Re: Securing Actions and Procedures

Yes! I am very much interested in this.

I am looking for a way to attach any type of metadata by mapping to a schema. This metadata will be used for all kinds of purposes as a "function" can represent any type of "action" on an "entity" in my system.

Christoph


On Tue, Feb 24, 2026, at 2:48 PM, Adam Sobieski wrote:
> PM-KR Community Group,
> 
> Hello. In some programming languages (e.g., C#, Java, and JavaScript), developers can use attributes, annotations, or decorators to provide metadata on functions and methods. Approaches for representing procedural knowledge, including programmatic and executable approaches, could, then, include expressiveness for providing metadata on actions and procedures.
> 
> 
> In C#, attributes resemble:
> 
> [metadata(...)]
> public void function(...)
> {
> 
> }
> 
> In Java, annotations resemble:
> 
> @metadata(...)
> public void function(...)
> {
> 
> }
> 
> In JavaScript, decorators resemble:
> 
> @metadata(...)
> function(...)
> {
> 
> }
> 
> 
> Metadata could be used to declare preconditions and effects for actions and procedures (see also: STRIPS, ADL, PDDL). Extensible metadata could also simplify a number of important scenarios such as: computer security, access-control, and user- and agentic-permission-related topics.
> 
> As interesting, here are some initial hyperlinks about these topics:
> 
> 
> *_.NET_*
> 
> https://en.wikipedia.org/wiki/Code_Access_Security
> 
> 
> *_Java_*
> 
> https://apereo.github.io/cas/7.3.x/planning/Architecture.html
> 
> 
> *_MCP_*
> 
> https://modelcontextprotocol.io/specification/2025-06-18/server/tools
> 
> https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1483
> 
> https://modelcontextprotocol-security.io/build/tool-metadata-spec/
> 
> 
> *_WebMCP_*
> 
> https://github.com/webmachinelearning/webmcp/issues/44
> 
> https://github.com/webmachinelearning/webmcp/issues/45
> 
> 
> *_BPMN_*
> 
> https://ceur-ws.org/Vol-2218/paper17.pdf
> 
> https://www.researchgate.net/publication/31367121_A_BPMN_Extension_for_the_Modeling_of_Security_Requirements_in_Business_Processes
> 
> 
> Is there any interest, in this group, in considering and discussing comparative approaches (the above and any others) for providing expressiveness to simplify securing actions and procedures?
> 
> Are there any other hyperlinks to recommend and share on these topics?
> 
> 
> Best regards,
> Adam Sobieski
>