OASIS Open

National Security Agency

Yes

Three minor but material comments:

1) The OpenC2-Response type should be Map, not Record. There is not a hard and fast rule for when one should be used instead of the other, but Record is suited for tablular data where there is a fixed number of fields/columns (such as OpenC2-Command, which has exactly 5 fields). Map is used for more open-ended data with an unspecified number of fields, such as OpenC2-Response which includes an unspecified number of profile-defined results. If OpenC2-Response were changed to a fixed structure [status, status_text, results] then it would be
Record and results would be Map.

2) The "profiles" field in OpenC2-Response should be type "Nsid" to avoid responses containing nested lists.

3) Definition of Message-Type needs to be added to Section 3.4; it is referenced in Section 3.2 but is currently undefined.