1 = ExampleDecisionTable( + key="BODs", + version="1.0.0", + name="CISA BODs", + definition="combining several recent BODs", + decision_points={dp.id: dp for dp in [InKEV, EXPOSURE, HVA, OUTCOMES]}, + outcome=OUTCOMES.id, + mapping=[ + ] + ) + +VERSIONS = [ + BODs_1, +] +LATEST = BODs_1 + + +def main(): + + print("## BODs Decision Table Object") + print() + print(BODs_1.model_dump_json(indent=2)) + + print("## BODs Decision Table Longform DataFrame CSV") + print() + from ssvc.decision_tables.base import decision_table_to_longform_df + + print(decision_table_to_longform_df(BODs_1).to_csv(index=False)) + + +if __name__ == "__main__": + main() From 77fa8c52ee0bd5b1c88f059ae61d7d99b716ca6b Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 9 Jan 2026 20:26:42 +0000 Subject: [PATCH 2/3] Initial plan From 88d82151d92d364528acd2429d459504980a0c24 Mon Sep 17 00:00:00 2001 From: Renae Metcalf Date: Thu, 5 Mar 2026 11:41:48 -0500 Subject: [PATCH 3/3] Update License for genai clause and bump years to 2026 --- LICENSE | 48 +++++++------- data/LICENSE | 2 +- doc/LICENSE | 2 +- docs/LICENSE | 2 +- docs/about/copyright.md | 2 +- docs/ssvc-calc/findex.html | 2 +- docs/ssvc-calc/old_index.html | 2 +- docs/ssvc-calc/ssvc-calc.html | 2 +- docs/ssvc-calc/ssvc.js | 2 +- docs/ssvc-calc/ungraph.js | 2 +- obsolete/SSVC_csv-to-latex.py | 2 +- obsolete/enumerate-coord-publish-options.sh | 2 +- obsolete/enumerate-coord-triage-options.sh | 2 +- obsolete/enumerate-deployer-options.sh | 2 +- obsolete/enumerate-supplier-options.sh | 2 +- obsolete/ssvc_v2.py | 2 +- pdfs/LICENSE | 2 +- src/LICENSE | 2 +- src/cisa_bod_harm-1.csv | 13 ---- src/cisa_bod_harm-2.csv | 13 ---- src/cisa_bod_harm.csv | 37 ----------- src/cisa_bod_harm.py | 64 ------------------- src/ssvc/__init__.py | 2 +- src/ssvc/_mixins.py | 2 +- src/ssvc/api/__init__.py | 2 +- src/ssvc/api/helpers.py | 2 +- src/ssvc/api/main.py | 2 +- src/ssvc/api/v1/__init__.py | 2 +- src/ssvc/api/v1/response_models/__init__.py | 2 +- src/ssvc/api/v1/response_models/_type_defs.py | 2 +- src/ssvc/api/v1/routers/__init__.py | 2 +- src/ssvc/api/v1/routers/decision_point.py | 2 +- src/ssvc/api/v1/routers/decision_points.py | 2 +- src/ssvc/api/v1/routers/decision_table.py | 2 +- src/ssvc/api/v1/routers/decision_tables.py | 2 +- src/ssvc/api/v1/routers/examples.py | 2 +- src/ssvc/api/v1/routers/keys.py | 2 +- src/ssvc/api/v1/routers/namespaces.py | 2 +- src/ssvc/api/v1/routers/objects.py | 2 +- src/ssvc/api/v1/routers/types.py | 2 +- src/ssvc/api/v1/routers/v1_router.py | 2 +- src/ssvc/api/v1/routers/versions.py | 2 +- src/ssvc/csv_analyzer.py | 2 +- src/ssvc/decision_points/__init__.py | 2 +- src/ssvc/decision_points/base.py | 2 +- src/ssvc/decision_points/basic/__init__.py | 2 +- src/ssvc/decision_points/basic/base.py | 2 +- .../decision_points/basic/near_boundary.py | 2 +- .../basic/probability/__init__.py | 2 +- .../basic/probability/cis_wep.py | 2 +- .../basic/probability/five_equal.py | 2 +- .../basic/probability/five_weighted.py | 2 +- .../basic/probability/two_equal.py | 2 +- .../basic/quantiles/__init__.py | 2 +- .../decision_points/basic/quantiles/median.py | 2 +- .../basic/quantiles/quartiles.py | 2 +- .../basic/quantiles/quintiles.py | 2 +- src/ssvc/decision_points/cisa/__init__.py | 2 +- src/ssvc/decision_points/cisa/base.py | 2 +- src/ssvc/decision_points/cisa/in_kev.py | 2 +- .../cisa/mission_prevalence.py | 2 +- src/ssvc/decision_points/cvss/__init__.py | 2 +- src/ssvc/decision_points/cvss/_not_defined.py | 2 +- .../decision_points/cvss/attack_complexity.py | 2 +- .../cvss/attack_requirements.py | 2 +- .../decision_points/cvss/attack_vector.py | 2 +- .../decision_points/cvss/authentication.py | 2 +- .../cvss/availability_impact.py | 2 +- .../cvss/availability_requirement.py | 2 +- src/ssvc/decision_points/cvss/base.py | 2 +- .../cvss/collateral_damage_potential.py | 2 +- .../cvss/confidentiality_impact.py | 2 +- .../cvss/confidentiality_requirement.py | 2 +- .../decision_points/cvss/equivalence_set_1.py | 2 +- .../decision_points/cvss/equivalence_set_2.py | 2 +- .../decision_points/cvss/equivalence_set_3.py | 2 +- .../decision_points/cvss/equivalence_set_4.py | 2 +- .../decision_points/cvss/equivalence_set_5.py | 2 +- .../decision_points/cvss/equivalence_set_6.py | 2 +- .../decision_points/cvss/exploit_maturity.py | 2 +- src/ssvc/decision_points/cvss/helpers.py | 2 +- src/ssvc/decision_points/cvss/impact_bias.py | 2 +- .../decision_points/cvss/integrity_impact.py | 2 +- .../cvss/integrity_requirement.py | 2 +- .../decision_points/cvss/modified/__init__.py | 2 +- ...modified_subsequent_availability_impact.py | 2 +- .../modified_subsequent_integrity_impact.py | 2 +- .../cvss/privileges_required.py | 2 +- .../cvss/qualitative_severity.py | 2 +- .../decision_points/cvss/remediation_level.py | 2 +- .../decision_points/cvss/report_confidence.py | 2 +- src/ssvc/decision_points/cvss/scope.py | 2 +- .../cvss/subsequent_availability_impact.py | 2 +- .../cvss/subsequent_confidentiality_impact.py | 2 +- .../cvss/subsequent_integrity_impact.py | 2 +- .../cvss/supplemental/__init__.py | 2 +- .../cvss/supplemental/automatable.py | 2 +- .../cvss/supplemental/provider_urgency.py | 2 +- .../cvss/supplemental/recovery.py | 2 +- .../cvss/supplemental/safety.py | 2 +- .../cvss/supplemental/value_density.py | 2 +- .../vulnerability_response_effort.py | 2 +- .../cvss/target_distribution.py | 2 +- .../decision_points/cvss/user_interaction.py | 2 +- src/ssvc/decision_points/example/__init__.py | 2 +- src/ssvc/decision_points/example/base.py | 2 +- src/ssvc/decision_points/example/humidity.py | 2 +- src/ssvc/decision_points/example/weather.py | 2 +- src/ssvc/decision_points/helpers.py | 2 +- src/ssvc/decision_points/nist/__init__.py | 2 +- src/ssvc/decision_points/nist/base.py | 2 +- .../decision_points/nist/sp800_30_r1_g.py | 2 +- src/ssvc/decision_points/ssvc/__init__.py | 2 +- src/ssvc/decision_points/ssvc/automatable.py | 2 +- src/ssvc/decision_points/ssvc/base.py | 2 +- .../decision_points/ssvc/critical_software.py | 2 +- src/ssvc/decision_points/ssvc/exploitation.py | 2 +- .../decision_points/ssvc/high_value_asset.py | 2 +- src/ssvc/decision_points/ssvc/human_impact.py | 2 +- .../decision_points/ssvc/mission_impact.py | 2 +- .../ssvc/public_safety_impact.py | 2 +- .../ssvc/public_value_added.py | 2 +- .../ssvc/report_credibility.py | 2 +- .../decision_points/ssvc/report_public.py | 2 +- .../decision_points/ssvc/safety_impact.py | 2 +- .../ssvc/supplier_cardinality.py | 2 +- .../ssvc/supplier_contacted.py | 2 +- .../ssvc/supplier_engagement.py | 2 +- .../ssvc/supplier_involvement.py | 2 +- .../decision_points/ssvc/system_exposure.py | 2 +- .../decision_points/ssvc/technical_impact.py | 2 +- src/ssvc/decision_points/ssvc/utility.py | 2 +- .../decision_points/ssvc/value_density.py | 2 +- src/ssvc/decision_tables/__init__.py | 2 +- src/ssvc/decision_tables/base.py | 2 +- src/ssvc/decision_tables/cisa/__init__.py | 2 +- .../cisa/cisa_coordinate_dt.py | 2 +- src/ssvc/decision_tables/cvss/__init__.py | 2 +- .../cvss/equivalence_set_five.py | 2 +- .../cvss/equivalence_set_four.py | 2 +- .../cvss/equivalence_set_one.py | 2 +- .../cvss/equivalence_set_six.py | 2 +- .../cvss/equivalence_set_three.py | 2 +- .../cvss/equivalence_set_two.py | 2 +- .../cvss/qualitative_severity.py | 2 +- src/ssvc/decision_tables/example/__init__.py | 2 +- src/ssvc/decision_tables/example/base.py | 2 +- .../example/epss_percentile.py | 2 +- .../decision_tables/example/epss_quartile.py | 2 +- src/ssvc/decision_tables/example/to_play.py | 2 +- src/ssvc/decision_tables/helpers.py | 2 +- src/ssvc/decision_tables/ssvc/__init__.py | 2 +- src/ssvc/decision_tables/ssvc/coord_pub_dt.py | 2 +- src/ssvc/decision_tables/ssvc/coord_triage.py | 2 +- src/ssvc/decision_tables/ssvc/deployer_dt.py | 2 +- src/ssvc/decision_tables/ssvc/human_impact.py | 2 +- .../ssvc/public_safety_impact.py | 4 +- src/ssvc/decision_tables/ssvc/supplier_dt.py | 2 +- src/ssvc/decision_tables/ssvc/utility.py | 2 +- src/ssvc/doc_helpers.py | 2 +- src/ssvc/doctools.py | 2 +- src/ssvc/dp_groups/__init__.py | 2 +- src/ssvc/dp_groups/base.py | 2 +- src/ssvc/dp_groups/cvss/__init__.py | 2 +- src/ssvc/dp_groups/cvss/collections.py | 2 +- src/ssvc/dp_groups/ssvc/__init__.py | 2 +- src/ssvc/dp_groups/ssvc/collections.py | 2 +- .../dp_groups/ssvc/coordinator_publication.py | 2 +- src/ssvc/dp_groups/ssvc/coordinator_triage.py | 2 +- src/ssvc/dp_groups/ssvc/deployer.py | 2 +- src/ssvc/dp_groups/ssvc/supplier.py | 2 +- src/ssvc/examples.py | 2 +- src/ssvc/md_gen.py | 4 +- src/ssvc/namespaces.py | 2 +- src/ssvc/outcomes/__init__.py | 2 +- src/ssvc/outcomes/basic/__init__.py | 2 +- src/ssvc/outcomes/basic/ike.py | 2 +- src/ssvc/outcomes/basic/lmh.py | 2 +- src/ssvc/outcomes/basic/mscw.py | 2 +- src/ssvc/outcomes/basic/value_complexity.py | 2 +- src/ssvc/outcomes/basic/yn.py | 2 +- src/ssvc/outcomes/cisa/__init__.py | 2 +- src/ssvc/outcomes/cisa/scoring.py | 2 +- src/ssvc/outcomes/cvss/__init__.py | 2 +- src/ssvc/outcomes/cvss/lmhc.py | 2 +- src/ssvc/outcomes/ssvc/__init__.py | 2 +- src/ssvc/outcomes/ssvc/coordinate.py | 2 +- src/ssvc/outcomes/ssvc/dsoi.py | 2 +- src/ssvc/outcomes/ssvc/publish.py | 2 +- src/ssvc/outcomes/x_com_yahooinc/__init__.py | 2 +- src/ssvc/outcomes/x_com_yahooinc/paranoids.py | 2 +- src/ssvc/policy_generator.py | 2 +- src/ssvc/registry/__init__.py | 2 +- src/ssvc/registry/base.py | 2 +- src/ssvc/registry/events.py | 2 +- src/ssvc/registry_demo.py | 2 +- src/ssvc/selection.py | 2 +- src/ssvc/utils/__init__.py | 2 +- src/ssvc/utils/defaults.py | 2 +- src/ssvc/utils/field_specs.py | 2 +- src/ssvc/utils/importer.py | 2 +- src/ssvc/utils/misc.py | 2 +- src/ssvc/utils/patterns.py | 2 +- src/ssvc/utils/schema.py | 2 +- src/ssvc/utils/ssvc_namespace_pattern.abnf | 2 +- src/ssvc/utils/toposort.py | 2 +- src/test/__init__.py | 2 +- src/test/api/__init__.py | 2 +- src/test/api/response_models/__init__.py | 2 +- src/test/api/routers/__init__.py | 2 +- src/test/api/routers/test_decision_point.py | 2 +- src/test/api/routers/test_decision_points.py | 2 +- src/test/api/routers/test_decision_table.py | 2 +- src/test/api/routers/test_decision_tables.py | 2 +- src/test/api/routers/test_examples.py | 2 +- src/test/api/routers/test_keys.py | 2 +- src/test/api/routers/test_namespaces.py | 2 +- src/test/api/routers/test_objects.py | 2 +- src/test/api/routers/test_types.py | 2 +- src/test/api/routers/test_versions.py | 2 +- src/test/api/test_helpers.py | 2 +- src/test/api/test_main.py | 2 +- src/test/decision_points/__init__.py | 2 +- src/test/decision_points/test_cvss_helpers.py | 2 +- src/test/decision_points/test_dp_base.py | 2 +- src/test/decision_points/test_dp_helpers.py | 2 +- src/test/decision_tables/__init__.py | 2 +- src/test/decision_tables/cvss/__init__.py | 2 +- src/test/decision_tables/cvss/_v4expected.py | 2 +- .../decision_tables/cvss/test_cvss_qsr4.py | 2 +- src/test/decision_tables/cvss/test_eq1.py | 2 +- src/test/decision_tables/cvss/test_eq2.py | 2 +- src/test/decision_tables/cvss/test_eq3.py | 2 +- src/test/decision_tables/cvss/test_eq4.py | 2 +- src/test/decision_tables/cvss/test_eq5.py | 2 +- src/test/decision_tables/cvss/test_eq6.py | 2 +- src/test/decision_tables/ssvc/__init__.py | 2 +- .../decision_tables/ssvc/test_coord_triage.py | 2 +- .../decision_tables/ssvc/test_human_impact.py | 2 +- src/test/decision_tables/test_base.py | 2 +- src/test/dp_groups/__init__.py | 2 +- src/test/dp_groups/test_dp_groups.py | 2 +- src/test/outcomes/__init__.py | 2 +- src/test/outcomes/test_outcomes.py | 2 +- src/test/registry/__init__.py | 2 +- src/test/registry/test_base.py | 2 +- src/test/test_csv_analyzer.py | 2 +- src/test/test_doc_helpers.py | 2 +- src/test/test_doctools.py | 2 +- src/test/test_mixins.py | 2 +- src/test/test_namespaces.py | 2 +- src/test/test_namespaces_pattern.py | 2 +- src/test/test_policy_generator.py | 2 +- src/test/test_schema.py | 2 +- src/test/test_selections.py | 2 +- src/test/utils/__init__.py | 2 +- src/test/utils/test_toposort.py | 2 +- 257 files changed, 279 insertions(+), 404 deletions(-) delete mode 100644 src/cisa_bod_harm-1.csv delete mode 100644 src/cisa_bod_harm-2.csv delete mode 100644 src/cisa_bod_harm.csv delete mode 100644 src/cisa_bod_harm.py diff --git a/LICENSE b/LICENSE index be958a50..3099d572 100644 --- a/LICENSE +++ b/LICENSE @@ -2,47 +2,49 @@ Different directories in this repository are subject to different licenses. Plea --- -The following statement applies to markdown, pdf, bib, and text files (documentation): +Copyright 2026 Carnegie Mellon University. + +This material is based upon work funded and supported by the Department of Homeland Security under Contract No. FA8702-15-D-0002 with Carnegie Mellon University for the operation of the Software Engineering Institute, a federally funded research and development center sponsored by the United States Department of Defense. -Copyright 2025 Carnegie Mellon University. - -This material is based upon work funded and supported by the Department of Homeland Security under Contract No. FA8702-15-D-0002 with Carnegie Mellon University for the operation of the Software Engineering Institute, a federally funded research and development center sponsored by the United States Department of Defense. - The view, opinions, and/or findings contained in this material are those of the author(s) and should not be construed as an official Government position, policy, or decision, unless designated by other documentation. - + NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. - + [DISTRIBUTION STATEMENT A] This material has been approved for public release and unlimited distribution. Please see Copyright notice for non-US Government use and distribution. - + This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License. Requests for permission for non-licensed uses should be directed to the Software Engineering Institute at permission@sei.cmu.edu. -CERT Coordination Center® is registered in the U.S. Patent and Trademark Office by Carnegie Mellon University. + +This work product was created in part using generative AI. +CERT Coordination Center® is registered in the U.S. Patent and Trademark Office by Carnegie Mellon University. + DM24-0278 --- The following statement applies to py, json, csv, sh, toml files (software): -Copyright 2025 Carnegie Mellon University. - +Copyright 2026 Carnegie Mellon University. + Licensed under a MIT (SEI)-style license, please see license.txt or contact permission@sei.cmu.edu for full terms. - + Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: - + The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. - + This Software includes and/or can make use of certain third party software ("Third Party Software"). The Third Party Software that is used by the software is dependent upon your system configuration, but typically includes the software identified in this license.txt file, and/or described in the documentation and/or read me file. By using this software, you agree to comply with any and all relevant Third Party Software terms and conditions contained in any such Third Party Software or separate license file distributed with such Third Party Software. The parties who own the Third Party Software ("Third Party Licensors") are intended third party beneficiaries to this License with respect to the terms applicable to their Third Party Software. Third Party Software licenses