Issues

• SDR - Structure validation and assessment records with outcomes, provenance, and automation method

  FedRAMP/schemas#34 · Filter by author slacy-23 opened on Oct 23, 2026

• CPO schema gap: no machine-readable method to derive service security categories

  FedRAMP/schemas#27 · Filter by author slacy-23 opened on Oct 1, 2026
  

• CPO schema omits Certification Profile Path and Class needed to interpret applicability

  FedRAMP/schemas#26 · Filter by author slacy-23 opened on Oct 1, 2026

• Clarify how CR26 schemas should cite host-side signed action decisions for privileged non-user operations

  FedRAMP/schemas#24 · Filter by author AffixIO opened on Sep 17, 2026
  9

• SDR-CSX-KMT requires KSI metric history in the SDR, but the SDR schema has no field for it

  FedRAMP/schemas#10 · Filter by author mikedizon opened on Jul 27, 2026
  1