Legal pillar · v0.16.0

compliance-obligation ComplianceObligation

Compliance-obligation record.

$id · https://corpospec.com/schemas/v0.16.0/compliance-obligation.schema.json

Fields

Field	Type	Required	Description
cadence	ObligationCadence	yes	Cadence.
citation	string	yes	Full citation (e.g. "GDPR Art. 30", "BDSG-neu § 38", "26 USC § 6038").
description	string	yes
entity	PathRef	yes	Path-based cross-reference relative to .corpospec/ root. Pattern: `^[a-z0-9_-]+(/[a-z0-9_.-]+)+$`
id	PathRef	yes	Path-based cross-reference relative to .corpospec/ root. Pattern: `^[a-z0-9_-]+(/[a-z0-9_.-]+)+$`
jurisdiction	IsoCountry	yes	ISO 3166-1 alpha-2 country code.
next_due	IsoDate	yes	Next due date.
owner	PathRef	yes	Owner (single accountable).
regime	ObligationRegime	yes	Obligation regime.
status	ObligationStatus	yes	Current state of obligation.
title	string	yes
bdr_ref	PathRef?	—	PathRef to the BDR enacting this obligation (where relevant).
control_refs	PathRef[]	—	PathRefs to controls (security_control.rs) that operationalise this obligation.
evidence_refs	PathRef[]	—	PathRefs to evidence of recent satisfaction.
last_satisfied_on	IsoDate?	—	Date last satisfied.
penalty_exposure	string?	—	Penalty exposure if breached (free-form, e.g. "Up to 4% global turnover (GDPR Art. 83(5))").
procedure_refs	PathRef[]	—	PathRefs to procedures (sop.rs / runbook.rs) that execute it.
schedule_anchor	string?	—	Day-of-month / day-of-quarter etc. anchors (optional).

Shared types referenced within this schema.

IsoCountry

ISO 3166-1 alpha-2 country code.

pattern: ^[A-Z]{2}$

IsoDate

ISO 8601 date (YYYY-MM-DD).

type: string

ObligationCadence

Cadence.

ObligationRegime

Obligation regime.

ObligationStatus

Current state of obligation.

PathRef

Path-based cross-reference relative to .corpospec/ root. Pattern: `^[a-z0-9_-]+(/[a-z0-9_.-]+)+$`

pattern: ^[a-z0-9_-]+(/[a-z0-9_.-]+)+$

# yaml-language-server: $schema=https://corpospec.com/schemas/v0.16.0/compliance-obligation.schema.json