only apply to the Third Party Software and not any other portion of SEI Software or this software as a whole. - -This material is based upon work funded and supported by the Department of Defense under Contract No. FA8702-15-D-0002 with Carnegie Mellon University for the operation of the Software Engineering Institute, a federally funded research and development center. - -The view, opinions, and/or findings contained in this material are those of the author(s) and should not be construed as an official Government position, policy, or decision, unless designated by other documentation. - + +This material is based upon work funded and supported by the Department of Defense under Contract No. FA8702-15-D-0002 with Carnegie Mellon University for the operation of the Software Engineering Institute, a federally funded research and development center. + +The view, opinions, and/or findings contained in this material are those of the author(s) and should not be construed as an official Government position, policy, or decision, unless designated by other documentation. + References herein to any specific commercial product, process, or service by trade name, trade mark, manufacturer, or otherwise, does not necessarily constitute or imply its endorsement, recommendation, or favoring by Carnegie Mellon University or its Software Engineering Institute. - + NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. - + +This work product was created in part using generative AI. + [DISTRIBUTION STATEMENT A] This material has been approved for public release and unlimited distribution. Please see Copyright notice for non-US Government use and distribution. - -DM24-0278 +DM24-0278 diff --git a/data/LICENSE b/data/LICENSE index 9bc24bd1..b7cbe994 100644 --- a/data/LICENSE +++ b/data/LICENSE @@ -1,4 +1,4 @@ -Copyright 2025 Carnegie Mellon University. +Copyright 2026 Carnegie Mellon University. Licensed under a MIT (SEI)-style license, please see license.txt or contact permission@sei.cmu.edu for full terms. diff --git a/doc/LICENSE b/doc/LICENSE index db23a092..7ae3b6c0 100644 --- a/doc/LICENSE +++ b/doc/LICENSE @@ -1,4 +1,4 @@ -Copyright 2025 Carnegie Mellon University. +Copyright 2026 Carnegie Mellon University. This material is based upon work funded and supported by the Department of Homeland Security under Contract No. FA8702-15-D-0002 with Carnegie Mellon University for the operation of the Software Engineering Institute, a federally funded research and development center sponsored by the United States Department of Defense. diff --git a/docs/LICENSE b/docs/LICENSE index db23a092..7ae3b6c0 100644 --- a/docs/LICENSE +++ b/docs/LICENSE @@ -1,4 +1,4 @@ -Copyright 2025 Carnegie Mellon University. +Copyright 2026 Carnegie Mellon University. This material is based upon work funded and supported by the Department of Homeland Security under Contract No. FA8702-15-D-0002 with Carnegie Mellon University for the operation of the Software Engineering Institute, a federally funded research and development center sponsored by the United States Department of Defense. diff --git a/docs/about/copyright.md b/docs/about/copyright.md index 79904388..392e3d83 100644 --- a/docs/about/copyright.md +++ b/docs/about/copyright.md @@ -1,4 +1,4 @@ -Copyright 2025 Carnegie Mellon University. +Copyright 2026 Carnegie Mellon University. This material is based upon work funded and supported by the Department of Homeland Security under Contract No. FA8702-15-D-0002 with Carnegie Mellon University for the operation of the Software Engineering Institute, a federally funded research and development center sponsored by the United States Department of Defense. diff --git a/docs/ssvc-calc/findex.html b/docs/ssvc-calc/findex.html index c695dcf1..c71740d2 100644 --- a/docs/ssvc-calc/findex.html +++ b/docs/ssvc-calc/findex.html @@ -1,5 +1,5 @@