OR-003d — Security Domain Information Enforcement

Go to OR-003 — Classified and Unclassified Environments

Statement

Crucible SHALL prevent an operation from processing information not authorized within the operation's governing Security Domain.

Derived From

This requirement derives from:

Crucible System Requirements Specification, Version 1.1 Draft, Operational Requirements, OR-003The Original Requirement states:

The system SHALL support classified and unclassified deployment environments.[C1]

OR-003d isolates the obligation to prevent a Crucible operation from processing information outside the authorization boundary of its governing Security Domain.

Rationale

A Classified Environment or Unclassified Environment can contain information governed by different Security Domains.

Execution within an authorized environment does not by itself authorize an operation to process all information present or accessible within that environment.

OR-003d prevents a Crucible operation from processing information outside the information boundary established for its governing Security Domain.

The responsible authority establishes the Security Domain and identifies the information authorized within it. Crucible enforces the established authorization.

Applies To

This requirement applies to:

Crucible operationsSecurity DomainsInformation processed by Crucible operationsClassified EnvironmentsUnclassified Environments

Verification

Verification confirms that:

Each tested Crucible operation identifies its governing Security DomainThe governing Security Domain identifies the information authorized within the domainCrucible permits the tested operation to process information authorized within the governing Security DomainCrucible prevents the tested operation from processing information not authorized within the governing Security DomainCrucible records each denial caused by a Security Domain information restrictionEach denial record identifies the operation, governing Security Domain, requested information, and denial result

Referenced By

The following pages reference this requirement:

Delivery Phase

Implemented and Verified.

Implementation Status

Requirement Status

Issues

Notes for Editors

This requirement page should retain the stable requirement identifier OR-003d.

This page is a leaf requirement page and omits a trailing :start from its namespace.

OR-003d requires enforcement of an established Security Domain information boundary. It does not require Crucible to establish, authorize, or define a Security Domain.

The responsible authority establishes:

The Security Domain identifierThe Security Domain boundaryThe governing security policyThe information authorized within the Security DomainChanges to the Statement should preserve:

as the responsible actorPrevention as the required behaviorA Crucible operation as the subject of enforcementInformation as the controlled objectThe governing Security Domain as the source of authorizationRequirements governing access to resources should remain in OR-003c — Security Domain Resource Enforcement.

Requirements governing the permitted handling of authorized information should remain in OR-003e — Information Handling Rule Enforcement.

Requirements governing movement of information between Security Domains should remain in OR-003f — Cross-Domain Transfer Control.

Requirements governing user or process authorization should remain in OR-003g — Security Domain Access Control.

To reference this requirement Statement from another wiki page, insert:

{{section>dido:02-crusible:99-annexes:annex-c-requirements:02-operational-requirements:or-003:or-003d#Statement&noheader&nofooter&noeditbtn}}

Do not rename this page after an external citation unless a redirect or move plan is in place.

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.