Name	Size	Mode	Actions
00-design-study.md	3678	0666	editdlrm
01-uml-class-diagram.puml	11869	0666	editdlrm
02-use-case-diagram.puml	3763	0666	editdlrm
03-sequence-diagrams.puml	9732	0666	editdlrm
04-database-entity-model.mmd	7051	0666	editdlrm
05-database-schema.sql	13372	0666	editdlrm
06-diagram-preview.html	5021	0666	editdlrm
07-design-checklist.md	3256	0666	editdlrm
08-step-2-storage-layer.md	5325	0666	editdlrm
09-step-3-risk-crud-ui.md	3380	0666	editdlrm
10-step-4-mitigation-workflow.md	3996	0666	editdlrm
11-step-5-deployment-gate-workflow.md	2292	0666	editdlrm
12-step-6-multi-pm-integration.md	3770	0666	editdlrm
13-step-6-1-microsoft-planner-integration.md	2335	0666	editdlrm
14-step-7-reporting-export.md	4158	0666	editdlrm
15-step-7-1-oauth-live-connectors.md	4545	0666	editdlrm
16-step-8-user-roles-access-control.md	3297	0666	editdlrm
17-step-9-production-deployment-security.md	4228	0666	editdlrm
18-step-10-final-academic-submission.md	3199	0666	editdlrm
19-final-report-draft.md	6814	0666	editdlrm
20-instructor-submission-checklist.md	3639	0666	editdlrm
21-demo-script.md	3948	0666	editdlrm
22-traceability-matrix.md	4847	0666	editdlrm
23-testing-evidence.md	2961	0666	editdlrm
24-evaluation-rubric-mapping.md	2910	0666	editdlrm
25-final-deployment-runbook.md	3214	0666	editdlrm
26-known-limitations-and-future-work.md	2632	0666	editdlrm
27-final-qa-checklist.md	2893	0666	editdlrm
28-demo-rehearsal-script.md	3618	0666	editdlrm
29-submission-freeze-report.md	2769	0666	editdlrm
30-final-known-issues.md	1876	0666	editdlrm
dashboard-spec.md	3691	0666	editdlrm

# Step 5: Deployment Gate Workflow Controls ## Purpose Step 5 turns the deployment gate from a calculated dashboard result into a governance workflow. The calculated gate status remains based on measurable criteria. The governance reviewer can now record a separate decision, add criterion notes, link evidence, and preserve an audit trail. ## Source alignment The source framework requires measurable AI risk analysis, ISO-style indicators, a software prototype, REST API support, and project-management integration. This step is an implementation extension that operationalizes deployment control. ## Added workflow capabilities | Capability | Description | |---|---| | Gate history | Every gate evaluation is persisted as a snapshot. | | Reviewer decision | Reviewer can record Approved, Rejected, Accepted, or Needs changes. | | Criterion notes | Each gate criterion can store reviewer status and comments. | | Evidence traceability | Each criterion can link a URL or internal evidence reference. | | Audit trail | Gate evaluations, decisions, and criterion updates are recorded as audit events. | | UI workflow | The deployment gate page now includes summary cards, decision form, criteria controls, history, and audit log. | ## API endpoints | Method | Endpoint | Purpose | |---|---|---| | POST | `/api/projects/{projectId}/gate/evaluate` | Calculate and persist a gate snapshot. | | GET | `/api/projects/{projectId}/gate/history` | List persisted gate evaluations. | | GET | `/api/gates/{gateId}` | Read one persisted gate with criteria and decisions. | | POST | `/api/gates/{gateId}/decisions` | Record reviewer decision. | | PATCH | `/api/gate-criteria/{criterionId}` | Update reviewer status, note, and evidence reference. | | GET | `/api/projects/{projectId}/audit` | List audit events. | ## Acceptance criteria | Check | Expected result | |---|---| | Persist gate | Gate evaluation creates a gate snapshot with criteria. | | Review decision | Reviewer decision is saved and visible in gate history. | | Criterion evidence | Criterion notes and evidence reference are saved. | | Audit | Gate decision and criterion update produce audit events. | | UI | Deployment gate page shows cards, criteria controls, history, and audit trail. | | Tests | Full test suite passes. |