/
home
/
techb158
/
cosmic.abdallabala.com
/
data
/
/home/techb158/cosmic.abdallabala.com/data
mkdir
upload
Name
Size
Mode
Actions
database.json
154703
0644
edit
dl
rm
sample-project.json
30154
0666
edit
dl
rm
Edit:
/home/techb158/cosmic.abdallabala.com/data/database.json
(154703B)
{ "meta": { "name": "COSMIC AI-Risk Dashboard JSON Database", "version": "1.8.0", "storage": "json-file", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-04T02:10:00.000Z", "lastUpdated": "2026-07-03T00:00:00.000Z" }, "sourceBasis": { "derivedFromSource": [ "COSMIC AI-Risk Management presentation", "AI Governance Triangle: organizational, technical, human dimensions", "ISO 15939 and VIM-aligned measurement intent", "Software prototype and REST API objective", "Phase 3 software and API implementation timeline" ], "implementationExtension": [ "Dashboard widgets", "Risk scoring formula", "Deployment gate rules", "Multi-project-management integration adapter layer", "Trello, Jira, Asana, and Microsoft Planner seed connectors", "Sample risks and metrics" ] }, "thresholds": { "overallRiskMax": 50, "criticalOpenMax": 0, "mitigationCompletionMin": 60, "dataReadinessMin": 70, "selectedModelF1Min": 0.8, "selectedModelStabilityMin": 75, "gateWarningScore": 35, "gateBlockedScore": 50 }, "project_reviews": { "cosmic-ai-risk-001": { "dataReadiness": { "score": 68, "status": "Warning", "evidence": "Data lineage and consent records incomplete for two sources." }, "ethicalReview": { "status": "Pending", "evidence": "Bias and accountability review still open." }, "legalReview": { "status": "Pending", "evidence": "Privacy impact assessment not approved." }, "deploymentApproval": { "status": "Not approved", "evidence": "Risk owner approval required before production release." } } }, "tables": { "roles": [ { "id": "ROLE-PM", "name": "Project Manager", "permissions_json": "[\"project:read\",\"risk:read\",\"risk:write\",\"mitigation:write\",\"gate:read\",\"gate:evaluate\",\"report:export\",\"integration:read\",\"integration:sync\",\"audit:read\"]", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-09-04T17:27:32.164Z", "description": "Built-in COSMIC AI-Risk role." }, { "id": "ROLE-RISK", "name": "Risk Owner", "permissions_json": "[\"risk:read\", \"risk:write\", \"mitigation:write\"]", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "ROLE-REVIEWER", "name": "Governance Reviewer", "permissions_json": "[\"risk:read\", \"gate:evaluate\", \"gate:approve\"]", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "ROLE-ADMIN", "name": "System Admin", "permissions_json": "[\"*\"]", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-09-04T17:27:32.149Z", "description": "Built-in COSMIC AI-Risk role." }, { "id": "ROLE-RISK-OWNER", "name": "Risk Owner", "permissions_json": "[\"project:read\",\"risk:read\",\"risk:write\",\"mitigation:write\",\"gate:read\"]", "description": "Built-in COSMIC AI-Risk role.", "created_at": "2026-07-04T03:46:11.527Z", "updated_at": "2026-09-04T17:27:32.164Z" }, { "id": "ROLE-AI-ENGINEER", "name": "AI Engineer / Data Scientist", "permissions_json": "[\"project:read\",\"risk:read\",\"mitigation:write\",\"metrics:write\",\"gate:read\",\"report:export\"]", "description": "Built-in COSMIC AI-Risk role.", "created_at": "2026-07-04T03:46:11.527Z", "updated_at": "2026-09-04T17:27:32.164Z" }, { "id": "ROLE-GOV-REVIEWER", "name": "Governance Reviewer", "permissions_json": "[\"project:read\",\"risk:read\",\"gate:read\",\"gate:evaluate\",\"gate:review\",\"report:export\",\"audit:read\"]", "description": "Built-in COSMIC AI-Risk role.", "created_at": "2026-07-04T03:46:11.527Z", "updated_at": "2026-09-04T17:27:32.164Z" }, { "id": "ROLE-LEGAL-ETHICS", "name": "Legal / Ethics Reviewer", "permissions_json": "[\"project:read\",\"risk:read\",\"mitigation:write\",\"gate:read\",\"gate:review\",\"report:export\",\"audit:read\"]", "description": "Built-in COSMIC AI-Risk role.", "created_at": "2026-07-04T03:46:11.527Z", "updated_at": "2026-09-04T17:27:32.164Z" }, { "id": "ROLE-INTEGRATION-ADMIN", "name": "Integration Admin", "permissions_json": "[\"project:read\",\"integration:read\",\"integration:write\",\"integration:sync\",\"oauth:manage\",\"report:export\",\"audit:read\"]", "description": "Built-in COSMIC AI-Risk role.", "created_at": "2026-07-04T03:46:11.527Z", "updated_at": "2026-09-04T17:27:32.164Z" }, { "id": "ROLE-VIEWER", "name": "Read-only Viewer", "permissions_json": "[\"project:read\",\"risk:read\",\"gate:read\",\"integration:read\",\"report:export\"]", "description": "Built-in COSMIC AI-Risk role.", "created_at": "2026-07-04T03:46:11.527Z", "updated_at": "2026-09-04T17:27:32.164Z" } ], "users": [ { "id": "USER-SYSTEM", "display_name": "System", "email": "system@cosmic.local", "role_id": "ROLE-ADMIN", "active": true, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "USER-PM", "display_name": "AI Risk Governance Team", "email": "pm@cosmic.local", "role_id": "ROLE-PM", "active": true, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "USER-RISK", "display_name": "Default Risk Owner", "email": "risk-owner@cosmic.local", "role_id": "ROLE-RISK", "active": true, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "USER-REVIEW", "display_name": "Governance Reviewer", "email": "reviewer@cosmic.local", "role_id": "ROLE-REVIEWER", "active": true, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "USER-ENGINEER", "display_name": "AI