aero-agent-roles 1.2.2 → 1.2.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (27) hide show
  1. package/manifest.json +17 -3
  2. package/package.json +1 -1
  3. package/roles/software-product-assurance-engineer/ROLE.md +243 -0
  4. package/roles/software-product-assurance-engineer/SOURCES.md +40 -0
  5. package/roles/software-product-assurance-engineer/cli.py +542 -0
  6. package/roles/software-product-assurance-engineer/core/software_product_assurance_core.py +2108 -0
  7. package/roles/software-product-assurance-engineer/example/docs/EX-AUDIT-2026-01.md +7 -0
  8. package/roles/software-product-assurance-engineer/example/docs/EX-CSTD-001.md +7 -0
  9. package/roles/software-product-assurance-engineer/example/docs/EX-DSA-001.md +7 -0
  10. package/roles/software-product-assurance-engineer/example/docs/EX-DSTD-001.md +7 -0
  11. package/roles/software-product-assurance-engineer/example/docs/EX-RB-001.md +7 -0
  12. package/roles/software-product-assurance-engineer/example/docs/EX-SCMP-001.md +7 -0
  13. package/roles/software-product-assurance-engineer/example/docs/EX-SDP-001.md +7 -0
  14. package/roles/software-product-assurance-engineer/example/docs/EX-SPAP-001.md +7 -0
  15. package/roles/software-product-assurance-engineer/example/docs/EX-SPAR-2026-Q3.md +7 -0
  16. package/roles/software-product-assurance-engineer/example/docs/EX-SPR-LOG.md +7 -0
  17. package/roles/software-product-assurance-engineer/example/docs/EX-SRF-001.md +7 -0
  18. package/roles/software-product-assurance-engineer/example/docs/EX-SVALP-001.md +7 -0
  19. package/roles/software-product-assurance-engineer/example/docs/EX-SVERP-001.md +7 -0
  20. package/roles/software-product-assurance-engineer/example/docs/EX-TS-001.md +7 -0
  21. package/roles/software-product-assurance-engineer/example/evidence.csv +251 -0
  22. package/roles/software-product-assurance-engineer/example/metrics.csv +11 -0
  23. package/roles/software-product-assurance-engineer/example/pdr-pack.csv +17 -0
  24. package/roles/software-product-assurance-engineer/templates/q80-compliance-matrix-template.md +572 -0
  25. package/roles/software-product-assurance-engineer/tests/test_role_software_product_assurance_engineer.py +202 -0
  26. package/roles/software-product-assurance-engineer/tests/test_software_product_assurance_cli.py +271 -0
  27. package/roles/software-product-assurance-engineer/tests/test_software_product_assurance_core.py +570 -0
package/roles/software-product-assurance-engineer/templates/q80-compliance-matrix-template.md ADDED
@@ -0,0 +1,572 @@
1
+ # Software Product Assurance Compliance Matrix (ECSS-Q-ST-80C Rev.2)
2
+
3
+ > DRAFT - prepared by an agent for review. Not a statement of compliance until signed off by the responsible human.
4
+
5
+ Status: DRAFT. Human sign-off required.
6
+
7
+ ## 1. Scope and basis
8
+
9
+ - Project: EXAMPLE-SAT on-board software (worked example, not a real project)
10
+ - Standard: ECSS-Q-ST-80C Rev.2 (30 April 2025), referenced summary-only (clause identifiers with topic labels of our own wording)
11
+ - Software criticality category: **B**
12
+ - Category derivation: highest function severity I gives base category A; compensating provision(s) hardware lower A to B
13
+ - Constraint: each provision must meet the system dependability and safety requirements before the lower category is claimed
14
+ - Security sensitive: no
15
+ - Project scope: reuse
16
+ - Target review: preliminary design review (PDR)
17
+ - Clause list: the full requirement list of the standard (264 clauses)
18
+ - Evidence index: example/evidence.csv (250 rows)
19
+ - Document folder: example/docs/ (14 files)
20
+ - Review pack: example/pdr-pack.csv
21
+ - Measurement set: example/metrics.csv
22
+
23
+ ## 2. Coverage summary
24
+
25
+ Coverage: 264 clauses, 226 applicable; compliant 129, partially 91, not compliant 6, not applicable 38; compliant fraction 0.5708; evidenced fraction 0.9735; traced fraction 0.9646.
26
+
27
+ | Measure | Value |
28
+ |---|---|
29
+ | Clauses in the matrix | 264 |
30
+ | Applicable clauses | 226 |
31
+ | Compliant | 129 |
32
+ | Partially compliant | 91 |
33
+ | Not compliant (including no evidence) | 6 |
34
+ | Not applicable | 38 |
35
+ | Compliant fraction of applicable clauses | 0.5708 |
36
+ | Applicable clauses with a document reference | 0.9735 |
37
+ | Applicable clauses traced to a real file | 0.9646 |
38
+ | Rows with at least one gap | 36 |
39
+
40
+ Open gaps: 129.
41
+
42
+ ## 3. Compliance matrix
43
+
44
+ | Clause | Topic | Tailoring | Status | Justification | Evidence | Gaps |
45
+ |---|---|---|---|---|---|---|
46
+ | 5.1.1 | assurance organisation set-up | applicable | compliant | | EX-SPAP-001 section 3 | |
47
+ | 5.1.2.1 | who answers for what | applicable | compliant | | EX-SPAP-001 section 3 | |
48
+ | 5.1.2.2 | who answers for what | applicable | compliant | | EX-SPAP-001 section 3 | |
49
+ | 5.1.2.3 | who answers for what | applicable | compliant | | EX-SPAP-001 section 3 | |
50
+ | 5.1.3.1 | staff and means | applicable | compliant | | EX-SPAP-001 section 3 | |
51
+ | 5.1.3.2 | staff and means | applicable | compliant | | EX-SPAP-001 section 3 | |
52
+ | 5.1.4.1 | the assurance lead | applicable | compliant | | EX-SPAP-001 section 3 | |
53
+ | 5.1.4.2 | the assurance lead | applicable | compliant | | EX-SPAP-001 section 3 | |
54
+ | 5.1.5.1 | skills and training | applicable | compliant | | EX-SPAP-001 section 3 | |
55
+ | 5.1.5.2 | skills and training | applicable | compliant | | EX-SPAP-001 section 3 | |
56
+ | 5.1.5.3 | skills and training | applicable | compliant | | EX-SPAP-001 section 3 | |
57
+ | 5.1.5.4 | skills and training | applicable | compliant | | EX-SPAP-001 section 3 | |
58
+ | 5.2.1.1 | planning and control of the programme | applicable | compliant | | EX-SPAP-001 section 4.1 | |
59
+ | 5.2.1.2 | planning and control of the programme | applicable | compliant | | EX-SPAP-001 section 4.1 | |
60
+ | 5.2.1.3 | planning and control of the programme | applicable | compliant | | EX-SPAP-001 section 4.1 | |
61
+ | 5.2.1.4 | planning and control of the programme | applicable | compliant | | EX-SPAP-001 section 4.1 | |
62
+ | 5.2.1.5 | planning and control of the programme | applicable | compliant | | EX-SPAP-001 section 4.1 | |
63
+ | 5.2.2.1 | assurance reporting | applicable | compliant | | EX-SPAR-2026-Q3 section 1 | |
64
+ | 5.2.2.2 | assurance reporting | applicable | compliant | | EX-SPAR-2026-Q3 section 1 | |
65
+ | 5.2.2.3 | assurance reporting | applicable | compliant | | EX-SPAR-2026-Q3 section 1 | |
66
+ | 5.2.3 | audit programme | applicable | compliant | | EX-SPAP-001 section 4.3 | |
67
+ | 5.2.4 | alert handling | applicable | partially-compliant | alert handling follows the company procedure | | no-evidence-reference |
68
+ | 5.2.5.1 | problem reporting | applicable | compliant | | EX-SPR-LOG section 1 | |
69
+ | 5.2.5.2 | problem reporting | applicable | compliant | | EX-SPR-LOG section 1 | |
70
+ | 5.2.5.3 | problem reporting | applicable | compliant | | EX-SPR-LOG section 1 | |
71
