From dbc65c449fefa9aaebd7b5543122d1e14101be67 Mon Sep 17 00:00:00 2001
From: stefan <stefan@i3mint.local>
Date: Sat, 21 Feb 2026 20:49:40 +0100
Subject: first version of Trust ontology in PlantUML

---
 PlantUML-ModelingTrust/index.adoc | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 PlantUML-ModelingTrust/index.adoc

(limited to 'PlantUML-ModelingTrust/index.adoc')

diff --git a/PlantUML-ModelingTrust/index.adoc b/PlantUML-ModelingTrust/index.adoc
new file mode 100644
index 0000000..ed40f79
--- /dev/null
+++ b/PlantUML-ModelingTrust/index.adoc
@@ -0,0 +1,33 @@
+= Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate
+0.0.1
+
+== Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate
+
+* »Ontological Analysis and Redesign of Risk Modeling in ArchiMate«
+** by Prince Sales, Tiago & Almeida, João & Santini, Sebastiano & Baião, Fernanda & Guizzardi, Giancarlo. 
+*** https://www.researchgate.net/publication/326835902_Ontological_Analysis_and_Redesign_of_Risk_Modeling_in_ArchiMate
+* »Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate«
+** by Glenda Amaral, Tiago Prince Sales, Giancarlo Guizzardi, João Paulo A. Almeida, and Daniele Porello
+*** https://www.researchgate.net/publication/344319377_Modeling_Trust_in_Enterprise_Architecture_A_Pattern_Language_for_ArchiMate
+
+I use the patterns develop in this paper to model trust relationships (trust boarders, trust anchors) in Zero Trust Architectures. 
+
+As an example, I model the process of Downloading an NetBSD ISO Install Image, which has been signed by the NetBSD security officer with a detached GnuPG signature. This is SLSA Level 1 according to the »Supply-chain Levels for Software Artifacts«
+
+I will extend the process from SLSA Level 1 to SLSA Level 4, which will include Reproducible Builds and an immutable linked list of hashes in concatenated Merkle trees.
+
+
+
+
+== Archimate Diagrams
+
+[cols="~a,5%,~a",options="header",width="100%",frame=none,grid=none]
+|===
+| Example from Paper | | Applied to the NetBSD download
+
+| image::6-3a.svg[] | | image::6-3c.svg[]
+| image::8-7a-Trust-Composition.svg[] | | image::8-7-GnuPG-Trust-Composition.svg[]
+| image::RSO9-10-RiskSecurityOverlay.svg[] | | image::RSO9-10-GnuPG-RiskSecurityOverlay.svg[]
+| image::9-9-RiskAssessmentPattern.svg[] | | image::9-9-GnuPG-RiskAssessmentPattern.svg[]
+|===
+
-- 
cgit v1.2.3

