version: 1
rules:
  require_primary_source: true
  require_engine_edition_version_and_support_status: true
  require_reproducible_evidence_and_restore_testing: true
  require_corroboration_for_major_change: true
  reject_unsourced_claims: true
  automatic_apply: false
# El contexto de la empresa no es una fuente de la profesión: vive en
# organization/roles/database-administrator.md dentro de cada instalación.
sources:
  - {name: ISO IEC 27040:2024 storage security, url: "https://webstore.iec.ch/en/publication/91476", tier: standard, topics: [storage, security, lifecycle]}
  - {name: ISO 22301 business continuity, url: "https://committee.iso.org/standard/75106.html", tier: standard, topics: [continuity, resilience, recovery]}
  - {name: NIST SP 800-34 Rev 1 contingency planning, url: "https://csrc.nist.gov/pubs/sp/800/34/r1/upd1/final", tier: standard, topics: [contingency, backup, recovery, exercises]}
  - {name: NIST NICE Framework SP 800-181 Rev 1, url: "https://csrc.nist.gov/pubs/sp/800/181/r1/final", tier: standard, topics: [database-administration, tasks, knowledge, skills]}
  - {name: PostgreSQL security advisories, url: "https://www.postgresql.org/support/security/", tier: advisory, topics: [cve, parches, versiones afectadas]}
  - {name: PostgreSQL release notes, url: "https://www.postgresql.org/docs/release/", tier: platform, topics: [versiones, cambios de comportamiento, migración]}