Version: 2.0.0 Canonical name: Adaptive Identity-and-access Threat Intelligence and Response Status: Reference architecture and research preview

AITIR Version 2 converts identity-centered telemetry into governed evidence, a bounded policy decision, an authorized response, and auditable assurance. It does not give models independent authority.

View the GitHub repository · Download the latest release · Review status and limitations

Core specification

1. Version 2 Specification
2. Technical Overview
3. Architecture
4. Data Contracts
5. Response Authority
6. Standards Crosswalk
7. Migration from Version 1

Evaluation and evidence

• Synthetic Proof of Concept
• Reference Risk Scoring Model
• Pilot Evaluation Protocol
• Use Cases
• Research and Publications
• Version 2 Research Ledger

Project governance

• Status and Limitations
• Roadmap
• Public Materials
• Release Process
• Security Guidance
• Contributing
• Code of Conduct
• Changelog

Machine-readable artifacts

• Event schema
• Evidence schema
• Decision schema
• Synthetic events
• Synthetic output
• Artifact integrity manifest

Evidence boundary

Documentation completeness is not implementation evidence. Schema validation is not security effectiveness. Synthetic studies are not field validation. Standards alignment is not compliance. A submitted manuscript is not an accepted publication. See Status and Limitations.