OSCAL Catalog Schema

The OSCAL Catalog schema (src/oscal/schema/oscal_catalog.yaml) encodes the OSCAL Control Catalog model: the layer of OSCAL that represents authoritative collections of security and privacy controls (e.g. NIST SP 800-53 Rev. 5).

Key design notes (from schema comments): - Core stays open - no regime-specific assumptions (no FedRAMP hard-coding). - NIST JSON Schema source: http://csrc.nist.gov/ns/oscal/1.2.1/oscal-catalog-schema.json.

Upstream documentation: - https://pages.nist.gov/OSCAL/learn/concepts/layer/control/catalog/ - https://pages.nist.gov/OSCAL-Reference/models/v1.2.1/catalog/json-reference/