FaceGuardV2 quality requirements for Assignment 4.
| QR ID | Title | ISO/IEC 25010 sub-characteristic | Linked QRT | Related ADRs |
|---|---|---|---|---|
| QR-001 | Correct face recognition decision | Functional correctness | QRT-001, QRT-002, QRT-003 | ADR-001 |
| QR-002 | Expired guest access denial | Integrity | QRT-004 | ADR-002 |
| QR-003 | Secure password verification | Confidentiality | QRT-005 | ADR-003 |
| QR-004 | Servo emulator operability | Operability | QRT-006 | ADR-004 |
| QR-005 | Recognition audit logging | Accountability | QRT-007 | ADR-002 |
ISO/IEC 25010 sub-characteristic: Functional correctness
Scenario: When the database recognition function receives a face embedding under the automated test environment, it shall return the registered user above threshold, return unknown below threshold, and select the best match when several users exist.
Why this matters: FaceGuardV2 must make correct access decisions based on face embeddings.
Linked quality requirement tests: QRT-001, QRT-002, QRT-003
Related ADRs: ADR-001 Separate backend and ML service
ISO/IEC 25010 sub-characteristic: Integrity
Scenario: When recognition finds a guest whose access period has expired under the automated test environment, the system shall not grant access to that guest.
Why this matters: Expired guest permissions must not allow unauthorized access.
Linked quality requirement tests: QRT-004
Related ADRs: ADR-002 Use SQLite through FaceDatabase DAL
ISO/IEC 25010 sub-characteristic: Confidentiality
Scenario: When a password is hashed under the automated test environment, the system shall verify the correct password and reject an incorrect password without storing or comparing plain text passwords.
Why this matters: Admin authentication must protect credentials.
Linked quality requirement tests: QRT-005
Related ADRs: ADR-003 Use session authentication and password hashing
ISO/IEC 25010 sub-characteristic: Operability
Scenario: When the emulated servo is opened and then closed under the automated test environment, it shall correctly switch between open and closed states.
Why this matters: The team and customer must be able to test access-control behavior without physical hardware.
Linked quality requirement tests: QRT-006
Related ADRs: ADR-004 Use servo abstraction with emulated mode
ISO/IEC 25010 sub-characteristic: Accountability
Scenario: When recognition is executed under the automated test environment, the system shall write an audit log entry for the access attempt.
Why this matters: Access attempts must be traceable for review and security analysis.
Linked quality requirement tests: QRT-007
Related ADRs: ADR-002 Use SQLite through FaceDatabase DAL
These quality requirements are maintained project assets. If tests, access logic, authentication, or servo behavior change, update this file and docs/quality-requirement-tests.md.