C5-DEC CAD traceability tooling reports:

Tree Structure:

MRS
│   
├── SRS
│   │   
│   └── TCS
│       │   
│       └── TRP
│   
└── ARC
    │   
    └── SWD

Published Documents:

Item Traceability:

MRS SRS TCS TRP ARC SWD
MRS-001 Inventory cryptography across code and network surfaces SRS-004 Run cryptographic inventory queries on created databases TCS-004 Verify SARIF generation from CodeQL queries TRP-004 Starter report for SARIF generation verification
MRS-001 Inventory cryptography across code and network surfaces ARC-003 Unified inventory coverage boundary SWD-003 Inventory artifact segregation by analysis surface
MRS-002 Recognize post-quantum and hybrid algorithms SRS-007 Model TLS findings with classical, hybrid, and PQ-aware decomposition TCS-007 Verify TLS CBOM decomposition TRP-007 Starter report for TLS CBOM verification
MRS-002 Recognize post-quantum and hybrid algorithms ARC-009 Algorithm modeling layer SWD-009 Algorithm decomposition and modeling
MRS-003 Produce standardized CBOM artifacts SRS-005 Convert source-analysis findings into CBOM artifacts TCS-005 Verify SARIF-to-CBOM conversion TRP-005 Starter report for SARIF-to-CBOM verification
MRS-003 Produce standardized CBOM artifacts ARC-007 CBOM generation and storage SWD-007 CBOM generation routines
MRS-004 Support source-code analysis for current target languages SRS-002 Detect supported source languages from the target project TCS-002 Verify supported language detection TRP-002 Starter report for language detection verification
MRS-004 Support source-code analysis for current target languages ARC-002 VECTOR-Code processing component SWD-002 Source inventory pipeline sequencing
MRS-005 Support TLS service assessment SRS-006 Scan TLS-enabled services by target and port TCS-006 Verify raw TLS scan output generation TRP-006 Starter report for raw TLS scan verification
MRS-005 Support TLS service assessment ARC-005 TLS assessment workflow SWD-005 TLS scan lifecycle and parser handoff
MRS-006 Support SSH service assessment SRS-008 Scan SSH-enabled services by target and port TCS-008 Verify raw SSH scan output generation TRP-008 Starter report for raw SSH scan verification
MRS-006 Support SSH service assessment ARC-006 SSH assessment workflow SWD-006 SSH scan lifecycle and parser handoff
MRS-007 Run in a reproducible Linux-based environment SRS-009 Execute within a Linux workspace with explicit runtime assumptions TCS-009 Verify Linux runtime assumptions and tool-path checks TRP-009 Starter report for runtime assumption verification
MRS-007 Run in a reproducible Linux-based environment ARC-001 VECTOR runtime context SWD-001 Entry points and directory initialization
MRS-008 Orchestrate open-source analysis tooling SRS-003 Create CodeQL databases through the external CLI TCS-003 Verify CodeQL database creation TRP-003 Starter report for CodeQL database verification
MRS-008 Orchestrate open-source analysis tooling ARC-004 External analysis tool adapters SWD-004 External command invocation contracts
MRS-009 Preserve non-invasive assessment behavior SRS-010 Fail safely for invalid inputs, missing tools, and incomplete outputs TCS-010 Verify safe failure behavior TRP-010 Starter report for safe failure verification
MRS-009 Preserve non-invasive assessment behavior ARC-008 Non-invasive network trust boundary SWD-008 Defensive validation and failure boundaries
MRS-010 Produce open, reusable output artifacts SRS-001 Persist output artifacts in predictable locations TCS-001 Verify persisted output locations for VECTOR-Code artifacts TRP-001 Starter report for persisted output verification
MRS-010 Produce open, reusable output artifacts ARC-010 Open artifact interfaces SWD-010 JSON interface and naming conventions
MRS-011 Assess quantum risk of discovered cryptographic assets SRS-011 Classify cryptographic algorithm components in a CBOM by quantum risk TCS-011 Verify classification of quantum-vulnerable algorithms TRP-011 Test report for quantum-vulnerable algorithm classification
MRS-011 Assess quantum risk of discovered cryptographic assets SRS-011 Classify cryptographic algorithm components in a CBOM by quantum risk TCS-012 Verify classification of post-quantum algorithms TRP-012 Test report for post-quantum algorithm classification
MRS-011 Assess quantum risk of discovered cryptographic assets SRS-012 Produce an annotated CBOM with quantum risk properties on each scored component TCS-013 Verify annotated CBOM contains pqcmat risk properties TRP-013 Test report for annotated CBOM pqcmat property verification
MRS-011 Assess quantum risk of discovered cryptographic assets SRS-013 Produce a human-readable Markdown risk report grouped by classification
MRS-011 Assess quantum risk of discovered cryptographic assets ARC-011 VECTOR-Score: standalone quantum risk scoring module SWD-011 VECTOR-Score module decomposition and internal design