BSL SVC Requirements

Rqmt ID	Title	Description	Rationale	Verification
BSL-SVC-1-0	Receive Security Policy	The BSL shall request from all policy providers the specific policy associated with a bundle at the current node.	The policy interface mediates what and how policy providers can interact with the BSL, but this requirement is about how the BSL actually uses those policy providers.	Test
BSL-SVC-1-1	Validate Security Policy	The BSL shall validate and prioritize security policy statements before applying them to a bundle.	There is some minimal amount of validation that the BSL can do to ensure that the set of security policy statements for a bundle are consistent and realizable, especially when policy indicates that multiple security roles apply to a single bundle. Policy validation ensures that changes to block metadata and BTSD are consistent.	Test
BSL-SVC-2-0	Apply Security Policy	After the BSL validates security policy for a bundle, the BSL shall coordinate functions of the associated security context to apply that rule.	Although the policy provider determines what needs to be done it is the responsibility of the BSL to actually apply the security policy to the bundle.	Test
BSL-SVC-3-0	Handling Policy Application Failure	The BSL shall perform the processing action(s) provided by a security policy rule when a security processing failure occurs.	The BSL will act where possible to process an error and inform the BPA of the error.	Test