Manual and connector evidence
External evidence slots for MarketLink.
CMS EDE has evidence that a browser collector cannot honestly generate by itself: signed agreements, CMS portal submissions, GRC records, IDM/Okta exports, identity proofing configuration, SAR/SAP/SSPP/POA&M files, and auditor observations. These slots keep that work source-native and visible.
CMS EDEexternal blockers visible
Slots
27
blocked or placeholder scenarios
Approved
0
0 artifact(s)
Needs review
0
0 artifact(s)
Missing
27
manual/connector/auditor
Native IDs
129
mapped source IDs
Evidence intake queue
Source-native manual slots
Medicaid-specific absent parent question
collector-ready-after-accesscollector after accessmissingapplication-ui-toolkit / cms-ede-ui-absent-parent-medicaid-specific
Collector operator after target access is configured
cms-ede-ui-toolkitApplication UI Toolkit UI Questions Item #241
Required evidence
Medicaid-specific parent-outside-home question screenshot when implemented
applicationAnswers JSON showing absentParentIndicator when answered yes
Source-row evidence index entry for UI Questions Item #241
Open blockers
Current source accountability row says consumer and broker/agent surfaces are Missing and evidence target is 'No current evidence target; Medicaid-specific section required.'
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-ui-absent-parent-medicaid-specific --artifact-path=/path/to/artifact --review-status=needs-review
Application submission, DMI, and required communications
requiredconnectormissingcommunications-toolkit / cms-ede-comms-application-submission-dmi
Security, IAM, GRC, or platform owner
cms-ede-comms-toolkit-y9Communications Toolkit Requirement #1Communications Toolkit Requirement #7Communications Toolkit Requirement #9Communications Toolkit Requirement #16Communications Toolkit Requirement #33
Required evidence
Sample communications in English and Spanish if applicable
Stored Events-based Processing annual income event screenshot for the same test attempt
Submit/Get Application API request and response where required by the toolkit row
Source-row index entries keyed to Communications Toolkit Requirement numbers
Accessibility / Section 508 audit result for critical communications
Open blockers
Final evidence requires authorized consumer account, same-test-attempt email samples, EBP event logs, and API request/response captures.
Section 508 critical communication audit result must be uploaded or connected from the compliance partner/GRC lane.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-comms-application-submission-dmi --artifact-path=/path/to/artifact --review-status=needs-review
Document upload, DMI/SVI, dashboard, and notice communications
collector-ready-after-accesscollector after accessmissingcommunications-toolkit / cms-ede-comms-document-upload-notices
Collector operator after target access is configured
cms-ede-comms-toolkit-y9Communications Toolkit Requirement #3Communications Toolkit Requirement #4Communications Toolkit Requirement #5Communications Toolkit Requirement #6Communications Toolkit Requirement #10Communications Toolkit Requirement #14Communications Toolkit Requirement #15
Required evidence
Initial document upload page in English and Spanish if applicable
Unobstructed full dropdown menu for DMI/SVI document types
Screenshots showing DMI/SVI status, deadlines, persons affected, and upload flow
Dashboard recording or screenshots showing application/enrollment status, notices, and action items
Metadata Search / Notice Retrieval or equivalent API request-response capture when available
Open blockers
Final evidence requires seeded applications with DMI/SVI action items, EDNs, historical notices, and document upload access.
Metadata Search, Notice Retrieval, Get DMI, and Get SVI evidence requires CMS UAT APIs and authorized credentials.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-comms-document-upload-notices --artifact-path=/path/to/artifact --review-status=needs-review
APTC / CSR eligibility result display (rollup)
collector-ready-after-accesscollector after accessmissingeligibility-results-toolkit / cms-ede-eligibility-aptc-csr
Collector operator after target access is configured
cms-ede-results-phase3Eligibility Results Toolkit Test Case 3.AEligibility Results Toolkit Test Case 3.A.2Eligibility Results Toolkit Test Case 3.CEligibility Results Toolkit Test Case 3.DEligibility Results Toolkit Test Case 3.EEligibility Results Toolkit Test Case 3.FEligibility Results Toolkit Test Case 3.GEligibility Results Toolkit Test Case 3.H+2 more
Required evidence
Eligibility results full-page screenshot
Raw eligibility JSON where available
APTC/CSR result display for each applicable household member
Phase 3 toolkit test case result row in the source-native index
Open blockers
Final hub-backed eligibility evidence requires CMS UAT APIs and credentials.
