Navigation

Book Creator
Add this page to your book

Book Creator
Remove this page from your book

This is an old revision of the document!

Annex D maps the canonical leaf requirements in Annex C: Requirements to the Crucible pages that reference them.

Annex C remains the canonical source for requirement titles, Statements, rationale, and verification information. Annex D provides traceability links and coverage information without restating or redefining the requirements.

The Requirements Traceability Index lists the canonical leaf requirements alphabetically by title.

The Requirement Title column links to the canonical requirement page. The Referenced By column identifies the Crucible pages that link to that requirement.

A requirement with no references requires review to determine whether:

The requirement lacks ConOps coverage
The requirement belongs outside the ConOps
The requirement represents a future capability
The requirement page or backlink is incomplete
The requirement requires an additional operational page

Go to Annex D: Requirements Traceability

Requirement Title	Referenced By
Authority to Operate Evidence	5.4 Assess Compliance 5.7 Preserve Evidence and Lifecycle Records 6.1 Construct and Assess the Environment 8.4 Generate Supporting Evidence Annex D: Requirements Traceability
Baseline Composition	5.1 Select and Compose Baselines Annex D: Requirements Traceability
Baseline Workspace Preparation	5.1 Select and Compose Baselines Annex D: Requirements Traceability
Baseline-Only Composition	5.1 Select and Compose Baselines Annex D: Requirements Traceability
Version-Controlled Baseline Selection	5.1 Select and Compose Baselines Annex D: Requirements Traceability
Classified Environment Operations	3.3 Security Domains and Transfer Boundaries Annex D: Requirements Traceability
Command-Line Interface	9.2 Command-Line Interface C.3.11 Crucible Interfaces Annex D: Requirements Traceability
Compliance Baseline Definitions	5.4 Assess Compliance 6.1 Construct and Assess the Environment 8.1 Select Compliance Criteria and Baselines Annex D: Requirements Traceability
Compliance Evidence Artifacts	5.4 Assess Compliance 6.1 Construct and Assess the Environment 8.4 Generate Supporting Evidence Annex D: Requirements Traceability
Compliance Finding Transfer Bundle Inclusion	5.4 Assess Compliance 5.7 Preserve Evidence and Lifecycle Records 6.1 Construct and Assess the Environment 7.2 Produce the Transfer Bundle 8.5 Transfer Compliance Findings Annex D: Requirements Traceability
Compliance Finding Association Preservation	5.4 Assess Compliance 5.7 Preserve Evidence and Lifecycle Records 6.1 Construct and Assess the Environment 7.7 Preserve Traceability Across Environments 8.5 Transfer Compliance Findings Annex D: Requirements Traceability
Compliance Reporting	5.4 Assess Compliance 6.1 Construct and Assess the Environment 8.3 Produce Compliance Reports Annex D: Requirements Traceability
Compliance Scanning Abstraction	5.4 Assess Compliance 6.1 Construct and Assess the Environment 8.2 Perform Compliance Assessments Annex D: Requirements Traceability
Compliance Scanning Tool Integration	5.4 Assess Compliance 6.1 Construct and Assess the Environment 8.2 Perform Compliance Assessments Annex D: Requirements Traceability
Container Image Construction	5.2 Construct Images 6.1 Construct and Assess the Environment 7.6 Rebuild and Deploy Annex D: Requirements Traceability
Cross-Domain Transfer Control	3.3 Security Domains and Transfer Boundaries 4.1 Human Actors 7.3 Transfer Across the Boundary 7.4 Import the Transfer Bundle Annex D: Requirements Traceability
Custom Compliance Frameworks	5.4 Assess Compliance 6.1 Construct and Assess the Environment 8.1 Select Compliance Criteria and Baselines Annex D: Requirements Traceability
Dependency Capture	5.3 Capture and Preserve Dependencies 7.1 Capture and Preserve Dependencies Annex D: Requirements Traceability
Dependency Preservation	5.3 Capture and Preserve Dependencies 7.1 Capture and Preserve Dependencies Annex D: Requirements Traceability
Dependency Store Representation	5.3 Capture and Preserve Dependencies 7.1 Capture and Preserve Dependencies Annex D: Requirements Traceability
Deploy Infrastructure Resources	3.2 Deployment Environments 5.5 Deploy the Environment 6.2 Deploy in a Connected Environment 7.6 Rebuild and Deploy Annex D: Requirements Traceability
Deploy Containerized Workloads	3.2 Deployment Environments 5.5 Deploy the Environment 6.2 Deploy in a Connected Environment 7.6 Rebuild and Deploy Annex D: Requirements Traceability
Deploy Kubernetes Clusters	3.2 Deployment Environments 5.5 Deploy the Environment 6.2 Deploy in a Connected Environment 7.6 Rebuild and Deploy Annex D: Requirements Traceability
Deploy Platform Services	3.2 Deployment Environments 5.5 Deploy the Environment 6.2 Deploy in a Connected Environment 7.6 Rebuild and Deploy Annex D: Requirements Traceability
Deploy Virtual Machines	3.2 Deployment Environments 5.5 Deploy the Environment 6.2 Deploy in a Connected Environment 7.6 Rebuild and Deploy Annex D: Requirements Traceability
Deployment Validation	5.6 Validate the Result Annex D: Requirements Traceability
DISA STIG Compliance Baselines	5.4 Assess Compliance 6.1 Construct and Assess the Environment 8.1 Select Compliance Criteria and Baselines Annex D: Requirements Traceability
FedRAMP Baseline Definitions	5.4 Assess Compliance 6.1 Construct and Assess the Environment 8.1 Select Compliance Criteria and Baselines Annex D: Requirements Traceability
Edge Deployment Support	3.2 Deployment Environments 5.5 Deploy the Environment 6.2 Deploy in a Connected Environment Annex D: Requirements Traceability
Hybrid-Cloud Deployment Support	3.2 Deployment Environments 5.5 Deploy the Environment 6.2 Deploy in a Connected Environment Annex D: Requirements Traceability
Image Promotion Workflows	5.2 Construct Images 6.1 Construct and Assess the Environment Annex D: Requirements Traceability
Image Signing	5.2 Construct Images 6.1 Construct and Assess the Environment Annex D: Requirements Traceability
Image Verification	5.2 Construct Images 6.1 Construct and Assess the Environment Annex D: Requirements Traceability
Immutable Infrastructure Workflows	5.2 Construct Images 6.1 Construct and Assess the Environment Annex D: Requirements Traceability
Information Handling Rule Enforcement	3.3 Security Domains and Transfer Boundaries 4.1 Human Actors 7.3 Transfer Across the Boundary 7.4 Import the Transfer Bundle Annex D: Requirements Traceability
Multiple Operating-System Support	5.4 Assess Compliance 6.1 Construct and Assess the Environment 8.2 Perform Compliance Assessments Annex D: Requirements Traceability
Offline Repository Population	5.3 Capture and Preserve Dependencies 7.5 Populate Offline Repositories 7.6 Rebuild and Deploy Annex D: Requirements Traceability
Operating-System-Independent Compliance Scanning	5.4 Assess Compliance 6.1 Construct and Assess the Environment 8.2 Perform Compliance Assessments Annex D: Requirements Traceability
Provider Abstraction	3.2 Deployment Environments 5.5 Deploy the Environment 6.2 Deploy in a Connected Environment Annex D: Requirements Traceability
Provider-Specific Extensions	3.2 Deployment Environments 5.5 Deploy the Environment 6.2 Deploy in a Connected Environment Annex D: Requirements Traceability
Provider Deployment Portability	3.2 Deployment Environments 5.5 Deploy the Environment 6.2 Deploy in a Connected Environment Annex D: Requirements Traceability
Risk Management Framework Evidence	5.4 Assess Compliance 5.7 Preserve Evidence and Lifecycle Records 6.1 Construct and Assess the Environment 8.4 Generate Supporting Evidence Annex D: Requirements Traceability
Security Domain Access Control	3.3 Security Domains and Transfer Boundaries 4.1 Human Actors 4.3 External Systems Annex D: Requirements Traceability
Security Domain Information Enforcement	3.3 Security Domains and Transfer Boundaries 4.1 Human Actors 4.3 External Systems 7.3 Transfer Across the Boundary 7.4 Import the Transfer Bundle Annex D: Requirements Traceability
Security Domain Resource Enforcement	3.3 Security Domains and Transfer Boundaries 4.1 Human Actors 4.3 External Systems Annex D: Requirements Traceability
Security Control Traceability Matrix Evidence	5.4 Assess Compliance 5.7 Preserve Evidence and Lifecycle Records 6.1 Construct and Assess the Environment 8.4 Generate Supporting Evidence Annex D: Requirements Traceability
Shared Interface Operations	9.1 Shared Interface Operations C.3.11 Crucible Interfaces Annex D: Requirements Traceability
Transfer Bundle Production	5.3 Capture and Preserve Dependencies 7.2 Produce the Transfer Bundle Annex D: Requirements Traceability
Unclassified Environment Operations	3.3 Security Domains and Transfer Boundaries Annex D: Requirements Traceability
Virtual Machine Image Construction	5.2 Construct Images 6.1 Construct and Assess the Environment 7.6 Rebuild and Deploy Annex D: Requirements Traceability
Web-Based User Interface	9.3 Web-Based User Interface C.3.11 Crucible Interfaces Annex D: Requirements Traceability

