Reference
OSCAL 1.2.2 integration
Consume AgentDirective safeguards with tooling that already reads NIST OSCAL while preserving the distinction between reported status and assessment findings.
Three projections, one canonical source
catalogControl Pack libraryPack objectives, questions, requirements, and explicitly partial external mappings.
profileOne compiled directiveSelected safeguards and only the parameter values the user actually confirmed.
assessment-resultsStatus observationsAgent-reported status and optional bounded metadata-review outcomes, with no control findings.
Minimal integration path
- FetchFetch the catalog
Read
GET https://agentdirective.org/api/oscal/catalogand cache it bymetadata.versionandmetadata.oscal-version. - CompileCompile a directive
Use the browser, API, CLI, or MCP workflow. A downloaded bundle contains
.agentdirective/oscal-profile.json. - ResolveResolve the import
The profile imports the public catalog and includes the selected pack and requirement identifiers.
- PreservePreserve open decisions
Only confirmed values appear under
modify.set-parameters. Never default a parameter that the profile leaves unset. - InterpretDisplay status honestly
Treat assessment-results entries as observations. Do not convert metadata-review vocabulary into compliant/non-compliant status.
https://agentdirective.org/api/oscal/catalogCompatibility and migration
OSCAL 1.2.2 catalog/profileNativeValidate directlyOSCAL 1.2.2 assessment resultsObservation-onlyPreserve no-finding boundaryOSCAL 1.1.x onlyNot declared compatibleConvert explicitly and revalidateAgentDirective nativeCanonicalPrefer agent-directive.jsonNo stored AgentDirective artifact needs an in-place migration. Regenerate the OSCAL projection from the canonical directive or status document so the declared version and schema-validated structure move together.
Repository-local export
agentdirective oscal .agentdirective
agentdirective oscal .agentdirective --model catalog
agentdirective oscal .agentdirective --model assessment-results \
--review-report review-report.jsonThe public catalog and every generated projection declare OSCAL 1.2.2 and are validated against NIST's published JSON schemas during the release gate.