4a2bf3567a
Aksel/Digdir-aligned design system for plugin Playgrounds — visual self-service UIs that complement terminal slash-commands. Targets ms-ai-architect, okr, llm-security, ultraplan-local, config-audit. Built for Norwegian public sector decision-makers plus developer power-users — one visual family, two info densities. Generated by claude.ai/design (Anthropic) in a dialog-based design session driven by a comprehensive brief covering all five target plugins, Aksel/Digdir conventions, and domain-specific visual standards (NS 5814 ROS matrices, EU AI Act 4-tier pyramide, Doerr OKR scoring, NIST CSF, OWASP threat modeling). Per Anthropic Consumer Terms §4, ownership of outputs is assigned to the user; licensed MIT. shared/playground-design-system/ (5874 lines CSS + JSON): - tokens.css: Inter font, Digdir blue #0062BA, deuteranopia-safe severity ramp, distinct severity-red (#A40E26) vs failure-red (#7D1A1A), plugin scope colors, light + dark themes - base.css: reset, typography (17px body, 65ch measure), focus rings, buttons, badges, forms, Aksel 3-tier inline messages, prefers-reduced-motion support - components.css: Tier 1 — radar/spider, 5x5 matrix-heatmap (bottom-left origin, ROS/DPIA), findings-browser, critique-card, wizard/stepper, live-meter with antipattern lints - components-tier2.css: Tier 2 — decision-tree, traffic-lights with rationale, diff-review, treemap, distribution P10/P50/P90, command-pipeline output, AI Act 4-color pyramide, pipeline-cockpit, verdict-pill + 5-band risk-meter, codepoint-reveal (Unicode steg), small-multiples grid (16-cat posture), OWASP badges (LLM/ASI/AST/MCP) - print.css: A4 stylesheet with BW severity hatching, kommune-logo slot, signature lines for offentlige dokumenter - schemas/: finding.schema.json, okr-set.schema.json, ros-threat.schema.json - README.md: usage guide, design principles, component reference, provenance shared/playground-examples/: - index.html: system showcase with all components live - ros-lier-kommune.html: Lier kommune Copilot ROS-rapport (Scenario A) - okr-baerum.html: Baerum kommune T2-2026 OKR live writer (Scenario B) - security-vegvesen.html: SVV ToxicSkills findings review, 85 funn BLOCK (Scenario C) - templates.html: A4 print template demos - ros-app.js + ros-data.js: Scenario A interactivity WCAG 2.1 AA throughout (UU-loven krav for offentlig sektor): focus rings, ARIA attributes, keyboard navigation, severity numerical redundancy for deuteranopia and BW print, semantic HTML. Known limitation: Inter loaded via Google Fonts CDN violates self-contained no-CDN constraint. System-stack fallback works offline. Self-host woff2 files in Phase 2.
59 lines
2.3 KiB
JSON
59 lines
2.3 KiB
JSON
{
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
"$id": "https://playground-ds.no/schemas/ros-threat.json",
|
|
"title": "ROS-trussel",
|
|
"description": "Én identifisert trussel i en risiko- og sårbarhetsanalyse. NS 5814-justert.",
|
|
"type": "object",
|
|
"required": ["id", "title", "category", "inherent"],
|
|
"properties": {
|
|
"id": { "type": "string", "pattern": "^T-[0-9]{3,}$" },
|
|
"title": { "type": "string" },
|
|
"description": { "type": "string" },
|
|
"category": {
|
|
"enum": ["personvern", "informasjonssikkerhet", "datakvalitet",
|
|
"compliance", "dataintegritet", "leverandørrisiko",
|
|
"tilgjengelighet", "omdømme", "økonomi", "andre"]
|
|
},
|
|
"actors": {
|
|
"type": "array",
|
|
"items": { "enum": ["intern-bruker", "saksbehandler", "innbygger", "ekstern-aktør", "leverandør", "system", "ai-modell"] }
|
|
},
|
|
"inherent": {
|
|
"type": "object",
|
|
"required": ["likelihood", "consequence"],
|
|
"properties": {
|
|
"likelihood": { "type": "integer", "minimum": 1, "maximum": 5 },
|
|
"consequence": { "type": "integer", "minimum": 1, "maximum": 5 },
|
|
"rationale": { "type": "string" }
|
|
}
|
|
},
|
|
"controls": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"required": ["id", "title"],
|
|
"properties": {
|
|
"id": { "type": "string", "pattern": "^M-[0-9]{3,}$" },
|
|
"title": { "type": "string" },
|
|
"kind": { "enum": ["preventiv", "deteksjon", "korreksjon", "policy", "opplæring", "teknisk"] },
|
|
"status": { "enum": ["planlagt", "implementert", "validert", "ute-av-drift"] },
|
|
"owner": { "type": "string" },
|
|
"due": { "type": "string", "format": "date" }
|
|
}
|
|
}
|
|
},
|
|
"residual": {
|
|
"type": "object",
|
|
"properties": {
|
|
"likelihood": { "type": "integer", "minimum": 1, "maximum": 5 },
|
|
"consequence": { "type": "integer", "minimum": 1, "maximum": 5 },
|
|
"rationale": { "type": "string" }
|
|
}
|
|
},
|
|
"regulatory_refs": {
|
|
"type": "array",
|
|
"items": { "type": "string", "description": "GDPR Art. 35, AI Act Art. 6, NS 5814, …" }
|
|
},
|
|
"status": { "enum": ["open", "mitigating", "monitored", "closed", "transferred"], "default": "open" }
|
|
}
|
|
}
|