Seeded Phase 3 household scenarios must be executed in the authorized HPS environment before evidence can be exported.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-eligibility-aptc-csr --artifact-path=/path/to/artifact --review-status=needs-review
Eligibility Results Toolkit Test Case 3.A
collector-ready-after-accesscollector after accessmissingeligibility-results-toolkit / cms-ede-eligibility-test-case-3a
Collector operator after target access is configured
cms-ede-results-phase3Eligibility Results Toolkit Test Case 3.A
Required evidence
Eligibility results full-page screenshot
Raw eligibility JSON where available
APTC/CSR result display for each applicable household member
Phase 3 toolkit test case result row in the source-native index
Open blockers
Final hub-backed eligibility evidence requires CMS UAT APIs and credentials.
Seeded Phase 3 Test Case 3.A household must be executed in the authorized HPS environment before evidence can be exported.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-eligibility-test-case-3a --artifact-path=/path/to/artifact --review-status=needs-review
Eligibility Results Toolkit Test Case 3.A.2
collector-ready-after-accesscollector after accessmissingeligibility-results-toolkit / cms-ede-eligibility-test-case-3a2
Collector operator after target access is configured
cms-ede-results-phase3Eligibility Results Toolkit Test Case 3.A.2
Required evidence
Eligibility results full-page screenshot
Raw eligibility JSON where available
APTC/CSR result display for each applicable household member
Phase 3 toolkit test case result row in the source-native index
Open blockers
Final hub-backed eligibility evidence requires CMS UAT APIs and credentials.
Seeded Phase 3 Test Case 3.A.2 household must be executed in the authorized HPS environment before evidence can be exported.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-eligibility-test-case-3a2 --artifact-path=/path/to/artifact --review-status=needs-review
Eligibility Results Toolkit Test Case 3.C
collector-ready-after-accesscollector after accessmissingeligibility-results-toolkit / cms-ede-eligibility-test-case-3c
Collector operator after target access is configured
cms-ede-results-phase3Eligibility Results Toolkit Test Case 3.C
Required evidence
Eligibility results full-page screenshot
Raw eligibility JSON where available
APTC/CSR result display for each applicable household member
Phase 3 toolkit test case result row in the source-native index
Open blockers
Final hub-backed eligibility evidence requires CMS UAT APIs and credentials.
Seeded Phase 3 Test Case 3.C household must be executed in the authorized HPS environment before evidence can be exported.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-eligibility-test-case-3c --artifact-path=/path/to/artifact --review-status=needs-review
Eligibility Results Toolkit Test Case 3.D
collector-ready-after-accesscollector after accessmissingeligibility-results-toolkit / cms-ede-eligibility-test-case-3d
Collector operator after target access is configured
cms-ede-results-phase3Eligibility Results Toolkit Test Case 3.D
Required evidence
Eligibility results full-page screenshot
Raw eligibility JSON where available
APTC/CSR result display for each applicable household member
Phase 3 toolkit test case result row in the source-native index
Open blockers
Final hub-backed eligibility evidence requires CMS UAT APIs and credentials.
Seeded Phase 3 Test Case 3.D household must be executed in the authorized HPS environment before evidence can be exported.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-eligibility-test-case-3d --artifact-path=/path/to/artifact --review-status=needs-review
Eligibility Results Toolkit Test Case 3.E
collector-ready-after-accesscollector after accessmissingeligibility-results-toolkit / cms-ede-eligibility-test-case-3e
Collector operator after target access is configured
cms-ede-results-phase3Eligibility Results Toolkit Test Case 3.E
Required evidence
Eligibility results full-page screenshot
Raw eligibility JSON where available
APTC/CSR result display for each applicable household member
Phase 3 toolkit test case result row in the source-native index
Open blockers
Final hub-backed eligibility evidence requires CMS UAT APIs and credentials.