+ | 5.2.5.4 | problem reporting | applicable | compliant | | EX-SPR-LOG section 1 | |
72
+ | 5.2.6.1 | nonconformance handling | applicable | compliant | | EX-SPAP-001 section 4.6 | |
73
+ | 5.2.6.2 | nonconformance handling | applicable | compliant | | EX-SPAP-001 section 4.6 | |
74
+ | 5.2.7.1 | quality model | applicable | compliant | | EX-SPAP-001 section 5 | |
75
+ | 5.2.7.2 | quality model | applicable | compliant | | EX-SPAP-001 section 5 | |
76
+ | 5.3.1 | risk handling | applicable | compliant | | EX-SPAP-001 section 6 | |
77
+ | 5.3.2.1 | critical items | applicable | compliant | | EX-SPAP-001 section 6 | |
78
+ | 5.3.2.2 | critical items | applicable | compliant | | EX-SPAP-001 section 6 | |
79
+ | 5.4.1.1 | choosing suppliers | applicable | not-applicable | no software subcontractor on this project | EX-SPAP-001 section 7 | na-conflicts-with-tailoring |
80
+ | 5.4.1.2 | choosing suppliers | applicable | not-applicable | no software subcontractor on this project | EX-SPAP-001 section 7 | na-conflicts-with-tailoring |
81
+ | 5.4.2.1 | what suppliers are held to | applicable | not-applicable | no software subcontractor on this project | EX-SPAP-001 section 7 | na-conflicts-with-tailoring |
82
+ | 5.4.2.2 | what suppliers are held to | applicable | not-applicable | no software subcontractor on this project | EX-SPAP-001 section 7 | na-conflicts-with-tailoring |
83
+ | 5.4.3.1 | watching suppliers | applicable | not-applicable | no software subcontractor on this project | EX-SPAP-001 section 7 | na-conflicts-with-tailoring |
84
+ | 5.4.3.2 | watching suppliers | applicable | not-applicable | no software subcontractor on this project | EX-SPAP-001 section 7 | na-conflicts-with-tailoring |
85
+ | 5.4.3.3 | watching suppliers | applicable | not-applicable | no software subcontractor on this project | EX-SPAP-001 section 7 | na-conflicts-with-tailoring |
86
+ | 5.4.3.4 | watching suppliers | applicable | not-applicable | no software subcontractor on this project | EX-SPAP-001 section 7 | na-conflicts-with-tailoring |
87
+ | 5.4.4 | category flow-down to suppliers | applicable | not-applicable | no software subcontractor on this project | EX-SPAP-001 section 7 | na-conflicts-with-tailoring |
88
+ | 5.4.5 | security flow-down to suppliers | applicable | not-applicable | no software subcontractor on this project | EX-SPAP-001 section 7 | na-conflicts-with-tailoring |
89
+ | 5.5.1 | purchase documents | applicable | compliant | | EX-SDP-001 section 6.1 | |
90
+ | 5.5.2 | bought-in component list | applicable | compliant | | EX-SDP-001 section 6.2 | |
91
+ | 5.5.3 | purchase data | applicable | compliant | | EX-SDP-001 section 6.3 | |
92
+ | 5.5.4 | marking of bought items | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 6.4, evidence expected at CDR | EX-SDP-001 section 6.4 | |
93
+ | 5.5.5 | incoming checks | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 6.4, evidence expected at CDR | EX-SDP-001 section 6.4 | |
94
+ | 5.5.6 | export constraints | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 6.4, evidence expected at CDR | EX-SDP-001 section 6.4 | |
95
+ | 5.6.1.1 | methods and tools chosen | applicable | compliant | | EX-SDP-001 section 7 | |
96
+ | 5.6.1.2 | methods and tools chosen | applicable | compliant | | EX-SDP-001 section 7 | |
97
+ | 5.6.1.3 | methods and tools chosen | applicable | compliant | | EX-SDP-001 section 7 | |
98
+ | 5.6.2.1 | choice of development environment | applicable | compliant | | EX-SDP-001 section 7 | |
99
+ | 5.6.2.2 | choice of development environment | applicable | compliant | | EX-SDP-001 section 7 | |
100
+ | 5.6.2.3 | choice of development environment | applicable | compliant | | EX-SDP-001 section 7 | |
101
+ | 5.7.1 | capability assessment | applicable | compliant | | EX-SPAP-001 section 9 | |
102
+ | 5.7.2.1 | how assessments are run | applicable | compliant | | EX-SPAP-001 section 9 | |
103
+ | 5.7.2.2 | how assessments are run | applicable | compliant | | EX-SPAP-001 section 9 | |
104
+ | 5.7.2.3 | how assessments are run | applicable | compliant | | EX-SPAP-001 section 9 | |
105
+ | 5.7.2.4 | how assessments are run | applicable | compliant | | EX-SPAP-001 section 9 | |
106
+ | 5.7.3.1 | improving the process | applicable | compliant | | EX-SPAP-001 section 9 | |
107
+ | 5.7.3.2 | improving the process | applicable | compliant | | EX-SPAP-001 section 9 | |
108
+ | 5.7.3.3 | improving the process | applicable | compliant | | EX-SPAP-001 section 9 | |
109
+ | 6.1.1 | defining the life cycle | applicable | compliant | | EX-SDP-001 section 2 | |
110
+ | 6.1.2 | process targets | applicable | compliant | | EX-SDP-001 section 2 | |
111
+ | 6.1.3 | reviewing the life cycle | applicable | compliant | | EX-SDP-001 | reference-without-section |
112
+ | 6.1.4 | means for the life cycle | applicable | compliant | | EX-SDP-001 section 2 | |
113
+ | 6.1.5 | validation timing | applicable | compliant | | EX-SDP-001 section 2 | |
114
+ | 6.2.1.1 | process documentation | applicable | compliant | | EX-SDP-001 section 3 | |
115
+ | 6.2.1.2 | process documentation | applicable | compliant | | EX-SDP-001 section 3 | |
116
+ | 6.2.1.3 | process documentation | applicable | compliant | | EX-SDP-001 section 3 | |
117
+ | 6.2.1.4 | process documentation | applicable | compliant | | EX-SDP-001 section 3 | |
118
+ | 6.2.1.5 | process documentation | applicable | compliant | | EX-SDP-001 section 3 | |
119
+ | 6.2.1.6 | process documentation | applicable | compliant | | EX-SDP-001 section 3 | |
120
+ | 6.2.1.7 | process documentation | applicable | compliant | | EX-SDP-001 section 3 | |
121
+ | 6.2.1.8 | process documentation | applicable | compliant | | EX-SDP-001 section 3 | |
122
+ | 6.2.1.9 | process documentation | applicable | compliant | | EX-SDP-001 section 3 | |
123
+ | 6.2.2.1 | dependability and safety of software | applicable | compliant | | EX-DSA-001 section 2 | |
124
+ | 6.2.2.2 | dependability and safety of software | applicable | compliant | | EX-DSA-001 section 3 | |
125
+ | 6.2.2.3 | dependability and safety of software | applicable | compliant | | EX-DSA-001 section 2.2 | |
126
+ | 6.2.2.4 | dependability and safety of software | applicable | compliant | | EX-DSA-001 section 3.2 | |
127
+ | 6.2.2.5 | dependability and safety of software | applicable | partially-compliant | software-level analysis refined at CDR; preliminary results in EX-DSA-001 4 | EX-DSA-001 section 4 | |
128
+ | 6.2.2.6 | dependability and safety of software | applicable | partially-compliant | software-level analysis refined at CDR; preliminary results in EX-DSA-001 4 | EX-DSA-001 section 4 | |
129
+ | 6.2.2.7 | dependability and safety of software | applicable | partially-compliant | software-level analysis refined at CDR; preliminary results in EX-DSA-001 4 | EX-DSA-001 section 4 | |
130
+ | 6.2.2.8 | dependability and safety of software | applicable | partially-compliant | software-level analysis refined at CDR; preliminary results in EX-DSA-001 4 | EX-DSA-001 section 4 | |
131
