RMF Categorization and Control Selection

The system and rmf commands use the platform’s public API. They do not calculate baselines or talk to eMASS locally.

Categorize a System

pretorin system categorize <system_id>
pretorin system categorize <system_id> --answers answers.json --complete
pretorin system categorize <system_id> --override field=value --basis "AO decision basis"
pretorin system emass-registration <system_id>

Interactive categorization reads the platform questionnaire, follows visible questions, and saves answers keyed by question ID. --answers accepts a JSON object of those keys, or an object with an answers field. The platform returns the derived trigraph, NSS, impact level, overlays, and missing required questions. --complete marks the categorization complete. An authorizing official override requires a basis. The eMASS registration command is read only: it prints the platform’s System Registration mapping.

hosting.provider is a vendor ID. Supplying it links that vendor to the system; the next selection recompute can inherit from its responsibility matrix.

Inspect and Tailor Selection

Always name the framework. For the DoD RMF attachment, use dod-rmf:

pretorin system selection <system_id> --framework dod-rmf
pretorin system selection <system_id> --framework dod-rmf --included --designation inherited
pretorin system selection vendors <system_id> --framework dod-rmf
pretorin system selection recompute <system_id> --framework dod-rmf
pretorin system selection tailor <system_id> --framework dod-rmf AU-12 exclude \
  --justification "AO tailoring decision"

Selection output includes owned, hybrid, inherited, and not applicable counts plus a page of control entries. --offset and --limit page the entries. Tailoring supports add, exclude, and clear; add and exclude require a justification. The platform owns the resulting selection and recompute state.

Vendor Responsibility Matrices

pretorin rmf seeded-catalogs
pretorin rmf crm-template > responsibility-matrix.csv
pretorin vendor import-crm <vendor_id> responsibility-matrix.csv
pretorin vendor inheritable-controls <vendor_id>
pretorin vendor seed <vendor_id> --catalog big-bang
pretorin vendor clear-inheritable <vendor_id>

import-crm uploads a vendor document with evidence_type=responsibility_matrix and prints the platform’s inheritance import report, including row problems. A 422 response means the matrix was unreadable and the platform stored nothing.