TWIN-009d — Prevent Unauthorized Resource State Changes

Go to TWIN-009 — Control Twin Interaction

Statement

The DIDO-TE SHALL prevent each unauthorized interaction from changing the state of a Resource.

Source

, modification of virtual and physical Twin Nodes, comparison of results, and validation[DTE2] Non-Traditional BAA Submission, Digital Twin concepts, scenario testing, integration, monitoring, and Twin Nodes Selection[DTE9] Distributed Immutable Data Object Reference Architecture (DIDO-RA), Digital Twin and governance concepts

Rationale

TWIN-009c requires authorization for permitted interactions that change the state of a Resource.

This requirement enforces that authorization prerequisite by preventing an unauthorized interaction from changing Resource state.

Separating the authorization requirement from enforcement allows the two obligations to be verified independently. A system may correctly determine that authorization is required while failing to prevent an unauthorized state change.

Technical connectivity, interface availability, DDS discovery, Topic matching, or other implementation mechanisms do not provide authorization to change Resource state.

Applies To

Verification

Verification confirms that:

An interaction lacking required authorization does not change Resource state.An interaction for which authorization is denied does not change Resource state.Authorization for one interaction does not authorize a different interaction.Authorization associated with one Resource does not authorize a state change to another Resource.Prevention of the unauthorized state change is traceable to the attempted interaction and authorization decision.Verification includes an unauthorized interaction that attempts to change Resource state and confirms that the Resource state remains unchanged.

Traceability

ConOps Relationship

This requirement enforces the authorization prerequisite established by TWIN-009c by preventing unauthorized changes to Resource state.

Delivery Phase

TBD

Requirement Status

Draft

Statement Reference

{{section>dido:03-dido-te:99-annexes:annex-c-requirements:03-functional-requirements:03-03-twin-node-requirements:twin-009-control-twin-interaction:twin-009d-prevent-unauthorized-resource-state-changes#Statement&noheader&nofooter&noeditbtn}}

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.