PACE vs PCS/PES/PAR

[sparrell]

• is https://github.com/oasis-tcs/openc2-usecases/blob/main/PlugFests/2022-06-RSAC/sFractal/PaceArch.png a correct view of PACE?
• will PACE expose the "internal" interfaces (eg interface between PCS and PAR)?
• will all PACE interaction be thru PES or will there be direct interfaces to PCS and PAR? The latter two questions affect the vendor agnostic discussion. Can I buy PAR from vendor 1 and PES from vendor 2?

Independent but related question: Can there be more than one PAR in a PACE system? Eg PES gets SBOM from one repo, vulns from two other repos (NVD, secretsauseinc), VEX from yet another repo, and situational awareness from yet another repo, ...

[sparrell]

a better architectural view might be https://github.com/sparrell/PACE/tree/arch2/docs/Arch