{
	"$schema": "https://osirisjson.org/schema/v1.0/osiris.schema.json",
	"version": "1.0.0",
	"metadata": {
		"timestamp": "2026-01-11T18:00:00Z",
		"generator": {
			"name": "manual",
			"version": "1.0.0"
		},
		"scope": {
			"name": "IT/OT cross network topology",
			"description": "Hybrid connectivity between IT and OT networks with firewall segmentation and historian integration.",
			"providers": ["aws", "custom"],
			"sites": ["mxp"],
			"regions": ["us-east-1"],
			"environments": ["production"]
		}
	},
	"topology": {
		"resources": [
			{
				"id": "aws::vpc-prod-01",
				"type": "network.vpc",
				"name": "Production VPC",
				"provider": {
					"name": "aws",
					"native_id": "vpc-0abc123def4567890",
					"region": "us-east-1",
					"account": "123456789012"
				},
				"properties": {
					"cidr": "10.10.0.0/16"
				},
				"tags": {
					"environment": "production",
					"domain": "it"
				}
			},
			{
				"id": "aws::subnet-web-01",
				"type": "network.subnet",
				"name": "Web subnet",
				"provider": {
					"name": "aws",
					"native_id": "subnet-0web123",
					"region": "us-east-1",
					"account": "123456789012"
				},
				"properties": {
					"cidr": "10.10.1.0/24",
					"availability_zone": "us-east-1a"
				},
				"tags": {
					"environment": "production",
					"domain": "it"
				}
			},
			{
				"id": "aws::i-web-01",
				"type": "compute.vm",
				"name": "web-server-01",
				"provider": {
					"name": "aws",
					"native_id": "i-0web123",
					"region": "us-east-1",
					"account": "123456789012"
				},
				"properties": {
					"instance_type": "t3.large",
					"private_ip": "10.10.1.50",
					"public_ip": "203.0.113.10"
				},
				"tags": {
					"environment": "production",
					"domain": "it"
				}
			},
			{
				"id": "mxp::fw-it-ot-01",
				"type": "network.firewall",
				"name": "FW-IT-OT-01",
				"provider": {
					"name": "custom",
					"namespace": "osiris.com.paloalto",
					"native_id": "FW-IT-OT-01",
					"site": "mxp"
				},
				"properties": {
					"vendor": "Palo Alto Networks",
					"model": "PA-3220",
					"mgmt_ip": "10.20.0.1",
					"interfaces": [
						{
							"name": "ethernet1/1",
							"zone": "it",
							"ip": "10.20.0.2/30"
						},
						{
							"name": "ethernet1/2",
							"zone": "ot",
							"ip": "10.30.0.2/30"
						}
					]
				},
				"tags": {
					"environment": "production",
					"domain": "it_ot_boundary"
				}
			},
			{
				"id": "mxp::plc-line-01",
				"type": "ot.plc",
				"name": "PLC-LINE-01",
				"provider": {
					"name": "custom",
					"namespace": "osiris.com.rockwell",
					"native_id": "PLC-0001",
					"site": "mxp"
				},
				"properties": {
					"vendor": "Rockwell Automation",
					"model": "CompactLogix 5380",
					"ip_address": "10.30.10.20"
				},
				"tags": {
					"environment": "production",
					"domain": "ot"
				}
			},
			{
				"id": "mxp::historian-svc-01",
				"type": "application.service",
				"name": "historian-svc-01",
				"description": "Historian service aggregating OT telemetry for IT analytics",
				"provider": {
					"name": "custom",
					"namespace": "osiris.com.osisoft",
					"native_id": "PI-HIST-01",
					"site": "mxp"
				},
				"properties": {
					"vendor": "OSIsoft",
					"product": "PI System",
					"ip_address": "10.30.20.50",
					"protocols": ["opc_ua", "https"]
				},
				"tags": {
					"environment": "production",
					"domain": "ot"
				}
			}
		],
		"connections": [
			{
				"id": "conn-vpc-to-subnet-web",
				"type": "contains",
				"source": "aws::vpc-prod-01",
				"target": "aws::subnet-web-01",
				"direction": "forward"
			},
			{
				"id": "conn-subnet-to-ec2-web",
				"type": "contains",
				"source": "aws::subnet-web-01",
				"target": "aws::i-web-01",
				"direction": "forward"
			},
			{
				"id": "conn-it-to-fw",
				"type": "network",
				"source": "aws::i-web-01",
				"target": "mxp::fw-it-ot-01",
				"direction": "bidirectional",
				"properties": {
					"zone": "it",
					"interface": "ethernet1/1"
				}
			},
			{
				"id": "conn-ot-to-fw",
				"type": "network",
				"source": "mxp::plc-line-01",
				"target": "mxp::fw-it-ot-01",
				"direction": "bidirectional",
				"properties": {
					"zone": "ot",
					"interface": "ethernet1/2"
				}
			},
			{
				"id": "conn-plc-to-historian",
				"type": "dataflow.control",
				"source": "mxp::plc-line-01",
				"target": "mxp::historian-svc-01",
				"direction": "forward",
				"properties": {
					"protocol": "opc_ua",
					"port": 4840
				}
			},
			{
				"id": "conn-historian-to-it",
				"type": "dataflow.telemetry",
				"source": "mxp::historian-svc-01",
				"target": "aws::i-web-01",
				"direction": "forward",
				"properties": {
					"protocol": "https",
					"port": 443
				}
			}
		],
		"groups": [
			{
				"id": "grp-it-domain",
				"type": "logical.network.zone",
				"name": "IT Domain",
				"members": ["aws::vpc-prod-01", "aws::subnet-web-01", "aws::i-web-01"]
			},
			{
				"id": "grp-ot-domain",
				"type": "logical.network.zone",
				"name": "OT Domain",
				"members": ["mxp::plc-line-01", "mxp::historian-svc-01"]
			},
			{
				"id": "grp-it-ot-boundary",
				"type": "logical.security.zone",
				"name": "IT/OT Boundary",
				"members": ["mxp::fw-it-ot-01"]
			}
		]
	}
}