At a glance
| Input | Action | Output | Limit |
|---|---|---|---|
| External evidence archive | Use Import archive | Validated package or explicit import errors | Tenant, schema, count, order, and hash failures block acceptance |
| Deposited baseline | Select Run verification | Integrity and conformance result | Verification does not prove source correctness |
| Affected artifact | Use Search deposited evidence or the Artifact filter | Frozen artifact record | Search covers indexed evidence fields, not arbitrary full text |
| Exact revision and hash | Select Open evidence | Revision-specific evidence | Unavailable content remains unavailable |
| Approved or imported trace links | Select Reverse provenance | Path to tests, requirements, decisions, or regulatory roots | Candidate and rejected links do not count as governed evidence |
| Missing endpoint or bounded result | Review Coverage blockers | Visible reconstruction gap | A partial trace cannot support a complete claim |
How it works
- Open Enterprise evidence workspace.
- If needed, select an Archive package and choose Import archive.
- Select the deposited baseline. Review Coverage blockers.
- Select Run verification.
- Use Search deposited evidence or the Artifact filter.
- Open the affected revision with Open evidence.
- In Trace graph, select Reverse provenance. Open each Evidence reference.
Example
An incident concerns a changed controller revision. The deposited baseline preserves the earlier revision and its hash. Reverse provenance links that code reference to its component requirement. Further governed links reach the system requirement, a business decision, and the regulatory basis. A linked test supplies validation context. A missing hop appears as a coverage blocker.
What this does not mean
The workspace reconstructs recorded evidence. It does not perform root-cause analysis. It does not restore absent source content. It does not approve remediation or certify compliance. Archive hashes provide tamper evidence, not legal WORM storage. Conclusions remain limited to the verified package and governed links.
Related questions
Next step
Verify the deposited baseline before using its reverse trace in an incident review.
View on Atlassian Marketplace