FR-IMG-004 — Image Signing

Go to Crucible Image Management Requirements

Statement

Crucible SHALL generate a Digital Signature for an identified Image and associate the Digital Signature with that Image.

Derived From

This requirement derives from:

Crucible System Requirements Specification, Version 1.1 Draft, Functional Requirements, FR-IMG-004The Original Requirement states:

Crucible SHALL perform Image Signing by generating a Digital Signature for an identified Image and associating the Digital Signature with that Image.[C1]

FR-IMG-004 removes the introductory phrase perform Image Signing by while preserving the required signing behavior and results.

No other substantive normalization is required.

Rationale

Image Signing associates an identified Image with a Digital Signature generated for that Image.

The association allows a separate verification process to determine whether the Digital Signature corresponds to the identified Image and the applicable signing identity.

This requirement governs generation and association of the Digital Signature. Separate requirements govern signature verification, Image approval, promotion, publication, transfer, and deployment.

Applies To

This requirement applies to:

Verification

Verification confirms that:

An identified Image is selected for signingCrucible generates a Digital Signature for the identified ImageCrucible associates the generated Digital Signature with the identified ImageThe associated Digital Signature identifies or references the Image to which it applies

Referenced By

The following pages reference this requirement:

Implementation Status

Implemented and Verified

Requirement Status

Issues

Notes for Editors

This requirement page retains the stable requirement identifier FR-IMG-004.

This page is a leaf requirement page and omits a trailing :start from its namespace.

The Statement preserves both required results expressed by the Original Requirement:

Generation of a Digital Signature for an identified ImageAssociation of the generated Digital Signature with that ImageDo not reduce the Statement to association alone because doing so would omit the required generation of the Digital Signature.

Do not add signature verification, Image approval, promotion, publication, transfer, deployment, signing-algorithm, or key-governance obligations unless the controlling requirement changes through an approved requirements process.

To reference this requirement Statement from another wiki page, insert:

{{section>dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-02-image-management:fr-img-004#Statement&noheader&nofooter&noeditbtn}}

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.