system-prompts-and-models-o.../docs/enterprise-readiness.md
Sami Assiri b4531f0a4c feat(tier1): docs-governance CI, evidence gate, closure artifacts, trust/execution docs
- Replace repo-preflight with docs-governance workflow and check_docs_links.py
- Class B bundle: require correlation_id for external_*; AuditMetadata trace fields
- Root-safe TIER1 §2; optional .githooks pre-push for main
- Add RELEASE_READINESS_MATRIX_AR, SOURCE_OF_TRUTH_INDEX, operational severity, external index
- ExecWeeklyGovernanceContract; expand trust-fabric, execution-fabric, ADR-0001, ws5, Saudi overlays
- Wire MASTER TOC, enterprise-readiness, completion-program, architecture_brief paths

Made-with: Cursor
2026-04-16 16:46:36 +03:00

4.5 KiB
Raw Blame History

Enterprise readiness — Dealix Sovereign OS

This checklist helps internal teams prepare for B2B / enterprise conversations and deployments. It is not a substitute for customer-specific due diligence, legal review, or penetration testing.

1. Read in order (governance spine)

  1. MASTER_OPERATING_PROMPT.md — constitution and TOC.
  2. dealix-six-tracks.md — six product lanes and honest Implemented / Partial / Planned status.
  3. governance/approval-policy.md — A/R/S and Class A/B/C.
  4. governance/trust-fabric.md — trust substrate and tool verification.
  5. governance/saudi-compliance-and-ai-governance.md — PDPL / NCA readiness register and AI governance frames.
  6. governance/github-and-release.md — branch protection, environments, OIDC, audit retention.
  7. execution-matrix-90d-tier1.md — Phase 01 measurable outcomes.
  8. completion-program-workstreams.md — eight workstreams from constitution to production.
  9. architecture-register.md — subsystem status snapshot.
  10. TIER1_MASTER_CLOSURE_CHECKLIST_AR.md — إغلاق Tier-1 (عربي) + salesflow-saas/docs/tier1-master-closure-checklist.md (50 بندًا).
  11. SOURCE_OF_TRUTH_INDEX.md — مصدر واحد لكل موضوع (تقليل drift بين docs/ وsalesflow-saas/docs/).
  12. RELEASE_READINESS_MATRIX_AR.md — صف لكل RC: docs truth، موصلات، أمان، سعودي، provenance.
  13. governance/pdpl-nca-ai-control-matrices.mdبوابة إصدار enterprise: اتبع قسم «Enterprise release gate» قبل وسم الإصدار.

3. Technical evidence before “production-ready” claims

Gate Command / artifact
Backend regression cd salesflow-saas/backend && pytest -v --tb=short
Launch / hardening script salesflow-saas/verify-launch.ps1 (extend flags per salesflow-saas/docs/LAUNCH_CHECKLIST.md)
Architecture traceability blueprint-master-architecture.md + Architecture_Pack.md + Execution_Matrix.md

4. What not to promise yet

Until ADR adr/0001-tier1-execution-policy-spikes.md exit criteria are met, do not represent the following as fully shipped production standards:

  • Temporal (or equivalent) as the sole system of record for all long workflows.
  • OPA / OpenFGA / Vault / Keycloak as in-path dependencies without integration tests and security sign-off.

Use governance/technology-radar-tier1.md for official vs optional vs pilot language.

5. Security and procurement FAQs (internal)

  • Data residency and subprocessors: document actual regions and vendors; update when adding LLM or SaaS connectors.
  • RBAC and tenancy: confirm tenant_id isolation and admin boundaries in code review for every net-new API.
  • Audit logs: retention, export, and SIEM streaming per customer tier — see notes in governance/github-and-release.md.

6. Continuous improvement

Revisit this file after each major release or enterprise pilot; update dealix-six-tracks.md status table when capabilities move from Partial to Verified.

7. Maintainer sync

scripts/architecture_brief.py includes this path in CONSTITUTION_PATHS; .claude/settings.json references it in projectInstructions for Claude Code. Update both when adding new enterprise-facing governance files.