Image Record
Discussion
An Image Record is a controlled information record that identifies and describes a Machine Image and its relevant technical, governance, and lifecycle characteristics.
The record may identify the image version, operating system, processor architecture, capabilities, source revisions, build time, integrity value, compliance posture, provider-specific identifiers, approval status, and associated evidence.
An Image Record allows a deployment, assessment, or governance process to reason about an image without inspecting the complete image content.
One or more Image Records form an Image Catalog.
Definition
controlled information record that identifies and describes a machine image and its relevant technical, governance, and lifecycle characteristics
Source
Generalized from configuration-item records, image metadata, artifact inventories, cloud-image catalogs, and provenance records and specialized for the Crucible architecture and operational model.
Note
An Image Record is not the Machine Image itself. The record identifies the image and provides information needed to locate, verify, select, assess, or govern it.
An Image Record may describe one provider-independent image or one provider-specific realization of that image.
Example
An Image Record identifies a Red Hat Enterprise Linux (RHEL) 9 Hardened Image by version and digest and records its AArch64 architecture, Security Technical Implementation Guide (STIG) compliance profile, source revisions, OCI image identifier, and associated compliance evidence.
© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.