dido:99_annexes:annex-b-terms-and-definitions:i:image_record

Image Record

An Image Record is a controlled information record that identifies and describes a Machine Image and its relevant technical, governance, and lifecycle characteristics.

The record may identify the image version, operating system, processor architecture, capabilities, source revisions, build time, integrity value, compliance posture, provider-specific identifiers, approval status, and associated evidence.

An Image Record allows a deployment, assessment, or governance process to reason about an image without inspecting the complete image content.

One or more Image Records form an Image Catalog.

controlled information record that identifies and describes a machine image and its relevant technical, governance, and lifecycle characteristics

Generalized from configuration-item records, image metadata, artifact inventories, cloud-image catalogs, and provenance records and specialized for the Crucible architecture and operational model.

An Image Record is not the Machine Image itself. The record identifies the image and provides information needed to locate, verify, select, assess, or govern it.

An Image Record may describe one provider-independent image or one provider-specific realization of that image.

An Image Record identifies a Red Hat Enterprise Linux (RHEL) 9 Hardened Image by version and digest and records its AArch64 architecture, Security Technical Implementation Guide (STIG) compliance profile, source revisions, OCI image identifier, and associated compliance evidence.


© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.

  • dido/99_annexes/annex-b-terms-and-definitions/i/image_record.txt
  • Last modified: 2026/07/18 12:33
  • by 127.0.0.1