Maintenance overview

Long-term maintenance of the validation framework consists of the following items.

Rule development

Rules are written in Schematron with test coverage in XSpec.

The rule-writing process is outlined here: src/validations/CONTRIBUTING.md

Web documentation

The web-based documentation does not require active development, but dependencies may periodically need to be updated if vulnerabilities are flagged. The project team is available to collaborate on integration of documentation with other FedRAMP efforts, but in the absence of that, the documentation will be bundled with each validation framework release.

Release management

The validation framework is versioned using the strategy described in the release and versioning Architectural Decision Record (ADR). After determining the appropriate version identifier, a release may be produced via the Github "new release" interface.