Active Evaluation FINOS Labs This material is provisional and has not been published as a formal FINOS standard.

Standard Lifecycle

This lifecycle defines how OSERA remediation standards and standards packs move from early proposal to ratified material. It is intentionally small so the working group can use it immediately for the first standards-pack decision.

The standards group should approve this lifecycle before, or at the same time as, the first ratified standards pack.

Identifiers and versions

Standards use the existing OSERA identifier form:

<CATEGORY>-<NNN>

Examples include FORK-001, REL-003, and FORK-004.

The identifier is stable for the life of the standard. A standard also carries a separate standard-version value. The version changes when the standard text changes; the identifier does not.

Use a new version of the same identifier when the standard is still about the same requirement area:

FORK-004 v0.0.1  Pre-Draft
FORK-004 v0.1.0  Draft
FORK-004 v1.0.0  Ratified
FORK-004 v1.1.0  Revised

Do not create identifiers such as FORK-004.1. The dotted value belongs in standard-version, not in standard_id.

When to create a new standard ID

Create a new standard ID when the proposed material defines a distinct requirement area that implementers could satisfy independently.

Use a new ID when:

Do not create a new ID when:

When a new standard replaces an older one, keep the older standard addressable and mark the relationship with supersedes and superseded-by metadata.

Standard statuses

Status Meaning
Pre-Draft Early proposal or discussion item. It may be useful direction but is not ready to become a required alignment check.
Draft Written for working-group review and implementation feedback. Draft standards may be included in a candidate standards pack.
Ratification-Candidate The working group is considering a specific version for approval. Changes should be limited to review feedback and explicit meeting decisions.
Ratified Approved by the standards group for use in an OSERA standards pack or as standalone guidance.
Superseded Replaced by a later version or another standard. The old text remains available for historical pack references.
Withdrawn Removed from the active standards path without replacement.

Standards packs

A standards pack records a named set of standard versions. The pack, not an individual standard, is what implementers target for alignment.

Standards packs use the existing OSERA pack naming form:

OSERA-SP-<VERSION>

For example, OSERA-SP-0.1.0 can include FORK-001 v0.1.0, REL-003 v0.1.0, and other specific standard versions.

Ratifying a pack freezes the list of included standard versions for that pack. If FORK-001 later changes to v0.2.0, OSERA-SP-0.1.0 still refers to FORK-001 v0.1.0. A later pack can include the revised version.

Pack patch versions and approved producers

Standards-pack versions use SemVer.

Patch-level pack versions MAY update administrative pack metadata, such as an approved-producer registry, when the standard text, standard versions, check IDs, and check semantics do not change.

For example, OSERA-SP-0.1.1 MAY update the approved-producer registry for the same gate rules as OSERA-SP-0.1.0.

Minor or major pack versions SHOULD be used when standards text, blocking check semantics, or included standard versions change.

When to create a standards pack

Create a standards pack when the working group wants implementers to target a coherent set of requirements together.

Common reasons include:

A pack should identify:

Ratification effect

Ratifying a standards pack does not automatically ratify future edits to its included standards.

Ratification means the standards group has approved a specific pack record and the exact standard versions named in that record. Later revisions need their own review and inclusion in a later pack.

Fitness function relationship

The fitness function should report the standards pack tested, the exact standard versions tested, and the result for each check.

For v0.1.0, repositories should claim standards-pack alignment only against a named ratified pack. Certification language should wait until the working group approves a certification or accreditation process.