Seeded Phase 3 Test Case 3.E household must be executed in the authorized HPS environment before evidence can be exported.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-eligibility-test-case-3e --artifact-path=/path/to/artifact --review-status=needs-review
Eligibility Results Toolkit Test Case 3.F
collector-ready-after-accesscollector after accessmissingeligibility-results-toolkit / cms-ede-eligibility-test-case-3f
Collector operator after target access is configured
cms-ede-results-phase3Eligibility Results Toolkit Test Case 3.F
Required evidence
Eligibility results full-page screenshot
Raw eligibility JSON where available
APTC/CSR result display for each applicable household member
Phase 3 toolkit test case result row in the source-native index
Open blockers
Final hub-backed eligibility evidence requires CMS UAT APIs and credentials.
Seeded Phase 3 Test Case 3.F household must be executed in the authorized HPS environment before evidence can be exported.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-eligibility-test-case-3f --artifact-path=/path/to/artifact --review-status=needs-review
Eligibility Results Toolkit Test Case 3.G
collector-ready-after-accesscollector after accessmissingeligibility-results-toolkit / cms-ede-eligibility-test-case-3g
Collector operator after target access is configured
cms-ede-results-phase3Eligibility Results Toolkit Test Case 3.G
Required evidence
Eligibility results full-page screenshot
Raw eligibility JSON where available
APTC/CSR result display for each applicable household member
Phase 3 toolkit test case result row in the source-native index
Open blockers
Final hub-backed eligibility evidence requires CMS UAT APIs and credentials.
Seeded Phase 3 Test Case 3.G household must be executed in the authorized HPS environment before evidence can be exported.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-eligibility-test-case-3g --artifact-path=/path/to/artifact --review-status=needs-review
Eligibility Results Toolkit Test Case 3.H
collector-ready-after-accesscollector after accessmissingeligibility-results-toolkit / cms-ede-eligibility-test-case-3h
Collector operator after target access is configured
cms-ede-results-phase3Eligibility Results Toolkit Test Case 3.H
Required evidence
Eligibility results full-page screenshot
Raw eligibility JSON where available
APTC/CSR result display for each applicable household member
Phase 3 toolkit test case result row in the source-native index
Open blockers
Final hub-backed eligibility evidence requires CMS UAT APIs and credentials.
Seeded Phase 3 Test Case 3.H household must be executed in the authorized HPS environment before evidence can be exported.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-eligibility-test-case-3h --artifact-path=/path/to/artifact --review-status=needs-review
Eligibility Results Toolkit Test Case 3.I
collector-ready-after-accesscollector after accessmissingeligibility-results-toolkit / cms-ede-eligibility-test-case-3i
Collector operator after target access is configured
cms-ede-results-phase3Eligibility Results Toolkit Test Case 3.I
Required evidence
Eligibility results full-page screenshot
Raw eligibility JSON where available
APTC/CSR result display for each applicable household member
Phase 3 toolkit test case result row in the source-native index
Open blockers
Final hub-backed eligibility evidence requires CMS UAT APIs and credentials.
Seeded Phase 3 Test Case 3.I household must be executed in the authorized HPS environment before evidence can be exported.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-eligibility-test-case-3i --artifact-path=/path/to/artifact --review-status=needs-review
Eligibility Results Toolkit Test Case 3.J
collector-ready-after-accesscollector after accessmissingeligibility-results-toolkit / cms-ede-eligibility-test-case-3j
Collector operator after target access is configured
cms-ede-results-phase3Eligibility Results Toolkit Test Case 3.J
Required evidence
Eligibility results full-page screenshot
Raw eligibility JSON where available
APTC/CSR result display for each applicable household member
Phase 3 toolkit test case result row in the source-native index
Open blockers
Final hub-backed eligibility evidence requires CMS UAT APIs and credentials.
Seeded Phase 3 Test Case 3.J household with unverified immigration documents must be executed in the authorized HPS environment before evidence can be exported.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-eligibility-test-case-3j --artifact-path=/path/to/artifact --review-status=needs-review
Partner Test Case Suite Phase 3 UAT core cases (rollup)
collector-ready-after-accesscollector after accessmissingpartner-test-case-suite / cms-ede-partner-phase3-uat-core-cases
Collector operator after target access is configured
cms-ede-partner-test-suitePartner Test Case Suite Test Case 3.CPartner Test Case Suite Test Case 3.A/3.BPartner Test Case Suite Test Case 3.EPartner Test Case Suite Test Case 3.FPartner Test Case Suite Test Case 3.GPartner Test Case Suite Test Case 3.H
Required evidence
Partner Test Case Suite case ID and source row mapping
Execution evidence for each CMS UAT case run
Screenshots or browser traces tied to the case step
Raw/redacted API request-response JSON where applicable
Exception and blocker disposition before audit export
Open blockers
CMS UAT test data, tester assignments, target environment, and persona credentials are required before execution evidence can be collected.
