Software release
Certified
build/security/handoff gates
← Live platformoperational readiness
OPERATIONS CENTER
Make production readiness, SLOs and recovery boundaries explicit
The product separates software readiness from buyer-live certification. Adapters, controls and runbooks can be complete without pretending that a buyer tenant, traffic history or third-party endpoints already exist.
Buyer-live integrations
External gate
credentials + endpoints required
SLO history
Pending live
cannot be simulated honestly
Recovery posture
Defined
RPO/RTO/rollback targets
ENTERPRISE BOUNDARIES
What is code-ready vs. what requires a buyer environment
IdentityConfigured boundary
Entra token verification + app-role authorization; buyer tenant credentials required for live certification.
PersistenceAdapter ready
PostgREST/Postgres aggregate + audit contract; buyer database endpoint required for live durability proof.
Evidence storageAdapter ready
Azure Blob non-overwrite-key/integrity contract; buyer storage identity required for live certification.
ObservabilityAdapter ready
Structured console + OTLP/HTTP sink; buyer collector required for historical SLO evidence.
AI providersMulti-provider
Google Gemini live reference / Azure OpenAI / AI Gateway / deterministic reference routing with safe fallback.
Finance sourceNormalized boundary
Reference and HTTP source adapters; approved Finance endpoint required for live reconciliation proof.
SLO CONTRACT
Targets become evidence only after live operation
AvailabilityMeasured only after buyer production traffic exists.
99.9% targetAI workflow successExcludes policy-blocked runs; requires production run telemetry.
≥ 99%P95 interaction latencyWorkload-specific; model/provider choice remains policy controlled.
≤ 2.5sEvidence integrityHash verification on governed evidence reads.
100%RESILIENCE
Backup, recovery and containment
RPOBuyer database/storage backup policy
≤ 15 min targetRTODocumented recovery sequence + buyer infra automation
≤ 2 hr targetRollbackPrevious certified deployment + model/prompt rollback
Release-levelKill switchDisable provider/agent release path while preserving read-only evidence
Immediate