FR-AG-002 — Artifact Export Packages

Go to Crucible Air-Gapped Operations Requirements

Crucible SHALL create Transfer Bundles for export.

This requirement derives from:

• Crucible System Requirements Specification, Version 1.1 Draft, Functional Requirements, FR-AG-002

The Original Requirement states:

The system shall support artifact export packages.[C1]

FR-AG-002:

• Replaces The system with the defined system name Crucible
• Changes shall to the established uppercase normative form SHALL
• Replaces the weak verb support with the observable behavior create
• Maps artifact export packages to the defined Transfer Bundle concept

No other substantive normalization is required.

A Transfer Bundle provides a controlled package for exporting Artifacts and related information from one environment for transfer to another environment.

A Transfer Bundle can contain:

• Machine Images
• Container Images
• Infrastructure Configurations
• Baselines
• Software packages
• Dependencies
• Evidence
• Digital Signatures
• Content digests
• Manifests
• Provenance information
• Traceability information

This requirement establishes creation of Transfer Bundles for export without prescribing:

• The Artifacts included in a particular Transfer Bundle
• The Transfer Bundle format
• The storage medium
• The transfer mechanism
• Transfer Authorization
• Transfer across a Transfer Boundary
• Verification of Transfer Bundle Integrity
• Import of the Transfer Bundle
• Approval, promotion, or deployment of included Artifacts
• A requirement that export and import use the same package identity

Separate requirements, architecture specifications, workflows, or policies define those subjects and behaviors.

This requirement applies to:

• Crucible
• Transfer Bundles
• Artifact export operations

Verification confirms that:

1. One or more Artifacts are selected for export
2. Crucible creates a Transfer Bundle for the tested export
3. The created Transfer Bundle contains or references the selected Artifacts
4. The resulting Transfer Bundle can be identified as the output of the tested export-package operation

The following pages reference this requirement:

Implemented and Verified

Review and approve FR-AG-002 as a leaf requirement.

Determine whether separate requirements define the minimum required contents and metadata of a Transfer Bundle.

Determine whether export and import must preserve one Transfer Bundle identity or may create distinct package records.

This requirement page retains the stable requirement identifier FR-AG-002.

This page is a leaf requirement page and omits a trailing :start from its namespace.

The source phrase artifact export packages maps to the defined Transfer Bundle concept.

The Statement preserves the approved source intent by requiring Crucible to create Transfer Bundles for export.

Do not introduce separate Artifact Export Package and Artifact Import Package concepts unless the controlling architecture defines different package structures or identities.

Do not add Transfer Authorization, transfer, integrity verification, import, approval, promotion, deployment, or cross-environment identity-preservation obligations unless the controlling requirement changes through an approved requirements process.

To reference this requirement Statement from another wiki page, insert:

{{section>dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-05-air-gap-operations:fr-ag-002#Statement&noheader&nofooter&noeditbtn}}