Traceability

One governed chain for TV-000118: 11 of 18 hops realized, 7 projected.

Chain coverage

Realized versus projected hops in the traceability chain
Segment	Count	Share
Realized	11	61%
Projected	7	39%

Projected from Test onward

Hops stay projected until G3 clears VMR-0142 and PSCG-0042. Open PSLF-03

Walk the chain for TV-000118

Solid hops link into their module; dashed hops wait on upstream gates.

CustomerM01Customer active
CUS-0001Meridian Medical Systems
Product ecosystemM02Active
PRJ-2026-0042NimbusPump NP-200 Program
Framework profileM03Effective
PFP-2026-0042Resolved product profile
Lifecycle phaseM03Passed
PSLF-02Security inputs & risk discovery
DeliverableM03Approved
PSRA-0042Product Security Risk Assessment
RequirementM03Approved
PSPR-0042-SR-014Remote dosing commands mutually authenticated and integrity-protected
Architecture elementM02Baselined
AE-000042Infusion dosing command processor
ThreatM02Confirmed
TV-000118Attacker sends unauthorized dosing command
RiskM03Assessed
RSK-000118Inherent risk 20 (Critical) under RM-5X5-001 v1.2
Treatment / controlM02Adopted
REM-201Mutual authentication for remote command channel
ImplementationM02Implementing
DC-000314Design control: authenticated command channel
TestM02projectedNot started
VOB-000211Verification obligation: command interface fuzz test
EvidenceM03projectedPending
EVD-000903Fuzz-test result package
RetestM03projectedPending
RTS-000118Independent retest after remediation
ApprovalM03projectedPending
G4-PRJ-2026-0042Verification accepted (G4)
ReleaseM03projectedPending
REL-NP200-1.0NP-200 release baseline + Customer Security Package
Post-market signalM03projectedNot started
SIG-pendingVulnerability / incident monitoring
RetirementM03projectedNot started
EOL-pendingEnd-of-support & retirement

1. CustomerM01
CUS-0001Meridian Medical Systems
Customer active
2. Product ecosystemM02
PRJ-2026-0042NimbusPump NP-200 Program
Active
3. Framework profileM03
PFP-2026-0042Resolved product profile
Effective
4. Lifecycle phaseM03
PSLF-02Security inputs & risk discovery
Passed
5. DeliverableM03
PSRA-0042Product Security Risk Assessment
Approved
6. RequirementM03
PSPR-0042-SR-014Remote dosing commands mutually authenticated and integrity-protected
Approved
7. Architecture elementM02
AE-000042Infusion dosing command processor
Baselined
8. ThreatM02
TV-000118Attacker sends unauthorized dosing command
Confirmed
9. RiskM03
RSK-000118Inherent risk 20 (Critical) under RM-5X5-001 v1.2
Assessed
10. Treatment / controlM02
REM-201Mutual authentication for remote command channel
Adopted
11. ImplementationM02
DC-000314Design control: authenticated command channel
Implementing
12. TestM02
VOB-000211Verification obligation: command interface fuzz test
Not started
13. EvidenceM03
EVD-000903Fuzz-test result package
Pending
14. RetestM03
RTS-000118Independent retest after remediation
Pending
15. ApprovalM03
G4-PRJ-2026-0042Verification accepted (G4)
Pending
16. ReleaseM03
REL-NP200-1.0NP-200 release baseline + Customer Security Package
Pending
17. Post-market signalM03
SIG-pendingVulnerability / incident monitoring
Not started
18. RetirementM03
EOL-pendingEnd-of-support & retirement
Not started