Engineer", "email": "ai.engineer@cosmic.local", "role_id": "ROLE-AI-ENGINEER", "active": true, "created_at": "2026-07-04T03:46:11.527Z", "updated_at": "2026-07-04T03:46:11.527Z" }, { "id": "USER-GOV", "display_name": "Governance Reviewer", "email": "governance@cosmic.local", "role_id": "ROLE-GOV-REVIEWER", "active": true, "created_at": "2026-07-04T03:46:11.527Z", "updated_at": "2026-07-04T03:46:11.527Z" }, { "id": "USER-LEGAL", "display_name": "Legal Ethics Reviewer", "email": "legal.ethics@cosmic.local", "role_id": "ROLE-LEGAL-ETHICS", "active": true, "created_at": "2026-07-04T03:46:11.527Z", "updated_at": "2026-07-04T03:46:11.527Z" }, { "id": "USER-INTEGRATION", "display_name": "Integration Admin", "email": "integration.admin@cosmic.local", "role_id": "ROLE-INTEGRATION-ADMIN", "active": true, "created_at": "2026-07-04T03:46:11.527Z", "updated_at": "2026-07-04T03:46:11.527Z" }, { "id": "USER-VIEWER", "display_name": "Read-only Viewer", "email": "viewer@cosmic.local", "role_id": "ROLE-VIEWER", "active": true, "created_at": "2026-07-04T03:46:11.527Z", "updated_at": "2026-07-04T03:46:11.527Z" } ], "projects": [ { "id": "cosmic-ai-risk-001", "name": "COSMIC AI-Risk Management", "subtitle": "Integrated Measurement Framework for AI Project Risks", "project_type": "AI-Enabler", "current_lifecycle_phase": "Testing and performance evaluation", "risk_appetite": 50, "assessment_date": "2026-07-03", "status": "Active", "owner_display_name": "AI Risk Governance Team", "description": "Prototype dashboard for measuring AI project risk using organizational, technical, and human dimensions.", "thresholds": { "overallRiskMax": 50, "criticalOpenMax": 0, "mitigationCompletionMin": 60, "dataReadinessMin": 70, "selectedModelF1Min": 0.8, "selectedModelStabilityMin": 75, "gateWarningScore": 35, "gateBlockedScore": 50 }, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" } ], "lifecycle_phases": [ { "id": "LC-01", "project_id": "cosmic-ai-risk-001", "name": "Needs identification", "status": "Complete", "readiness_score": 84, "sequence": 1, "updated_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z" }, { "id": "LC-02", "project_id": "cosmic-ai-risk-001", "name": "Data collection and preparation", "status": "Warning", "readiness_score": 68, "sequence": 2, "updated_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z" }, { "id": "LC-03", "project_id": "cosmic-ai-risk-001", "name": "Design", "status": "Complete", "readiness_score": 76, "sequence": 3, "updated_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z" }, { "id": "LC-04", "project_id": "cosmic-ai-risk-001", "name": "Model development and training", "status": "Warning", "readiness_score": 71, "sequence": 4, "updated_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z" }, { "id": "LC-05", "project_id": "cosmic-ai-risk-001", "name": "Testing and performance evaluation", "status": "Warning", "readiness_score": 64, "sequence": 5, "updated_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z" }, { "id": "LC-06", "project_id": "cosmic-ai-risk-001", "name": "Deployment, support, and monitoring", "status": "Blocked", "readiness_score": 52, "sequence": 6, "updated_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z" } ], "risks": [ { "id": "R-001", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Security Lead", "title": "Prompt injection can override customer-support chatbot safeguards", "description": "", "dimension": "Technical", "domain": "Technical risks", "lifecycle_phase": "Testing and performance evaluation", "probability": 4, "impact": 5, "detectability": 4, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-08", "evidence_summary": "Adversarial prompt test suite partially complete.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-002", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Legal Reviewer", "title": "Hallucinated legal advice from AI assistant", "description": "", "dimension": "Human", "domain": "Legal and ethical risks", "lifecycle_phase": "Testing and performance evaluation", "probability": 3, "impact": 5, "detectability": 4, "status": "Open", "approval_status": "Pending", "due_date": "2026-07-10", "evidence_summary": "Legal disclaimer and escalation workflow not approved.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-003", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Data Protection Lead", "title": "Personal data leakage in AI-generated summaries", "description": "", "dimension": "Technical", "domain": "Legal and ethical risks", "lifecycle_phase": "Data collection and preparation", "probability": 4, "impact": 5, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-08", "evidence_summary": "PII masking checks passing for structured fields only.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-004", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Responsible AI Lead", "title": "Bias in candidate-ranking model", "description": "", "dimension": "Human", "domain": "Legal and ethical risks", "lifecycle_phase": "Testing and performance evaluation", "probability": 4, "impact": 5, "detectability": 4, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-12", "evidence_summary": "Disparate impact metric exceeds threshold for one group.