US-4: APRA CPS 234 Cross-Domain Validation
Status: Rejected - Split Required
Rejection Reason: Independence=5 (FAIL), Small=4 (FAIL). Cannot be delivered until domains D1/D2/D3 complete.
INVEST Score
| I | N | V | E | S | T | Avg |
|---|---|---|---|---|---|---|
| 5 | 6 | 7 | 5 | 4 | 6 | 5.5 |
Does not meet minimum threshold (>= 6.0 average, >= 4 of 6 dimensions >= 6).
Required Split
| Sub-Story | Sprint | Scope | Days |
|---|---|---|---|
| US-4a: Checkov on D1 | Sprint 1 | identity-center only | 1d |
| US-4b: Checkov + Trivy on D2 | Sprint 2 | ecs-platform only | 1d |
| US-4c: Checkov + WAF validation on D3 | Sprint 3 | web only | 1d |
| US-4d: Cross-domain CPS 234 mapping | Sprint 4 | All 3 domains + evidence | 2d |
Related ADRs
GitHub Issue
No issue created — story requires split before execution. See Required Split above.