-**TO-BE · Target operating model — not installed controls or company results.**
+**TO-BE · Target operating model — the intended strategy, not a deployed system.**
-## Who coordinates, and who can authorize delivery?
+## Autonomous SDLC, human direction
-One logical coordinator routes work; people retain authority. Local agents propose changes, while independent CI and human approval govern what the release service can execute.
+
-
+An autonomous agent executes and governs the SDLC. Humans direct, guide and review the work throughout the cycle.
-- **Local choice:** Copilot, Claude Code and Cline use qualified adapters and pinned skills.
-- **Central controls:** neither laptops nor the coordinator hold production credentials.
-- **Existing organization:** six departments, eleven teams; Data & AI owns coordination, not their decisions.
+**Scope → Architecture → UI/UX → Planning → Delivery → UAT → Releases → Scope**
+
+Each stage follows the previous one. Releases returns to Scope; the cycle repeats indefinitely, with human direction informing the next iteration.
-Trust boundaries, recovery and detailed delivery path
+Supporting implementation options: trust boundaries and recovery
-## Coordination without transferred authority
+## Controls that support autonomous execution
-The diagram is an overview; the equivalent delivery path below remains readable on narrow screens. Expand the diagram to inspect its trust boundaries and use its zoom controls for individual relationships.
+The lifecycle above is the strategic direction. The earlier control design below is a supporting implementation option, not an agreed assignment of approval roles or a claim of installed controls. Detailed approval policy and responsibilities remain to be defined with humans.
-1. Accountable people authorize the work scope; one logical coordinator routes tasks.
+1. Humans direct, guide and review; the autonomous agent executes and governs work across the lifecycle.
2. The reviewed registry supplies pinned skills and qualified adapters to coordinator and local clients.
-3. Laptop contributors propose changes; independent repository and CI checks verify the exact revision.
-4. A human approves that artifact; only the release service holds production credentials.
-5. Restricted audit and measurement evidence returns to people and informs the next authorized task.
+3. Laptop contributors can participate alongside the agent; independent repository and CI checks verify the exact revision.
+4. A separate release service and artifact-scoped approval are possible controls, subject to the policy humans define.
+5. Restricted audit and measurement evidence supports human review and the next Scope iteration.
-
+
**TO-BE · Target operating model.** Introduction depends on the [roadmap gates](./roadmap.mdx); these pages do not describe installed controls or measured company results.
### One coordination function, distributed contributions
-Data & AI owns the coordinating function, with the existing AI Architect function connecting it to Technology leadership. The logical coordinator maintains approved work records, dependencies, evidence requests, bounded retries and escalation. It can summarize, propose work and route decisions. It cannot declare its own work approved, change protected checks, authorize production release or replace the responsible human.
+The autonomous agent is more than a task router: it executes and governs the repeating SDLC under human direction, guidance and review. A coordinating function maintains work records, dependencies, evidence requests, bounded retries and escalation. Data & AI and the existing AI Architect function are possible implementation contributors, not newly assigned approval authorities. Autonomous execution does not remove human involvement or allow the agent to redefine its own controls.
One logical coordinator does not mean one fragile process. A durable task ledger, explicit state transitions, leases and idempotency keys allow recovery or multiple replicas without duplicate delivery. Inference outages stop new agent decisions, not the organization's ability to take over. People can resume work through the normal deterministic workflow. Evidence and authorization services fail closed for privileged actions; missing evidence never becomes permission.
-The delivery path is: an approved problem and acceptance criteria; an authorized task; local or isolated worker proposals; independently reviewed repository changes; exact-revision CI evidence; a human release decision; execution by the release service; then operational feedback. Product Management accepts the outcome hypothesis and business result. Product Design reviews experience and accessibility. Product Engineering owns the code and maintainability. Quality Engineering assesses quality independently. Architecture & Security assesses risk. Platform & IT operates the delivery boundary. No arrow from a laptop or coordinator goes directly to production authority.
+These controls support the sequence Scope → Architecture → UI/UX → Planning → Delivery → UAT → Releases → Scope; they do not replace it with a separate lifecycle. Product, engineering, design, quality, security and platform expertise inform human direction and review. Specific approval assignments and release permissions are implementation decisions still to be defined.
### Trust and authority boundaries
@@ -57,10 +57,12 @@ Central controls verify protected-branch review, actual artifact identity, exact
-Responsibilities and first workflows for all eleven teams
+Candidate contributions and first workflows for all eleven teams
### Department contributions
+The existing team structure provides a starting point. The contributions below are implementation proposals, not settled approval roles or lifecycle gates.
