• Table of Contents
• 1. Introduction

  • 1.1 Purpose
  • 1.2 Scope
  • 1.3 Intended Audience
  • 1.4 How to Use This Wiki
  • 1.5 Document Conventions
• 2. Operational Need and Mission

  • 2.1 Operational Need
  • 2.2 Crucible Mission
  • 2.3 Expected Operational Outcomes
• 3. Operational Environment

  • 3.1 Connectivity Conditions
  • 3.2 Deployment Environments
  • 3.3 Security Domains and Transfer Boundaries
• 4. Actors and Responsibilities

  • 4.1 Developer
  • 4.2 DevSecOps Engineer
  • 4.3 Platform Engineer
  • 4.4 Security and Compliance Officer
  • 4.5 Enclave Operator
  • 4.6 CI/CD System
  • 4.7 External Tools and Services
• 5. Operational Concept

  • 5.1 Prepare the Workspace
  • 5.2 Select and Compose Baselines
  • 5.3 Build Machine and Container Images
  • 5.4 Capture and Preserve Dependencies
  • 5.5 Perform Compliance Assessment
  • 5.6 Deploy Infrastructure and Platform Services
  • 5.7 Validate the Deployment
  • 5.8 Produce Operational Evidence
  • 5.9 Complete the Operational Cycle
• 6. Connected Operations

  • 6.1 CI/CD-Initiated Execution
  • 6.2 Git-Based and GitOps Workflows
  • 6.3 Baseline Repository Consumption
  • 6.4 Image Build and Promotion
  • 6.5 Infrastructure Deployment
  • 6.6 Multi-Cloud and Hybrid-Cloud Operations
  • 6.7 Edge Deployment
  • 6.8 Centralized Management of Distributed Environments
• 7. Disconnected and Air-Gapped Operations

  • 7.1 Capture Build Dependencies
  • 7.2 Preserve Dependencies in the Dependency Store
  • 7.3 Produce the Transfer Bundle
  • 7.4 Transfer Across the Boundary
  • 7.5 Import the Transfer Bundle
  • 7.6 Populate Offline Repositories
  • 7.7 Rebuild and Deploy in a Disconnected Environment
  • 7.8 Preserve Traceability Across Environments
• 8. Compliance and Authorization Operations

  • 8.1 Define Compliance Baselines
  • 8.2 Execute Compliance Scans
  • 8.3 Generate Compliance Reports
  • 8.4 Generate Compliance Evidence Artifacts
  • 8.5 Support DISA STIG Compliance
  • 8.6 Support FedRAMP Compliance
  • 8.7 Support User-Defined Compliance Frameworks
  • 8.8 Generate SCTM Evidence
  • 8.9 Generate RMF Evidence
  • 8.10 Generate ATO Evidence
  • 8.11 Transfer Compliance Findings
• 9. Crucible Interfaces

  • 9.1 Common Interface Operations
  • 9.2 Command-Line Interface
  • 9.3 Web-Based User Interface
  • 9.4 Interactive and Noninteractive Execution
  • 9.5 Interface Results and Status

=

• Annexes

  • Annex B: References
  • Annex C: Requirements

    • C.1 Mission Objectives
    • C.2 Operational Requirements
    • C.3 Functional Requirements
  • Annex D: Issues