+ | 6.2.2.9 | dependability and safety of software | applicable | partially-compliant | software-level analysis refined at CDR; preliminary results in EX-DSA-001 4 | EX-DSA-001 section 4 | |
132
+ | 6.2.2.10 | dependability and safety of software | applicable | partially-compliant | software-level analysis refined at CDR; preliminary results in EX-DSA-001 4 | EX-DSA-001 section 4 | |
133
+ | 6.2.3.2 | critical software | applicable | compliant | | EX-SPAP-001 section 8.1 | |
134
+ | 6.2.3.3 | critical software | applicable | compliant | | EX-SPAP-001 section 8.2 | |
135
+ | 6.2.3.4 | critical software | applicable | compliant | | EX-SPAP-001 section 8.3 | |
136
+ | 6.2.3.5 | critical software | applicable | compliant | | EX-SPAP-001 section 8.4 | |
137
+ | 6.2.3.6 | critical software | applicable | partially-compliant | activity falls after PDR; planned in EX-SPAP-001 8.5, evidence expected at CDR | EX-SPAP-001 section 8.5 | |
138
+ | 6.2.3.7 | critical software | applicable | partially-compliant | activity falls after PDR; planned in EX-SPAP-001 8.5, evidence expected at CDR | EX-SPAP-001 section 8.5 | |
139
+ | 6.2.3.8 | critical software | applicable | partially-compliant | activity falls after PDR; planned in EX-SPAP-001 8.5, evidence expected at CDR | EX-SPAP-001 section 8.5 | |
140
+ | 6.2.4.1 | configuration management | applicable | compliant | | EX-SCMP-001 section 2 | |
141
+ | 6.2.4.2 | configuration management | applicable | not-compliant | internal audit: baseline register not kept current | EX-SCMP-001 section 2; EX-AUDIT-2026-01 finding F3 | |
142
+ | 6.2.4.3 | configuration management | applicable | compliant | | EX-SCMP-001 section 2 | |
143
+ | 6.2.4.4 | configuration management | applicable | compliant | | EX-SCMP-001 section 2 | |
144
+ | 6.2.4.5 | configuration management | applicable | compliant | | EX-SCMP-001 section 2 | |
145
+ | 6.2.4.6 | configuration management | applicable | compliant | | EX-SCMP-001 section 2 | |
146
+ | 6.2.4.7 | configuration management | applicable | compliant | | EX-SCMP-001 section 2 | |
147
+ | 6.2.4.8 | configuration management | applicable | compliant | | EX-SCMP-001 section 2 | |
148
+ | 6.2.4.9 | configuration management | applicable | compliant | | EX-SCMP-001 section 2 | |
149
+ | 6.2.4.10 | configuration management | applicable | compliant | | EX-SCMP-001 section 2 | |
150
+ | 6.2.4.11 | configuration management | applicable | compliant | | EX-SCMP-001 section 2 | |
151
+ | 6.2.4.12 | configuration management | applicable | compliant | | EX-SCMP-001 section 2 | |
152
+ | 6.2.5.1 | process measurement | applicable | compliant | | EX-SPAP-001 section 10 | |
153
+ | 6.2.5.2 | process measurement | applicable | compliant | | EX-SPAP-001 section 10 | |
154
+ | 6.2.5.3 | process measurement | applicable | compliant | | EX-SPAP-001 section 10 | |
155
+ | 6.2.5.4 | process measurement | applicable | compliant | | EX-SPAP-001 section 10 | |
156
+ | 6.2.5.5 | process measurement | applicable | compliant | | EX-SPAP-001 section 10 | |
157
+ | 6.2.6.1 | verification | applicable | compliant | | EX-SVERP-001 section 2 | |
158
+ | 6.2.6.2 | verification | applicable | partially-compliant | activity falls after PDR; planned in EX-SVERP-001 3, evidence expected at CDR | EX-SVERP-001 section 3 | |
159
+ | 6.2.6.3 | verification | applicable | partially-compliant | activity falls after PDR; planned in EX-SVERP-001 3, evidence expected at CDR | EX-SVERP-001 section 3 | |
160
+ | 6.2.6.4 | verification | applicable | partially-compliant | activity falls after PDR; planned in EX-SVERP-001 3, evidence expected at CDR | EX-SVERP-001 section 3 | |
161
+ | 6.2.6.5 | verification | applicable | partially-compliant | downgraded from compliant: no cited document was found in the folder | EX-SVR-001 section 3 | document-not-found |
162
+ | 6.2.6.6 | verification | applicable | partially-compliant | downgraded from compliant: no cited document was found in the folder | EX-SVR-001 section 4 | document-not-found |
163
+ | 6.2.6.7 | verification | applicable | partially-compliant | activity falls after PDR; planned in EX-SVERP-001 3, evidence expected at CDR | EX-SVERP-001 section 3 | |
164
+ | 6.2.6.8 | verification | applicable | partially-compliant | activity falls after PDR; planned in EX-SVERP-001 3, evidence expected at CDR | EX-SVERP-001 section 3 | |
165
+ | 6.2.6.9 | verification | applicable | partially-compliant | activity falls after PDR; planned in EX-SVERP-001 3, evidence expected at CDR | EX-SVERP-001 section 3 | |
166
+ | 6.2.6.10 | verification | applicable | partially-compliant | activity falls after PDR; planned in EX-SVERP-001 3, evidence expected at CDR | EX-SVERP-001 section 3 | |
167
+ | 6.2.6.11 | verification | applicable | partially-compliant | activity falls after PDR; planned in EX-SVERP-001 3, evidence expected at CDR | EX-SVERP-001 section 3 | |
168
+ | 6.2.6.12 | verification | applicable | partially-compliant | activity falls after PDR; planned in EX-SVERP-001 3, evidence expected at CDR | EX-SVERP-001 section 3 | |
169
+ | 6.2.6.13 | verification | applicable | compliant | | EX-SVERP-001 section 6 | |
170
+ | 6.2.7.1 | reusing existing software | applicable | compliant | | EX-SRF-001 section 2 | |
171
+ | 6.2.7.2 | reusing existing software | applicable | compliant | | EX-SRF-001 section 2 | |
172
+ | 6.2.7.3 | reusing existing software | applicable | compliant | | EX-SRF-001 section 2 | |
173
+ | 6.2.7.4 | reusing existing software | applicable | compliant | | EX-SRF-001 section 2 | |
174
+ | 6.2.7.5 | reusing existing software | applicable | compliant | | EX-SRF-001 section 2 | |
175
+ | 6.2.7.6 | reusing existing software | applicable | compliant | | EX-SRF-001 section 2 | |
176
+ | 6.2.7.7 | reusing existing software | applicable | compliant | | EX-SRF-001 section 2 | |
177
+ | 6.2.7.8 | reusing existing software | applicable | compliant | | EX-SRF-001 section 2 | |
178
+ | 6.2.7.9 | reusing existing software | applicable | compliant | | EX-SRF-001 section 2 | |
179
+ | 6.2.7.10 | reusing existing software | applicable | compliant | | EX-SRF-001 section 2 | |
180
+ | 6.2.7.11 | reusing existing software | applicable | compliant | | EX-SRF-001 section 2 | |
181
+ | 6.2.8.1 | generated code | applicable | not-applicable | no automatic code generation is used | EX-SDP-001 section 7.3 | na-conflicts-with-tailoring |
182
+ | 6.2.8.2 | generated code | applicable | not-applicable | no automatic code generation is used | EX-SDP-001 section 7.3 | na-conflicts-with-tailoring |
183
+ | 6.2.8.3 | generated code | applicable | not-applicable | no automatic code generation is used | EX-SDP-001 section 7.3 | na-conflicts-with-tailoring |
184
+ | 6.2.8.4 | generated code | applicable | not-applicable | no automatic code generation is used | EX-SDP-001 section 7.3 | na-conflicts-with-tailoring |
185
+ | 6.2.8.5 | generated code | applicable | not-applicable | no automatic code generation is used | EX-SDP-001 section 7.3 | na-conflicts-with-tailoring |
186
+ | 6.2.8.6 | generated code | applicable | not-applicable | no automatic code generation is used | EX-SDP-001 section 7.3 | na-conflicts-with-tailoring |
