GOVERNED HTML VIEWGOVERNED REFERENCE
Traceability Matrix
Trace portal actions through business objects, services, evidence, architecture and standards.
| Requirement/Scenario | Capability | Policy | Business Object | Portal/Screen | API/Connector | Repository | Evidence | Standard | Architecture | |
|---|---|---|---|---|---|---|---|---|---|---|
| TRC-001 | Govern Thing Identity & Resolver | Thing Identity & Resolver | Versioned policy / authority context | Resolution, alias correlation, normalization, clone-signal handling and model/batch/item identity graphs. | Public / Restricted DPP Viewer | /platform/thing-identity-resolver/ | Domain repository / external authority by scope | EVD-ARCH-P03 | Supporting / scope dependent | CLM-001 |
| TRC-002 | Govern Identifier Governance | Identifier Governance | Versioned policy / authority context | Namespace policy, persistence, collision control, key reuse constraints and supersession records. | Economic Operator Portal | /platform/identifier-governance/ | Domain repository / external authority by scope | EVD-ARCH-P03 | Supporting / scope dependent | CLM-002 |
| TRC-003 | Govern DPP Regulatory Engine | DPP Regulatory Engine | Versioned policy / authority context | Applicability, profile versioning, authoring, validation, publication, registration, update, recall and continuity. | Repair / Maintainer App | /platform/dpp-regulatory-engine/ | Domain repository / external authority by scope | EVD-ARCH-P04 | EU 2024/1781 | CLM-003 |
| TRC-004 | Govern Claims & Credentials | Claims & Credentials | Versioned policy / authority context | Credential issuance/verification, regulatory role records, status, revocation, claim versioning and provenance. | Distributor / Marketplace Portal | /platform/claims-credentials/ | Domain repository / external authority by scope | EVD-ARCH-P03 | Supporting / scope dependent | CLM-004 |
| TRC-005 | Govern Ownership, Custody & Delegation | Ownership, Custody & Delegation | Versioned policy / authority context | Transfer, delegation, expiry, dispute, evidence linkage and independent status semantics. | Operations / Admin Portal | /platform/ownership-custody-delegation/ | Domain repository / external authority by scope | EVD-ARCH-P03 | Supporting / scope dependent | CLM-005 |
| TRC-006 | Govern Policy, Mandate & Disclosure | Policy, Mandate & Disclosure | Versioned policy / authority context | Purpose, mandate, assurance, lawful basis, jurisdiction, data classification and composed views. | Regulator / Customs Portal | /platform/policy-disclosure/ | Domain repository / external authority by scope | EVD-ARCH-P02 | Supporting / scope dependent | CLM-006 |
| TRC-007 | Govern Evidence & Provenance | Evidence & Provenance | Versioned policy / authority context | Evidence manifests, source lineage, integrity proof, audit events, retention and long-term preservation hooks. | Developer / Integration Portal | /platform/evidence-provenance/ | Domain repository / external authority by scope | EVD-ARCH-P05 | Supporting / scope dependent | CLM-007 |
| TRC-008 | Govern Device Trust & Attestation | Device Trust & Attestation | Versioned policy / authority context | Device binding, certificate lifecycle, hardware-bound keys, secure boot, attestation, appraisal and enforcement. | Device / Thing Operations | /platform/device-trust/ | Domain repository / external authority by scope | EVD-ARCH-P05 | Supporting / scope dependent | CLM-008 |
| TRC-009 | Govern Repositories & Read Models | Repositories & Read Models | Versioned policy / authority context | Domain repositories, immutable evidence, public/restricted read models, search index, schema/vocabulary and external representations. | Consumer / Owner App | /platform/repositories-read-models/ | Domain repository / external authority by scope | EVD-ARCH-P05 | Supporting / scope dependent | CLM-009 |
| TRC-010 | Govern Connector & Integration Platform | Connector & Integration Platform | Versioned policy / authority context | API gateway, event bus, workflow, mapping, connector contracts, degraded mode, reconciliation and exit controls. | Public / Restricted DPP Viewer | /developers/integration-platform/ | Domain repository / external authority by scope | EVD-ARCH-P06 | EN 18223:2026 | CLM-010 |
