Spanda

Compliance Profiles

Status: Experimental · Phase: Verify, Deploy · Priority: P2.4

Industry-specific verification templates — not accredited certifications.

Profiles

Profile Typical use
industrial Factory AMRs, fixed safety zones
warehouse Speed caps, shift hours, pedestrian zones
medical Stricter health evidence, audit trails
agriculture Outdoor connectivity, GPS reliance
defense Signed comm, capability minimization
iso26262 Automotive functional safety (ASIL-oriented template)
iso13849 Machinery safety (Performance Level-oriented template)
iec61508 Functional safety / SIL-oriented industrial systems
research Relaxed gates with explicit warnings

Each profile defines

Reports include an explicit template notice — profiles are engineering templates, not legal accreditation.

CLI

spanda verify examples/showcase/policy/warehouse.sd --profile warehouse
spanda verify rover.sd --profile medical --json
spanda compliance list
spanda compliance list --json
spanda verify examples/showcase/compliance/automotive_rover.sd --profile iso26262
spanda verify examples/showcase/compliance/machinery_rover.sd --profile iso13849
spanda verify examples/showcase/compliance/iec61508_rover.sd --profile iec61508
spanda readiness rover.sd --profile medical
spanda compliance report examples/showcase/compliance/defense_rover.sd --profile defense
spanda compliance report examples/showcase/compliance/defense_rover.sd --profile defense --json

spanda compliance report exports an accreditation bundle with evidence checklist, audit export ID, and explicit template_only status — suitable for engineering audit trails, not legal certification.

Control Center (signed catalog)

Production fleets can list Ed25519-verified templates:

curl http://127.0.0.1:8080/v1/compliance/profiles
curl -H "Authorization: Bearer $SPANDA_API_KEY" \
  "http://127.0.0.1:8080/v1/compliance/export?profile=defense"

Templates ship in crates/spanda-compliance/templates/ (defense, medical, iso26262, iso13849, iec61508). Re-sign after edits:

cargo run -p spanda-compliance --bin sign_catalog

See control-center.md · security-audit-third-party.md.

Integration

Built on readiness, capability verification, and assurance evidence checks in spanda-compliance.

Disclaimer: Profiles are templates for engineering discipline, not regulatory approval.

Showcase: examples/showcase/policy/warehouse.sd, examples/showcase/compliance/defense_rover.sd, examples/showcase/compliance/medical_rover.sd, examples/showcase/compliance/automotive_rover.sd, examples/showcase/compliance/machinery_rover.sd, examples/showcase/compliance/iec61508_rover.sd · smoke: scripts/compliance_smoke.sh, scripts/gaps_smoke.sh

See policy-engine.md · platform-maturity-roadmap.md.