REQ 078

REQ-078: Maintain the VM-control boundary throughout qualification

Requirement

Qualification shall maintain an enforceable VM-control boundary throughout each protected qualification interval.

Rationale

A point-in-time state read or cooperative lock cannot exclude a competing same-identity client between phases.

Fit Criterion

Bind the boundary to the exact VM before mutation and maintain it through identity-sensitive observations, runner proof, cleanup, and evidence finalization. Cover relevant control and storage paths, inherited handles, already accepted operations, and snapshots. Unknown admission, continuity, or quiescence blocks mutation and qualification; trusted host administrators and root are outside the deliberate-bypass threat.

Verification

Planned, TEST-078; Linux and Windows host mechanisms need separate proof.

Source

Software-Requirements-Specification

Priority

High

TestID

TEST-078

TestArtifact

Planned competing-client, handle, snapshot, and quiescence fixtures

CodeRef

Planned host-specific VM-control boundary

Status

Planned