oscal zero trust lens.stub

---

id: oscal-zero-trust-lens name: OSCAL Zero Trust Lens repo_path: ~/Documents/sw30labs/repos/oscal-zero-trust-lens remote_url: https://github.com/sw30labs/oscal-zero-trust-lens.git primary_language: Python framework: LangGraph ingested: 2026-04-11 last_commit_date: 2026-04-11 category: oscal-compliance stacks: [oscal, langgraph, compliance]

OSCAL Zero Trust Lens

Purpose

Classifies NIST SP 800-53 Rev 5 controls into Zero Trust dimensions (identity, device, network, application, data, visibility/analytics, automation/orchestration) and produces coverage reports against an SSP.

Architecture

3-agent LangGraph pipeline:

1. ClassifierAgent — maps all 800-53 controls to Zero Trust dimensions
2. SSPMapperAgent — identifies which controls are implemented in a given OSCAL SSP
3. GapAnalyzerAgent — computes coverage percentage per dimension and identifies missing core controls

Outputs coverage % per dimension, list of missing core controls, and narrative gap analysis.

Dependencies

• langgraph
• langchain
• langchain-community
• langchain-openai
• pydantic

CI/CD

GitHub Actions ci.yml

Tags

python langgraph langchain oscal nist security compliance zero-trust