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-005", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Model Owner", "title": "Inaccurate financial risk classification", "description": "", "dimension": "Technical", "domain": "Technical risks", "lifecycle_phase": "Model development and training", "probability": 3, "impact": 5, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-18", "evidence_summary": "Recall is below target in high-risk segment.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-006", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Clinical Safety Reviewer", "title": "Unsafe medical recommendation from AI assistant", "description": "", "dimension": "Human", "domain": "Legal and ethical risks", "lifecycle_phase": "Testing and performance evaluation", "probability": 2, "impact": 5, "detectability": 4, "status": "Open", "approval_status": "Rejected", "due_date": "2026-07-06", "evidence_summary": "Unsafe advice scenario failed review.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-007", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Supplier Manager", "title": "Vendor LLM outage affecting production workflows", "description": "", "dimension": "Organizational", "domain": "Strategic and organizational risks", "lifecycle_phase": "Deployment, support, and monitoring", "probability": 3, "impact": 4, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-20", "evidence_summary": "Fallback model contract still under review.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-008", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "MLOps Lead", "title": "Model drift after deployment", "description": "", "dimension": "Technical", "domain": "Technical risks", "lifecycle_phase": "Deployment, support, and monitoring", "probability": 4, "impact": 4, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-22", "evidence_summary": "Drift dashboard exists but alert thresholds are not approved.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-009", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Data Steward", "title": "Training data lacks consent record", "description": "", "dimension": "Organizational", "domain": "Legal and ethical risks", "lifecycle_phase": "Data collection and preparation", "probability": 3, "impact": 5, "detectability": 3, "status": "Open", "approval_status": "Pending", "due_date": "2026-07-09", "evidence_summary": "Consent status missing for two supplier data feeds.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-010", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "UX Lead", "title": "Poor explainability for reviewer decisions", "description": "", "dimension": "Human", "domain": "Legal and ethical risks", "lifecycle_phase": "Design", "probability": 3, "impact": 4, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-13", "evidence_summary": "Reason codes displayed for only three decision classes.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-011", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "ML Engineer", "title": "Low F1 score under project threshold", "description": "", "dimension": "Technical", "domain": "Technical risks", "lifecycle_phase": "Testing and performance evaluation", "probability": 3, "impact": 4, "detectability": 2, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-11", "evidence_summary": "Selected model meets F1 threshold but stability warning remains.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-012", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Data Scientist", "title": "Test data leakage from training split", "description": "", "dimension": "Technical", "domain": "Technical risks", "lifecycle_phase": "Model development and training", "probability": 2, "impact": 5, "detectability": 4, "status": "In mitigation", "approval_status": "Approved", "due_date": "2026-07-14", "evidence_summary": "Leakage scan passed after split correction.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-013", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Product Owner", "title": "Unclear business objective for AI use case", "description": "", "dimension": "Organizational", "domain": "Strategic and organizational risks", "lifecycle_phase": "Needs identification", "probability": 2, "impact": 4, "detectability": 2, "status": "Closed", "approval_status": "Accepted", "due_date": "2026-06-25", "evidence_summary": "Business objective and acceptance criteria approved.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-014", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "PMO Lead", "title": "Missing risk owner for deployment approval", "description": "", "dimension": "Organizational", "domain": "Strategic and organizational risks", "lifecycle_phase": "Deployment, support, and monitoring", "probability": 2, "impact": 4, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-05", "evidence_summary": "Delegated owner named, final approval pending.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-015", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Data Governance Lead", "title": "Unapproved data source in model pipeline", "description": "", "dimension": "Organizational", "domain": "Legal and ethical risks", "lifecycle_phase": "Data collection and preparation", "probability": 3, "impact": 4, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-15", "evidence_summary": "Supplier data source missing governance approval.