Nuke ALC_DVS.1.2C

["Knoke, Jim" <Jim.Knoke@GetronicsGov.com>]

ALC_DVS.1.2C says the development security "documentation" shall provide
evidence that these security measures are followed. It seems to me that
the requirement against the developer should be to maintain some records
of use of the mechanisms. Then the evaluator should be required to
investigate to some degree whether the documented measures are being
followed well enough. I think this investigation would be probably in
conjunction with a site visit and talking to some developers and would
tend to involve spot checking some of the pertinent on-line records. It
seems misleading to me to have the CC requirement state that evidence
must be included in the "documentation".