187
+ | 6.2.8.7 | generated code | applicable | not-applicable | no automatic code generation is used | EX-SDP-001 section 7.3 | na-conflicts-with-tailoring |
188
+ | 6.2.9.1 | security | not-applicable | not-applicable | tailored out for software category B | | |
189
+ | 6.2.9.2 | security | not-applicable | not-applicable | tailored out for software category B | | |
190
+ | 6.2.9.3 | security | not-applicable | not-applicable | tailored out for software category B | | |
191
+ | 6.2.9.4 | security | not-applicable | not-applicable | tailored out for software category B | | |
192
+ | 6.2.9.5 | security | not-applicable | not-applicable | tailored out for software category B | | |
193
+ | 6.2.9.6 | security | not-applicable | not-applicable | tailored out for software category B | | |
194
+ | 6.2.9.7 | security | not-applicable | not-applicable | tailored out for software category B | | |
195
+ | 6.2.10.1 | security-sensitive software | not-applicable | not-applicable | tailored out for software category B | | |
196
+ | 6.2.10.2 | security-sensitive software | not-applicable | not-applicable | tailored out for software category B | | |
197
+ | 6.2.10.3 | security-sensitive software | not-applicable | not-applicable | tailored out for software category B | | |
198
+ | 6.2.10.4 | security-sensitive software | not-applicable | not-applicable | tailored out for software category B | | |
199
+ | 6.3.1.1 | system-level software requirements | applicable | compliant | | EX-RB-001 section 2 | |
200
+ | 6.3.1.2 | system-level software requirements | applicable | compliant | | EX-RB-001 section 2 | |
201
+ | 6.3.1.3 | system-level software requirements | applicable | compliant | | EX-RB-001 section 2 | |
202
+ | 6.3.2.1 | requirements analysis | applicable | compliant | | EX-TS-001 section 2 | |
203
+ | 6.3.2.2 | requirements analysis | applicable | compliant | | EX-TS-001 section 2 | |
204
+ | 6.3.2.3 | requirements analysis | applicable | compliant | | EX-TS-001 section 2 | |
205
+ | 6.3.2.4 | requirements analysis | applicable | compliant | | EX-TS-001 section 2 | |
206
+ | 6.3.2.5 | requirements analysis | applicable | compliant | | EX-TS-001 section 2 | |
207
+ | 6.3.3.1 | architecture and design | applicable | compliant | | EX-DSTD-001 section 1 | |
208
+ | 6.3.3.2 | architecture and design | applicable | compliant | | EX-DSTD-001 section 2 | |
209
+ | 6.3.3.3 | architecture and design | applicable | compliant | | EX-SPAP-001 section 11.1 | |
210
+ | 6.3.3.4 | architecture and design | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 4, evidence expected at CDR | EX-SDP-001 section 4 | |
211
+ | 6.3.3.5 | architecture and design | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 4, evidence expected at CDR | EX-SDP-001 section 4 | |
212
+ | 6.3.3.6 | architecture and design | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 4, evidence expected at CDR | EX-SDP-001 section 4 | |
213
+ | 6.3.3.7 | architecture and design | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 4, evidence expected at CDR | EX-SDP-001 section 4 | |
214
+ | 6.3.4.1 | coding | applicable | compliant | | EX-CSTD-001 section 1 | |
215
+ | 6.3.4.2 | coding | applicable | compliant | | EX-CSTD-001 section 2 | |
216
+ | 6.3.4.3 | coding | applicable | compliant | | EX-SPAP-001 section 11.2 | |
217
+ | 6.3.4.4 | coding | applicable | compliant | | EX-CSTD-001 section 3 | |
218
+ | 6.3.4.5 | coding | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 5, evidence expected at CDR | EX-SDP-001 section 5 | |
219
+ | 6.3.4.6 | coding | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 5, evidence expected at CDR | EX-SDP-001 section 5 | |
220
+ | 6.3.4.7 | coding | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 5, evidence expected at CDR | EX-SDP-001 section 5 | |
221
+ | 6.3.4.8 | coding | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 5, evidence expected at CDR | EX-SDP-001 section 5 | |
222
+ | 6.3.5.1 | testing and validation | applicable | compliant | | EX-SVALP-001 section 2 | |
223
+ | 6.3.5.2 | testing and validation | applicable | compliant | | EX-SVALP-001 section 3 | |
224
+ | 6.3.5.3 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
225
+ | 6.3.5.4 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
226
+ | 6.3.5.5 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
227
+ | 6.3.5.6 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
228
+ | 6.3.5.7 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
229
+ | 6.3.5.8 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
230
+ | 6.3.5.9 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
231
+ | 6.3.5.10 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
232
+ | 6.3.5.11 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
233
+ | 6.3.5.12 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
234
+ | 6.3.5.13 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
235
+ | 6.3.5.14 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
236
+ | 6.3.5.15 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
237
+ | 6.3.5.16 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
238
+ | 6.3.5.17 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
239
+ | 6.3.5.18 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
240
+ | 6.3.5.19 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
241
+ | 6.3.5.20 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
242
+ | 6.3.5.21 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
243
+ | 6.3.5.22 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
244
+ | 6.3.5.23 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
245
+ | 6.3.5.24 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
246
+ | 6.3.5.25 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
247
+ | 6.3.5.26 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
248
+ | 6.3.5.27 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
249
+ | 6.3.5.28 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
250
+ | 6.3.5.29 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
251
+ | 6.3.5.30 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
252
+ | 6.3.5.31 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
253
+ | 6.3.5.32 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
254
+ | 6.3.5.33 | testing and validation | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 4, evidence expected at QR | EX-SVALP-001 section 4 | |
255
+ | 6.3.6.1 | delivery and installation | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 8, evidence expected at AR | EX-SDP-001 section 8 | |
256
+ | 6.3.6.2 | delivery and installation | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 8, evidence expected at AR | EX-SDP-001 section 8 | |
257
+ | 6.3.6.3 | delivery and installation | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 8, evidence expected at AR | EX-SDP-001 section 8 | |
258
+ | 6.3.6.4 | delivery and installation | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 8, evidence expected at AR | EX-SDP-001 section 8 | |
259
