FR-COMP-010 — Transferable Compliance Findings

Go to Crucible Compliance Management Requirements

Original Requirement

The system shall capture compliance findings into the transferable dependency/evidence bundle (see §4.10) so findings from connected build accompany artifacts into disconnected enclave.[C1]

Assessment of Original Requirement

The Original Requirement contains two distinct obligations:

Inclusion of Compliance Findings in the transferable dependency/evidence bundlePreservation of the relationship between the Compliance Findings and the Artifacts they describe when transferred from a Connected Environment to a Disconnected EnvironmentThese obligations require separate verification and therefore should be represented by separate leaf requirements.

The phrase transferable dependency/evidence bundle is normalized to the controlled term Transfer Bundle.

The phrase connected build does not identify a defined architectural object. The decomposition instead identifies the Connected Environment as the source environment.

The phrase disconnected enclave is normalized to the controlled term Disconnected Environment unless the architecture establishes Enclave as a distinct controlled concept.

The decomposition does not require Crucible to generate Compliance Findings, resolve Compliance Findings, or determine whether a transferred Artifact complies with a Compliance Baseline.

Contents

Requirement Status

Issues

Notes for Editors

This page is a non-leaf requirement page and therefore retains a trailing :start in its namespace.

The namespace for this requirement is:

dido:02-crusible:99-annexes:annex-c-requirements:03-functional-requirements:03-06-compliance-management:fr-comp-010:start

The child requirements are leaf pages nested beneath the FR-COMP-010 namespace and omit a trailing :start.

Use the following controlling Terms and Definitions entries:

The decomposition separates inclusion of Compliance Findings in a Transfer Bundle from preservation of the relationship between each Compliance Finding and the Artifact it describes.

FR-COMP-010 does not require Crucible to:

Generate the Compliance FindingsDetermine the validity of the Compliance FindingsResolve the Compliance FindingsRemediate the affected ArtifactsReassess the affected ArtifactsDetermine whether the affected Artifacts comply with a Compliance BaselineDo not add finding generation, validation, resolution, remediation, reassessment, or compliance-decision responsibilities unless the controlling requirement changes through an approved requirements process.

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.