6. Connected Operations

Go to Crucible

Connected Operations describe how Crucible performs lifecycle activities when the operating environment can access authorized external systems and resources through available network connections.

A Connected Environment can provide access to source repositories, software repositories, image registries, assessment services, deployment providers, and other approved resources required by the selected operation.

Connectivity does not remove security, authorization, integrity, provenance, or traceability controls. Crucible uses only authorized sources and preserves the identity and revision of the inputs used during each lifecycle activity.

Connected Operations can include:

Accessing authorized source and artifact repositoriesRetrieving selected Baselines, Images, packages, and DependenciesConstructing Images and other controlled artifactsPerforming Compliance AssessmentsDeploying resources to an authorized Deployment TargetValidating the resulting environmentGenerating the applicable Evidence and lifecycle recordsThe selected lifecycle activity determines which connected resources Crucible requires. An available network connection does not authorize unrestricted access to an external resource.

Connected Operations can also prepare artifacts and Dependencies for later use in a Disconnected Environment or Air-Gapped Environment. Section 7. Disconnected and Air-Gapped Operations describes those operations.

Contents

Notes for Editors

The child pages describe connected operational behavior and identify the applicable canonical leaf requirements from Annex C: Requirements.

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.