Exports, logs and backups are unexamined. Dataset routing is owner-declared, not observed payload lineage. Configuration, runtime observations and owner declarations remain separate.
Connections and data journeys
Lines distinguish modeled data flows from other relationships. Red solid lines have a gap; amber dashed lines need evidence. Select any component with a pointer or keyboard.
Protection requirements
| Requirement and target | Evidence state | Action and verification |
|---|---|---|
| Journey authorization survives revocation and asynchronous work Authorized synthetic patient record read journey · fixture-team | Not tested Configuration: inconclusive Runtime: not_tested | Use synthetic identities to exercise allowed access, another tenant, and membership revoked between enqueue, processing and retrieval. Evidence and retestWORKFLOW_PERMISSION_EVIDENCE_REQUIRED PAIRED_ALLOW_DENY_REVOCATION_TEST_REQUIRED Preserve the original failure and identify the exact deployment. Retest the selected requirement with current, independently obtained evidence. Retain other unknown and untested paths. ev-owner |
| Sensitive connection transport and peer identity http connection · fixture-team | Gap Configuration: fail Runtime: inconclusive | Review the named connection, termination point and approved peer model. Capture fresh deployment settings and an authorized runtime observation for this exact hop. Evidence and retestREQUIRED_TLS_MISSING TLS_EVIDENCE_MISSING_STALE_OR_SOURCE_ONLY Preserve the original failure and identify the exact deployment. Retest the selected requirement with current, independently obtained evidence. Retain other unknown and untested paths. ev-config |
| Sensitive connection transport and peer identity https connection · fixture-team | Evidence needed Configuration: pass Runtime: inconclusive | Review the named connection, termination point and approved peer model. Capture fresh deployment settings and an authorized runtime observation for this exact hop. Evidence and retestSELECTED_TRANSPORT_AND_PEER_CRITERIA_MET TLS_EVIDENCE_MISSING_STALE_OR_SOURCE_ONLY Preserve the original failure and identify the exact deployment. Retest the selected requirement with current, independently obtained evidence. Retain other unknown and untested paths. ev-config |
| Sensitive connection transport and peer identity postgresql connection · fixture-team | Evidence needed Configuration: inconclusive Runtime: inconclusive | Review the named connection, termination point and approved peer model. Capture fresh deployment settings and an authorized runtime observation for this exact hop. Evidence and retestTLS_EVIDENCE_MISSING_STALE_OR_SOURCE_ONLY TLS_EVIDENCE_MISSING_STALE_OR_SOURCE_ONLY Preserve the original failure and identify the exact deployment. Retest the selected requirement with current, independently obtained evidence. Retain other unknown and untested paths. ev-config |
| Dataset recipients are authorized Authorized synthetic patient record read journey · fixture-team | Evidence needed Configuration: inconclusive Runtime: inconclusive | Review every declared or possible recipient for the selected dataset and journey. Remove the unapproved route or record an independently approved policy change, then test allowed and denied transfers. Evidence and retestRECIPIENT_ALLOWLIST_WITHIN_SELECTED_GRAPH INDEPENDENT_DESTINATION_ENFORCEMENT_REQUIRED Preserve the original failure and identify the exact deployment. Retest the selected requirement with current, independently obtained evidence. Retain other unknown and untested paths. ev-owner |
| Copies have a reviewed retention procedure Synthetic PostgreSQL store node · fixture-team | Evidence needed Configuration: inconclusive Runtime: inconclusive | Document the retention and deletion procedure for this dataset, including exports, logs, replicas and backups; verify its execution with synthetic data. Evidence and retestRETENTION_UNSPECIFIED PROTECTION_EVIDENCE_MISSING_OR_STALE Preserve the original failure and identify the exact deployment. Retest the selected requirement with current, independently obtained evidence. Retain other unknown and untested paths. No supporting observations |
| Persistent copies have independent protection evidence Synthetic PostgreSQL store node · fixture-team | Evidence needed Configuration: inconclusive Runtime: inconclusive | Review storage encryption, key access, role permissions, retention and recovery for this exact store. Network encryption does not establish storage protection. Evidence and retestPROTECTION_EVIDENCE_MISSING_OR_STALE PROTECTION_EVIDENCE_MISSING_OR_STALE Preserve the original failure and identify the exact deployment. Retest the selected requirement with current, independently obtained evidence. Retain other unknown and untested paths. ev-config |
| Journey visibility is sufficient for the claimed conclusion Authorized synthetic patient record read journey · fixture-team | Evidence needed Configuration: inconclusive Runtime: inconclusive | Obtain the missing in-scope metadata and capture windows. Failed or sampled collection cannot establish absence of a route. Evidence and retestBOUNDED_OR_INCOMPLETE_VISIBILITY SAMPLE_IS_NOT_COMPLETE_ACTIVITY Preserve the original failure and identify the exact deployment. Retest the selected requirement with current, independently obtained evidence. Retain other unknown and untested paths. ev-owner |
Vigilance context
No canonical Vigilance evaluation is linked to this exact snapshot. Vulnerability and supplier applicability are unexamined in this view.
All components and relationships
| Component | Kind | Owner | Observation |
|---|---|---|---|
| Synthetic user browser | browser | fixture-team | present |
| Synthetic HTTPS edge | load_balancer | fixture-team | present |
| Synthetic PHP service | application | fixture-team | present |
| Synthetic PostgreSQL store | database | fixture-team | present |
| AWS provider grouping | provider | fixture-team | present |
| From | To | Relationship | Basis |
|---|---|---|---|
| Synthetic PostgreSQL store | Synthetic PHP service | data_flow | declared |
| Synthetic PHP service | Synthetic HTTPS edge | data_flow | declared |
| Synthetic HTTPS edge | Synthetic user browser | data_flow | declared |
| Synthetic PHP service | AWS provider grouping | deployment | declared |
Public fictional example. No certification or independent assurance. The viewer cannot apply changes or approve findings.