CX-03

Configure connection — SMB 3

Tenant/site runtime, exact source edition, typed provider settings, references to secrets/certificates, budgets and locality; review configuration diff.

Acceptance · Require meaningful provider-specific fields. Deny live mode when only synthetic configuration or missing native source contract exists. Operations createConnection, updateConnection

CS-CON-0114SMB 3F10 · Object storage files and generic APIsT05DETAILstatus: proposed_targetqualification: not_run

CX-02 Profile CX-03 Configure connection CX-08 Source contract CX-11 Laboratory CX-12 Evidence CX-14 Qualification

Synthetic connector workspace. Every profile here is a proposed target. Nothing on this screen is a live, qualified or certified adapter, no payload is a captured vendor wire message, and the simulation engine has no code path to a real endpoint.

Connection configuration

Connection name

TenantSite

Runtime placementSecret reference (opaque — no credential value is ever entered or stored here)Pinned source edition / version (gate)

What creating this does — and does not — do

Authentication mode declared by the profile

Kerberos/domain identity and required signing/encryption

Constraints to respect

Change notifications do not guarantee retained history; don't copy locked/incomplete files; source paths stay allowlisted.

Credential handling

Only an opaque reference is held. Secret material is never entered, displayed or stored in this workspace.

Reachability

Creating a connection proves nothing about reachability. Access tests (CX-05) remain blocked while the workspace is simulation-only.

Write-back

Any command path stays behind a separate action/permit boundary and is not exercised here.

no live endpoint is contacted

Existing simulated connections for this profile

None yet.