dido:02-crusible:99-annexes:annex-c-requirements:01-mission-objectives:mo-004:mo-004c

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision		 Previous revision
dido:02-crusible:99-annexes:annex-c-requirements:01-mission-objectives:mo-004:mo-004c [2026/07/20 08:39] – created nick_didodido:02-crusible:99-annexes:annex-c-requirements:01-mission-objectives:mo-004:mo-004c [2026/07/30 05:24] (current) – [Delivery Phase] nick_dido
Line 1: Line 1:
-====== MO-004c — Unauthorized Resource Prohibition ======+====== MO-004c — Authorized Resource Use ======
  
 [[dido:02-crusible:99-annexes:annex-c-requirements:01-mission-objectives:mo-004:start|Go to MO-004 — Connected and Disconnected Operations]] [[dido:02-crusible:99-annexes:annex-c-requirements:01-mission-objectives:mo-004:start|Go to MO-004 — Connected and Disconnected Operations]]
Line 5: Line 5:
 ===== Statement ===== ===== Statement =====
  
-[[dido:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] SHALL NOT access a resource that is not an [[dido:99_annexes:annex-b-terms-and-definitions:a:authorized_resource|Authorized Resource]] for the applicable operational environment.+[[dido:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] SHALL access only [[dido:99_annexes:annex-b-terms-and-definitions:a:authorized_resource|Authorized Resources]] for the identified operational environment.
  
 ===== Derived From ===== ===== Derived From =====
Line 17: Line 17:
 > //The system SHALL support both connected and disconnected operational environments.//[[dido:02-crusible:99-annexes:annex-b:cr-001|[C1]]] > //The system SHALL support both connected and disconnected operational environments.//[[dido:02-crusible:99-annexes:annex-b:cr-001|[C1]]]
  
-MO-004c preserves the implied constraint that [[dido:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] operates within the resource-authorization boundary established for the applicable operational environment.+MO-004c preserves the constraint that [[dido:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] operates within the resource-authorization boundary established for the identified operational environment.
  
 The separate requirements derived from MO-004 address: The separate requirements derived from MO-004 address:
  
-  * [[dido:02-crusible:99-annexes:annex-c-requirements:01-mission-objectives:mo-004:mo-004a|MO-004a — Connected Environment Operation]] +  * [[dido:02-crusible:99-annexes:annex-c-requirements:01-mission-objectives:mo-004:mo-004a|MO-004a — Connected Environment Operations]] 
-  * [[dido:02-crusible:99-annexes:annex-c-requirements:01-mission-objectives:mo-004:mo-004b|MO-004b — Disconnected Environment Operation]] +  * [[dido:02-crusible:99-annexes:annex-c-requirements:01-mission-objectives:mo-004:mo-004b|MO-004b — Disconnected Environment Operations]] 
-  * [[dido:02-crusible:99-annexes:annex-c-requirements:01-mission-objectives:mo-004:mo-004d|MO-004d — External Resource Independence]] +  * [[dido:02-crusible:99-annexes:annex-c-requirements:01-mission-objectives:mo-004:mo-004d|MO-004d — Disconnected Resource Availability]]
- +
-===== Assessment ===== +
- +
-The Original Requirement does not identify the resource-authorization constraints applicable within connected and disconnected operational environments. +
- +
-The phrase **support both connected and disconnected operational environments** does not identify: +
- +
-  * The resources Crucible is permitted to access +
-  * The authority that approves a resource for use +
-  * The operational environment to which the authorization applies +
-  * The duration or conditions of the authorization +
-  * The treatment of a resource whose authorization expires or is revoked +
-  * The behavior required when Crucible encounters an unauthorized resource +
-  * The Evidence required to demonstrate compliance with the authorization boundary +
- +
-MO-004c: +
- +
-  * Identifies [[dido:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] as the responsible actor +
-  * States the prohibited behavior directly through **SHALL NOT** +
-  * Identifies an unauthorized resource as the prohibited object of access +
-  * Ties resource authorization to the applicable operational environment +
-  * Separates authorization from resource availability +
-  * Separates unauthorized-resource prohibition from connected operation, disconnected operation, and external-resource independence+
  
 ===== Rationale ===== ===== Rationale =====
Line 62: Line 39:
   * A resource whose authorization has expired   * A resource whose authorization has expired
   * A resource whose authorization has been revoked   * A resource whose authorization has been revoked
-  * A resource approved for a different operational environment +  * A resource authorized for a different operational environment 
-  * A resource approved for a different Operational Lifecycle activity+  * A resource authorized for a different Operational Lifecycle activity
  
-An [[dido:99_annexes:annex-b-terms-and-definitions:a:authorized_resource|Authorized Resource]] has an identified authorization that applies to the operational environment and intended use.+An [[dido:99_annexes:annex-b-terms-and-definitions:a:authorized_resource|Authorized Resource]] has an identified authorization for the operational environment and intended use.
  
