PAP: Difference between WHITE and GREEN?

[clenk]

Hi,

I'm trying to better understand PAP markings and the only documentation I can find is in this repository and at https://www.vanimpe.eu/2020/12/28/how-to-support-defenders-with-the-permissible-actions-protocol/.

Specifically I'm trying to understand the difference between PAP:WHITE and PAP:GREEN. WHITE has no restrictions, and the definition for GREEN describes what is allowed, but not what is prohibited in GREEN. So what is the difference between PAP:WHITE and PAP:GREEN?

Apologies if this is the wrong place to ask.

[Wachizungu]

https://cert.ssi.gouv.fr/csirt/sharing-policy/

Non intrusive (green) vs potentially intrusive (white) was somewhat my interpretation as well. I'll double check with MISP core devs when I can.