FR-COMP-010b — Compliance Finding Association Preservation

Go to FR-COMP-010 — Transferable Compliance Findings

Statement

Crucible SHALL preserve the association between each Compliance Finding and the Artifact to which the Compliance Finding applies when transferring the Artifact from a Connected Environment to a Disconnected Environment.

Derived From

This requirement derives from:

Crucible System Requirements Specification, Version 1.1 Draft, Functional Requirements, FR-COMP-010The Original Requirement states:

The system shall capture compliance findings into the transferable dependency/evidence bundle (see §4.10) so findings from connected build accompany artifacts into disconnected enclave.[C1]

FR-COMP-010b:

Replaces The system with the defined system name CrucibleChanges shall to the established uppercase normative form SHALLExtracts preservation of the relationship between Compliance Findings and affected Artifacts as an independently verifiable requirementReplaces connected build with the controlled term Connected EnvironmentReplaces disconnected enclave with the controlled term Disconnected EnvironmentAssigns inclusion of Compliance Findings and affected Artifacts in the same Transfer Bundle to FR-COMP-010a

Rationale

A Compliance Finding has meaning only when its relationship to the evaluated Artifact remains identifiable.

Preserving this association during transfer enables actors and processes in a Disconnected Environment to determine which Compliance Findings apply to each transferred Artifact.

This requirement establishes association preservation without requiring Crucible to:

Generate the Compliance FindingsValidate the Compliance FindingsResolve the Compliance FindingsRemediate the affected ArtifactsReassess the affected ArtifactsDetermine whether the affected Artifacts comply with a Compliance BaselinePreserve an association between a Compliance Finding and an Artifact to which the finding does not applyFR-COMP-010a governs inclusion of Compliance Findings and affected Artifacts in the same Transfer Bundle.

Applies To

This requirement applies to:

Compliance FindingsArtifactsTransfer BundlesConnected EnvironmentsDisconnected Environments

Verification

Verification confirms that:

An Artifact with one or more associated Compliance Findings is selected for testingCrucible transfers the selected Artifact and its associated Compliance Findings from a Connected Environment to a Disconnected EnvironmentThe transferred Artifact can be identified in the Disconnected EnvironmentEach transferred Compliance Finding can be identified in the Disconnected EnvironmentThe association between each transferred Compliance Finding and the Artifact to which the Compliance Finding applies can be determined in the Disconnected Environment

Referenced By

The following pages reference this requirement:

Implementation Status

Implemented and Verified

Requirement Status

Issues

Notes for Editors

This requirement page retains the derived requirement identifier FR-COMP-010b.

This page is a leaf requirement page and omits a trailing :start from its namespace.

The namespace for this requirement is:

dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-06-compliance-management:fr-comp-010:fr-comp-010b

The Statement addresses only preservation of the association between each Compliance Finding and the Artifact to which the Compliance Finding applies.

FR-COMP-010a governs inclusion of Compliance Findings and affected Artifacts in the same Transfer Bundle.

The Statement uses the controlling environment terms:

Do not add finding generation, validation, resolution, remediation, reassessment, identifier-format, or compliance-decision obligations unless the controlling requirement changes through an approved requirements process.

To reference this requirement Statement from another wiki page, insert:

{{section>dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-06-compliance-management:fr-comp-010:fr-comp-010b#Statement&noheader&nofooter&noeditbtn}}

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.