+ | 6.3.7.1 | acceptance | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 8, evidence expected at AR | EX-SDP-001 section 8 | |
260
+ | 6.3.7.2 | acceptance | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 8, evidence expected at AR | EX-SDP-001 section 8 | |
261
+ | 6.3.7.3 | acceptance | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 8, evidence expected at AR | EX-SDP-001 section 8 | |
262
+ | 6.3.7.5 | acceptance | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 8, evidence expected at AR | EX-SDP-001 section 8 | |
263
+ | 6.3.7.6 | acceptance | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 8, evidence expected at AR | EX-SDP-001 section 8 | |
264
+ | 6.3.7.7 | acceptance | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 8, evidence expected at AR | EX-SDP-001 section 8 | |
265
+ | 6.3.8.1 | operations | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 9, evidence expected at ORR | EX-SDP-001 section 9 | |
266
+ | 6.3.8.2 | operations | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 9, evidence expected at ORR | EX-SDP-001 section 9 | |
267
+ | 6.3.8.3 | operations | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 9, evidence expected at ORR | EX-SDP-001 section 9 | |
268
+ | 6.3.9.1 | maintenance | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 10, evidence expected at QR | EX-SDP-001 section 10 | |
269
+ | 6.3.9.2 | maintenance | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 10, evidence expected at QR | EX-SDP-001 section 10 | |
270
+ | 6.3.9.3 | maintenance | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 10, evidence expected at QR | EX-SDP-001 section 10 | |
271
+ | 6.3.9.4 | maintenance | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 10, evidence expected at QR | EX-SDP-001 section 10 | |
272
+ | 6.3.9.5 | maintenance | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 10, evidence expected at QR | EX-SDP-001 section 10 | |
273
+ | 6.3.9.6 | maintenance | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 10, evidence expected at QR | EX-SDP-001 section 10 | |
274
+ | 6.3.9.7 | maintenance | applicable | partially-compliant | activity falls after PDR; planned in EX-SDP-001 10, evidence expected at QR | EX-SDP-001 section 10 | |
275
+ | 7.1.1 | deriving quality requirements | applicable | compliant | | EX-SPAP-001 section 5 | |
276
+ | 7.1.2 | quality requirements as numbers | applicable | compliant | | EX-SPAP-001 section 5 | |
277
+ | 7.1.3 | checking quality requirements | applicable | compliant | | EX-SPAP-001 section 5 | |
278
+ | 7.1.4 | product measures | applicable | compliant | | EX-SPAP-001 section 5 | |
279
+ | 7.1.5 | basic measures | applicable | compliant | | EX-SPAP-001 section 5 | |
280
+ | 7.1.6 | reporting measures | applicable | compliant | | EX-SPAP-001 section 5 | |
281
+ | 7.1.7 | numerical accuracy | applicable | partially-compliant | activity falls after PDR; planned in EX-SVERP-001 5, evidence expected at CDR | EX-SVERP-001 section 5 | |
282
+ | 7.1.8 | maturity analysis | applicable | partially-compliant | maturity trend needs three reporting periods; one available | EX-SPAR-2026-Q3 section 3 | |
283
+ | 7.2.1.1 | requirement documents | applicable | compliant | | EX-TS-001 section 3 | |
284
+ | 7.2.1.2 | requirement documents | applicable | compliant | | EX-TS-001 section 3 | |
285
+ | 7.2.1.3 | requirement documents | applicable | compliant | | EX-TS-001 section 3 | |
286
+ | 7.2.2.1 | design documents | applicable | compliant | | EX-SDP-001 section 4.2 | |
287
+ | 7.2.2.2 | design documents | applicable | compliant | | EX-SDP-001 section 4.2 | |
288
+ | 7.2.2.3 | design documents | applicable | compliant | | EX-SDP-001 section 4.2 | |
289
+ | 7.2.3.1 | test and validation documents | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 5, evidence expected at CDR | EX-SVALP-001 section 5 | |
290
+ | 7.2.3.2 | test and validation documents | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 5, evidence expected at CDR | EX-SVALP-001 section 5 | |
291
+ | 7.2.3.3 | test and validation documents | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 5, evidence expected at CDR | EX-SVALP-001 section 5 | |
292
+ | 7.2.3.4 | test and validation documents | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 5, evidence expected at CDR | EX-SVALP-001 section 5 | |
293
+ | 7.2.3.5 | test and validation documents | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 5, evidence expected at CDR | EX-SVALP-001 section 5 | |
294
+ | 7.2.3.6 | test and validation documents | applicable | partially-compliant | activity falls after PDR; planned in EX-SVALP-001 5, evidence expected at CDR | EX-SVALP-001 section 5 | |
295
+ | 7.3.1 | what the customer asks for | applicable | not-applicable | the software is not developed for reuse by others | EX-SPAP-001 section 12 | na-conflicts-with-tailoring |
296
+ | 7.3.2 | own documentation set | applicable | not-applicable | the software is not developed for reuse by others | EX-SPAP-001 section 12 | na-conflicts-with-tailoring |
297
+ | 7.3.3 | standalone information | applicable | not-applicable | the software is not developed for reuse by others | EX-SPAP-001 section 12 | na-conflicts-with-tailoring |
298
+ | 7.3.4 | reuse requirements | applicable | not-applicable | the software is not developed for reuse by others | EX-SPAP-001 section 12 | na-conflicts-with-tailoring |
299
+ | 7.3.5 | configuration of reusable items | applicable | not-applicable | the software is not developed for reuse by others | EX-SPAP-001 section 12 | na-conflicts-with-tailoring |
300
+ | 7.3.6 | multi-platform testing | applicable | not-applicable | the software is not developed for reuse by others | EX-SPAP-001 section 12 | na-conflicts-with-tailoring |
301
+ | 7.3.7 | conformance certificate | applicable | not-applicable | the software is not developed for reuse by others | EX-SPAP-001 section 12 | na-conflicts-with-tailoring |
302
+ | 7.4.1 | buying ground hardware | applicable | not-compliant | no evidence mapped; open until assessed | | no-evidence |
303
+ | 7.4.2 | buying services | applicable | not-compliant | no evidence mapped; open until assessed | | no-evidence |
304
+ | 7.4.3 | limits | applicable | not-compliant | no evidence mapped; open until assessed | | no-evidence |
305
+ | 7.4.4 | choice | applicable | not-compliant | no evidence mapped; open until assessed | | no-evidence |
306
+ | 7.4.5 | upkeep | applicable | not-compliant | no evidence mapped; open until assessed | | no-evidence |
307
+ | 7.5.1 | programming devices | applicable | not-applicable | no programmable devices in the delivery | EX-SPAP-001 section 13 | na-conflicts-with-tailoring |
308
+ | 7.5.2 | device marking | applicable | not-applicable | no programmable devices in the delivery | EX-SPAP-001 section 13 | na-conflicts-with-tailoring |
309
+ | 7.5.3 | device calibration | applicable | not-applicable | no programmable devices in the delivery | EX-SPAP-001 section 13 | na-conflicts-with-tailoring |
310
+
311
+ ## 4. Gaps
312
+
313
+ Each gap names the bound skill that resolves it.
