{
  "schema": "kallipolis.resource-quality.v1",
  "id": "resource.infrastructure.apache-arrow-current",
  "version": "1.0.0",
  "title": "Apache Arrow interchange boundary",
  "summary": "Official-source columnar/IPC validation, untrusted-data, initialization, extension, read/write, and process-boundary security for Apache Arrow.",
  "content": {
    "kind": "infrastructure-boundary",
    "facts": [
      {
        "id": "fact.arrow.security.model",
        "statement": "Arrow defines language-independent columnar and IPC representations and documents security considerations for standardized serialized data.",
        "normativeLevel": "informative",
        "sourceIds": [
          "source.arrow.security"
        ]
      },
      {
        "id": "fact.arrow.security.read",
        "statement": "Serialized Arrow from untrusted sources should be structurally and semantically validated before use because invalid buffers or metadata can cause unsafe access.",
        "normativeLevel": "informative",
        "sourceIds": [
          "source.arrow.security"
        ]
      },
      {
        "id": "fact.arrow.security.write",
        "statement": "Published arrays must not leak uninitialized buffer contents, and extension metadata deserialization must reject malformed or malicious payloads safely.",
        "normativeLevel": "informative",
        "sourceIds": [
          "source.arrow.security"
        ]
      },
      {
        "id": "fact.arrow.security.boundary",
        "statement": "The C Data Interface contains process pointers and cannot safely accept an untrusted producer; format compatibility alone is not authentication, authorization, or data-truth evidence.",
        "normativeLevel": "informative",
        "sourceIds": [
          "source.arrow.security"
        ]
      }
    ]
  },
  "language": "en",
  "category": "data-knowledge-infrastructure",
  "state": "prepared",
  "canonicalUrl": "https://platoskallipolis.com/resources/data-knowledge-infrastructure/apache-arrow-current.json",
  "contentHash": "sha256:6f0912766e50cac88093cfd7167469a1ad9d088fe6c9af6406d7630dde90ea5a",
  "owner": {
    "id": "platos-kallipolis",
    "name": "Plato's Kallipolis",
    "type": "organization",
    "accountabilityUrl": "https://platoskallipolis.com/about"
  },
  "access": {
    "mode": "public",
    "url": "https://platoskallipolis.com/resources/data-knowledge-infrastructure/apache-arrow-current.json",
    "authentication": "none",
    "robotsAllowed": true
  },
  "provenance": {
    "method": "primary-source",
    "sources": [
      {
        "id": "source.arrow.security",
        "url": "https://arrow.apache.org/docs/format/Security.html",
        "title": "Apache Arrow Security Considerations",
        "publisher": "Apache Arrow",
        "observedAt": "2026-08-27T01:40:00Z"
      }
    ]
  },
  "observedAt": "2026-08-27T01:40:00Z",
  "freshness": {
    "policy": "max-age",
    "state": "current",
    "nextReviewAt": "2026-09-03T01:40:00Z",
    "maxAgeSeconds": 604800
  },
  "license": {
    "id": "source-terms-apply",
    "url": "https://www.apache.org/licenses/LICENSE-2.0",
    "redistributionAllowed": false
  },
  "evidence": [
    {
      "id": "evidence.arrow.security",
      "type": "source-claim",
      "url": "https://arrow.apache.org/docs/format/Security.html",
      "observedAt": "2026-08-27T01:40:00Z"
    }
  ]
}