Document 05 — SOUP / Open-Source Software (OSS) Vendor Qualification Dossier
Document ID: SOUP-GXPHISTORIAN-2026-005 | Generated (UTC): 2026-10-17T20:21:45Z | Standard: GAMP 5 Category 3/4 & ISO/IEC 62304 SOUP Qualification
1. Qualified Open-Source Software & Live Container SHA-256 Digest Matrix
| Service Container | Software Component | License | Corporate / Foundation Backing | GAMP Category | Live Container Image @sha256 Digest | Supply-Chain & GxP Controls |
|---|---|---|---|---|---|---|
clickhouse-archive | ClickHouse Server 24.8 LTS | Apache-2.0 | ClickHouse, Inc. | Category 4 (Configured Time-Series Archive) | sha256:b002e56ed5c16e224c312527f6fcba7e77216fec5d7a88a7828f59efc614feb5 | Alpine 3.20 minimal base, pinned @sha256 digest, read-only init mounts, non-default auth |
postgres-control | PostgreSQL 16 (ltree + pgcrypto) | PostgreSQL License (OSI Approved) | PostgreSQL Global Development Group | Category 4 (Configured Relational Control Plane) | sha256:cf78e76683b9ca8c5733cbbdce6c9262b45b6767934dd0a95e671f9a0fc20685 | Alpine minimal image, cryptographic pgcrypto SHA-256 & bcrypt triggers, WORM enforcement |
edge-collector | InfluxData Telegraf 1.32 + Python 3.12 Execd Worker | MIT License / PSF License | InfluxData / Python Software Foundation | Category 4 / Category 5 (Custom Deadband Script) | sha256:bd7b0253571b2b905ee37ee3529a8fe2de0ebfc669975508d3eb7482723ab2f2 | Disk-backed WAL (/var/lib/telegraf/buffer), local localhost COM/HTTP isolation |
historian-api | FastAPI 0.115 / Uvicorn / PyArrow 17 / Psycopg 3 | MIT / Apache-2.0 / LGPL-3.0 | FastAPI / Apache Software Foundation | Category 5 (Custom GxP Application Layer) | sha256:10cb7c977c02fa8d3db135cbd232ca98bdb128547e8bc3ddfa6df7f6b48f1b5f | Pinned requirements.txt versions, mandatory Part 11 header enforcement, 100% OQ test coverage |
grafana-vision | Grafana OSS 11.2.0 + ClickHouse Datasource Plugin | AGPL-3.0 / Apache-2.0 | Grafana Labs | Category 4 (Configured HMI Visualization) | sha256:408afb9726de5122b00a2576763a8a57a3c86d5b0eff5305bc994ceb3eb96c3f | Read-only provisioned datasources, non-default admin credentials, zero direct DB write privileges |