====== Image Verification ====== [[dido:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] ===== Discussion ===== Image Verification is the process of determining whether a [[dido:99_annexes:annex-b-terms-and-definitions:m:machine_image|Machine Image]] satisfies specified identity, integrity, authenticity, provenance, compatibility, or approval criteria. The process may compare cryptographic digests, validate digital signatures, inspect an [[dido:99_annexes:annex-b-terms-and-definitions:i:image_record|Image Record]], confirm source revisions, evaluate provenance, check provider registration, or compare image characteristics with declared requirements. Image Verification may occur after a build, before upload, after provider conversion, before promotion, before deployment, or after transfer across an [[dido:99_annexes:annex-b-terms-and-definitions:a:air_gap|Air Gap]]. Within Crucible, Image Verification supports controlled image lifecycle management and helps ensure that a deployment uses the intended image artifact. ===== Definition ===== //process of determining whether a [[dido:99_annexes:annex-b-terms-and-definitions:m:machine_image|machine image]] satisfies specified identity, integrity, authenticity, provenance, compatibility, or approval criteria// ===== Source ===== Generalized from artifact verification, digital-signature validation, configuration management, software supply-chain security, and machine-image governance usage and specialized for the Crucible architecture and operational model. ===== Note ===== Image Verification evaluates specified criteria. It does not imply that every possible security, compliance, operational, or functional property has been evaluated. Verification of a signature establishes only the properties supported by the applicable signature, certificate, key, and trust policy. ===== Example ===== Before deploying a [[dido:99_annexes:annex-b-terms-and-definitions:r:rhel]] 9 Capability Image, Crucible verifies its digest, validates its signature, confirms its recorded source revisions, and checks that its Image Record satisfies the deployment’s Image Requirements. ---- © 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.