Each case needs run-level evidence and exception disposition before auditor-ready export.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-partner-phase3-uat-core-cases --artifact-path=/path/to/artifact --review-status=needs-review
Partner Test Case Suite Test Case 3.A/3.B
collector-ready-after-accesscollector after accessmissingpartner-test-case-suite / cms-ede-partner-test-case-3a-3b
Collector operator after target access is configured
cms-ede-partner-test-suitePartner Test Case Suite Test Case 3.A/3.B
Required evidence
Partner Test Case Suite case ID and source row mapping
Execution evidence for each CMS UAT case run
Screenshots or browser traces tied to the case step
Raw/redacted API request-response JSON where applicable
Exception and blocker disposition before audit export
Open blockers
CMS UAT test data, tester assignment, target environment, and broker credentials required before execution evidence can be collected for Test Case 3.A/3.B.
Run-level evidence and exception disposition required before auditor-ready export.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-partner-test-case-3a-3b --artifact-path=/path/to/artifact --review-status=needs-review
Partner Test Case Suite Test Case 3.C
collector-ready-after-accesscollector after accessmissingpartner-test-case-suite / cms-ede-partner-test-case-3c
Collector operator after target access is configured
cms-ede-partner-test-suitePartner Test Case Suite Test Case 3.C
Required evidence
Partner Test Case Suite case ID and source row mapping
Execution evidence for each CMS UAT case run
Screenshots or browser traces tied to the case step
Raw/redacted API request-response JSON where applicable
Exception and blocker disposition before audit export
Open blockers
CMS UAT test data, tester assignment, target environment, and broker credentials required before execution evidence can be collected for Test Case 3.C.
Run-level evidence and exception disposition required before auditor-ready export.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-partner-test-case-3c --artifact-path=/path/to/artifact --review-status=needs-review
Partner Test Case Suite Test Case 3.E
collector-ready-after-accesscollector after accessmissingpartner-test-case-suite / cms-ede-partner-test-case-3e
Collector operator after target access is configured
cms-ede-partner-test-suitePartner Test Case Suite Test Case 3.E
Required evidence
Partner Test Case Suite case ID and source row mapping
Execution evidence for each CMS UAT case run
Screenshots or browser traces tied to the case step
Raw/redacted API request-response JSON where applicable
Exception and blocker disposition before audit export
Open blockers
CMS UAT test data, tester assignment, target environment, and broker credentials required before execution evidence can be collected for Test Case 3.E.
Run-level evidence and exception disposition required before auditor-ready export.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-partner-test-case-3e --artifact-path=/path/to/artifact --review-status=needs-review
Partner Test Case Suite Test Case 3.F
collector-ready-after-accesscollector after accessmissingpartner-test-case-suite / cms-ede-partner-test-case-3f
Collector operator after target access is configured
cms-ede-partner-test-suitePartner Test Case Suite Test Case 3.F
Required evidence
Partner Test Case Suite case ID and source row mapping
Execution evidence for each CMS UAT case run
Screenshots or browser traces tied to the case step
Raw/redacted API request-response JSON where applicable
Exception and blocker disposition before audit export
Open blockers
CMS UAT test data, tester assignment, target environment, and broker credentials required before execution evidence can be collected for Test Case 3.F.
Run-level evidence and exception disposition required before auditor-ready export.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-partner-test-case-3f --artifact-path=/path/to/artifact --review-status=needs-review
Partner Test Case Suite Test Case 3.G
collector-ready-after-accesscollector after accessmissingpartner-test-case-suite / cms-ede-partner-test-case-3g
Collector operator after target access is configured
cms-ede-partner-test-suitePartner Test Case Suite Test Case 3.G
Required evidence
Partner Test Case Suite case ID and source row mapping
Execution evidence for each CMS UAT case run
Screenshots or browser traces tied to the case step
Raw/redacted API request-response JSON where applicable
Exception and blocker disposition before audit export
Open blockers
CMS UAT test data, tester assignment, target environment, and broker credentials required before execution evidence can be collected for Test Case 3.G.