-Prohibiting access to unauthorized resources supports:+Restricting Crucible to Authorized Resources supports:
  
   * Enforcement of environment boundaries   * Enforcement of environment boundaries
Line 80: Line 57:
   * Generation of auditable [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]]   * Generation of auditable [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]]
  
-This requirement does not require every Authorized Resource to be available.+This requirement does not require every Authorized Resource to be available within the operational environment.
  
-This requirement does not establish the resources required for execution in a Disconnected Environment. MO-004b addresses disconnected execution, and MO-004d addresses independence from unavailable external resources.+This requirement does not identify the resources required for execution in a Disconnected Environment. MO-004b addresses disconnected execution, and MO-004d addresses resource availability.
  
 ===== Applies To ===== ===== Applies To =====
Line 114: Line 91:
 Verification confirms that: Verification confirms that:
  
-  - The applicable operational environment is identified +  - The operational environment is identified 
-  - The resources authorized for the operational environment are identified +  - The Authorized Resources for the identified operational environment are identified 
-  - Each resource accessed by Crucible has a valid authorization for the operational environment +  - Each resource accessed by [[dido:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] has a valid authorization for the identified operational environment 
-  - Each resource authorization applies to the intended use +  - Each resource authorization permits the intended use 
-  - Crucible does not access a resource absent from the authorized resource set+  - Crucible does not access a resource absent from the Authorized Resource set
   - Crucible does not access a resource whose authorization has expired or been revoked   - Crucible does not access a resource whose authorization has expired or been revoked
   - Crucible does not access a resource authorized only for another operational environment   - Crucible does not access a resource authorized only for another operational environment
   - Each attempted access to an unauthorized resource is denied   - Each attempted access to an unauthorized resource is denied
-  - Each attempted unauthorized access is recorded +  - Each attempted unauthorized resource access is recorded 
-  - The generated Evidence supports the authorization determination+  - The verification record preserves [[dido:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]] among the operational environment, Authorized Resource set, accessed resources, authorization records, access decisions, and recorded results
  
-Verification includes:+===== Referenced By =====
  
-  * Authorized Resource inventory inspection +The following pages reference this requirement:
-  * Resource authorization inspection +
-  * Authorization-scope inspection +
-  * Authorization-validity inspection +
-  * Repository-access testing +
-  * Registry-access testing +
-  * Network-service access testing +
-  * External-endpoint access testing +
-  * Imported Artifact admission testing +
-  * Expired-authorization testing +
-  * Revoked-authorization testing +
-  * Cross-environment authorization testing +
-  * Access-denial testing +
-  * Audit-record inspection +
-  * Evidence inspection +
-  * Provenance inspection +
-  * Traceability inspection+
  
-The verification record identifies:+{{backlinks>.#dido:02-crusible}}
  
-  - The applicable operational environment +===== Delivery Phase =====
-  - The Authorized Resource set +
-  - Each resource accessed during execution +
-  - The authorization applicable to each accessed resource +
-  - The authorization scope +
-  - The authorization status +
-  - Each attempted unauthorized resource access +
-  - The denial result for each attempted unauthorized access +
-  - The audit record associated with each attempted unauthorized access +
-  - Each identified failure or exception +
-  - The observed result +
-  - The generated [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]]+
  
