FR-AG-003 — Artifact Import Packages

Go to Crucible Air-Gapped Operations Requirements

Crucible SHALL import Transfer Bundles.

This requirement derives from:

• Crucible System Requirements Specification, Version 1.1 Draft, Functional Requirements, FR-AG-003

The Original Requirement states:

The system shall support artifact import packages.[C1]

FR-AG-003:

• Replaces The system with the defined system name Crucible
• Changes shall to the established uppercase normative form SHALL
• Replaces the weak verb support with the observable behavior import
• Maps artifact import packages to the defined Transfer Bundle concept

No other substantive normalization is required.

A Transfer Bundle provides a controlled package for transferring Artifacts and related information between environments.

Importing a Transfer Bundle makes its contents available for separately governed inspection, acceptance, promotion, or deployment activities.

A Transfer Bundle can contain:

• Machine Images
• Container Images
• Infrastructure Configurations
• Baselines
• Software packages
• Dependencies
• Evidence
• Digital Signatures
• Content digests
• Manifests
• Provenance information
• Traceability information

This requirement establishes Transfer Bundle import without prescribing:

• The Artifacts imported from a particular Transfer Bundle
• The destination environment
• The destination repository
• The Transfer Bundle format
• Transfer Authorization
• Transfer across a Transfer Boundary
• Verification of Transfer Bundle Integrity
• Approval or promotion of imported Artifacts
• Deployment of imported Artifacts
• Preservation of one package identity across export and import

Separate requirements, architecture specifications, workflows, or policies define those subjects and behaviors.

This requirement applies to:

• Crucible
• Transfer Bundles
• Transfer Bundle import operations

Verification confirms that:

1. A Transfer Bundle is selected for import
2. Crucible imports the selected Transfer Bundle
3. The contents of the imported Transfer Bundle can be accessed after the import operation
4. The imported contents correspond to the contents of the selected Transfer Bundle
5. The result of the tested import operation can be determined

The following pages reference this requirement:

Implemented and Verified

Review and approve FR-AG-003 as a leaf requirement.

Determine whether separate requirements define the minimum validation required before a Transfer Bundle can be imported.

Determine whether separate requirements identify the destination environment or repository for imported Transfer Bundle contents.

Determine whether export and import must preserve one Transfer Bundle identity or may create distinct package records.

This requirement page retains the stable requirement identifier FR-AG-003.

This page is a leaf requirement page and omits a trailing :start from its namespace.

The source phrase artifact import packages maps to the defined Transfer Bundle concept.

The Statement preserves the approved source intent by requiring Crucible to import Transfer Bundles.

Do not introduce separate Artifact Export Package and Artifact Import Package concepts unless the controlling architecture defines different package structures or identities.

Do not add Transfer Authorization, transfer, integrity verification, destination-environment, Artifact approval, Image Promotion, deployment, or cross-environment identity-preservation obligations unless the controlling requirement changes through an approved requirements process.

To reference this requirement Statement from another wiki page, insert:

{{section>dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-05-air-gap-operations:fr-ag-003#Statement&noheader&nofooter&noeditbtn}}