Run-level evidence and exception disposition required before auditor-ready export.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-partner-test-case-3g --artifact-path=/path/to/artifact --review-status=needs-review
Partner Test Case Suite Test Case 3.H
collector-ready-after-accesscollector after accessmissingpartner-test-case-suite / cms-ede-partner-test-case-3h
Collector operator after target access is configured
cms-ede-partner-test-suitePartner Test Case Suite Test Case 3.H
Required evidence
Partner Test Case Suite case ID and source row mapping
Execution evidence for each CMS UAT case run
Screenshots or browser traces tied to the case step
Raw/redacted API request-response JSON where applicable
Exception and blocker disposition before audit export
Open blockers
CMS UAT test data, tester assignment, target environment, and broker credentials required before execution evidence can be collected for Test Case 3.H.
Run-level evidence and exception disposition required before auditor-ready export.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-partner-test-case-3h --artifact-path=/path/to/artifact --review-status=needs-review
API FIT F001 initial FA application with no SVI or DMI
collector-ready-after-accesscollector after accessmissingapi-functional-integration-toolkit / cms-ede-api-fit-f001-initial-fa
Collector operator after target access is configured
cms-ede-api-fitAPI Functional Integration Toolkit MTST_EDE_E2E_ F001 Step 1API Functional Integration Toolkit MTST_EDE_E2E_ F001 Step 2API Functional Integration Toolkit MTST_EDE_E2E_ F001 Step 3API Functional Integration Toolkit MTST_EDE_E2E_ F001 Step 4API Functional Integration Toolkit MTST_EDE_E2E_ F001 Step 5API Functional Integration Toolkit MTST_EDE_E2E_ F001 Step 6API Functional Integration Toolkit MTST_EDE_E2E_ F001 Step 7API Functional Integration Toolkit MTST_EDE_E2E_ F001 Step 8+9 more
Required evidence
FIT case ID and step mapping for F001 initial FA application with no SVI or DMI
Redacted request and response JSON for each required API call
UI screenshots where the FIT step requires display confirmation
Credential, certificate, and CMS UAT blocker disposition
Open blockers
Final FIT evidence requires CMS UAT APIs, mTLS/certificates where applicable, target base URL, persona credentials, and redaction review.
F001 Step 1 through Step 17 are source-mapped, but live API request/response evidence requires authorized CMS UAT access.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-api-fit-f001-initial-fa --artifact-path=/path/to/artifact --review-status=needs-review
EDN Notice Retrieval and Metadata Search access
collector-ready-after-accesscollector after accessmissingedn-notices / cms-ede-edn-notice-retrieval-metadata-search
Collector operator after target access is configured
cms-ede-edn-noticescms-ede-api-fitNotice Retrieval API GET /{version}/documents/{id}Metadata Search API POST /{apiVersion}/search-metadataAPI Functional Integration Toolkit MTST_EDE_E2E_ F001 Step 13API Functional Integration Toolkit MTST_EDE_E2E_ F002 Step 6API Functional Integration Toolkit MTST_EDE_E2E_ F003 Step 14API Functional Integration Toolkit MTST_EDE_E2E_ F004 Step 20API Functional Integration Toolkit MTST_EDE_E2E_ F004 Step 25API Functional Integration Toolkit MTST_EDE_E2E_ F005 Step 6+3 more
Required evidence
Redacted Metadata Search API request/response for the same test attempt
Redacted Notice Retrieval API request/response for the same test attempt
Consumer UI screenshot showing current EDN access
Consumer UI screenshot or trace showing historical notice access when available
Source-row evidence index keyed to Notice Retrieval and Metadata Search native IDs
Open blockers
Final EDN evidence requires seeded applications with generated notices and authorized Metadata Search / Notice Retrieval API access.
