BloomSpec
Entities

Control test

A record of testing a control: the sample selected, results, deficiencies found and remediation tracked to closure.

Volume

Hundreds per tenant per year

Retention

Audit period

Entity attributes7
  • result / deficiencies
  • remediation_status
  • sample_refs
  • The primary datastore must support exact numeric types, window functions and set-based aggregation over partitioned tables.
  • control_test_id
  • control_id / period_id
  • tested_by / tested_at
Entity relationships2
Capability entities2
Entity lifecycle

Not yet researched

Only the control-bearing entities were modelled for lifecycle. Defensible as a starting point, but it does leave the entity model uneven, and this is incompleteness rather than a finding.

Capability operations4