Re: [cti-stix] RE: STIX 2.0 Specification Questions

[John-Mark Gurney <jmg@newcontext.com>]

Allan Thomson wrote this message on Thu, Aug 11, 2016 at 14:07 +0000:
> Here’s some examples to think about.
> 
> Example #1: Relationship versioning or not.
> 
> If I create a relationship R.v1 between 2 objects and the relationship was created a week ago between object A.v1 and object B.v1.
> 
> Today I change B to B.v2.
> 
> The relationship was created a time when it was between A.v1 -> B.v1. Not B.v2.
> 
> There may be legitimate reasons why I don’t want that relationship to automatically resolve to B.v2. But it’s a product question not a STIX exchange question.
> 
> Therefore, it’s the product implementer’s choice whether a relationship tracks the latest versions of the ID or not.

IMO, if B.v2 changed significantly enough that the relationship does not apply, then
B.v2 should be a new object C, and not a new version.

-- 
John-Mark