ETIS Engineering Studio v0.16.0 — Production-Accepted Institutional Release

ETIS Engineering Studio v0.16.0

This release is the first production-accepted ETIS Engineering Studio baseline prepared for institutional adoption.

ETIS Engineering Studio is a browser-based engineering judgment environment designed to help software engineering students practice evidence-based technical decision-making. Students remain the responsible engineers; AI reviewers act as bounded advisers rather than graders or decision authorities.

Highlights

• Production-hardened Microsoft Entra authentication and authorization
• GitHub identity linking and team repository onboarding
• GitHub App installation model using repository-scoped authorization
• Exact repository verification for personal and organization-owned repositories
• Frozen evidence snapshots and provenance-aware engineering review
• Board Review, Focused Review, and Review Findings workflows
• Instructor Command Center and section-aware administration
• Semester lifecycle support for setup, active, and archived terms
• Review continuity, finding lifecycle, and preserved engineering records
• Production Azure deployment with PostgreSQL, Key Vault, managed identity, Application Insights, Log Analytics, and alerting
• Point-in-time database recovery validation
• Immutable container-image rollback capability
• Cost controls and production budget alerting
• Public documentation for institutional deployment and adoption

Institutional adoption

This release includes documentation for institutions that want to operate their own ETIS Engineering Studio deployment.

Adopting institutions should provision and own their own:

• cloud infrastructure;
• identity registration;
• GitHub App and OAuth configuration;
• database and backup policy;
• domain and TLS configuration;
• secrets and Key Vault resources;
• OpenAI project and cost controls;
• monitoring and alerting;
• privacy, retention, and course-administration policies.

See:

• docs/INSTITUTIONAL_ADOPTION.md
• docs/PUBLIC_DEPLOYMENT_SECURITY.md
• docs/AZURE_DEPLOYMENT.md
• docs/SECURITY_AND_PRIVACY.md
• docs/PRODUCTION_BASELINE.md

Production acceptance

The reference deployment completed post-provisioning production acceptance on August 21, 2026.

Validated areas included:

• authentication and authorization;
• GitHub repository onboarding;
• managed identity and Key Vault integration;
• container health and readiness;
• observability and operational alerts;
• PostgreSQL backup and point-in-time restore;
• rollback readiness;
• cost controls;
• semester lifecycle behavior;
• student and instructor production workflows.

The original production-acceptance snapshot reported application version 0.15.0. Version metadata was subsequently aligned to 0.16.0 for this release without changing the underlying accepted application behavior.

Security

Security-sensitive values are not stored in the repository.

The reference production architecture uses:

• Azure managed identity;
• Azure Key Vault secret references;
• GitHub Actions OIDC for Azure authentication;
• repository-scoped GitHub App installation;
• fail-closed authorization boundaries;
• protected production deployment paths.

Security issues should be reported using the process described in SECURITY.md.

Licensing

ETIS Engineering Studio is released under the Apache License 2.0.

See:

• LICENSE
• NOTICE
• TRADEMARKS.md

Known operational notes

• The accepted production runtime uses minReplicas=1 and maxReplicas=5.
• Source-controlled infrastructure currently requires a follow-up alignment of the Container App minReplicas default before the next infrastructure-changing release.
• Multi-student repository owner/non-owner propagation is covered by automated tests and CI; the production acceptance team used a single production-test student identity.
• Production rollback capability was verified through retained immutable images; production was not deliberately rolled backward solely for acceptance.

Release commit

00aad4568fe59ffae8430c58935573530f243400