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-016", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Finance Lead", "title": "Cost overrun from model inference volume", "description": "", "dimension": "Organizational", "domain": "Strategic and organizational risks", "lifecycle_phase": "Deployment, support, and monitoring", "probability": 3, "impact": 3, "detectability": 2, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-19", "evidence_summary": "Monthly inference budget forecast exceeds baseline by 18 percent.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-017", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "MLOps Lead", "title": "Inadequate monitoring after deployment", "description": "", "dimension": "Technical", "domain": "Technical risks", "lifecycle_phase": "Deployment, support, and monitoring", "probability": 4, "impact": 4, "detectability": 4, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-18", "evidence_summary": "Monitoring coverage excludes bias and latency alerts.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-018", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Change Manager", "title": "Poor user adoption of AI recommendations", "description": "", "dimension": "Human", "domain": "Strategic and organizational risks", "lifecycle_phase": "Deployment, support, and monitoring", "probability": 3, "impact": 3, "detectability": 2, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-21", "evidence_summary": "User training plan drafted but not delivered.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-019", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Operations Lead", "title": "Human-in-the-loop review bypassed under workload pressure", "description": "", "dimension": "Human", "domain": "Legal and ethical risks", "lifecycle_phase": "Deployment, support, and monitoring", "probability": 3, "impact": 5, "detectability": 4, "status": "Open", "approval_status": "Pending", "due_date": "2026-07-17", "evidence_summary": "No enforcement mechanism for mandatory review cases.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-020", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Incident Manager", "title": "Incomplete incident response playbook for AI failures", "description": "", "dimension": "Organizational", "domain": "Strategic and organizational risks", "lifecycle_phase": "Deployment, support, and monitoring", "probability": 3, "impact": 4, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-16", "evidence_summary": "Runbook lacks AI-specific rollback decision tree.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-021", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Security Lead", "title": "Security vulnerability in prompt logging", "description": "", "dimension": "Technical", "domain": "Technical risks", "lifecycle_phase": "Design", "probability": 3, "impact": 4, "detectability": 4, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-12", "evidence_summary": "Sensitive prompt fields encrypted, retention policy pending.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-022", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Release Manager", "title": "Missing rollback procedure for model release", "description": "", "dimension": "Technical", "domain": "Technical risks", "lifecycle_phase": "Deployment, support, and monitoring", "probability": 3, "impact": 5, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-14", "evidence_summary": "Rollback documented but not tested.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-023", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Supplier Manager", "title": "Vendor model version changes without notice", "description": "", "dimension": "Organizational", "domain": "Strategic and organizational risks", "lifecycle_phase": "Deployment, support, and monitoring", "probability": 3, "impact": 4, "detectability": 4, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-22", "evidence_summary": "Vendor notice clause missing from service agreement.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-024", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "ML Engineer", "title": "Incomplete documentation for experiments", "description": "", "dimension": "Technical", "domain": "Technical risks", "lifecycle_phase": "Model development and training", "probability": 3, "impact": 3, "detectability": 2, "status": "In mitigation", "approval_status": "Approved", "due_date": "2026-07-09", "evidence_summary": "Experiment parameters captured for latest three runs.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-025", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "DevOps Lead", "title": "MLOps pipeline failure delays release validation", "description": "", "dimension": "Technical", "domain": "Technical risks", "lifecycle_phase": "Model development and training", "probability": 2, "impact": 4, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-16", "evidence_summary": "Pipeline retry logic added, full test pending.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-026", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "IAM Lead", "title": "Weak access control for model administration", "description": "", "dimension": "Technical", "domain": "Technical risks", "lifecycle_phase": "Design", "probability": 3, "impact": 5, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-15", "evidence_summary": "Role-based permissions configured, audit review pending.