Situ LMS · Officer

Control	Evidence requirement	Status
Go-live evidence automation	Evidence bundle verifier, signed release SHA, and staging rehearsal record must pass before sign-off.	Action Required
Authentication fails closed	Officer, borrower, examiner, and agent routes require server-side session gates and never expose public bearer tokens.	Healthy
Tenant isolation matrix	Every read and write surface is reviewed against the tenant isolation matrix before release.	Healthy
Journey observability	Journey dashboards must cover borrower, officer, examiner, partner webhook, money, and GL paths.	Degraded
Projector and outbox alerts	Projector lag, outbox retry, dead-letter, and replay alerts are required for release review.	Degraded
Backup and restore evidence	Backup, PITR, archive restore, rollback, and rehearsal artifacts must be attached to the evidence bundle.	Action Required

Go-live readiness planner

Sequence the final operational gates without converting demo evidence into production approval.

6 blockers

Release SHATarget environmentEvidence bundle

Go-live evidence bundle verifier passed Tenant isolation matrix reviewed Journey dashboards and alerts loaded Backup and restore rehearsal evidence attached High-risk security review gates approved Signed staging rehearsal record attached

Run EVIDENCE_BUNDLE=<bundle> make verify-go-live-evidence.
Tenant isolation matrix must be reviewed for every read and write surface.
Journey dashboards and projector/outbox alerts must be loaded.
Backup, PITR, archive restore, and rollback evidence must be attached.
High-risk security review gates must be approved or explicitly blocked.
Live-like staging rehearsal record must be signed.

Security review gates

Payments and money movement.
Authentication, session, OTP, stream ticket, and identity-claim boundaries.
Admin, product, policy, fee, GL, webhook, and report builder mutation surfaces.
Examiner exports, audit search, PII redaction, and data-retention workflows.
Partner callbacks, webhook delivery, public application, uploads, and mobile deep links.

Staging rehearsal journeys

Borrower application submitted against staging.
Officer review completed without caller-supplied identity headers.
Examiner export emits audit event before artifact creation.
Redis/provider OTP path exercised without demo code.
Disbursement, repayment, callback replay, reversal, and partial settlement fail closed or reconcile.
Browser and mobile proof attached with screenshots, logs, build ids, and route checks.

Demo preflight gate

Confirm the stack-free checks before starting Docker, read-api hydration, Playwright, or the narrated demo.

1 blockers

Commands

make demo-preflight
make demo-route-audit
make demo-evidence-plan
make demo-smoke

OperatorEvidence artifact

Manifest contract is valid and all scenario routes are mapped.Every manifest route resolves to a committed Next.js page.Every manifest seed event is present in the synthetic demo seeder.Preflight JSON and Markdown evidence artifacts are generated before Docker and browser smoke.

0complete

4required

Complete every stack-free preflight check before starting Docker or browser smoke.

Staging rehearsal evidence matrix

Track the live-like demo journeys that must have concrete logs, screenshots, or build proof before a release review.

12 missing

Audit commands

make staging-rehearsal-record
STAGING_REHEARSAL_RECORD=evidence/staging/staging-rehearsal-record.json make verify-staging-rehearsal-record
STAGING_REHEARSAL_RECORD=evidence/staging/staging-rehearsal-record.json make audit-staging-rehearsal-evidence

Evidence reviewerRequired before marking the rehearsal ready for GO review.

0attached

12missing

12required

Journey	Owner	Required evidence
`borrower_application`	product-ops	`staging/borrower-application.log`
`officer_review`	credit-ops	`staging/officer-review.log`
`examiner_export`	compliance-ops	`staging/examiner-export.log`
`otp_provider`	platform	`staging/otp-provider.log`
`disbursement`	finance-ops	`money/disbursement.log`
`repayment`	finance-ops	`money/repayment.log`
`callback_replay`	integrations	`money/callback-replay.log`
`reversal_partial_settlement`	finance-ops	`money/reversal-partial-settlement.log`
`browser_journeys`	product-ux	`browser/playwright.log`
`mobile_native`	mobile	`mobile/mobile-build.log`
`outbox_projector_lag`	platform	`staging/outbox-projector-lag.log`
`backup_restore`	platform	`rollback/backup-restore.log`

Attach every required evidence file before requesting GO review.

Audit trail diff viewer

Compare two audit events before an examiner export, correction, deletion, or incident review is signed.

