Open Knowledge Format (OKF) - Safe Payments Framework

An open-source, vendor-neutral framework leveraging the Open Knowledge Format (OKF) to standardize payment security standards, digital threat incidents, and operational runbooks into an agent-readable and programmatically verifiable knowledge graph.

📐 Architecture & System Overview

%%{init: {'theme': 'base', 'themeVariables': { 'primaryColor': '#0d1117', 'edgeLabelBackground':'#161b22', 'tertiaryColor': '#161b22', 'primaryTextColor': '#c9d1d9', 'lineColor': '#c9d1d9', 'nodeBorder': '#30363d', 'clusterBorder': '#30363d', 'clusterBkg': '#0d1117' }}}%%

graph TD
    Developer[("Developer<br/>(Full Stack / Security)")]
    
    subgraph BundleRoot ["/payment-safety-bundle (OKF Knowledge Base)"]
        direction TB
        
        subgraph ConceptsDir ["/concepts (Semantic Graph)"]
            direction TB
            
            subgraph StandardsDir ["/standards (Mandatory Specs)"]
                PCIv4["pci-dss-v4-tokenization.md<br/>(YAML: type: standard)"]
                TLS13["tls-13-gateway-enforcement.md<br/>(YAML: type: standard)"]
            end
            
            subgraph IncidentsDir ["/incidents (Threat Telemetry)"]
                IncidentRAM["incident-2026-041-memory-scraping.md<br/>(YAML: type: incident)"]
            end
            
            subgraph RunbooksDir ["/runbooks (Actionable Guides)"]
                CheckoutSOP["safe-checkout-integration.md<br/>(YAML: type: runbook)"]
            end
        end
    end
    
    subgraph CICDFlow ["GitHub Actions CI/CD Pipeline (.github/workflows/okf-validate.yml)"]
        direction LR
        
        Trigger[Push / PR Event]
        
        subgraph RunnerEnv ["Ubuntu Latest Runner"]
            direction TB
            CheckoutNode[Checkout & Setup Node.js]
            InstallDeps[Install Dependencies]
            BuildValidator[Build TS Validator CLI]
            
            subgraph ValidationStage ["Execution Stage: npx okf-validator"]
                direction TB
                Phase1[Phase 1:<br/>Zod Schema<br/>Frontmatter Check]
                Phase2[Phase 2:<br/>Internal Link<br/>Integrity Check]
                Phase3[Phase 3:<br/>PCI DSS v4<br/>Guardrail Check]
                
                Phase1 ==> Phase2 ==> Phase3
            end
        end
        
        PipelineSuccess{{"Green Build Badge<br/>(OKF Compliant)"}}
        PipelineFailure{{"Red Build Badge<br/>(Validation Failed)"}}
    end
    
    Developer == "Pushes Changes" ==> Trigger
    Trigger ==> CheckoutNode
    CheckoutNode ==> InstallDeps ==> BuildValidator ==> ValidationStage
    
    ValidationStage -. "Scans & Validates" .-> BundleRoot
    
    ValidationStage ==>|Success| PipelineSuccess
    ValidationStage ==>|Failure| PipelineFailure
    
    CheckoutSOP -. "Refers to" .-> PCIv4
    IncidentRAM -. "Remediated by" .-> CheckoutSOP
    PCIv4 -. "Mitigates Threat in" .-> IncidentRAM