REQ 076

REQ-076: Independently protect qualification evidence integrity

Requirement

Qualification proof acceptance shall require independently protected evidence integrity.

Rationale

File permissions or an unkeyed digest alone do not authenticate evidence against another process using the same host identity.

Fit Criterion

Detect or prevent substitution of phase, identity, runner, job, result, and cleanup records by any in-scope actor. Unverified protection or provenance is UNKNOWN; public summaries contain only the allowed redacted fields.

Verification

Planned, TEST-076; no protection or attestation backend is selected.

Source

Software-Requirements-Specification

Priority

High

TestID

TEST-076

TestArtifact

Planned tamper, same-identity, schema, and redaction fixtures

CodeRef

Planned protected evidence authority and verifier

Status

Planned