AKOCS: Negentropic Governance for Security Policy Updates
Authors/Creators
Description
AKOCS: Negentropic Governance for Security Policy Updates (v2)
AKOCS is a governance and stability framework that reduces policy oscillations after security-content updates in SIEM/SOAR. It enforces a validate → propose → approve → commit/rollback workflow and makes stability observable via three operational metrics:
-
Oscillation Index (OI): volatility of deviation (lower is better)
-
Time-to-Stability (TSS): steps to regain steady state after onboarding
-
Time-to-Recovery (TTR): steps to recover after drift
Key results (seeded synthetic; STRICT vs LIGHT):
OI 0.056 → 0.039, TTR 80 → 56 steps, TSS unchanged (200 vs 200).
What’s in this record (v2):
-
/paper/ — Overleaf LaTeX sources updated to DOI 10.5281/zenodo.17545833 (tables, figures, metric definitions, YAML change-proposal template).
-
/pdf/ — compiled manuscript (for convenience).
-
/metadata/ — CITATION.cff and ZENODO_METADATA.json.
-
/docs/ — optional ancillary docs.
Reproducibility & handoff:
A separate Developer Handoff Kit (repo structure, governance templates, metrics schema, synthetic data generator, CLI metrics calculator, notebook, Splunk/Sentinel dashboards, CI stub) can be published as a complementary record and linked here via Related identifiers (type Software, relation isSupplementTo).
Related prior record: 10.5281/zenodo.17409110 (earlier release with identical topline results and fewer reproducibility artifacts).
How to cite:
Hrubec, K. (2025). AKOCS: Negentropic Governance for Security Policy Updates (v2). Zenodo. https://doi.org/10.5281/zenodo.17545833
License:
Manuscript & metadata: CC BY 4.0. (Code in the dev kit: MIT, unless stated otherwise.)