Skip to content

05-Development-Setup — Stage completion gate

Version: 0.3 | Project ID: PRJ-001 | Product version / SHA: a6b4429e3165 | Gate date: Pending

Records

  • [ ] 01 Repository Setup — checklist ../03-Checklists/Repository-Setup-Checklist.md complete, or written disposition approved.
  • [ ] 02 Coding Standards — checklist ../03-Checklists/Coding-Standards-Checklist.md complete, or written disposition approved.
  • [ ] 03 Access and Secrets Register — checklist ../03-Checklists/Access-and-Secrets-Register-Checklist.md complete, or written disposition approved.
  • [ ] 04 Environment Configuration — checklist ../03-Checklists/Environment-Configuration-Checklist.md complete, or written disposition approved.
  • [ ] 05 Infrastructure Request and Change — checklist ../03-Checklists/Infrastructure-Request-and-Change-Checklist.md complete, or written disposition approved.
  • [ ] 06 CI/CD Setup — checklist ../03-Checklists/CI-CD-Setup-Checklist.md complete, or written disposition approved.
  • [ ] 07 SBOM and Dependency Scan — checklist ../03-Checklists/SBOM-and-Dependency-Scan-Checklist.md complete, or written disposition approved.

Stage exit criteria

  • [ ] Repositories have branch protection, CODEOWNERS and required reviews.
  • [ ] Every human and machine identity is in the access register with least-privilege justification.
  • [ ] No secrets in source control (secret scan clean); secrets live in an approved vault.
  • [ ] Environments are defined in infrastructure-as-code, with data-class boundaries (no PHI outside production unless approved).
  • [ ] CI runs build, tests, SAST, dependency and secret scans and produces an SBOM on every merge to main.
  • [ ] Infrastructure changes are approved and recorded.

Gate controls

  • [x] All cross-stage links (REQ, DES, API, TC, RISK, REL) used in this stage resolve.
  • [ ] No open critical safety, privacy or security blocker without an authorized written disposition.
  • [x] Product version, commit SHA and record revisions are consistent across the stage.
  • [ ] Gate decision, conditions and approver are stored in the durable system of record.
Role Name Decision Date
Independent reviewer Independent reviewer (name to be assigned — OPEN-021) Pending Pending
Gate approver Sponsor (name to be assigned — OPEN-001) Pending Pending

Gate status, 2026-10-28 (Claude Code): all 7 records drafted (Draft v0.1, a6b4429); the two gate controls ticked were verified by sdlc.py validate and sdlc.py trace. No record is reviewed or approved; open blockers are listed in COMPLETENESS-REPORT.md. The gate decision is for the gate approver.