LDAP

Lightweight Directory Access Protocol, the protocol applications use to read and update directory entries.

X.500

A family of directory-service standards that defines a distributed directory information model; LDAP provides practical access to such directories.

Directory Information Tree (DIT)

The hierarchical arrangement of LDAP entries, identified by distinguished names.

Distinguished Name (DN)

The complete unique path to an LDAP entry, such as cn=maple-quality-agent,ou=AI-Agents,o=Cequs,c=US.

Schema

The set of permitted object classes, attributes, syntaxes, and matching rules for a directory.

OpenLDAP

An open-source LDAP directory-server implementation used here as an X.500-oriented stand-in.

LDAPS

LDAP protected by TLS from the start of the connection, conventionally on TCP port 636.

Agentic AI

An AI system that can plan, use tools, take actions, and continue work toward a goal within assigned authority and controls.

AI agent registration

Recording an agent identity, owner, status, authorized scope, and relevant evidence in a registry.

Authorization scope

The bounded action or resource permission assigned to an identity, such as proposing a maple-lot grade.

Least privilege

Granting only the permissions necessary for a defined task and duration.

Sandbox escape

Unauthorized movement from an isolated execution environment into a broader host, network, or production environment.

Credential theft

Unauthorized acquisition of passwords, keys, tokens, or certificates used to authenticate an identity.

Incident response

Coordinated detection, containment, investigation, recovery, and lessons-learned activities after a security event.

GDPR

European Union General Data Protection Regulation governing personal-data processing.

CCPA

California Consumer Privacy Act, a California privacy law.

HIPAA

US health-information privacy and security requirements for covered entities and business associates.

ISO/IEC 27001

International standard for an information-security management system.

SOC 2

Attestation framework evaluating controls relevant to trust-services criteria.

NIST SP 800-64

NIST guidance for integrating security into the system development life cycle.

PCI DSS

Payment Card Industry Data Security Standard for protecting cardholder data.

CIS Controls

A prioritized set of safeguards published by the Center for Internet Security.

Raman spectroscopy

An analytical technique that measures inelastic light scattering to characterize material composition.

Provenance

Recorded origin, custody, transformation, and evidence history for data or a physical lot.