P1-REQ-13-5-015

Return to Part 1 Requirements

Statement

The Policy and Release Plane SHALL NOT treat metadata release or aggregate release as authorisation to release full transaction detail.

Source

Part 1, Section 13.5: Runtime Plane Requirements.

Rationale

Metadata release, aggregate release, and full transaction detail release represent different release scopes and sensitivity implications. Authorising one release form does not authorise another release form with greater detail or different risk.

This requirement prevents the release scope from expanding and preserves the conceptual separation among metadata, aggregate, and full-detail releases.

Applies To

This requirement applies to Policy and Release Plane definitions and references involving release scope.

It applies specifically to:

Metadata releaseAggregate releaseFull transaction detail releaseRelease authorisationRelease scope control

Verification

Verification SHALL confirm that the Policy and Release Plane does not treat metadata release or aggregate release as authorisation to release full transaction detail.

Verification activities include review checks confirming that:

Metadata release remains distinct from the full transaction detail releaseAggregate release remains distinct from the full transaction detail releaseRelease authorisation identifies the authorised release scopeFull transaction detail release requires explicit release authorisation

Traceability

Related source section:

Related requirement identifiers:

Status

Draft

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.