Notice artifacts must be PII-reviewed before auditor package export.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-edn-notice-retrieval-metadata-search --artifact-path=/path/to/artifact --review-status=needs-review
RIDP/RBA identity proofing and FARS fallback
requiredconnectormissingidentity-proofing / cms-ede-identity-ridp-fars
Security, IAM, GRC, or platform owner
cms-ede-identity-proofingcms-ede-api-fitRIDP TC01/TH10001 ACCRIDP TC07/TH10007 RF1RIDP TC08/TH10008 RF2RIDP TC09/TH10009 RF3RIDP TC10/TH10010 RF4RIDP TC04/TH10004 ACC SpanishRIDP TC19/TH10019 RF1 SpanishRIDP TC20/TH10020 RF2 Spanish+23 more
Required evidence
RIDP/RBA outcome screenshot with PII reviewed/redacted
FARS fallback outcome or acceptable-documentation handling evidence
Store ID Proofing Record request/response where the flow requires it
IDM/Okta identity-proofing configuration export or auditor attestation
FARS request/response evidence for RF and ACC outcomes where authorized
Open blockers
Final evidence requires IDM/Okta/Experian or equivalent approved identity proofing access and configuration exports.
FARS/manual-documentation evidence may need controlled manual upload if the target flow is not browser-collectible.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-identity-ridp-fars --artifact-path=/path/to/artifact --review-status=needs-review
Registration, onboarding, and operational readiness artifacts
requiredmanual uploadmissingregistration-onboarding / cms-ede-registration-onboarding-readiness
Compliance lead / auditor coordinator
cms-ede-registration-onboardingOnboarding Section IX Required Auditor and EDE Entity TrainingOnboarding Section X EDE Entity Document SubmissionOnboarding Section XI.A Pre-Audit Notification to CMSOnboarding Section XI.B Audit SubmissionOnboarding Section XI.C Audit Submission Completeness ReviewOnboarding Exhibit 9 Business Requirements Audit Submission Requirements for a Complete AuditOnboarding Section XII.A EDE Entity-initiated Change Request ProcessOnboarding Exhibit 11 Business Audit Phase Change Requirements+7 more
Required evidence
Third-party auditor operational readiness artifacts
Web-broker operational readiness artifacts where applicable
CMS EDE agreement proof or manually uploaded signed agreement reference
Submission status and unresolved blocker log for CMS portal-gated items
Business audit package structure mapped to the CMS instructions
Open blockers
CMS Enterprise Portal / SERVIS submission proof and signed agreement artifacts require manual upload or authenticated portal access.
Partner/auditor contract and business audit report artifacts need owner review before export.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-registration-onboarding-readiness --artifact-path=/path/to/artifact --review-status=needs-review
ARC-AMPE assessment package and security artifacts
requiredconnectormissingsecurity-arc-ampe / cms-ede-security-arc-ampe-assessment-package
Security, IAM, GRC, or platform owner
cms-mars-e-22ARC-AMPE AC-02ARC-AMPE AC-02(03)ARC-AMPE AC-02(07)ARC-AMPE AC-07ARC-AMPE AC-10ARC-AMPE AC-12ARC-AMPE AC-17ARC-AMPE IA-02+21 more
Required evidence
SSPP control narrative reference
SAR/SAP assessor package or auditor-observed result
POA&M item list or attestation if no open items
Identity/authentication configuration evidence for IA-02/IA-02(06)
Open blockers
Final security package requires completed SSPP/SAP/SAR/POA&M artifacts or integration with the client's GRC/security evidence repository.
Security exports must be reviewed for sensitive configuration details before auditor package release.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-security-arc-ampe-assessment-package --artifact-path=/path/to/artifact --review-status=needs-review
Security account management evidence slot
requiredconnectormissingsecurity-arc-ampe / cms-ede-security-ac02-account-management
Security, IAM, GRC, or platform owner
cms-mars-e-22ARC-AMPE AC-02
Required evidence
SSPP control narrative reference
SAR test result or auditor observation
POA&M entry if open
Configuration export or screenshot
Open blockers
Final SSPP/SAR/POA&M package upload or platform admin configuration access required.
Registration command
npm run cms-ede:manual-evidence -- --slot=manual-cms-ede-security-ac02-account-management --artifact-path=/path/to/artifact --review-status=needs-review