| Both sides previous revision Previous revision Next revision | Previous revision |
| public:99_annexes:annex-b-terms-and-definitions:t:transfer_bundle [2026/09/12 17:42] – ↷ Page moved from private:99_annexes:annex-b-terms-and-definitions:t:transfer_bundle to public:99_annexes:annex-b-terms-and-definitions:t:transfer_bundle nick_dido | public:99_annexes:annex-b-terms-and-definitions:t:transfer_bundle [2026/09/13 15:34] (current) – ↷ Links adapted because of a move operation nick_dido |
|---|
| ====== Transfer Bundle ====== | ====== Transfer Bundle ====== |
| |
| [[private:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] | [[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] |
| |
| ===== Discussion ===== | ===== Discussion ===== |
| |
| The Crucible Concept of Operations establishes the Transfer Bundle as the transferable collection produced within a [[private:99_annexes:annex-b-terms-and-definitions:c:connected_environment|Connected Environment]] and imported into a [[private:99_annexes:annex-b-terms-and-definitions:d:disconnected_environment|Disconnected Environment]]. | The Crucible Concept of Operations establishes the Transfer Bundle as the transferable collection produced within a [[public:99_annexes:annex-b-terms-and-definitions:c:connected_environment|Connected Environment]] and imported into a [[public:99_annexes:annex-b-terms-and-definitions:d:disconnected_environment|Disconnected Environment]]. |
| |
| A Transfer Bundle is a controlled collection of [[private:99_annexes:annex-b-terms-and-definitions:a:artifact|Artifacts]], [[private:99_annexes:annex-b-terms-and-definitions:d:dependency|Dependencies]], records, manifests, integrity information, and supporting [[private:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] assembled for transfer between environments. | A Transfer Bundle is a controlled collection of [[public:99_annexes:annex-b-terms-and-definitions:a:artifact|Artifacts]], [[public:99_annexes:annex-b-terms-and-definitions:d:dependency|Dependencies]], records, manifests, integrity information, and supporting [[public:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] assembled for transfer between environments. |
| |
| A Transfer Bundle may contain: | A Transfer Bundle may contain: |
| * Software packages | * Software packages |
| * Operating-system update packages | * Operating-system update packages |
| * [[private:99_annexes:annex-b-terms-and-definitions:m:machine_image|Machine Images]] | * [[public:99_annexes:annex-b-terms-and-definitions:m:machine_image|Machine Images]] |
| * [[private:99_annexes:annex-b-terms-and-definitions:c:container_image|Container Images]] | * [[public:99_annexes:annex-b-terms-and-definitions:c:container_image|Container Images]] |
| * Provider-specific content | * Provider-specific content |
| * Infrastructure source content | * Infrastructure source content |
| * Integrity information | * Integrity information |
| * Supporting Evidence | * Supporting Evidence |
| * A [[private:99_annexes:annex-b-terms-and-definitions:d:dependency_manifest|Dependency Manifest]] | * A [[public:99_annexes:annex-b-terms-and-definitions:d:dependency_manifest|Dependency Manifest]] |
| |
| A Transfer Bundle facilitates controlled movement across an organizational, network, security, jurisdictional, or [[private:99_annexes:annex-b-terms-and-definitions:a:air_gap|Air Gap]] boundary while preserving the identity, integrity, organization, and [[private:99_annexes:annex-b-terms-and-definitions:p:provenance|Provenance]] of its contents. | A Transfer Bundle facilitates controlled movement across an organizational, network, security, jurisdictional, or [[public:99_annexes:annex-b-terms-and-definitions:a:air_gap|Air Gap]] boundary while preserving the identity, integrity, organization, and [[public:99_annexes:annex-b-terms-and-definitions:p:provenance|Provenance]] of its contents. |
| |
| Within [[private:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]], a Transfer Bundle may contain captured content from a [[private:99_annexes:annex-b-terms-and-definitions:d:dependency_store|Dependency Store]]. A destination environment may import that content and use it to populate an internal software-package repository. | Within [[public:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]], a Transfer Bundle may contain captured content from a [[public:99_annexes:annex-b-terms-and-definitions:d:dependency_store|Dependency Store]]. A destination environment may import that content and use it to populate an internal software-package repository. |