+
### Product / Product Management
**Contribution and retained human decision** — Own pilot priorities, acceptance criteria and outcome hypotheses; decide product value.
diff --git a/package.json b/package.json
index 456a08a..b7a51f7 100644
--- a/package.json
+++ b/package.json
@@ -15,7 +15,7 @@
"verify:build": "node scripts/verify.mjs --build",
"diagrams:build": "node scripts/build-diagrams.mjs",
"test": "node --test scripts/*.test.mjs",
- "test:browser": "node scripts/browser/strategy-story.cjs && node scripts/browser/inline-controls.cjs",
+ "test:browser": "node scripts/browser/strategy-story.cjs && node scripts/browser/inline-controls.cjs && node scripts/browser/sdlc-cycle.cjs",
"kpi:example": "node scripts/ai-kpi.mjs"
},
"dependencies": {
diff --git a/scripts/browser/inline-controls.cjs b/scripts/browser/inline-controls.cjs
index d70a804..6b6aa5f 100644
--- a/scripts/browser/inline-controls.cjs
+++ b/scripts/browser/inline-controls.cjs
@@ -121,6 +121,8 @@ const fs = require('node:fs');
await page.screenshot({path:`${output}/${width}.png`, fullPage:true});
await frame.locator('#btn-theme').click(); await theme('dark');
await page.locator('.strategy-content a[href$="/strategy/target-operating-model/"]').filter({visible:true}).click();
+ await page.waitForURL('**/strategy/target-operating-model/');
+ await page.getByRole('heading', {name:'Target operating model', exact:true, level:1}).waitFor();
const next = page.locator(`.archify-panel--story[data-diagram="strategy-target"] > .story-${width > 700 ? 'desktop' : 'mobile'}`);
await next.scrollIntoViewIfNeeded();
await (await (await next.elementHandle()).contentFrame()).waitForFunction(() => document.documentElement.dataset.theme === 'dark');
diff --git a/scripts/browser/sdlc-cycle.cjs b/scripts/browser/sdlc-cycle.cjs
new file mode 100644
index 0000000..6faf892
--- /dev/null
+++ b/scripts/browser/sdlc-cycle.cjs
@@ -0,0 +1,53 @@
+const {chromium} = require('playwright');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+(async () => {
+ const base = process.argv[2] || 'http://127.0.0.1:4173';
+ const output = `.cache/cycle-${process.argv[3] || 'local'}`;
+ fs.mkdirSync(output, {recursive:true});
+ const browser = await chromium.launch({headless:true, executablePath:process.env.PLAYWRIGHT_CHROMIUM_EXECUTABLE, args:['--no-sandbox']});
+ const results = [];
+ try {
+ for (const width of [1440, 390, 320]) {
+ const context = await browser.newContext({viewport:{width,height:1000}, colorScheme:'light'});
+ const page = await context.newPage();
+ await page.goto(`${base}/eldorado-v1/documentation/`, {waitUntil:'networkidle'});
+ if (width < 700) await page.getByRole('button', {name:'Toggle navigation bar'}).click();
+ const nav = page.getByRole('link', {name:'Strategy', exact:true}).filter({visible:true});
+ assert((await nav.getAttribute('href')).endsWith('/strategy/target-operating-model/'));
+ await nav.click();
+ await page.waitForURL('**/strategy/target-operating-model/');
+ for (const route of ['target-operating-model/', '']) {
+ await page.goto(`${base}/eldorado-v1/documentation/strategy/${route}`, {waitUntil:'networkidle'});
+ if (width === 1440) assert.equal(await page.locator('.theme-doc-sidebar-menu .menu__link').first().innerText(), 'Target operating model');
+ const iframe = page.locator(`.archify-panel--story > .story-${width > 700 ? 'desktop' : 'mobile'}`);
+ await iframe.scrollIntoViewIfNeeded();
+ const frame = await (await iframe.elementHandle()).contentFrame();
+ await frame.locator('svg[role="img"]').waitFor();
+ const metrics = await frame.evaluate(() => {
+ const svg = document.querySelector('svg[role="img"]');
+ const labels = [...svg.querySelectorAll('text[data-node-label]')].map(n => ({text:n.textContent,px:parseFloat(getComputedStyle(n).fontSize)*n.getScreenCTM().a}));
+ const edges = [...svg.querySelectorAll('path[data-edge-id^="stage-"]')].map(n => [n.dataset.edgeFrom,n.dataset.edgeTo,n.getAttribute('marker-end')]);
