FM / docs

/home/techb158/cosmic-risk.abdallabala.com/docs/

/home/techb158/cosmic-risk.abdallabala.com/docs

Name	Size	Mode	Actions
00-design-study.md	3678	0644	edit dl rm
01-uml-class-diagram.puml	11869	0644	edit dl rm
02-use-case-diagram.puml	3763	0644	edit dl rm
03-sequence-diagrams.puml	9732	0644	edit dl rm
04-database-entity-model.mmd	7051	0644	edit dl rm
05-database-schema.sql	13372	0644	edit dl rm
06-diagram-preview.html	5021	0644	edit dl rm
07-design-checklist.md	3256	0644	edit dl rm
08-step-2-storage-layer.md	5325	0644	edit dl rm
09-step-3-risk-crud-ui.md	3380	0644	edit dl rm
10-step-4-mitigation-workflow.md	3996	0644	edit dl rm
11-step-5-deployment-gate-workflow.md	2292	0644	edit dl rm
12-step-6-multi-pm-integration.md	3770	0644	edit dl rm
13-step-6-1-microsoft-planner-integration.md	2335	0644	edit dl rm
14-step-7-reporting-export.md	4158	0644	edit dl rm
15-step-7-1-oauth-live-connectors.md	4545	0644	edit dl rm
16-step-8-user-roles-access-control.md	3297	0644	edit dl rm
17-step-9-production-deployment-security.md	4228	0644	edit dl rm
18-step-10-final-academic-submission.md	3199	0644	edit dl rm
19-final-report-draft.md	6814	0644	edit dl rm
20-instructor-submission-checklist.md	3639	0644	edit dl rm
21-demo-script.md	3948	0644	edit dl rm
22-traceability-matrix.md	4847	0644	edit dl rm
23-testing-evidence.md	2961	0644	edit dl rm
24-evaluation-rubric-mapping.md	2910	0644	edit dl rm
25-final-deployment-runbook.md	3214	0644	edit dl rm
26-known-limitations-and-future-work.md	2632	0644	edit dl rm
27-final-qa-checklist.md	2893	0644	edit dl rm
28-demo-rehearsal-script.md	3618	0644	edit dl rm
29-submission-freeze-report.md	2769	0644	edit dl rm
30-final-known-issues.md	1876	0644	edit dl rm
31-saas-rebuild-implementation.md	2573	0644	edit dl rm
application-documentation.md	27515	0644	edit dl rm
conversation-log.md	18503	0644	edit dl rm
dashboard-spec.md	3691	0644	edit dl rm
database-guide.md	37826	0644	edit dl rm
development-summary.md	7070	0644	edit dl rm
github-architecture.svg	6288	0644	edit dl rm
integration-pull-push-plan.md	7384	0644	edit dl rm

Edit: /home/techb158/cosmic-risk.abdallabala.com/docs/22-traceability-matrix.md (4847B)

# Traceability Matrix

This matrix links the academic concept, software design, implementation module, API, and tests.

## 1. Concept to implementation traceability

| Concept | Design artifact | Implementation | API or UI evidence | Test evidence |
|---|---|---|---|---|
| AI project risk | UML `Risk` class | `riskRepository.js` | Risk Register tab, `/api/projects/{id}/risks` | `api-workflow.test.js` |
| Risk scoring | `RiskScore`, `RiskScoringService` | `risk-engine.js` | Dashboard cards, risk score preview | `risk-engine.test.js` |
| Governance triangle | Risk dimension model | Dashboard aggregation | Overview tab | `storage-layer.test.js` |
| Lifecycle phases | `LifecyclePhase` entity | `database.json` phases | Lifecycle map | `storage-layer.test.js` |
| Mitigation | `MitigationAction` class | `riskRepository.js` | Mitigations tab | `mitigation-workflow.test.js` |
| Residual risk | Risk score relation | `risk-engine.js` | Residual score display | `risk-engine.test.js` |
| Deployment gate | `DeploymentGate`, `GateCriterion` | `gateWorkflowService.js` | Deployment Gate tab | `gate-workflow.test.js` |
| Reviewer decision | `GateDecision` entity | `gateWorkflowService.js` | Decision form and history | `gate-workflow.test.js` |
| Indicators | `Indicator`, `MeasurementRecord` | `dataMapper.js` | Indicators report | `reporting-workflow.test.js` |
| Experiment tracking | `Experiment`, `ModelMetric` | Data model and API | Metrics table | `api-workflow.test.js` |
| PM integration | `ProjectManagementIntegration` | `integrationService.js` | PM Integrations tab | `integration-workflow.test.js` |
| OAuth live clients | OAuth service classes | `oauthService.js`, PM clients | OAuth endpoints | `oauth-live-connectors.test.js` |
| Reporting | `ReportingService` | `reportingService.js` | Reports tab and report endpoints | `reporting-workflow.test.js` |
| User roles | `User`, `Role` | `accessControl.js` | Access Control tab | `access-control.test.js` |
| Production readiness | Operations service | `operationsService.js` | `/api/ready`, backups | `production-hardening.test.js` |

