FR-IMG-005 — Image Verification

Go to Crucible Image Management Requirements

Statement

Crucible SHALL verify the Digital Signature associated with an identified Image.

Derived From

This requirement derives from:

Crucible System Requirements Specification, Version 1.1 Draft, Functional Requirements, FR-IMG-005The Original Requirement states:

Crucible SHALL perform Digital Signature Verification for the Digital Signature associated with an identified Image.[C1]

FR-IMG-005 replaces the phrase perform Digital Signature Verification for with the direct verb verify while preserving the subject of the verification and its association with the identified Image.

No other substantive normalization is required.

Rationale

Digital Signature Verification determines whether a Digital Signature is valid for an identified Image under the applicable verification conditions.

Verification can identify whether:

The Image differs from the signed representationThe Digital Signature does not correspond to the identified ImageThe Digital Signature is invalidThe signing identity does not satisfy the applicable trust conditionsA valid Digital Signature does not independently establish that the Image:

Is free from vulnerabilitiesSatisfies a compliance baselineIs approved for promotionIs authorized for deploymentIs compatible with a target platformIs suitable for a specified purposeSeparate requirements govern those determinations.

Applies To

This requirement applies to:

Verification

Verification confirms that:

An identified Image with an associated Digital Signature is selected for verificationCrucible verifies the associated Digital SignatureCrucible determines whether the Digital Signature is valid for the identified ImageCrucible produces a verification result

Referenced By

The following pages reference this requirement:

Implementation Status

Implemented and Verified

Requirement Status

Issues

Notes for Editors

This requirement page retains the stable requirement identifier FR-IMG-005.

This page is a leaf requirement page and omits a trailing :start from its namespace.

The Statement preserves the approved source intent by requiring Crucible to verify the Digital Signature associated with an identified Image.

Do not add vulnerability scanning, compliance assessment, Image approval, promotion, publication, transfer, deployment validation, signature-algorithm, trust-store, or key-governance obligations unless the controlling requirement changes through an approved requirements process.

To reference this requirement Statement from another wiki page, insert:

{{section>dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-02-image-management:fr-img-005#Statement&noheader&nofooter&noeditbtn}}

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.