+ const overflow = [...svg.querySelectorAll('[data-node-id]')].flatMap(n => {
+ const box = n.querySelector('rect').getBoundingClientRect();
+ return [...n.querySelectorAll('text')].filter(t => {const b=t.getBoundingClientRect();return b.leftbox.right||b.topbox.bottom;}).map(t=>t.textContent);
+ });
+ return {labels,edges,overflow};
+ });
+ const ids = ['scope','architecture','ui-ux','planning','delivery','uat','releases'];
+ assert.deepEqual(metrics.edges.map(e=>e.slice(0,2)), ids.map((id,i)=>[id,ids[(i+1)%ids.length]]));
+ assert(metrics.edges.every(e=>e[2]?.startsWith('url(')), 'all stages must have arrowheads');
+ assert(metrics.labels.every(n=>n.px>=14), JSON.stringify(metrics.labels));
+ assert.deepEqual(metrics.overflow, []);
+ assert(!await page.evaluate(()=>document.documentElement.scrollWidth>innerWidth));
+ await page.evaluate(()=>scrollTo(0,0));
+ await page.screenshot({path:`${output}/${width}-${route ? 'target' : 'landing'}.png`,fullPage:true});
+ results.push({width,route,...metrics});
+ fs.writeFileSync(`${output}/results.json`,JSON.stringify(results,null,2));
+ }
+ await context.close();
+ }
+ assert.equal(results.length,6);
+ console.log('PASS 6 cycle routes/viewports: navigation, sidebar order, exact directed loop, arrowheads, >=14px labels, text bounds and no overflow');
+ } finally {await browser.close();}
+})().catch(error=>{console.error(error);process.exitCode=1;});
diff --git a/scripts/browser/strategy-story.cjs b/scripts/browser/strategy-story.cjs
index e274855..3b64422 100644
--- a/scripts/browser/strategy-story.cjs
+++ b/scripts/browser/strategy-story.cjs
@@ -19,7 +19,7 @@ const fs=require('node:fs');
const nodes=[...svg.querySelectorAll('[data-node-id]')].map(n=>{const r=n.getBoundingClientRect();return {id:n.id,x:r.x,y:r.y,right:r.right,bottom:r.bottom};});
return {width:innerWidth,height:innerHeight,nodes,svg:svg.getBoundingClientRect().toJSON(),minLabel:Math.min(...[...svg.querySelectorAll('text[data-node-label]')].map(n=>parseFloat(getComputedStyle(n).fontSize)*n.getScreenCTM().a))};
});
- assert(geometry.nodes.length>=5 && geometry.nodes.length<=7,id);
+ assert(geometry.nodes.length>=5 && geometry.nodes.length<=(['index','target-operating-model'].includes(id)?9:7),id);
for(const n of geometry.nodes) assert(n.x>=0 && n.y>=0 && n.right<=geometry.width+1 && n.bottom<=geometry.height+1,`${id} ${width} clipped ${JSON.stringify(n)} / ${geometry.height}`);
const data=await page.locator('.strategy-content').evaluate(el=>({words:el.innerText.trim().split(/\s+/).length,overflow:document.documentElement.scrollWidth>innerWidth,openDetails:el.querySelectorAll('details[open]').length}));
assert(data.words<=200,id);assert(!data.overflow,id);assert.equal(data.openDetails,0,id);
diff --git a/scripts/build-diagrams.mjs b/scripts/build-diagrams.mjs
index d64a792..b27a332 100644
--- a/scripts/build-diagrams.mjs
+++ b/scripts/build-diagrams.mjs
@@ -4,6 +4,7 @@ import {execFileSync} from 'node:child_process';
const cli = 'vendor/archify/bin/archify.mjs';
const types = new Set(['architecture','workflow','sequence','dataflow','lifecycle']);
const inlineStyles = readFileSync(new URL('./inline-viewer.css', import.meta.url), 'utf8');
+const cycleStyles = readFileSync(new URL('./cycle-viewer.css', import.meta.url), 'utf8');
const themeBridge = readFileSync(new URL('./viewer-theme-bridge.js', import.meta.url), 'utf8');
// This directory is generated-only and ignored by Git. Remove stale artifacts.
rmSync('static/diagrams', {recursive: true, force: true});
@@ -36,7 +37,8 @@ for (const file of readdirSync('diagrams').sort()) {
if (start < 0 || end < start || preset.split(guard).length !== 3) throw new Error('Archify preset integration drift');
viewer = viewer.slice(0, start) + preset.replaceAll(guard, '') + viewer.slice(end);
if (!viewer.includes('') || !viewer.includes('