314
+
315
+ | # | Clause | Gap | Status | Next skill |
316
+ |---|---|---|---|---|
317
+ | 1 | 5.2.4 | no-evidence-reference | partially-compliant | q80-software-product-assurance-plan |
318
+ | 2 | 5.2.4 | partially-compliant | partially-compliant | q80-software-product-assurance-plan |
319
+ | 3 | 5.4.1.1 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
320
+ | 4 | 5.4.1.2 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
321
+ | 5 | 5.4.2.1 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
322
+ | 6 | 5.4.2.2 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
323
+ | 7 | 5.4.3.1 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
324
+ | 8 | 5.4.3.2 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
325
+ | 9 | 5.4.3.3 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
326
+ | 10 | 5.4.3.4 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
327
+ | 11 | 5.4.4 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
328
+ | 12 | 5.4.5 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
329
+ | 13 | 5.5.4 | partially-compliant | partially-compliant | q80-software-product-assurance-plan |
330
+ | 14 | 5.5.5 | partially-compliant | partially-compliant | q80-software-product-assurance-plan |
331
+ | 15 | 5.5.6 | partially-compliant | partially-compliant | q80-software-product-assurance-plan |
332
+ | 16 | 6.1.3 | reference-without-section | compliant | q80-software-process-assurance |
333
+ | 17 | 6.2.2.5 | partially-compliant | partially-compliant | q80-software-process-assurance |
334
+ | 18 | 6.2.2.6 | partially-compliant | partially-compliant | q80-software-process-assurance |
335
+ | 19 | 6.2.2.7 | partially-compliant | partially-compliant | q80-software-process-assurance |
336
+ | 20 | 6.2.2.8 | partially-compliant | partially-compliant | q80-software-process-assurance |
337
+ | 21 | 6.2.2.9 | partially-compliant | partially-compliant | q80-software-process-assurance |
338
+ | 22 | 6.2.2.10 | partially-compliant | partially-compliant | q80-software-process-assurance |
339
+ | 23 | 6.2.3.6 | partially-compliant | partially-compliant | q80-software-process-assurance |
340
+ | 24 | 6.2.3.7 | partially-compliant | partially-compliant | q80-software-process-assurance |
341
+ | 25 | 6.2.3.8 | partially-compliant | partially-compliant | q80-software-process-assurance |
342
+ | 26 | 6.2.4.2 | not-compliant | not-compliant | q80-software-process-assurance |
343
+ | 27 | 6.2.6.2 | partially-compliant | partially-compliant | q80-software-process-assurance |
344
+ | 28 | 6.2.6.3 | partially-compliant | partially-compliant | q80-software-process-assurance |
345
+ | 29 | 6.2.6.4 | partially-compliant | partially-compliant | q80-software-process-assurance |
346
+ | 30 | 6.2.6.5 | document-not-found | partially-compliant | q80-software-process-assurance |
347
+ | 31 | 6.2.6.5 | partially-compliant | partially-compliant | q80-software-process-assurance |
348
+ | 32 | 6.2.6.6 | document-not-found | partially-compliant | q80-software-process-assurance |
349
+ | 33 | 6.2.6.6 | partially-compliant | partially-compliant | q80-software-process-assurance |
350
+ | 34 | 6.2.6.7 | partially-compliant | partially-compliant | q80-software-process-assurance |
351
+ | 35 | 6.2.6.8 | partially-compliant | partially-compliant | q80-software-process-assurance |
352
+ | 36 | 6.2.6.9 | partially-compliant | partially-compliant | q80-software-process-assurance |
353
+ | 37 | 6.2.6.10 | partially-compliant | partially-compliant | q80-software-process-assurance |
354
+ | 38 | 6.2.6.11 | partially-compliant | partially-compliant | q80-software-process-assurance |
355
+ | 39 | 6.2.6.12 | partially-compliant | partially-compliant | q80-software-process-assurance |
356
+ | 40 | 6.2.8.1 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
357
+ | 41 | 6.2.8.2 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
358
+ | 42 | 6.2.8.3 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
359
+ | 43 | 6.2.8.4 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
360
+ | 44 | 6.2.8.5 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
361
+ | 45 | 6.2.8.6 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
362
+ | 46 | 6.2.8.7 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
363
+ | 47 | 6.3.3.4 | partially-compliant | partially-compliant | q80-software-process-assurance |
364
+ | 48 | 6.3.3.5 | partially-compliant | partially-compliant | q80-software-process-assurance |
365
+ | 49 | 6.3.3.6 | partially-compliant | partially-compliant | q80-software-process-assurance |
366
+ | 50 | 6.3.3.7 | partially-compliant | partially-compliant | q80-software-process-assurance |
367
+ | 51 | 6.3.4.5 | partially-compliant | partially-compliant | q80-software-process-assurance |
368
+ | 52 | 6.3.4.6 | partially-compliant | partially-compliant | q80-software-process-assurance |
369
+ | 53 | 6.3.4.7 | partially-compliant | partially-compliant | q80-software-process-assurance |
370
+ | 54 | 6.3.4.8 | partially-compliant | partially-compliant | q80-software-process-assurance |
371
+ | 55 | 6.3.5.3 | partially-compliant | partially-compliant | q80-software-process-assurance |
372
+ | 56 | 6.3.5.4 | partially-compliant | partially-compliant | q80-software-process-assurance |
373
+ | 57 | 6.3.5.5 | partially-compliant | partially-compliant | q80-software-process-assurance |
374
+ | 58 | 6.3.5.6 | partially-compliant | partially-compliant | q80-software-process-assurance |
375
+ | 59 | 6.3.5.7 | partially-compliant | partially-compliant | q80-software-process-assurance |
376
+ | 60 | 6.3.5.8 | partially-compliant | partially-compliant | q80-software-process-assurance |
377
+ | 61 | 6.3.5.9 | partially-compliant | partially-compliant | q80-software-process-assurance |
378
+ | 62 | 6.3.5.10 | partially-compliant | partially-compliant | q80-software-process-assurance |
379
+ | 63 | 6.3.5.11 | partially-compliant | partially-compliant | q80-software-process-assurance |
380
+ | 64 | 6.3.5.12 | partially-compliant | partially-compliant | q80-software-process-assurance |
381
+ | 65 | 6.3.5.13 | partially-compliant | partially-compliant | q80-software-process-assurance |
382
+ | 66 | 6.3.5.14 | partially-compliant | partially-compliant | q80-software-process-assurance |
383
+ | 67 | 6.3.5.15 | partially-compliant | partially-compliant | q80-software-process-assurance |
384
+ | 68 | 6.3.5.16 | partially-compliant | partially-compliant | q80-software-process-assurance |
385
+ | 69 | 6.3.5.17 | partially-compliant | partially-compliant | q80-software-process-assurance |
386
+ | 70 | 6.3.5.18 | partially-compliant | partially-compliant | q80-software-process-assurance |
387
+ | 71 | 6.3.5.19 | partially-compliant | partially-compliant | q80-software-process-assurance |
388
+ | 72 | 6.3.5.20 | partially-compliant | partially-compliant | q80-software-process-assurance |
389
+ | 73 | 6.3.5.21 | partially-compliant | partially-compliant | q80-software-process-assurance |
390
+ | 74 | 6.3.5.22 | partially-compliant | partially-compliant | q80-software-process-assurance |
391
+ | 75 | 6.3.5.23 | partially-compliant | partially-compliant | q80-software-process-assurance |
392
+ | 76 | 6.3.5.24 | partially-compliant | partially-compliant | q80-software-process-assurance |
393
+ | 77 | 6.3.5.25 | partially-compliant | partially-compliant | q80-software-process-assurance |
394
+ | 78 | 6.3.5.26 | partially-compliant | partially-compliant | q80-software-process-assurance |
395
+ | 79 | 6.3.5.27 | partially-compliant | partially-compliant | q80-software-process-assurance |
396
+ | 80 | 6.3.5.28 | partially-compliant | partially-compliant | q80-software-process-assurance |
397
+ | 81 | 6.3.5.29 | partially-compliant | partially-compliant | q80-software-process-assurance |
398
+ | 82 | 6.3.5.30 | partially-compliant | partially-compliant | q80-software-process-assurance |
399
+ | 83 | 6.3.5.31 | partially-compliant | partially-compliant | q80-software-process-assurance |
400
+ | 84 | 6.3.5.32 | partially-compliant | partially-compliant | q80-software-process-assurance |
401
+ | 85 | 6.3.5.33 | partially-compliant | partially-compliant | q80-software-process-assurance |
402
+ | 86 | 6.3.6.1 | partially-compliant | partially-compliant | q80-software-process-assurance |
403
+ | 87 | 6.3.6.2 | partially-compliant | partially-compliant | q80-software-process-assurance |
404
+ | 88 | 6.3.6.3 | partially-compliant | partially-compliant | q80-software-process-assurance |
405
+ | 89 | 6.3.6.4 | partially-compliant | partially-compliant | q80-software-process-assurance |
406
+ | 90 | 6.3.7.1 | partially-compliant | partially-compliant | q80-software-process-assurance |
407
+ | 91 | 6.3.7.2 | partially-compliant | partially-compliant | q80-software-process-assurance |
408
+ | 92 | 6.3.7.3 | partially-compliant | partially-compliant | q80-software-process-assurance |
409
+ | 93 | 6.3.7.5 | partially-compliant | partially-compliant | q80-software-process-assurance |
410
+ | 94 | 6.3.7.6 | partially-compliant | partially-compliant | q80-software-process-assurance |
411
+ | 95 | 6.3.7.7 | partially-compliant | partially-compliant | q80-software-process-assurance |
412
+ | 96 | 6.3.8.1 | partially-compliant | partially-compliant | q80-software-process-assurance |
413
+ | 97 | 6.3.8.2 | partially-compliant | partially-compliant | q80-software-process-assurance |
414
+ | 98 | 6.3.8.3 | partially-compliant | partially-compliant | q80-software-process-assurance |
415
+ | 99 | 6.3.9.1 | partially-compliant | partially-compliant | q80-software-process-assurance |
416
+ | 100 | 6.3.9.2 | partially-compliant | partially-compliant | q80-software-process-assurance |
417
+ | 101 | 6.3.9.3 | partially-compliant | partially-compliant | q80-software-process-assurance |
418
+ | 102 | 6.3.9.4 | partially-compliant | partially-compliant | q80-software-process-assurance |
419
+ | 103 | 6.3.9.5 | partially-compliant | partially-compliant | q80-software-process-assurance |
420
+ | 104 | 6.3.9.6 | partially-compliant | partially-compliant | q80-software-process-assurance |
421
+ | 105 | 6.3.9.7 | partially-compliant | partially-compliant | q80-software-process-assurance |
422
+ | 106 | 7.1.7 | partially-compliant | partially-compliant | q80-software-product-quality-metrics |
423
+ | 107 | 7.1.8 | partially-compliant | partially-compliant | q80-software-product-quality-metrics |
424
+ | 108 | 7.2.3.1 | partially-compliant | partially-compliant | q80-software-process-assurance |
425
+ | 109 | 7.2.3.2 | partially-compliant | partially-compliant | q80-software-process-assurance |
426
+ | 110 | 7.2.3.3 | partially-compliant | partially-compliant | q80-software-process-assurance |
427
+ | 111 | 7.2.3.4 | partially-compliant | partially-compliant | q80-software-process-assurance |
428
+ | 112 | 7.2.3.5 | partially-compliant | partially-compliant | q80-software-process-assurance |
429
+ | 113 | 7.2.3.6 | partially-compliant | partially-compliant | q80-software-process-assurance |
430
+ | 114 | 7.3.1 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
431
+ | 115 | 7.3.2 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
432
+ | 116 | 7.3.3 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
433
+ | 117 | 7.3.4 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
434
+ | 118 | 7.3.5 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
435
+ | 119 | 7.3.6 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
436
+ | 120 | 7.3.7 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
437
+ | 121 | 7.4.1 | no-evidence | not-compliant | q80-software-product-assurance-plan |
438
+ | 122 | 7.4.2 | no-evidence | not-compliant | q80-software-product-assurance-plan |
439
+ | 123 | 7.4.3 | no-evidence | not-compliant | q80-software-product-assurance-plan |
440
+ | 124 | 7.4.4 | no-evidence | not-compliant | q80-software-product-assurance-plan |
441
+ | 125 | 7.4.5 | no-evidence | not-compliant | q80-software-product-assurance-plan |
442
+ | 126 | 7.5.1 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
443
+ | 127 | 7.5.2 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
444
+ | 128 | 7.5.3 | na-conflicts-with-tailoring | not-applicable | q80-software-criticality-tailoring |
445
+ | 129 | 6.3.7.4 | evidence-for-unlisted-clause | not in list | q80-compliance-matrix |
446
+
447
+ Evidence was given for clauses that are not in the clause list (a mistyped id, or an id from an older revision): 6.3.7.4.
448
+
449
+ ## 5. Document trace
450
+
451
+ Folder example/docs/ holds 14 files; the evidence cites 15 documents, 14 of which resolve to a file.
452
+
453
+ | Cited document not found | Cited by clauses |
454
+ |---|---|
455
+ | EX-SVR-001 | 6.2.6.5, 6.2.6.6 |
456
+
457
+ | Cited document | File |
458
+ |---|---|
459
+ | EX-AUDIT-2026-01 | EX-AUDIT-2026-01.md |
460
+ | EX-CSTD-001 | EX-CSTD-001.md |
461
+ | EX-DSA-001 | EX-DSA-001.md |
462
+ | EX-DSTD-001 | EX-DSTD-001.md |
463
+ | EX-RB-001 | EX-RB-001.md |
464
+ | EX-SCMP-001 | EX-SCMP-001.md |
465
+ | EX-SDP-001 | EX-SDP-001.md |
466
+ | EX-SPAP-001 | EX-SPAP-001.md |
467
+ | EX-SPAR-2026-Q3 | EX-SPAR-2026-Q3.md |
468
+ | EX-SPR-LOG | EX-SPR-LOG.md |
469
+ | EX-SRF-001 | EX-SRF-001.md |
470
+ | EX-SVALP-001 | EX-SVALP-001.md |
471
+ | EX-SVERP-001 | EX-SVERP-001.md |
472
+ | EX-TS-001 | EX-TS-001.md |
473
+
474
+ ## 6. Tailoring for category B
475
+
476
+ | Group | Topic | Applicable | Reduced | Not applicable |
477
+ |---|---|---|---|---|
478
+ | 5.1 | organisation | 12 | 0 | 0 |
479
+ | 5.2 | programme management | 18 | 0 | 0 |
480
+ | 5.3 | risks and critical items | 3 | 0 | 0 |
481
+ | 5.4 | suppliers | 10 | 0 | 0 |
482
+ | 5.5 | buying software | 6 | 0 | 0 |
483
+ | 5.6 | tools and environment | 6 | 0 | 0 |
484
+ | 5.7 | process capability | 8 | 0 | 0 |
485
+ | 6.1 | life cycle | 5 | 0 | 0 |
486
+ | 6.2 | cross-process obligations | 74 | 0 | 11 |
487
+ | 6.3 | per-process obligations | 76 | 0 | 0 |
488
+ | 7.1 | quality targets and measurement | 8 | 0 | 0 |
489
+ | 7.2 | product quality obligations | 12 | 0 | 0 |
490
+ | 7.3 | software built for reuse | 7 | 0 | 0 |
491
+ | 7.4 | ground hardware and services | 5 | 0 | 0 |
492
+ | 7.5 | programmable devices | 3 | 0 | 0 |
493
+
494
+ Total: 253 applicable, 0 reduced, 11 not applicable. The security clauses follow the security sensitivity (no), not the category.
495
+
496
+ ## 7. Milestone evidence check
497
+
498
+ Review: preliminary design review (PDR). Software product assurance plan (SPAP) maturity owed: updated.
