Orchestrata Ultimate / RTM / 034-governed-action-classification
RTM: 034-governed-action-classification
Requirement to symbol to test rows for 034-governed-action-classification: Governed Action Classification.
At a glance
| Item | Value |
|---|---|
| Requirement IDs | 22 |
Traced from src/ |
0 (0.0%) |
| Untraced | 22 |
Cited from tests/ |
0 (0.0%) |
Traced in src/ but not cited from tests/ |
0 |
Reading this matrix
This matrix lists each of the 22 requirement IDs of spec 034-governed-action-classification with the src/ symbols that cite it and the tests that cite it. 0 of them (0.0%) have at least one citing symbol and 22 have none.
0 requirements are also cited from tests/, and 0 are traced in code but never named by a test. A test citation is a @traces on a test function; it shows intent to cover, not that the test runs or reaches the symbol.
Rows showing none in the symbols column are the gaps to close first. The densest untraced groups are REQ-034-* (22).
Requirement to symbols to tests
| Requirement | Symbols in src/ |
Tests citing it |
|---|---|---|
REQ-034-001 An Action is a typed descriptor, not an atom: |
none | none |
REQ-034-002 A Resource is a typed descriptor: |
none | none |
REQ-034-003 Descriptors are modelled in the canonical KG ontology first (the project's |
none | none |
REQ-034-004 Each risk category is defined by the properties that constitute it, not by a |
none | none |
REQ-034-005 The category taxonomy (defining properties, and is-a subtype edges such as |
none | none |
REQ-034-006 A category rule is testable against properties: a regression asserts a |
none | none |
REQ-034-007 A resource's classification attributes (class, env, owner, sensitivity) |
none | none |
REQ-034-008 Where classification cannot be read from structure, the order of trust is |
none | none |
REQ-034-009 A verified test asserts the agent uid cannot relabel |
none | none |
REQ-034-010 An action is authorized iff a grant's **selector matches this action instance's |
none | none |
REQ-034-011 A standing policy grant is a human-ratified pattern rule that auto-authorizes |
none | none |
REQ-034-012 A per-instance consent grant is bound to a specific resource (optionally its |
none | none |
REQ-034-013 Article I (and the other consent-gated articles) consume authorized/1: |
none | none |
REQ-034-014 |
none | none |
REQ-034-015 An action whose descriptor lacks an attribute a category rule needs is |
none | none |
REQ-034-016 This is the safety net for ADR-0034's residual blocklist hole: property-derived |
none | none |
REQ-034-017 Under ADR-0009 / ADR-0020, for SPEC-034 artifacts: |
none | none |
REQ-034-018 Single PDP.** There is exactly one Policy Decision Point: the constitutional / |
none | none |
REQ-034-019 No pure-Python policy.** A Python allow/deny that decides without consulting the |
none | none |
REQ-034-020 Single reduction function (Python supplies the atoms).** One trusted-side function |
none | none |
REQ-034-021 Audit-only is not enforcement.** Where the kernel dispatcher currently runs the |
none | none |
REQ-034-022 Fail-closed reduction.** If reduce_to_action cannot classify an operation |
none | none |