{
  "system-security-plan": {
    "uuid": "b92a3b07-0898-5b2c-88bd-953121dc711a",
    "metadata": {
      "title": "dsubstrate SSP \u2014 dsubstrate \u2014 SOC 2 CC6.1 (logical access controls) tailoring",
      "last-modified": "2026-05-01T22:54:15.696779+00:00",
      "version": "0.1.0",
      "oscal-version": "1.1.2",
      "remarks": "System Security Plan for the dsubstrate-instrumented agent.  Each implemented-requirement maps a profile-tailored control to the dsubstrate detector_fn that polices the failure mode at runtime.  The substrate, listener, fast-loop, and deep-loop components are the architectural surfaces where the controls are evaluated."
    },
    "import-profile": {
      "href": "#dsubstrate-profile-soc2-cc6.1-v0",
      "remarks": "References the dsubstrate Profile tailoring for soc2-cc6.1.  Combine with the dsubstrate Catalog (uuid5 'dsubstrate.catalog.failure_modes.v0') to resolve full control statements."
    },
    "system-characteristics": {
      "system-ids": [
        {
          "id": "dsubstrate-soc2-cc6.1",
          "identifier-type": "https://ietf.org/rfc/rfc4122"
        }
      ],
      "system-name": "dsubstrate-instrumented agent",
      "description": "An AI agent whose runtime decisions are recorded in a postgres-backed substrate, signed by multiple independent model signers, and policed by deterministic detector_fns against a versioned failure_mode catalog.",
      "system-information": {
        "information-types": [
          {
            "title": "Operator dialog",
            "description": "Inbound/outbound natural language between the operator and the agent."
          },
          {
            "title": "Agent decisions",
            "description": "Predictions, verifier_fn invocations, and signer verdicts emitted by the agent."
          },
          {
            "title": "Failure-mode evidence",
            "description": "Detector_fn matches recorded against agent trajectories."
          }
        ]
      },
      "status": {
        "state": "operational"
      },
      "authorization-boundary": {
        "description": "The boundary encloses the postgres substrate, the Telegram listener, the haiku fast-loop, and the opus/codex/gemini deep-loop tier \u2014 every component whose behavior is recorded in the substrate and is subject to detector_fn evaluation."
      }
    },
    "system-implementation": {
      "users": [
        {
          "uuid": "bec2547e-68fc-5b4f-b945-f0c80ff659b5",
          "title": "dsubstrate operator",
          "description": "Human in the loop steering the agent and reviewing decisions."
        },
        {
          "uuid": "24c88942-54a4-53d7-adbd-59f4fb8426ff",
          "title": "Agent under audit",
          "description": "The dsubstrate-instrumented AI agent under audit."
        }
      ],
      "components": [
        {
          "uuid": "2e8502df-0850-57df-9f3a-47a702350da3",
          "type": "service",
          "title": "dsubstrate Postgres",
          "description": "Postgres database storing failure_modes, decisions, decision_signatures, prediction_residuals, and the goal queue.  Single source of truth for control evidence.",
          "status": {
            "state": "operational"
          }
        },
        {
          "uuid": "e9a71655-734c-501d-8e52-ec0b60becf03",
          "type": "this-system",
          "title": "Agent IO boundary",
          "description": "Telegram-facing IO boundary.  All inbound user messages and outbound agent replies traverse this component; it enforces the persona-prefix policy that backstops persona_drift / persona_fabrication detectors.",
          "status": {
            "state": "operational"
          }
        },
        {
          "uuid": "f890df6a-0e2d-508e-b517-99c92e5ffbea",
          "type": "service",
          "title": "Agent fast loop (haiku tier)",
          "description": "Sub-second response tier handling acks, heartbeats, INTERPRET output, and quick tool calls.  Detector_fns for noisy_immediate_text_ack, json_dump, and no_ack are evaluated against fast-loop trajectories.",
          "status": {
            "state": "operational"
          }
        },
        {
          "uuid": "3098128c-512a-5eaa-9755-adc8497964a7",
          "type": "service",
          "title": "Agent deep loop (opus + codex + gemini)",
          "description": "Multi-model deliberation tier.  Each decisions row is signed by 2/3+ of these models in independent threads.  Detector_fns for max_turn_cap_hit and tool_call_failure are evaluated here.",
          "status": {
            "state": "operational"
          }
        }
      ]
    },
    "control-implementation": {
      "description": "Each profile-tailored control is implemented by a dsubstrate detector_fn evaluated continuously against agent trajectories.  Implementation status is 'implemented' for every control because the detector is wired into the runtime; assessment evidence (whether the agent has actually exhibited the failure mode) is captured in the matching Assessment-Results document.",
      "implemented-requirements": [
        {
          "uuid": "b2965cba-fd74-5fb6-bac4-6beccb2edb66",
          "control-id": "dsubstrate.persona_drift",
          "props": [
            {
              "name": "implementation-status",
              "value": "implemented"
            },
            {
              "name": "detector-fn",
              "value": "ahe.detectors.persona_drift"
            }
          ],
          "by-components": [
            {
              "component-uuid": "e9a71655-734c-501d-8e52-ec0b60becf03",
              "uuid": "b673c658-7933-5160-abe3-0c70c0f616e2",
              "description": "Failure mode 'persona_drift' is policed at runtime by `ahe.detectors.persona_drift` evaluated against trajectories observed in component 'listener'.  Statement: The agent self-identifies as a different model or assistant in user-facing responses.",
              "implementation-status": {
                "state": "implemented"
              }
            }
          ]
        },
        {
          "uuid": "1d5741d7-bf1f-58a7-9293-c3d2f1b56e72",
          "control-id": "dsubstrate.persona_fabrication",
          "props": [
            {
              "name": "implementation-status",
              "value": "implemented"
            },
            {
              "name": "detector-fn",
              "value": "ahe.detectors.persona_fabrication"
            }
          ],
          "by-components": [
            {
              "component-uuid": "e9a71655-734c-501d-8e52-ec0b60becf03",
              "uuid": "d92eeac1-f38a-5529-bdf8-bb0dc5167d6c",
              "description": "Failure mode 'persona_fabrication' is policed at runtime by `ahe.detectors.persona_fabrication` evaluated against trajectories observed in component 'listener'.  Statement: The agent emits a message prefixed with an unauthorized persona, impersonating an identity it is not.",
              "implementation-status": {
                "state": "implemented"
              }
            }
          ]
        },
        {
          "uuid": "310b6a5f-7597-5c74-99fd-199baf7148dc",
          "control-id": "dsubstrate.tool_call_failure",
          "props": [
            {
              "name": "implementation-status",
              "value": "implemented"
            },
            {
              "name": "detector-fn",
              "value": "ahe.detectors.tool_call_failure"
            }
          ],
          "by-components": [
            {
              "component-uuid": "e9a71655-734c-501d-8e52-ec0b60becf03",
              "uuid": "e0c67fac-4eae-5298-9dd3-cadb2fc27276",
              "description": "Failure mode 'tool_call_failure' is policed at runtime by `ahe.detectors.tool_call_failure` evaluated against trajectories observed in component 'listener'.  Statement: A tool call (identity, messaging, or helper) failed silently or with an unhandled error.",
              "implementation-status": {
                "state": "implemented"
              }
            }
          ]
        }
      ]
    }
  }
}