K10 · bounded transition and assurance evidence

Workload identity continuity

Direct answer

Workload identity continuity derives a DEGRADED root because one or more mandatory shared dependencies are degraded, stale, or unavailable.

Authority, operation, and disclosure boundary. K10 publishes static tools, deterministic synthetic fixtures, review queues, offline observation records, migration and merge reports, abstract dependency analysis, reference transition plans, audit trails, signed offline receipts, redaction records, and a release-time dashboard. It does not perform live monitoring, deployment, procurement award, facility certification, network reconnaissance, protected-system operation, legal authorization, or factual adjudication.

Derived root state

DEGRADED because mandatory shared evidence is not fully satisfied.

Trace nodes
IDTypeNameStateMandatory
CCT-K10-IDENTITY-ROOTclaimWorkload identity continuityDEGRADEDTrue
CCT-K10-IDENTITY-CONTROLcontrolBounded workload identity continuity controlSATISFIEDTrue
CCT-K10-IDENTITY-TESTtestSynthetic workload identity continuity testSATISFIEDTrue
CCT-K10-IDENTITY-EVIDENCEevidenceReference workload identity continuity evidenceSATISFIEDTrue
CCT-K10-IDENTITY-RECEIPTreceiptReference workload identity continuity receiptSATISFIEDTrue
CCD-K10-TIMEshared-dependencyTrusted time evidenceDEGRADEDTrue
CCD-K10-SIGNINGshared-dependencyEvidence signing and verificationSATISFIEDTrue
CCD-K10-IDENTITYshared-dependencyWorkload identity evidenceSATISFIEDTrue

Typed edges

Trace edges
IDFromRelationToMandatory
CCT-K10-IDENTITY-E1CCT-K10-IDENTITY-ROOTREQUIRESCCT-K10-IDENTITY-CONTROLTrue
CCT-K10-IDENTITY-E2CCT-K10-IDENTITY-CONTROLVERIFIED_BYCCT-K10-IDENTITY-TESTTrue
CCT-K10-IDENTITY-E3CCT-K10-IDENTITY-TESTPRODUCESCCT-K10-IDENTITY-EVIDENCETrue
CCT-K10-IDENTITY-E4CCT-K10-IDENTITY-EVIDENCEATTESTED_BYCCT-K10-IDENTITY-RECEIPTTrue
CCT-K10-IDENTITY-S1CCT-K10-IDENTITY-CONTROLDEPENDS_ONCCD-K10-TIMETrue
CCT-K10-IDENTITY-S2CCT-K10-IDENTITY-EVIDENCEDEPENDS_ONCCD-K10-SIGNINGTrue
CCT-K10-IDENTITY-S3CCT-K10-IDENTITY-CONTROLDEPENDS_ONCCD-K10-IDENTITYTrue

Boundary

Protected configuration included: No. The record is a synthetic dependency model, not an incident, facility finding, or attack path.