499
+
500
+ | Document owed | Driving clauses | Evidence state | Documents cited |
501
+ |---|---|---|---|
502
+ | coding standards and their tools | 6.3.4.1, 6.3.4.2, 6.3.4.4 | evidenced | EX-CSTD-001 |
503
+ | criticality classification of software products and components | 6.2.2.1, 6.2.2.3 | evidenced | EX-DSA-001 |
504
+ | software dependability and safety analysis report | 6.2.2.2, 6.2.2.7, 6.2.2.10 | partial | EX-DSA-001 |
505
+ | justification of design choices | 7.2.2.3 | evidenced | EX-SDP-001 |
506
+ | design and modelling standards | 6.2.8.4, 6.3.3.2 | partial | EX-SDP-001, EX-DSTD-001 |
507
+ | independent software verification and validation plan | 6.2.6.13, 6.3.5.28 | partial | EX-SVERP-001, EX-SVALP-001 |
508
+ | independent software verification and validation report | 6.2.6.13, 6.3.5.28 | partial | EX-SVERP-001, EX-SVALP-001 |
509
+ | software problem reports and their closure | 5.2.5.1, 5.2.5.2, 5.2.5.3, 6.2.6.4, 6.3.5.8 | partial | EX-SPR-LOG, EX-SVERP-001, EX-SVALP-001 |
510
+ | procedures and standards in force | 6.2.1.6, 6.2.1.7 | evidenced | EX-SDP-001 |
511
+ | software configuration management plan | 6.2.4.2, 6.2.4.5, 6.2.4.12, 7.3.5 | partial | EX-SCMP-001, EX-AUDIT-2026-01, EX-SPAP-001 |
512
+ | software development plan and project plans | 5.5.2, 5.6.2.1, 5.6.2.2, 6.3.4.5 | partial | EX-SDP-001 |
513
+ | software reuse file | 6.2.7.2, 6.2.7.3, 6.2.7.4, 6.2.7.5, 6.2.7.6, 6.2.7.7, 6.2.7.8, 6.2.7.11 | evidenced | EX-SRF-001 |
514
+ | software verification plan | 6.2.6.1 | evidenced | EX-SVERP-001 |
515
+ | software verification report | 7.1.7 | partial | EX-SVERP-001 |
516
+ | software product assurance milestone report (SPAMR) | 5.2.2.3, 5.6.1.2, 6.2.3.3, 6.2.6.12 | partial | EX-SPAR-2026-Q3, EX-SDP-001, EX-SPAP-001, EX-SVERP-001 |
517
+ | software product assurance plan (SPAP) | 5.2.1.1, 5.2.1.5, 5.2.6.2, 5.2.7.1, 5.2.7.2, 5.4.3.3, 5.4.3.4, 5.6.1.1, 6.1.1, 6.2.1.4, 6.2.2.10, 6.2.3.2, 6.2.3.4, 6.2.3.5, 6.2.4.8, 6.2.4.9, 6.2.4.11, 6.2.5.1, 6.2.5.2, 6.2.7.2, 6.2.7.3, 6.2.7.4, 6.2.7.5, 6.3.3.3, 6.3.3.5, 6.3.3.7, 6.3.4.3, 6.3.4.6, 6.3.5.1, 6.3.5.2, 7.1.3, 7.1.4, 7.1.5, 7.2.2.3, 7.5.1, 7.5.2 | partial | EX-SPAP-001, EX-SDP-001, EX-DSA-001, EX-SCMP-001, EX-SRF-001, EX-SVALP-001 |
518
+ | quality requirements in the technical specification | 6.3.2.4, 7.1.1, 7.1.2, 7.2.1.1, 7.2.1.3, 7.3.4 | partial | EX-TS-001, EX-SPAP-001 |
519
+ | test and validation plans, specifications and reports | 6.2.8.2, 6.2.8.7, 6.3.5.22, 6.3.5.23, 6.3.5.24, 6.3.5.25, 6.3.5.29 | partial | EX-SDP-001, EX-SVALP-001 |
520
+
521
+ Review pack against what is owed: 18 owed; missing: isvv-plan, isvv-report, software-verification-report; below issued maturity: software-verification-plan, spamr; submitted but not owed at this review: acceptance-documentation; pack complete: no.
522
+
523
+ ## 8. Milestone report skeleton (SPAMR)
524
+
525
+ Software product assurance milestone report (SPAMR) for the preliminary design review (PDR), DRAFT - requires human review and sign-off.
526
+
527
+ | Section | Topic | Status | Draws on |
528
+ |---|---|---|---|
529
+ | 1 | purpose and scope of this milestone report | boilerplate | - |
530
+ | 2 | applicable and reference documents | boilerplate | - |
531
+ | 3 | terms and abbreviations | boilerplate | - |
532
+ | 4 | verification activities performed by product assurance | filled | EX-SVERP-001 |
533
+ | 5 | suitability of methods and tools | filled | EX-SDP-001 |
534
+ | 6 | adherence to design and coding standards | filled | EX-CSTD-001, EX-DSTD-001, EX-SDP-001, EX-SPAP-001 |
535
+ | 7 | product and process metrics against their targets | filled | EX-SPAP-001, EX-SPAR-2026-Q3, EX-SVERP-001, graded measurement set |
536
+ | 8 | testing and validation status and coverage | filled | EX-SVALP-001 |
537
+ | 9 | status of software problem reports and nonconformances | filled | EX-SPAP-001, EX-SPR-LOG |
538
+ | 10 | references to progress reports | filled | EX-SPAR-2026-Q3 |
539
+
540
+ Inputs still missing: none.
541
+
542
+ ## 9. Product quality metrics
543
+
544
+ | Metric | Value | Threshold | Source | Direction | Status | Margin |
545
+ |---|---|---|---|---|---|---|
546
+ | coding_standard_violations | 3 | 0 | default | max | fail | -3 |
547
+ | comment_density | 0.27 | 0.2 | default | min | pass | 0.07 |
548
+ | cyclomatic_complexity | 12 | 10 | default | max | fail | -2 |
549
+ | decision_coverage | - | 1 | default | min | missing | - |
550
+ | function_size_loc | 55 | 80 | default | max | pass | 25 |
551
+ | nesting_depth | 3 | 4 | default | max | pass | 1 |
552
+ | open_major_nonconformances | 0 | 0 | default | max | pass | 0 |
553
+ | requirement_coverage | 1 | 1 | default | min | pass | 0 |
554
+ | requirement_test_coverage | 0.94 | 1 | default | min | fail | -0.06 |
555
+ | statement_coverage | - | 1 | default | min | missing | - |
556
+
557
+ Verdict: fail (failing: coding_standard_violations, cyclomatic_complexity, requirement_test_coverage; not measured: decision_coverage, statement_coverage). The standard fixes no threshold values: the defaults are illustrative and the values agreed in the contract and the plan replace them.
558
+
559
+ ## 10. Limitations and boundaries
560
+
561
+ - This matrix is a DRAFT prepared by an agent. It is not an approval, not a certification and not a statement of compliance.
562
+ - Statuses are those the evidence index claims, combined to the weakest per clause and downgraded where a reference is missing. The role checks that each cited document exists; it does not judge what the document says.
563
+ - A not-applicable claim on a clause the tailoring keeps is a deviation and needs the customer's agreement.
564
+ - The standard is referenced, never reproduced: clause identifiers are facts, topic labels are our own wording.
565
+ - Worked example: the project, documents and evidence are invented to show the deliverable. Nothing here describes a real mission.
566
+
567
+ ## 11. Human sign-off
568
+
569
+ Sign-off: none recorded.
570
+ The responsible human records the decision (see ROLE.md, Human sign-off). Approving over open gaps has to list them as accepted.
571
+
572
+ STOP: human sign-off required before submission.