4 changes

Before event JSONAfter event JSON

Field	Before	After	Status
`event_id`	`evt-before-9121`	`evt-after-9121`	changed
`event_type`	`LoanReviewUpdated`	`LoanReviewUpdated`	same
`subject`	`loan:demo-cap17-219`	`loan:demo-cap17-219`	same
`actor`	`officer:amina`	`officer:amina`	same
`tenant_id`	`tenant:demo-bank`	`tenant:demo-bank`	same
`payload_hash`	`sha256:8cc5-before`	`sha256:42aa-after`	changed
`redaction_mode`	`standard`	`standard`	same
`occurred_at`	`2026-05-29T08:30:00Z`	`2026-05-29T08:47:00Z`	changed
`decision`	`refer`	`approve_with_conditions`	changed

Record class	Retention / holds	Disposition	Archive / backup	Status	Custody hash
Loan contract, amortization, underwriting, and adverse-action evidence credit operations and legal control / LMS credit ledger identity, loan contract, affordability, model decision, notice evidence	retain for 7 years after loan closure, dispute, or regulator hold release 7y / no hold / review 28d	Restriction ready / deletion tested portability ready / evidence linked	immutable archive / backup aligned	within	ce6cffd58178...b0323113
Payment initiation, settlement, reversal, and reconciliation evidence payments operations and treasury control / Treasury disbursement and reconciliation mobile number, payment reference, settlement status, reversal trail	retain for 7 years with settlement finality, tax, and dispute holds 7y / active hold / review 31d	Restriction ready / deletion tested portability ready / evidence linked	immutable archive / backup aligned	within	e762b88cc9a5...63c84a5c
AML screening, monitoring, STR/SAR, no-tipping-off, and goAML evidence MLRO and financial crime compliance / AML and financial crime workbench identity, screening result, alert evidence, MLRO decision, STR/SAR package	retain AML/CFT/CPF evidence for 7 years after customer relationship or filing disposition 7y / active hold / review 21d	Restriction ready / deletion tested portability ready / evidence linked	immutable archive / backup aligned	within	4feba770bc26...2dd00176
Complaint, dispute, contestability, and customer outcome evidence customer dignity operations and conduct risk / Dignity and dispute workbench complaint narrative, case status, customer outcome, redress evidence	retain for 7 years after complaint closure, appeal, or conduct hold release 7y / active hold / review 35d	Restriction ready / deletion tested portability ready / evidence linked	immutable archive / backup aligned	within	09da56a0408c...5fae08dd
Consent, withdrawal, DSAR, restriction, correction, and portability evidence privacy office / Consent and DSAR ledger consent purpose, withdrawal status, DSAR request, operator disposition	retain consent and DSAR audit trail for 7 years while honoring restrictions and purpose withdrawal 7y / no hold / review 16d	Restriction ready / deletion tested portability ready / evidence linked	immutable archive / backup aligned	within	1d89ce53bd4b...86007944
Immutable backup, archive, restore, and deletion propagation evidence platform reliability and data governance / Backup vault and evidence archive encrypted snapshot, restore proof, deletion propagation marker, custody hash	retain immutable backup and deletion propagation markers according to source-system hold matrix 7y / active hold / review 14d	Restriction ready / deletion tested portability ready / evidence linked	immutable archive / backup aligned	within	a2927776489a...7a783cba

Disposition request	Decision evidence	SLA	Status	Hash
deletion dsar-901 / BRW-100901 loan-contract-ledger / blocked	lawful yes / hold checked inventory pinned / audit ready / verification ready	3d / 30d	within	5d951e678493...b75fc3b8
restriction dsar-887 / BRW-100887 complaint-dispute-case-files / approved	lawful yes / hold checked inventory pinned / audit ready / verification ready	5d / 21d	within	11088b23bcf4...e8aefbcc
portability dsar-844 / BRW-100844 consent-dsar-ledger / completed	lawful yes / hold checked inventory pinned / audit ready / verification ready	2d / 30d	within	e96178897456...7324ad57
correction dsar-829 / BRW-100829 payment-settlement-events / completed	lawful yes / hold checked inventory pinned / audit ready / verification ready	4d / 30d	within	c5151ef4297a...5d7772f7
anonymization dsar-812 / BRW-100812 backup-archive-vault / approved	lawful yes / hold checked inventory pinned / audit ready / verification ready	7d / 30d	within	c6bd614b6d07...4f247dce

