Local engineering readiness
What works and what still requires an owner
The synthetic closed-pilotA controlled test phase with limited participants, an approved purpose and no automatic authorization for production. contour is reproducible locally; external authorization and production infrastructure remain blocked.
Synthetic local contour only
local-engineering-pass · production=false · private-data=false
Evidence SpineThe connected chain from source to conclusion that preserves versions, exact anchors, limitations, transformations and human decisions. and strict persisted contracts
schemastests/test_domain_models.pytests/test_service_workflow.py
TenantA security boundary isolating one organization's users, cases, keys and policy from every other organization. and case isolation with purpose-bound roles
app/context.pyapp/storage.pytests/test_storage.py
Hash-chained auditA log where every event is linked to the previous event hash, making later undisclosed alteration detectable. and tamper detection
app/storage.pytests/test_storage.py
No-network capture target and DNS policy
app/capture_policy.pyscience/benchmarks/capture-policy-hostile-v1.jsontests/test_capture_policy.py
Idempotent durable operation lifecycle
schemas/operation-job-v1.schema.jsonapp/services/hub.pytests/test_jobs.py
Tenant-local multilingual reference search
app/search.pyscience/benchmarks/local-search-multilingual-v1.jsontests/test_search.py
Database and immutable-vault recovery rehearsal
app/storage.pyapp/vault.pyscripts/verify_pilot.pytests/test_recovery.py
Encrypted private case portability
app/bundles.pytests/test_bundle.py
Fail-closed typed portfolio adapter registry
reference/adapters/portfolio-adapters.v1.jsonapp/adapters.pytests/test_adapters.py
Reproducible Science benchmarkA test set with expected answers that measures a reference implementation, not real-world quality. and method registry
science/methodsscience/benchmarksapp/benchmarks.pyscripts/verify_benchmarks.py
Dependency locks SBOMA machine-readable inventory of software components, versions and provenance included in a specific product build. and clean-tree release gate
requirements.lockrequirements-dev.lockartifacts/openapi.jsonartifacts/sbom.spdx.jsonscripts/verify_release.py
Static fail-closed container profile without runtime claimAn atomic, verifiable statement linked to evidence, a coverage envelope and separate human assessment dimensions.
Dockerfiledocker-compose.yml.dockerignoretests/test_deployment_contract.py
Strict multilingual glossary and accessible first-occurrence definitions
reference/glossary/osint-glossary.v1.jsonapp/glossary.pytests/test_glossary.py
Complete read-only synthetic Investigation Workbench
app/workbench.pytemplates/workbench_case.htmltests/test_workbench.py
Content, persona, responsive and accessibility acceptance contract
docs/PERSONA_ACCEPTANCE.mddocs/CONTENT_OPERATING_SYSTEM.mdreference/content/content-registry.v1.jsonreference/content/route-persona-ledger.v1.jsonscripts/verify_ui.pytests/test_content_surface.py
Owner required
external owner gates
License legal privacy and source terms
Required closure evidenceResearch material whose provenance, time, integrity state and link to an exact source version are preserved.
Selected project and data licenses, approved legal register, DPIAA prior assessment of risks that personal-data processing creates for people and the measures used to reduce those risks. and connector-specific source admission.
Production identity and privileged WebAuthnA public-key authentication standard supporting phishing-resistant hardware security keys and passkeys.
Required closure evidence
Canonical IdP, phishing-resistant privileged authentication, revocation and recovery drill.
Production tenant keys secrets and data cells
Required closure evidence
Independent tenant keys, rotation, adversarial isolation tests and approved secret owner.
Object storage search and workflow owners
Required closure evidence
Repeatable bake-offs, cost and restore evidence, deletion propagation and signed ownership ADRs.
Capture sandbox egress and document quarantine
Required closure evidence
Escape, SSRFA vulnerability class where an attacker causes a server to request an internal, local or otherwise forbidden address., DNS rebindingAn attack technique where one domain name changes between validation and connection to another, often internal, IP address., malware corpusA research data collection with provenance, time window, rights and exclusion rules. and packet-level tests in the selected isolated runtime.
Runtime capacity observability backup and rollback
Required closure evidence
Named runtime, SLO and cost envelope, encrypted backups, restore timing, signed artifact and rollback drill.
Pilot organizations training and incident tabletop
Required closure evidence
Named pilot organizations, agreements, competency checks, offboarding rehearsal and incident action log.
Remote domain public surface and release approval
Required closure evidence
Authoritative remote, assigned domain and runtime owner, two-person promotion approval and public verification.