| TRC-011 | Govern Governance & Conformance | Governance & Conformance | Versioned policy / authority context | Business authority matrix, RACI, evidence model, traceability chain, operating model and conformance test reporting. | Economic Operator Portal | /platform/governance-conformance/ | Domain repository / external authority by scope | EVD-ARCH-P06 | Supporting / scope dependent | CLM-011 |
| TRC-RS-01 | Manufacturer creates and publishes DPP | Multi-module scenario | Purpose / mandate / applicable profile | Economic operator → AuthN/AuthZ → profile applicability → author/validate/approve → registry orchestration → publication evidence. | Consumer / Owner App | /resources/reference-scenarios/manufacturer-publishes-dpp/ | Repositories by domain role | EVD-ARCH-P03 | Applicable product-group standards | CLM-010;CLM-026 |
| TRC-RS-02 | Consumer scans and receives policy-composed view | Multi-module scenario | Purpose / mandate / applicable profile | Carrier → resolver → disclosure context → PDP/PEP → public/restricted view → provenance cues. | Public / Restricted DPP Viewer | /resources/reference-scenarios/consumer-policy-view/ | Repositories by domain role | EVD-ARCH-P04 | Applicable product-group standards | CLM-010;CLM-026 |
| TRC-RS-03 | Ownership / custody transfer | Multi-module scenario | Purpose / mandate / applicable profile | Authenticated parties → mandate/purpose → transfer claim → evidence + trusted time → status update without changing DPP responsibility. | Economic Operator Portal | /resources/reference-scenarios/ownership-transfer/ | Repositories by domain role | EVD-ARCH-P05 | Applicable product-group standards | CLM-010;CLM-026 |
| TRC-RS-04 | Repairer records lifecycle evidence | Multi-module scenario | Purpose / mandate / applicable profile | Repair scope → restricted view → repair action → evidence capture → lifecycle event → audit/provenance. | Repair / Maintainer App | /resources/reference-scenarios/repair-evidence/ | Repositories by domain role | EVD-ARCH-P06 | Applicable product-group standards | CLM-010;CLM-026 |
| TRC-RS-05 | Market surveillance / recall intervention | Multi-module scenario | Purpose / mandate / applicable profile | Authority mandate → product inspection → external/authoritative decision → restriction/recall event → resulting state + evidence. | Distributor / Marketplace Portal | /resources/reference-scenarios/recall-surveillance/ | Repositories by domain role | EVD-ARCH-P02 | Applicable product-group standards | CLM-010;CLM-026 |
| TRC-RS-06 | Customs verifies product and DPP | Multi-module scenario | Purpose / mandate / applicable profile | Customs identity/mandate → registration/status lookup → declaration match → hold/release context → decision evidence. | Operations / Admin Portal | /resources/reference-scenarios/customs-verification/ | Repositories by domain role | EVD-ARCH-P03 | Applicable product-group standards | CLM-010;CLM-026 |
| TRC-RS-07 | Connected device onboarding and runtime attestation | Multi-module scenario | Purpose / mandate / applicable profile | Provision → bind ThingID → certificate → challenge → attestation evidence → trust appraisal → enforcement. | Regulator / Customs Portal | /resources/reference-scenarios/device-attestation/ | Repositories by domain role | EVD-ARCH-P04 | Applicable product-group standards | CLM-010;CLM-026 |
| TRC-RS-08 | External registry outage and reconciliation | Multi-module scenario | Purpose / mandate / applicable profile | Detect → degraded mode → retry/backoff → recovery → reconciliation → evidence/status update; retry never substitutes reconciliation. | Developer / Integration Portal | /resources/reference-scenarios/registry-outage/ | Repositories by domain role | EVD-ARCH-P05 | Applicable product-group standards | CLM-010;CLM-026 |
| TRC-RS-09 | Product end-of-life, retention and continuity | Multi-module scenario | Purpose / mandate / applicable profile | Lifecycle authority → closure event → retention policy → backup/portability → historical evidence continuity. | Device / Thing Operations | /resources/reference-scenarios/end-of-life/ | Repositories by domain role | EVD-ARCH-P06 | Applicable product-group standards | CLM-010;CLM-026 |
| TRC-RS-10 | Mandate / delegation lifecycle | Multi-module scenario | Purpose / mandate / applicable profile | Issue → activate → verify → suspend/revoke/expire → revalidate; decision evidence records policy and effective version. | Consumer / Owner App | /resources/reference-scenarios/mandate-lifecycle/ | Repositories by domain role | EVD-ARCH-P02 | Applicable product-group standards | CLM-010;CLM-026 |