FM / docs

/home/techb158/cosmic-risk.abdallabala.com/docs/

/home/techb158/cosmic-risk.abdallabala.com/docs

Name	Size	Mode	Actions
00-design-study.md	3678	0644	edit dl rm
01-uml-class-diagram.puml	11869	0644	edit dl rm
02-use-case-diagram.puml	3763	0644	edit dl rm
03-sequence-diagrams.puml	9732	0644	edit dl rm
04-database-entity-model.mmd	7051	0644	edit dl rm
05-database-schema.sql	13372	0644	edit dl rm
06-diagram-preview.html	5021	0644	edit dl rm
07-design-checklist.md	3256	0644	edit dl rm
08-step-2-storage-layer.md	5325	0644	edit dl rm
09-step-3-risk-crud-ui.md	3380	0644	edit dl rm
10-step-4-mitigation-workflow.md	3996	0644	edit dl rm
11-step-5-deployment-gate-workflow.md	2292	0644	edit dl rm
12-step-6-multi-pm-integration.md	3770	0644	edit dl rm
13-step-6-1-microsoft-planner-integration.md	2335	0644	edit dl rm
14-step-7-reporting-export.md	4158	0644	edit dl rm
15-step-7-1-oauth-live-connectors.md	4545	0644	edit dl rm
16-step-8-user-roles-access-control.md	3297	0644	edit dl rm
17-step-9-production-deployment-security.md	4228	0644	edit dl rm
18-step-10-final-academic-submission.md	3199	0644	edit dl rm
19-final-report-draft.md	6814	0644	edit dl rm
20-instructor-submission-checklist.md	3639	0644	edit dl rm
21-demo-script.md	3948	0644	edit dl rm
22-traceability-matrix.md	4847	0644	edit dl rm
23-testing-evidence.md	2961	0644	edit dl rm
24-evaluation-rubric-mapping.md	2910	0644	edit dl rm
25-final-deployment-runbook.md	3214	0644	edit dl rm
26-known-limitations-and-future-work.md	2632	0644	edit dl rm
27-final-qa-checklist.md	2893	0644	edit dl rm
28-demo-rehearsal-script.md	3618	0644	edit dl rm
29-submission-freeze-report.md	2769	0644	edit dl rm
30-final-known-issues.md	1876	0644	edit dl rm
31-saas-rebuild-implementation.md	2573	0644	edit dl rm
application-documentation.md	27515	0644	edit dl rm
conversation-log.md	18503	0644	edit dl rm
dashboard-spec.md	3691	0644	edit dl rm
database-guide.md	37826	0644	edit dl rm
development-summary.md	7070	0644	edit dl rm
github-architecture.svg	6288	0644	edit dl rm
integration-pull-push-plan.md	7384	0644	edit dl rm

Edit: /home/techb158/cosmic-risk.abdallabala.com/docs/11-step-5-deployment-gate-workflow.md (2292B)

# Step 5: Deployment Gate Workflow Controls

## Purpose

Step 5 turns the deployment gate from a calculated dashboard result into a governance workflow.

The calculated gate status remains based on measurable criteria. The governance reviewer can now record a separate decision, add criterion notes, link evidence, and preserve an audit trail.

## Source alignment

The source framework requires measurable AI risk analysis, ISO-style indicators, a software prototype, REST API support, and project-management integration. This step is an implementation extension that operationalizes deployment control.

## Added workflow capabilities

| Capability | Description |
|---|---|
| Gate history | Every gate evaluation is persisted as a snapshot. |
| Reviewer decision | Reviewer can record Approved, Rejected, Accepted, or Needs changes. |
| Criterion notes | Each gate criterion can store reviewer status and comments. |
| Evidence traceability | Each criterion can link a URL or internal evidence reference. |
| Audit trail | Gate evaluations, decisions, and criterion updates are recorded as audit events. |
| UI workflow | The deployment gate page now includes summary cards, decision form, criteria controls, history, and audit log. |

## API endpoints

| Method | Endpoint | Purpose |
|---|---|---|
| POST | `/api/projects/{projectId}/gate/evaluate` | Calculate and persist a gate snapshot. |
| GET | `/api/projects/{projectId}/gate/history` | List persisted gate evaluations. |
| GET | `/api/gates/{gateId}` | Read one persisted gate with criteria and decisions. |
| POST | `/api/gates/{gateId}/decisions` | Record reviewer decision. |
| PATCH | `/api/gate-criteria/{criterionId}` | Update reviewer status, note, and evidence reference. |
| GET | `/api/projects/{projectId}/audit` | List audit events. |

## Acceptance criteria

| Check | Expected result |
|---|---|
| Persist gate | Gate evaluation creates a gate snapshot with criteria. |
| Review decision | Reviewer decision is saved and visible in gate history. |
| Criterion evidence | Criterion notes and evidence reference are saved. |
| Audit | Gate decision and criterion update produce audit events. |
| UI | Deployment gate page shows cards, criteria controls, history, and audit trail. |
| Tests | Full test suite passes. |

# Step 5: Deployment Gate Workflow Controls ## Purpose Step 5 turns the deployment gate from a calculated dashboard result into a governance workflow. The calculated gate status remains based on measurable criteria. The governance reviewer can now record a separate decision, add criterion notes, link evidence, and preserve an audit trail. ## Source alignment The source framework requires measurable AI risk analysis, ISO-style indicators, a software prototype, REST API support, and project-management integration. This step is an implementation extension that operationalizes deployment control. ## Added workflow capabilities | Capability | Description | |---|---| | Gate history | Every gate evaluation is persisted as a snapshot. | | Reviewer decision | Reviewer can record Approved, Rejected, Accepted, or Needs changes. | | Criterion notes | Each gate criterion can store reviewer status and comments. | | Evidence traceability | Each criterion can link a URL or internal evidence reference. | | Audit trail | Gate evaluations, decisions, and criterion updates are recorded as audit events. | | UI workflow | The deployment gate page now includes summary cards, decision form, criteria controls, history, and audit log. | ## API endpoints | Method | Endpoint | Purpose | |---|---|---| | POST | `/api/projects/{projectId}/gate/evaluate` | Calculate and persist a gate snapshot. | | GET | `/api/projects/{projectId}/gate/history` | List persisted gate evaluations. | | GET | `/api/gates/{gateId}` | Read one persisted gate with criteria and decisions. | | POST | `/api/gates/{gateId}/decisions` | Record reviewer decision. | | PATCH | `/api/gate-criteria/{criterionId}` | Update reviewer status, note, and evidence reference. | | GET | `/api/projects/{projectId}/audit` | List audit events. | ## Acceptance criteria | Check | Expected result | |---|---| | Persist gate | Gate evaluation creates a gate snapshot with criteria. | | Review decision | Reviewer decision is saved and visible in gate history. | | Criterion evidence | Criterion notes and evidence reference are saved. | | Audit | Gate decision and criterion update produce audit events. | | UI | Deployment gate page shows cards, criteria controls, history, and audit trail. | | Tests | Full test suite passes. |