key,summary,details,category,agent,requester_email,team,sla,priority,parent_key,asset_keys,target_date,CFStrategicValue
task-change-gate,Enforce change approval in the deployment pipeline,Add a pipeline gate that refuses any deployment without a change record approved before the deployment start time. Arising from the KSI-CMT-LMC validation failures in June and July.,Security Improvement,Demo Account,,,,,proj-secimprove,,,High
task-jit-privilege,Remove standing privileged access,Convert the remaining standing platform administrator memberships to Entra PIM just-in-time activation with approval and time-bound elevation.,Security Improvement,Demo Account,,,,,proj-secimprove,,,High
task-val-coverage,Extend automated validation coverage,"Add machine validation checks for the KSIs currently evidenced by manual review, so that validation coverage is automated rather than sampled.",Security Improvement,Demo Account,,,,,proj-secimprove,,,Medium
task-isolation-suite,Formalise the tenant isolation regression suite,"Promote the ad-hoc multi-tenant retrieval isolation tests into a formal regression suite gating every model and application release, with results recorded as validation evidence.",Security Improvement>Effectiveness Review,Demo Account,,,,,proj-secimprove,,,High
