 and implementation of access policies, and one with the capacity of the repository 
to provide demonstrably authentic objects as DIPs. Thus the first requirement relates to 
requests initiated by a user and how the repository handles them to ensure that rights and 
agreements are respected, that security is monitored, that requests are fulfilled, etc. The 
second requirement relates to what is delivered to the Consumer and the trust that can be 
placed in it. 
It must be understood that the capabilities an