Deliverables

Deliverables Reference

This page explains each roadmap deliverable and points to the most relevant documentation.

Dockerized Multi-Cloud Policy (MCP) + REST API

Container images for the Multi-Cloud Policy (MCP) server and REST API for consistent CI/CD usage. See Architecture and Docker Compose.

CLI-first install

Package-first installs for local validation across platforms. See Packaging.

Docker Compose local stack (API + UI + registry)

Local stack for API, UI, and policy registry. See Docker Compose.

GitHub Action pre-apply / PR checks

Composite action for PR validation. See GitHub Action.

GitLab CI templates

Shared template for GitLab pipelines. See GitLab CI Templates.

Azure DevOps / Pipeline extension

Planned Azure DevOps extension for pre-apply checks in ADO pipelines.

AWS CodePipeline + CodeBuild integration

Delivered buildspec integration for policy gates and evidence artifacts in AWS CodePipeline. See AWS CodePipeline.

Policy authoring UI

Delivered enterprise authoring workflow in the FastAPI web UI for creating, editing, approving, previewing, and browsing policies. See Policy Authoring UI.

Policy layering model (base → env → app)

Layered policies for platform invariants (base), environment constraints, and app policies. See Policy Layering.

Central guardrail registry

Registry service for policy bundles and audit history. See Docker Compose.

Policy versioning + audit trail

Versioned bundles with audit endpoints. See Docker Compose.

Registry service image (GHCR)

Registry container published alongside core image. See Packaging.

Homebrew package (macOS)

Homebrew formula for macOS installs. See Packaging.

Chocolatey package (Windows)

Chocolatey package for Windows installs. See Packaging.

Linux install script (curl | bash)

Linux one-liner install script. See Packaging.

Policy metadata + rich failure messages

Delivered metadata fields for ownership, compliance standards, control IDs, risk, expiry, and remediation guidance. See Policy Metadata.

Drift-prevention rules before apply

Delivered drift checks and drift gates that compare current findings with an approved snapshot before Terraform mutates state. See Drift Prevention.

Org-wide baselines

Delivered baseline lifecycle, versioning, approvals, and resolution order for baseline, pack/layer, environment, and app scopes. See Org-Wide Baselines.

Group-level enforcement

Delivered org, group, and repo bindings with inheritance-aware resolution. See Group-Level Enforcement.

Evidence export (SOC2 / ISO / PCI)

Delivered JSON, CSV, and PDF evidence export records tied to evaluation results. See Evidence Export.

Contributor governance + public roadmap

Planned governance updates. See Release Process.

Reference implementations across tools

Planned reference integrations across CI/CD tools and clouds.

Cross-provider invariant enforcement

Planned cross-provider guardrails for consistent controls.

Context-aware evaluation

Planned evaluation based on environment and risk context.

Suggested fixes + recommendations

Planned guidance to suggest fixes instead of blocking only.