Token libraries

Libraries own lowercase namespaces, domains, and SemVer versions. A reference is qualified as namespace:token.id; core types stay separate from domain libraries such as security, environment, and lifecycle.

The common tokens library supplies portable component meanings and presentation affordances. common:database is the canonical database component type; common:user is a human participant, while core:component.external-actor can be either a person or an external system.

kind: token-library
namespace: security
domains: [security]
version: 0.1.0
name: Security
tokens:
  - id: security.encryption.at-rest
    kind: applied
    name: Encryption at rest
    description: Stored data is encrypted.
    appliesTo: {elementKinds: [component], componentTypes: [common:database]}
    valueSchema: {type: object, required: [algorithm], properties: {algorithm: {type: string}}}