{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:4d4d4d4d-0000-4000-8000-00000000fail",
  "version": 1,
  "$comment": "EXAMPLE CBOM \u2014 DOES NOT CONFORM to profile pkic.example.interface-disclosure v0.7. Carrier format: CycloneDX 1.7. The product declares ONLY its client-facing HTTPS service interface (fully described) and omits the management/configuration interface entirely, so product rule P2 (at least one interface of type 'management') fails. The service interface it DID declare passes every per-interface rule \u2014 the failure is a missing mandatory ELEMENT at the product level, not a missing attribute.",
  "metadata": {
    "timestamp": "2026-07-16T09:05:00Z",
    "component": {
      "type": "application",
      "bom-ref": "app:nginx",
      "name": "nginx",
      "version": "1.27.0",
      "purl": "pkg:generic/nginx@1.27.0",
      "description": "Web server / reverse proxy (example subject)",
      "properties": [
        {
          "name": "pkic:profile:coverage",
          "value": "partial"
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "lib:openssl",
      "name": "OpenSSL",
      "version": "3.4.0",
      "purl": "pkg:generic/openssl@3.4.0",
      "description": "Crypto provider for the TLS service interface"
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "crypto:protocol:svc-https",
      "name": "HTTPS service interface (TLS 1.3)",
      "description": "Cryptographic relationship (edge): TLS 1.3 session between a browser and nginx.",
      "cryptoProperties": {
        "assetType": "protocol",
        "protocolProperties": {
          "type": "tls",
          "version": "1.3",
          "cipherSuites": [
            {
              "name": "TLS_AES_256_GCM_SHA384",
              "algorithms": [
                "crypto:algo:aes-256-gcm",
                "crypto:algo:x25519",
                "crypto:algo:rsa-2048"
              ],
              "identifiers": [
                "0x13,0x02"
              ]
            }
          ],
          "cryptoRefArray": [
            "crypto:algo:aes-256-gcm",
            "crypto:algo:x25519",
            "crypto:algo:rsa-2048",
            "crypto:cert:server-leaf"
          ]
        }
      },
      "properties": [
        {
          "name": "pkic:profile:interfaceId",
          "value": "svc-https"
        },
        {
          "name": "pkic:profile:interfaceType",
          "value": "service"
        },
        {
          "name": "pkic:profile:lifecycleStage",
          "value": "observed"
        },
        {
          "name": "pkic:profile:endpointRole:client",
          "value": "endpoint:browser"
        },
        {
          "name": "pkic:profile:endpointRole:server",
          "value": "endpoint:nginx"
        },
        {
          "name": "pkic:profile:implementationPurl",
          "value": "pkg:generic/openssl@3.4.0"
        }
      ]
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "crypto:algo:aes-256-gcm",
      "name": "AES-256-GCM",
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "ae",
          "parameterSetIdentifier": "256",
          "mode": "gcm",
          "cryptoFunctions": [
            "encrypt",
            "decrypt"
          ],
          "nistQuantumSecurityLevel": 1
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "crypto:algo:x25519",
      "name": "X25519",
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "key-agree",
          "curve": "x25519",
          "cryptoFunctions": [
            "keygen",
            "keyagreement"
          ],
          "nistQuantumSecurityLevel": 0
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "crypto:algo:rsa-2048",
      "name": "RSA-2048",
      "cryptoProperties": {
        "assetType": "algorithm",
        "algorithmProperties": {
          "primitive": "signature",
          "parameterSetIdentifier": "2048",
          "cryptoFunctions": [
            "sign",
            "verify"
          ],
          "nistQuantumSecurityLevel": 0
        }
      }
    },
    {
      "type": "cryptographic-asset",
      "bom-ref": "crypto:cert:server-leaf",
      "name": "example.com server certificate",
      "cryptoProperties": {
        "assetType": "certificate",
        "certificateProperties": {
          "subjectName": "CN=example.com",
          "issuerName": "CN=Example Issuing CA",
          "certificateFormat": "X.509",
          "signatureAlgorithmRef": "crypto:algo:rsa-2048",
          "subjectPublicKeyRef": "crypto:algo:rsa-2048"
        }
      }
    }
  ],
  "dependencies": [
    {
      "ref": "app:nginx",
      "dependsOn": [
        "lib:openssl",
        "crypto:protocol:svc-https"
      ]
    },
    {
      "ref": "crypto:protocol:svc-https",
      "dependsOn": [
        "lib:openssl",
        "crypto:algo:aes-256-gcm",
        "crypto:algo:x25519",
        "crypto:algo:rsa-2048",
        "crypto:cert:server-leaf"
      ]
    },
    {
      "ref": "crypto:cert:server-leaf",
      "dependsOn": [
        "crypto:algo:rsa-2048"
      ]
    }
  ]
}