REQ 060

REQ-060: Fail safely on encryption-limited offline inspection

Requirement

Offline inspection of an encryption-signature-bearing Windows guest disk shall report access limitations without modifying or decrypting it absent separate authorization.

Rationale

An encryption signature explains an inspection constraint but does not prove protection state, key availability, or the provisioning failure's cause.

Fit Criterion

A BitLocker signature produces a signature-detected and protection-state-unknown result; no force option, repair, writable mount, unlock, or decryption is attempted without a separately approved operation.

Verification

Planned, TEST-060; no recovery secrets or raw guest evidence are required in the receipt.

Source

Software-Requirements-Specification

Priority

High

TestID

TEST-060

TestArtifact

Planned BitLocker-signature and no-mutation fixtures

CodeRef

Planned Windows evidence-inspection path

Status

Planned