REQ 080

REQ-080: Record resolved qualification dependencies

Requirement

Qualification shall record the actual dependency identities needed to reproduce each proof.

Rationale

A source commit alone does not identify mutable host tools, package resolutions, images, or installers.

Fit Criterion

Bind the applicable manifest and installer digests, resolved direct and transitive bootstrap artifact digests, runner distribution, host OS and VirtualBox builds, and LUnit image and suite identities to the candidate proof. An unavailable or contradictory required identity is UNKNOWN.

Verification

Planned, TEST-080; no qualification host or guest has been inspected for this draft.

Source

Software-Requirements-Specification

Priority

High

TestID

TEST-080

TestArtifact

Planned manifest, installer, package, host-build, and image-provenance fixtures

CodeRef

Planned qualification dependency inventory

Status

Planned