Solution overview
EEP-DONOR-ZA-001 v1.1.0
Build a donor management system for a South African university so our advancement office can track alumni donors, record gifts and pledges, run appeal campaigns and report to the finance office.
- Source
- PLANE_B_STORE
- Case
- AC-DONOR-REEVAL-4772361a
- Evaluated by
- evaluate_assurance 1.0.0
Read-only. This screen decides nothing and writes nothing.
What CHER concluded
NOT_ASSURED is a conclusion the evaluator reached. It is not a failed evaluation, and it is not a lesser form of ASSURED.
- Evaluation status
- Evaluated at
- 2026-09-06T00:00:00Z
- Conditions satisfied
- 1 of 8. This is a count, not a score.
Why CHER concluded this
The refusal classes the case records, in CHER's words. They are not ranked: one class is not nearer to assurance than five.
EVIDENCE_MISSING_OR_INADMISSIBLE
An evidence obligation has no record, or a record that does not meet the strength, truth class or integrity class the obligation requires
GOVERNANCE_DECISION_OUTSTANDING
A decision the package itself declares as required has no approval record from a named human at its decision class
MISSING_GOVERNED_KNOWLEDGE_BASIS
The engineering basis is absent, ungoverned, or does not resolve from the bound snapshot. Nothing downstream can be assured over knowledge CHER does not hold
SPECIALIST_GENERATION_INCOMPLETE
A governed basis exists and the specialist engineering over it is not complete: a role in scope produced nothing it should have produced, or an applicable control belongs to no role
VALIDATION_NOT_EXECUTED_OR_UNDEREVIDENCED
The validation this package declares has not been executed against the deployed system, or its outcome is not at OBSERVED
What remains unresolved
Every condition the case carries, grouped by the state CHER recorded. A satisfied condition does not mean the version is assured.
NOT_SATISFIED (7)
- AC-CONTEXT-001
the solution context is present and every fact carries its derivation, confidence and, where inferred, its basis
refusalClassIfUnmet MISSING_GOVERNED_KNOWLEDGE_BASIS
- AC-EVIDENCE-001
every declared evidence obligation is met at its required strength, truth class and integrity class
refusalClassIfUnmet EVIDENCE_MISSING_OR_INADMISSIBLE
- AC-GOVERNANCE-001
every decision the package declares as required has an approval record from a named human at its decision class
refusalClassIfUnmet GOVERNANCE_DECISION_OUTSTANDING
- AC-KNOWLEDGE-001
the engineering basis resolves from the bound immutable snapshot
refusalClassIfUnmet MISSING_GOVERNED_KNOWLEDGE_BASIS
- AC-SPECIALIST-001
every specialist role in scope produced the engineering its governed knowledge carries
refusalClassIfUnmet MISSING_GOVERNED_KNOWLEDGE_BASIS
- AC-SPECIALIST-002
every control that applies to this context belongs to a specialist role
refusalClassIfUnmet SPECIALIST_GENERATION_INCOMPLETE
- AC-VALIDATION-001
the validation this package declares has been executed and its outcome is OBSERVED
refusalClassIfUnmet VALIDATION_NOT_EXECUTED_OR_UNDEREVIDENCED
SATISFIED (1)
- AC-FINDING-001
no finding blocks a gate and every material or decision-changing assumption is confirmed
refusalClassIfUnmet BLOCKING_FINDING_OR_ASSUMPTION_UNRESOLVED
- satisfiedBy ASM-DONOR-001 confirmed by person:privacy-authority@example.ac.za
- satisfiedBy ASM-DONOR-002 confirmed by person:it-director@example.ac.za
- satisfiedBy ASM-DONOR-003 confirmed by person:privacy-authority@example.ac.za
Supporting material
- Knowledge snapshot
- KS-2d4a1d596a27c2e1
- Package
- EEP-DONOR-ZA-001 v1.1.0
- Case digest
- 9cea570cb809eb59fdad6521c9913fb47adf46b3b322ebf53be216b68ef6a7c3
- Supersedes
- 8f02070f-b59d-4a69-819a-cb79622ca247
- Scope criticality
- HIGH
Evidence the case names (3)
EEP-DONOR-ZA-001@1.1.0
assurance_evaluation · E3 · INFERRED
3c2b9c7ed58c8d1a80922887438b907eac036f1beab81eb97fe14b02e17bba8c
ROLE-SEC-ARCH:EEP-DONOR-ZA-001@1.1.0
specialist_output · E2 · DECLARED
c07ab5faaf6c8b772fc70067932538af97bc62b162a159dc48c2621cef4408a2
EEP-DONOR-ZA-001@1.1.0:KS-2d4a1d596a27c2e1->KS-cd27e616e2091377
impact_assessment · E3 · OBSERVED
e03a1d155af6583b6d06c5938da21872511a1cc3a6d2162deb3d0b1b94c6d149
Decisions the case names (4)
- DEC-DONOR-001 · D3 · declared DECIDED · approvalRecordInStore FALSE
- DEC-DONOR-002 · D5 · declared DECIDED · approvalRecordInStore FALSE
- DEC-DONOR-003 · D2 · declared DECIDED · approvalRecordInStore FALSE
- DEC-DONOR-004 · D4 · declared DECIDED · approvalRecordInStore FALSE
Specialist roles the case names (2)
- ROLE-SEC-ARCH · CTRL-ENG-TRACE-001, CTRL-SEC-AUTHN-001, CTRL-SEC-AUTHORITY-001, CTRL-SEC-AUTHZ-001, CTRL-SEC-TENANT-001
- ROLE-PRIV-REG · no controls recorded
These are the case's own references. They are not counted towards anything, and no link is made from an identifier that merely matches another record.