This repository contains the machine-readable FedRAMP Consolidated Rules for 2026. Use it to read, analyze, and integrate structured definitions, process rules, and security indicators.
- fedramp-consolidated-rules.json is the
canonical rules dataset. It contains dataset metadata (
info), FedRAMP Definitions (FRD), FedRAMP Rules (FRR), Key Security Indicators (KSI), and control guidance and parameters (CTL, an optional schema section). - schemas/fedramp-consolidated-rules.schema.json defines the dataset's expected structure, required fields, and allowed values.
The JSON defines the rule content; the schema defines its machine-readable shape. Other files in this repository provide supporting documentation and maintenance infrastructure.
Start with the dataset and schema for structured analysis. Definitions explain terms used in the rules. Process rules describe requirements and recommendations; security indicators describe capabilities and evidence expectations. Account for framework applicability, service class, document status, and effective dates when interpreting the information.
AI agents: Read AGENTS.md before ingesting or analyzing the information. For maintenance tasks, also read tools/AGENTS-TOOLS.md.
- FedRAMP/2026 contains the narrative content and website project that accompanies the structured rules.
- FedRAMP/2026-markdown provides
generated Markdown combining the structured rules and narrative content for
direct reading and AI ingestion. Its
_sources.jsonrecords source commits. - FedRAMP community discussions and FedRAMP 2026 discussions provide additional discussion and context.
- FedRAMP Help provides help articles and support.
Related resources can reflect different revisions. Check their source versions and dates when comparing them with this dataset.
The tools/ directory is internal maintenance infrastructure for FedRAMP developers. Most users and agents analyzing the information should ignore it; installing or running these tools is not required to consume the dataset.
FedRAMP developers can use tools/README.md for setup, validation, normalization, tests, exports, and Git hooks. Maintenance agents must also follow tools/AGENTS-TOOLS.md.