| |
| The same Transfer Bundle retains its identity through: | The same Transfer Bundle retains its identity through: |
| ===== Definition ===== | ===== Definition ===== |
| |
| //controlled collection of [[private:99_annexes:annex-b-terms-and-definitions:a:artifact|Artifacts]], [[private:99_annexes:annex-b-terms-and-definitions:d:dependency|Dependencies]], records, manifests, integrity information, and supporting [[private:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] assembled for transfer between environments// | //controlled collection of [[public:99_annexes:annex-b-terms-and-definitions:a:artifact|Artifacts]], [[public:99_annexes:annex-b-terms-and-definitions:d:dependency|Dependencies]], records, manifests, integrity information, and supporting [[public:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] assembled for transfer between environments// |
| |
| ===== Source ===== | ===== Source ===== |
| |
| [[dido:02-crusible:99-annexes:annex-b:cr-002|Crucible Concept of Operations, Version 1.0]], Sections 2.1, 3.3, and 3.4. | [[private:05-crusible:99-annexes:annex-b:cr-002|Crucible Concept of Operations, Version 1.0]], Sections 2.1, 3.3, and 3.4. |
| |
| The Crucible Concept of Operations states that Crucible produces a compressed Transfer Bundle containing captured Dependencies and compliance findings within a connected enclave. The disconnected enclave imports the same bundle and uses its contents to populate an internal software-package repository. | The Crucible Concept of Operations states that Crucible produces a compressed Transfer Bundle containing captured Dependencies and compliance findings within a connected enclave. The disconnected enclave imports the same bundle and uses its contents to populate an internal software-package repository. |
| The representation of a Transfer Bundle does not change its identity as the controlled collection transferred between environments. | The representation of a Transfer Bundle does not change its identity as the controlled collection transferred between environments. |
| |
| Creating a Transfer Bundle does not by itself constitute [[private:99_annexes:annex-b-terms-and-definitions:t:transfer_authorization|Transfer Authorization]]. | Creating a Transfer Bundle does not by itself constitute [[public:99_annexes:annex-b-terms-and-definitions:t:transfer_authorization|Transfer Authorization]]. |
| |
| Applicable review, approval, inspection, release, transfer, integrity-verification, and import processes govern movement across the applicable [[private:99_annexes:annex-b-terms-and-definitions:t:transfer_boundary|Transfer Boundary]]. | Applicable review, approval, inspection, release, transfer, integrity-verification, and import processes govern movement across the applicable [[public:99_annexes:annex-b-terms-and-definitions:t:transfer_boundary|Transfer Boundary]]. |
| |
| [[private:99_annexes:annex-b-terms-and-definitions:t:transfer_bundle_integrity|Transfer Bundle Integrity]] governs the completeness of the Transfer Bundle and the protection of its contents from unauthorized addition, removal, or modification. | [[public:99_annexes:annex-b-terms-and-definitions:t:transfer_bundle_integrity|Transfer Bundle Integrity]] governs the completeness of the Transfer Bundle and the protection of its contents from unauthorized addition, removal, or modification. |
| |
| A Transfer Bundle may contain software packages, but a Transfer Bundle is not itself a software package. | A Transfer Bundle may contain software packages, but a Transfer Bundle is not itself a software package. |
| ===== Example ===== | ===== Example ===== |
| |
| [[private:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] assembles operating-system update packages, installation media, Container Images, infrastructure repositories, compliance Evidence, integrity values, and a Dependency Manifest into one Transfer Bundle for controlled transfer and import into an [[private:99_annexes:annex-b-terms-and-definitions:a:air-gapped_environment|Air-Gapped Environment]]. | [[public:99_annexes:annex-b-terms-and-definitions:c:crucible|Crucible]] assembles operating-system update packages, installation media, Container Images, infrastructure repositories, compliance Evidence, integrity values, and a Dependency Manifest into one Transfer Bundle for controlled transfer and import into an [[public:99_annexes:annex-b-terms-and-definitions:a:air-gapped_environment|Air-Gapped Environment]]. |
| |
| ---- | ---- |