REQ 083

REQ-083: Flag post-publication revocation and block new releases

Requirement

The managed release process shall flag proof revocation discovered after publication and block subsequent managed releases.

Rationale

A published release can become affected by later evidence revocation, and a silent or automatic withdrawal is not the selected response.

Fit Criterion

Retain the protected link from each managed published release to its proofs. For a subsequently revoked proof, record and signal the affected release, block new managed release operations, and require an operator response without automatically withdrawing the release. Unknown current revocation history also blocks; incident resolution and unblock rules require a reviewed decision.

Verification

Planned, TEST-083; detection mechanism and operator authorization policy are not selected.

Source

Software-Requirements-Specification

Priority

High

TestID

TEST-083

TestArtifact

Planned revocation, incident, authority-loss, and operator-response fixtures

CodeRef

Planned release evidence and incident authority

Status

Planned