## 2. Use case coverage

| Use case | Actor | Implemented in | Status |
|---|---|---|---|
| View dashboard | Project Manager | Dashboard UI and `/api/projects/{id}/dashboard` | Complete |
| Register risk | Risk Owner | Risk Register tab and POST risk API | Complete |
| Edit risk | Risk Owner | Risk form and PATCH risk API | Complete |
| Delete risk | Project Manager or Admin | Delete risk API | Complete |
| Add mitigation | Risk Owner | Mitigation form and API | Complete |
| Attach evidence | Risk Owner | Evidence fields and API | Complete |
| Evaluate deployment gate | Governance Reviewer | Gate service and UI | Complete |
| Record gate decision | Governance Reviewer | Gate decision workflow | Complete |
| Review reports | Project Manager | Reports tab | Complete |
| Export data | Project Manager | CSV and JSON endpoints | Complete |
| Sync PM tool | Integration Admin | Integration service | Complete |
| Configure OAuth | Integration Admin | OAuth service | Complete |
| Manage users and roles | System Admin | Access control service | Complete |
| Check production readiness | System Admin | Operations endpoints | Complete |

## 3. API endpoint coverage

| Module | Endpoint examples | Status |
|---|---|---|
| Health | `/api/health`, `/api/ready` | Complete |
| Projects | `/api/projects`, `/api/projects/{projectId}` | Complete |
| Dashboard | `/api/projects/{projectId}/dashboard` | Complete |
| Risks | `/api/projects/{projectId}/risks`, `/api/risks/{riskId}` | Complete |
| Mitigations | `/api/projects/{projectId}/mitigations`, `/api/mitigations/{id}` | Complete |
| Gate | `/api/projects/{projectId}/gate`, `/api/gates/{id}/decisions` | Complete |
| Indicators | `/api/projects/{projectId}/indicators` | Complete |
| Metrics | `/api/projects/{projectId}/metrics` | Complete |
| Integrations | `/api/projects/{projectId}/integrations` | Complete |
| OAuth | `/api/oauth/{provider}/authorize`, `/api/oauth/{provider}/callback` | Complete |
| Reports | `/api/projects/{projectId}/reports/full.json` | Complete |
| Access | `/api/access/me`, `/api/users`, `/api/roles` | Complete |
| Operations | `/api/operations/security`, `/api/operations/backups` | Complete |

## 4. Documentation coverage

| Requirement | Evidence |
|---|---|
| UML class diagram | `docs/01-uml-class-diagram.puml` |
| Use case diagram | `docs/02-use-case-diagram.puml` |
| Sequence diagrams | `docs/03-sequence-diagrams.puml` |
| Database model | `docs/04-database-entity-model.mmd` |
| SQL schema | `docs/05-database-schema.sql` |
| API specification | `openapi.yaml` |
| Installation guide | `README.md` and `docs/25-final-deployment-runbook.md` |
| Testing evidence | `docs/23-testing-evidence.md` |
| Final report | `docs/19-final-report-draft.md` |

cmd: