# Shared responsibility matrix

Release: hardened-images-debian-12-x86_64-fc254ed6

Compliance profile: Hardened

## Seller responsibilities

- Build, harden, scan, validate, and version the base image.
- Publish the evidence supplied with this release.
- Maintain the image and publish security updates.

## Customer responsibilities

- Configure identity, networking, encryption, logging, backups, and workload access.
- Validate application software and changes added after deployment.
- Operate continuous monitoring and incident response.

## Claims boundary

This evidence describes the image at release time. It is not a certification of the customer's deployed environment or workload.