Record Class SecureConfigurationProfile

java.lang.Object
java.lang.Record
org.j7m.middleware.compliance.api.SecureConfigurationProfile
Record Components:
productionMode - whether production mode is enabled
insecureGrpcAllowed - whether insecure gRPC is explicitly allowed
mtlsRequired - whether mTLS is required
mtlsConfigured - whether mTLS is configured
strictRegistryTrust - whether strict registry trust is enabled
registryVerifierConfigured - whether a registry verifier is configured
replayProtectionEnabled - whether replay protection is enabled
timestampValidationEnabled - whether timestamp validation is enabled
signedRegistryRecordsRequired - whether signed registry records are required
auditSinkConfigured - whether an audit sink is configured
tamperEvidentAuditEnabled - whether tamper-evident audit is enabled
sensitiveRedactionEnabled - whether redaction is enabled
externalPdpConfigured - whether an external PDP is configured
limitsConfigured - whether payload/concurrency/queue limits are configured
resourcePolicyConfigured - whether a resource policy is configured
adminStatusProtected - whether admin/status is protected
evidenceExportEnabled - whether evidence export is enabled
credentialRotationConfigured - whether a credential rotation process is configured

public record SecureConfigurationProfile(boolean productionMode, boolean insecureGrpcAllowed, boolean mtlsRequired, boolean mtlsConfigured, boolean strictRegistryTrust, boolean registryVerifierConfigured, boolean replayProtectionEnabled, boolean timestampValidationEnabled, boolean signedRegistryRecordsRequired, boolean auditSinkConfigured, boolean tamperEvidentAuditEnabled, boolean sensitiveRedactionEnabled, boolean externalPdpConfigured, boolean limitsConfigured, boolean resourcePolicyConfigured, boolean adminStatusProtected, boolean evidenceExportEnabled, boolean credentialRotationConfigured) extends Record
Production secure-configuration posture snapshot.

The record is immutable and thread-safe. It is intentionally descriptive: it validates deployment posture but does not configure transports by itself.

  • Constructor Details

    • SecureConfigurationProfile

      public SecureConfigurationProfile(boolean productionMode, boolean insecureGrpcAllowed, boolean mtlsRequired, boolean mtlsConfigured, boolean strictRegistryTrust, boolean registryVerifierConfigured, boolean replayProtectionEnabled, boolean timestampValidationEnabled, boolean signedRegistryRecordsRequired, boolean auditSinkConfigured, boolean tamperEvidentAuditEnabled, boolean sensitiveRedactionEnabled, boolean externalPdpConfigured, boolean limitsConfigured, boolean resourcePolicyConfigured, boolean adminStatusProtected, boolean evidenceExportEnabled, boolean credentialRotationConfigured)
      Creates an instance of a SecureConfigurationProfile record class.
      Parameters:
      productionMode - the value for the productionMode record component
      insecureGrpcAllowed - the value for the insecureGrpcAllowed record component
      mtlsRequired - the value for the mtlsRequired record component
      mtlsConfigured - the value for the mtlsConfigured record component
      strictRegistryTrust - the value for the strictRegistryTrust record component
      registryVerifierConfigured - the value for the registryVerifierConfigured record component
      replayProtectionEnabled - the value for the replayProtectionEnabled record component
      timestampValidationEnabled - the value for the timestampValidationEnabled record component
      signedRegistryRecordsRequired - the value for the signedRegistryRecordsRequired record component
      auditSinkConfigured - the value for the auditSinkConfigured record component
      tamperEvidentAuditEnabled - the value for the tamperEvidentAuditEnabled record component
      sensitiveRedactionEnabled - the value for the sensitiveRedactionEnabled record component
      externalPdpConfigured - the value for the externalPdpConfigured record component
      limitsConfigured - the value for the limitsConfigured record component
      resourcePolicyConfigured - the value for the resourcePolicyConfigured record component
      adminStatusProtected - the value for the adminStatusProtected record component
      evidenceExportEnabled - the value for the evidenceExportEnabled record component
      credentialRotationConfigured - the value for the credentialRotationConfigured record component
  • Method Details

