Purpose and boundaries

This shared-source reference summarizes the enterprise records. Detailed specifications and register pages retain all fields; the complete manual includes their full content. No restricted audit catalog or account records are read.

Maintained records

  • RAID-001: {"id":"RAID-001","type":"Issue","name":"Account registration not verified","impact":"The current public creation path is unavailable; positive account lifecycle remains unverified.","owner":"Identity owner (proposed)","mitigation":"Maintain anonymous discovery and validate lifecycle only under separately approved scoped testing.","status":"Open — no completed remediation claimed","milestoneId":"MS-04"}
  • RAID-002: {"id":"RAID-002","type":"Issue","name":"Authenticated lifecycle testing incomplete","impact":"Persistence, recovery and positive permission flows have incomplete current evidence.","owner":"QA and security owner (proposed)","mitigation":"Approve safe test scope and evidence without synthetic production identities.","status":"Open — no completed remediation claimed","milestoneId":"MS-04"}
  • RAID-003: {"id":"RAID-003","type":"Risk","name":"Shared preview and published backend","impact":"Code versions do not isolate production records.","owner":"Technology owner (proposed)","mitigation":"No production writes from this documentation phase; require explicit scoped approval for future write tests.","status":"Open — no completed remediation claimed","milestoneId":"MS-03"}
  • RAID-004: {"id":"RAID-004","type":"Dependency","name":"Production data classification unknown","impact":"Classification and backup/recovery readiness block backend changes.","owner":"Data governance owner (proposed)","mitigation":"Obtain authorized classification attestation and actual recoverability evidence.","status":"Open — no completed remediation claimed","milestoneId":"MS-03"}
  • RAID-005: {"id":"RAID-005","type":"Assumption","name":"Operational staffing unconfirmed","impact":"No triage or response coverage is established.","owner":"Central program owner (proposed)","mitigation":"Validate staffing, supervision, escalation and coverage before service launch.","status":"Open — no completed remediation claimed","milestoneId":"MS-09"}
  • RAID-006: {"id":"RAID-006","type":"Issue","name":"Live support channels unconfigured","impact":"Simulated chat/call/message cannot connect a real responder.","owner":"Support operations owner (proposed)","mitigation":"Review providers, consent, monitoring and safeguarding before integration.","status":"Open — no completed remediation claimed","milestoneId":"MS-09"}
  • RAID-007: {"id":"RAID-007","type":"Dependency","name":"Partner vetting workflow not operational","impact":"No live onboarding, assignment or service acceptance is available.","owner":"Partner governance owner (proposed)","mitigation":"Define scoped verification, renewal and supervision before partner access.","status":"Open — no completed remediation claimed","milestoneId":"MS-09"}
  • RAID-008: {"id":"RAID-008","type":"Issue","name":"Financial transaction processing not enabled","impact":"No real payment, receipt or reconciliation occurs.","owner":"Finance control owner (proposed)","mitigation":"Review independent duties, provider contracts, restrictions and recovery.","status":"Open — no completed remediation claimed","milestoneId":"MS-09"}
  • RAID-009: {"id":"RAID-009","type":"Issue","name":"Legacy network remains quarantined","impact":"Unscoped network access must not be reactivated.","owner":"Security owner (proposed)","mitigation":"Keep containment until dataset, organization, site and assignment controls are reviewed.","status":"Open — no completed remediation claimed","milestoneId":"MS-09"}
  • RAID-010: {"id":"RAID-010","type":"Issue","name":"Translation completeness not verified","impact":"Executive content is English; youth translations are machine-assisted.","owner":"Accessibility and language owner (proposed)","mitigation":"Commission professional review and complete approved language content.","status":"Open — no completed remediation claimed","milestoneId":"MS-09"}
  • RAID-011: {"id":"RAID-011","type":"Issue","name":"Accessibility certification not established","impact":"Limited keyboard and layout checks are not full WCAG certification.","owner":"Accessibility owner (proposed)","mitigation":"Obtain assistive-technology and professional accessibility review.","status":"Open — no completed remediation claimed","milestoneId":"MS-09"}
  • RAID-012: {"id":"RAID-012","type":"Risk","name":"Cross-account privacy testing incomplete","impact":"Positive owner, staff and revocation isolation is not established for all paths.","owner":"Security and QA owner (proposed)","mitigation":"Require approved scoped multi-account tests before operational access.","status":"Open — no completed remediation claimed","milestoneId":"MS-04"}

Review and limitations

Owners, staffing, retention, provider scope and pilot criteria need qualified CHI validation. Proposed scenario IDs are not executed tests. Documentation does not activate operations.