Confirm each displayed title against the canonical requirement page
Add every remaining Annex C leaf requirement
Exclude parent requirements that contain child requirements
Retain start for leaf requirements implemented as namespace index pages
Sort the final table alphabetically by canonical displayed title
A requirement with no returned backlinks requires coverage review

Include only canonical leaf requirements
Treat a requirement implemented as a namespace start page as a leaf when it has no child requirements
Exclude parent requirements that have leaf children
Link each requirement title to its canonical Annex C page
Sort the Requirements Traceability Index alphabetically by displayed title
Identify every Crucible page that directly references the requirement
Do not copy or paraphrase the canonical requirement Statement
Record requirements without references as uncovered until reviewed
Record ConOps pages without supporting requirements as unsupported until reviewed

Detailed traceability pages can use the following coverage statuses:

Status	Meaning
Complete	The referenced Crucible content provides operational coverage consistent with the requirement Statement
Partial	The referenced content addresses only part of the requirement Statement
Not Covered	No current Crucible page provides identifiable coverage
Outside ConOps Scope	The requirement applies to another specification, design, implementation, verification, or governance artifact
Future Capability	The requirement applies to a capability outside the current operational baseline
Review Required	The available requirement or coverage information is insufficient to determine the appropriate status

Annex E: Issues records problems discovered during traceability review.

Examples include:

A requirement without operational coverage
A ConOps capability without a supporting requirement
A requirement that requires further decomposition
An ambiguous or incomplete requirement Statement
An incorrect parent or leaf classification
A missing requirement page
An inconsistent requirement namespace or title
A proposed future capability

Annex D records the traceability condition. Annex E records the issue and its resolution status.

Populate the Requirements Traceability Index only after confirming the complete Annex C leaf-requirement inventory.

Do not list true parent requirements when their leaf children provide the normative Statements.

Where a leaf requirement uses a namespace start page for numerical ordering, link to the actual start page.

The Referenced By column should derive from direct links to the canonical requirement page wherever the available DokuWiki backlink mechanism permits dynamic generation.