-===== Requirements Realized By =====+Implemented and Verified
  
-This requirement is realized by:+===== Implementation Status =====
  
-  * [[dido:02-crusible:99-annexes:annex-c-requirements:02-operational-requirements:or-001|OR-001 — Operational Roles]] +<todo>Assess whether the current Crucible implementation accesses only Authorized Resources for the identified operational environment.</todo>
-  * [[dido:02-crusible:99-annexes:annex-c-requirements:02-operational-requirements:or-002|OR-002 — Deployment Environments]] +
-  * [[dido:02-crusible:99-annexes:annex-c-requirements:02-operational-requirements:or-003|OR-003 — Classified and Unclassified Environments]] +
-  * [[dido:02-crusible:99-annexes:annex-c-requirements:02-operational-requirements:or-005|OR-005 — Distributed Environment Management]] +
-  * [[dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-01-configuration-management:start|FR-CFG-001 through FR-CFG-005]] +
-  * [[dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-03-deployment-orchestration:start|FR-DEP-001 through FR-DEP-007]] +
-  * [[dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-05-air-gap-operations:start|FR-AG-001 through FR-AG-005]] +
-  * [[dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-06-compliance-management:start|FR-COMP-001 through FR-COMP-010]] +
-  * [[dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-08-devsecops-integration:start|FR-DSO-001 through FR-DSO-006]] +
-  * [[dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-10-dependency-capture-and-offline-transfer:start|FR-DEPC-001 through FR-DEPC-005]] +
-  * [[dido:02-crusible:99-annexes:annex-c-requirements:06-security-requirements:start|SEC-001 through SEC-010]]+
  
-===== Related Architecture Sections =====+===== Requirement Status =====
  
-  * [[dido:02-crusible:07-infrastructure-and-deployment:start|7. Infrastructure and Deployment]] +<todo>Review and accept MO-004c as a proposed derived requirement created from the evaluation and decomposition of MO-004 in the Crucible System Requirements Specification, Version 1.1 Draft.</todo>
-  * [[dido:02-crusible:08-dependencies-and-air-gap-operations:start|8. Dependencies and Air Gap Operations]] +
-  * [[dido:02-crusible:09-compliance-and-security:start|9. Compliance and Security]] +
-  * [[dido:02-crusible:10-reproducibility-provenance-and-traceability:start|10. Reproducibility, Provenance, and Traceability]]+
  
-===== Referenced By =====+---- 
 +===== Issues =====
  
-The following pages reference this requirement:+The following unresolved issues affect this requirement:
  
-{{backlinks>.#dido:02-crusible}}+<todo>Identify the authority that authorizes resources for each operational environment.</todo>
  
-===== Delivery Phase =====+<todo>Define the authorization record required for each Authorized Resource.</todo>
  
-Phase 1 and subsequent phases+<todo>Define how authorization scope, expiration, revocation, and intended use affect resource access.</todo>
  
-===== Implementation Status =====+<todo>Define the behavior required when Crucible encounters or attempts to access an unauthorized resource.</todo>
  
-Not Assessed +<todo>Define when an imported resource becomes authorized for use within an operational environment.</todo>
- +
-Implementation status requires verification that the current [[dido:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] implementation denies access to resources that are not authorized for the applicable operational environment. +
- +
-===== Requirement Status ===== +
- +
-Draft +
- +
-This requirement derives from MO-004 in the Crucible System Requirements Specification, Version 1.1 Draft.+
  
 ---- ----
Line 212: Line 142:
 This page is a leaf requirement page and omits a trailing '':start'' from its namespace. This page is a leaf requirement page and omits a trailing '':start'' from its namespace.
  
-Changes to the Statement SHALL preserve the unauthorized-resource prohibition derived from MO-004.+The parent MO-004 page is a non-leaf page and retains a trailing '':start'' in its namespace. 
 + 
 +Changes to the Statement should preserve: 
 + 
 +  * [[dido:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] as the responsible actor 
 +  * [[dido:99_annexes:annex-b-terms-and-definitions:a:authorized_resource|Authorized Resources]] as the permitted resources 
 +  * The identified operational environment as the authorization context 
 +  * Prohibition of access to resources outside the Authorized Resource set
  
 The authorization record for each Authorized Resource should identify: The authorization record for each Authorized Resource should identify:
Line 218: Line 155:
   * The resource identifier   * The resource identifier
   * The resource type   * The resource type
-  * The applicable operational environment+  * The operational environment
   * The permitted use   * The permitted use
   * The authorizing authority   * The authorizing authority
Line 224: Line 161:
   * The authorization status   * The authorization status
   * The authorization expiration condition   * The authorization expiration condition
-  * Any applicable restrictions +  * Any restrictions
-  * The supporting Evidence+
  
-Material changes should receive review and should update the related verification criteria, requirements realization, related architecture sections, and source records.+Material changes should receive review and should update the verification criteria, source records, and Issues section.
  
 To reference this requirement Statement from another wiki page, insert: To reference this requirement Statement from another wiki page, insert:
  • dido/02-crusible/99-annexes/annex-c-requirements/01-mission-objectives/mo-004/mo-004c.1784561960.txt.gz
  • Last modified: 2026/07/20 08:39
  • by nick_dido