- Five provider and platform workflows
- Deterministic rule selection
- Transparent blast-radius and cost scenarios
- Review-gated proposal bundles
- Post-change verification receipts
- Offline tests and synthetic reference artifacts
- Publish a JSON Schema and compatibility test kit for bridge inputs.
- Add adapters consuming the three published CISO Assistant cloud bridges.
- Add Terraform/OpenTofu plan parsing and Infracost validation.
- Add Kubernetes server-side dry-run and OPA policy simulation.
- Add provider pricing adapters with timestamped source receipts.
- Add GitHub App installation and draft-PR generation behind explicit authorization.
- Export proposals and receipts to OSCAL, SARIF and CISO Assistant.
- Add Backstage templates, OpenTelemetry and SLO dashboards.
- Run controlled live-cloud labs and publish independently reproducible measurements.
Production readiness requires authenticated integration tests, threat modeling, tenant isolation, rollback exercises, versioned schemas and supported-provider matrices.