Risk control	Mapped evidence	Coverage	Status	Hash
Records inventory, classification, and ownership governance data governance and records manager / inventory	3/3 Material lending, payment, AML, dispute, consent, backup, and archive records have owner, system, classification, PII inventory, and custody evidence.	100.00% / findings 0	within	f08040635cfd...48d7f64b
Retention schedule and storage limitation governance privacy office and legal control / retain	3/3 Retention rules balance storage limitation, loan contracts, disputes, tax, AML, regulator, and audit holds.	100.00% / findings 0	within	32090f11d20c...033b8103
Legal, regulator, AML, and dispute hold enforcement legal control, MLRO, and conduct risk / hold	4/4 Disposition decisions preserve legal, regulator, AML, no-tipping-off, complaint, dispute, and customer-harm holds before erasure.	100.00% / findings 0	within	f48030d6c2a3...d8638fda
DSAR deletion, restriction, portability, correction, and anonymization workflow privacy operations / dispose	3/3 DSAR workflows require lawful-basis review, hold check, PII inventory pin, runbook, operator note, audit event, and post-action verification.	100.00% / findings 0	within	24d327f9b080...867f59bb
Immutable archive, backup alignment, and deletion propagation platform reliability and security governance / archive	3/3 Archives, backups, restore drills, access controls, and deletion propagation markers are aligned to each source-system hold matrix.	100.00% / findings 0	within	0cd07c997fe9...2437ff89
Records governance assurance and board evidence custody records manager, control assurance, and board secretariat / assure	3/3 Records inventory, retention schedule, holds, DSAR workflows, archive controls, risk data, assurance, and board routes are tied to custody hashes.	100.00% / findings 0	within	27aa2c0907b6...4c6ae787

Control	Metric	Current / limit	Status	Hash
Records inventory and classification coverage Material lending records should be classified, owned, and tied to a current PII inventory.	Material records with owner, system, PII inventory version, categories, and classification evidence	100.00% / 100.00%	within	20286d926720...31bc1323
Retention schedule and storage limitation coverage Records should be retained only as long as business, legal, regulator, AML, dispute, tax, and audit duties require.	Material records with retention rule, retention period, statutory basis, and review evidence	100.00% / 100.00%	within	b2fc866901ca...bcbce970
Legal, regulator, AML, and dispute hold enforcement Deletion, restriction, and anonymization must not destroy required lending, regulator, AML, dispute, or money evidence.	Datasets with active holds covered by evidence-linked hold decisions	100.00% / 100.00%	within	5d19c7cd75b4...0faaff8e
DSAR restriction, deletion, correction, portability, and anonymization workflow Data-subject rights workflows should be safe, evidence-backed, and blocked when retention duties override erasure.	Datasets with tested restriction, deletion, portability, and post-action verification paths	100.00% / 100.00%	within	be6d197eebc2...bd031bfb
Immutable archive and backup alignment Archives and backups should preserve required evidence while proving deletion and restriction propagation where permitted.	Datasets with archive immutability, backup alignment, and deletion propagation evidence	100.00% / 100.00%	within	76694cca7c36...f8da328a
Disposition request decision readiness Requests should be decided with lawful basis, hold checks, pinned inventory, operator notes, audit events, and verification.	DSAR and disposition requests with complete decision, runbook, audit, and verification evidence	100.00% / 100.00%	within	cf0acaf1bbdc...93f3f2e2
Disposition request due-date SLA Privacy operations should handle rights requests inside approved statutory and internal service windows.	DSAR and disposition requests inside approved due-date SLA	100.00% / 100.00%	within	266311b1109e...8b37ebc0
Records controls mapped to enterprise evidence manifest Records governance should trace to privacy, risk data, regulatory, AML, conduct, resilience, assurance, and board evidence.	Records governance controls with source routes, artifacts, export packs, and custody hashes	100.00% / 100.00%	within	fb72e210baa8...33c89406
Records data lifecycle evidence custody Retention, hold, DSAR, archive, disposal, and board evidence should be reproducible for audit and supervision.	Dataset, request, risk-control, manifest, and action evidence with SHA-256 custody hashes	100.00% / 100.00%	within	b2f1273a3311...97672d12

Metric	Current	Target	Status
API latency p99	342 ms	< 500 ms	Healthy
Error rate	0.08%	< 0.20%	Healthy
Queue depth	1,248 jobs	< 2,000 jobs	Healthy
Background job status	1 retry lane delayed	All lanes current	Degraded

Operational readiness

Final operational control table

Go-live readiness planner

Security review gates

Staging rehearsal journeys

Demo preflight gate

Commands

Staging rehearsal evidence matrix

Audit commands

Audit trail diff viewer

Data retention and deletion workflow

Records data lifecycle governance

System health indicators

Capacity metrics

On-call status

Operational readiness

Final operational control table

Go-live readiness planner

Security review gates

Staging rehearsal journeys

Demo preflight gate

Commands

Staging rehearsal evidence matrix

Audit commands

Audit trail diff viewer

Data retention and deletion workflow

Records data lifecycle governance

System health indicators

Capacity metrics

On-call status

Capacity area	Current	Headroom	Status
Officer portal concurrent sessions	1,840 / 3,000	39%	Healthy
Loan application writes / min	420 / 650	35%	Healthy
Document OCR queue workers	18 / 24	25%	Degraded
Notification outbox throughput	7,800 / 10,000 hr	22%	Healthy