P1-REQ-13-8-004

Return to Part 1 Requirements

Statement

Logs SHALL NOT be treated as Evidence unless they are captured, preserved, and traced to a claim or review purpose.

Source

Part 1, Section 13.8: Evidence Requirements.

Rationale

Logs often contain useful recorded information, but logs do not automatically qualify as Evidence. A log becomes Evidence only when it is captured, preserved, and traced to the claim or review purpose it supports.

This requirement prevents uncontrolled logs, incidental runtime output, or temporary diagnostic material from being treated as governed Evidence without preservation and traceability.

Applies To

This requirement applies to logs that are proposed, referenced, or used as Evidence.

It applies specifically to:

Runtime logsApplication logsSystem logsAudit logsDiagnostic logsCaptured log extractsPreserved log records

Verification

Verification SHALL confirm that logs are not treated as Evidence unless they are captured, preserved, and traced to a claim or review purpose.

Verification activities include review checks confirming that:

Logs used as Evidence have a capture recordLogs used as Evidence have a preservation recordLogs used as Evidence trace to a claim or review purposeLogs without capture, preservation, and traceability remain operational or diagnostic material

Traceability

Related source section:

Related requirement identifiers:

Status

Draft

© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.