    • productionBaseline

      public static SecureConfigurationProfile productionBaseline()
      Returns a conservative production baseline profile.
      Returns:
      production baseline profile
    • toString

      public final String toString()
      Returns a string representation of this record class. The representation contains the name of the class, followed by the name and value of each of the record components.
      Specified by:
      toString in class Record
      Returns:
      a string representation of this object
    • hashCode

      public final int hashCode()
      Returns a hash code value for this object. The value is derived from the hash code of each of the record components.
      Specified by:
      hashCode in class Record
      Returns:
      a hash code value for this object
    • equals

      public final boolean equals(Object o)
      Indicates whether some other object is "equal to" this one. The objects are equal if the other object is of the same class and if all the record components are equal. All components in this record class are compared with the compare method from their corresponding wrapper classes.
      Specified by:
      equals in class Record
      Parameters:
      o - the object with which to compare
      Returns:
      true if this object is the same as the o argument; false otherwise.
    • productionMode

      public boolean productionMode()
      Returns the value of the productionMode record component.
      Returns:
      the value of the productionMode record component
    • insecureGrpcAllowed

      public boolean insecureGrpcAllowed()
      Returns the value of the insecureGrpcAllowed record component.
      Returns:
      the value of the insecureGrpcAllowed record component
    • mtlsRequired

      public boolean mtlsRequired()
      Returns the value of the mtlsRequired record component.
      Returns:
      the value of the mtlsRequired record component
    • mtlsConfigured

      public boolean mtlsConfigured()
      Returns the value of the mtlsConfigured record component.
      Returns:
      the value of the mtlsConfigured record component
    • strictRegistryTrust

      public boolean strictRegistryTrust()
      Returns the value of the strictRegistryTrust record component.
      Returns:
      the value of the strictRegistryTrust record component
    • registryVerifierConfigured

      public boolean registryVerifierConfigured()
      Returns the value of the registryVerifierConfigured record component.
      Returns:
      the value of the registryVerifierConfigured record component
    • replayProtectionEnabled

      public boolean replayProtectionEnabled()
      Returns the value of the replayProtectionEnabled record component.
      Returns:
      the value of the replayProtectionEnabled record component
    • timestampValidationEnabled

      public boolean timestampValidationEnabled()
      Returns the value of the timestampValidationEnabled record component.
      Returns:
      the value of the timestampValidationEnabled record component
    • signedRegistryRecordsRequired

      public boolean signedRegistryRecordsRequired()
      Returns the value of the signedRegistryRecordsRequired record component.
      Returns:
      the value of the signedRegistryRecordsRequired record component
    • auditSinkConfigured

      public boolean auditSinkConfigured()
      Returns the value of the auditSinkConfigured record component.
      Returns:
      the value of the auditSinkConfigured record component
    • tamperEvidentAuditEnabled

      public boolean tamperEvidentAuditEnabled()
      Returns the value of the tamperEvidentAuditEnabled record component.
      Returns:
      the value of the tamperEvidentAuditEnabled record component
    • sensitiveRedactionEnabled

      public boolean sensitiveRedactionEnabled()
      Returns the value of the sensitiveRedactionEnabled record component.
      Returns:
      the value of the sensitiveRedactionEnabled record component
    • externalPdpConfigured

      public boolean externalPdpConfigured()
      Returns the value of the externalPdpConfigured record component.
      Returns:
      the value of the externalPdpConfigured record component
    • limitsConfigured

      public boolean limitsConfigured()
      Returns the value of the limitsConfigured record component.
      Returns:
      the value of the limitsConfigured record component
    • resourcePolicyConfigured

      public boolean resourcePolicyConfigured()
      Returns the value of the resourcePolicyConfigured record component.
      Returns:
      the value of the resourcePolicyConfigured record component
    • adminStatusProtected

      public boolean adminStatusProtected()
      Returns the value of the adminStatusProtected record component.
      Returns:
      the value of the adminStatusProtected record component
    • evidenceExportEnabled

      public boolean evidenceExportEnabled()
      Returns the value of the evidenceExportEnabled record component.
      Returns:
      the value of the evidenceExportEnabled record component
    • credentialRotationConfigured

      public boolean credentialRotationConfigured()
      Returns the value of the credentialRotationConfigured record component.
      Returns:
      the value of the credentialRotationConfigured record component