Production hardening
policy enforcement - deployment gates - sessions - tokens - retention - operational evidence
Demo readiness
4/5
1 attention - 0 blocked
Blocking controls
1
high-risk actions are policy gated
Collectors
1
0 exceptions
Token rotation
1
rotation due within policy window
ReadinessDeploy gates1PolicySessionsEvidenceRunbooks
| Area | Status | Detail | Route |
|---|---|---|---|
| Reports catalog and retained runs | Ready | 7 active report definitions, 2 retained runs, 1 sensitive export approval pending. | /reports |
| Evidence packages include operational and access review records | Ready | 2 package manifests are ready with access review evidence included. | /evidence |
| Security gates, collectors, and incidents | Ready | 0 failed deployment gates, 0 collector exceptions, 0 open incidents. | /hardening |
| Staff RBAC and access review coverage | Ready | 3 active staff users and 3 role assignments are available for review packaging. | /settings |
| Demo readiness runbooks and restore evidence | Attention | 1 runbook execution, 1 passing backup drill, 1 API token due for rotation. | /hardening |
| Environment | Status | Region | Evidence |
|---|---|---|---|
| Production | Ready | us-east-1 | production/environments/prod.json |
| Release | Status | Migration | Deployed |
|---|---|---|---|
| v3.14.2 | Deployed | 0010 | 2026-05-03 15:00 |
Readiness evidence
record collector evidence for security, demo, and audit readiness
Framework
SOC 2
Control
CC6.1
Deployment gates
CI, migration, security scan, approval, and rollback checks
| Gate | Status | Severity | Summary |
|---|---|---|---|
| Test Suite | Passed | Info | typecheck, lint, tests, build, visual passed |
Policy decisions
allow, deny, approval, and MFA step-up evidence
| Policy | Decision | Severity | Reason |
|---|---|---|---|
| Sensitive Export Approval | Approval Required | High | Restricted report export requires manager approval |
Sessions and API tokens
device review, termination, and token rotation posture
| Actor/token | State | Last used | Evidence |
|---|---|---|---|
| Lin Park | Trusted | 2026-05-03 13:30 | sessions/lin-park-macbook.json |
| ACH worker | Rotation Due | 2026-05-03 13:00 | api-tokens/ach-worker.json |
Immutable evidence
retained artifacts, retention, legal hold, checksums, and supersession state
| Artifact | Status | Retention | Hold | Hash |
|---|---|---|---|---|
| SOC 2 May readiness package | Active | 2033-05-03 | No | bbbbbbbbbb |
Supersede and redact
dual-controlled: a request by one staff member, approved by a different one; the artifact row stays retained and append-only while its serve path fails closed
Open requests awaiting a second approver
No open supersession requests.
Operational evidence
dependency scans, backup restore proof, queue health, and observability snapshots
| Source | Framework | Status | Evidence |
|---|---|---|---|
| Backup Restore | SOC 2 CC9.1 | Ready | operational/backup-restore.json |
Runbooks and incidents
incident response, backup restore, vulnerability, and retention execution evidence
| Item | Status | Evidence |
|---|---|---|
| Incident response | Active | runbooks/incident-response.json |
| restore-2026-05 | Passed | backup-drills/restore-2026-05.json |