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-027", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Responsible AI Lead", "title": "Ethical review not completed before release", "description": "", "dimension": "Human", "domain": "Legal and ethical risks", "lifecycle_phase": "Testing and performance evaluation", "probability": 3, "impact": 5, "detectability": 2, "status": "Open", "approval_status": "Pending", "due_date": "2026-07-07", "evidence_summary": "Ethical review meeting scheduled but decision not recorded.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-028", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Legal Reviewer", "title": "Legal review incomplete for privacy obligations", "description": "", "dimension": "Organizational", "domain": "Legal and ethical risks", "lifecycle_phase": "Data collection and preparation", "probability": 3, "impact": 5, "detectability": 3, "status": "Open", "approval_status": "Pending", "due_date": "2026-07-09", "evidence_summary": "Privacy impact assessment is incomplete.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-029", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Data Engineer", "title": "Data quality degradation in supplier feed", "description": "", "dimension": "Technical", "domain": "Technical risks", "lifecycle_phase": "Data collection and preparation", "probability": 4, "impact": 4, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-19", "evidence_summary": "Missing value rate increased above tolerance in one feed.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-030", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Project Manager", "title": "Stakeholder misalignment on deployment criteria", "description": "", "dimension": "Organizational", "domain": "Strategic and organizational risks", "lifecycle_phase": "Needs identification", "probability": 2, "impact": 4, "detectability": 2, "status": "In mitigation", "approval_status": "Accepted", "due_date": "2026-07-05", "evidence_summary": "Gate criteria agreed except legal approval state.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-031", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "QA Lead", "title": "Model not validated on edge cases", "description": "", "dimension": "Technical", "domain": "Technical risks", "lifecycle_phase": "Testing and performance evaluation", "probability": 3, "impact": 4, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-13", "evidence_summary": "Synthetic edge-case tests cover only critical class A.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-032", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "ML Engineer", "title": "Non-reproducible training run", "description": "", "dimension": "Technical", "domain": "Technical risks", "lifecycle_phase": "Model development and training", "probability": 3, "impact": 4, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-12", "evidence_summary": "Random seeds captured, dependency lock incomplete.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-033", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Supplier Manager", "title": "Supplier compliance status unknown", "description": "", "dimension": "Organizational", "domain": "Legal and ethical risks", "lifecycle_phase": "Data collection and preparation", "probability": 3, "impact": 4, "detectability": 4, "status": "Open", "approval_status": "Pending", "due_date": "2026-07-21", "evidence_summary": "Supplier security and privacy questionnaire not returned.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-034", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Finance Lead", "title": "Funding constraint blocks final validation testing", "description": "", "dimension": "Organizational", "domain": "Strategic and organizational risks", "lifecycle_phase": "Testing and performance evaluation", "probability": 2, "impact": 4, "detectability": 2, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-18", "evidence_summary": "Additional validation budget requested.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "R-035", "project_id": "cosmic-ai-risk-001", "owner_user_id": null, "owner_display_name": "Operations Lead", "title": "Alert fatigue from excessive monitoring notifications", "description": "", "dimension": "Human", "domain": "Strategic and organizational risks", "lifecycle_phase": "Deployment, support, and monitoring", "probability": 3, "impact": 3, "detectability": 3, "status": "In mitigation", "approval_status": "Pending", "due_date": "2026-07-23", "evidence_summary": "Monitoring thresholds produce too many low-priority alerts.", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" } ], "risk_scores": [ { "risk_id": "R-001", "raw_score": 80, "normalized_score": 64, "residual_score": 48, "risk_level": "Medium", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-CGR1SY", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-002", "raw_score": 60, "normalized_score": 48, "residual_score": 38, "risk_level": "Medium", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-28BRZ9", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-003", "raw_score": 60, "normalized_score": 48, "residual_score": 32, "risk_level": "Medium", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-8FYJZN", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-004", "raw_score": 80, "normalized_score": 64, "residual_score": 48, "risk_level": "Medium", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-2N390S", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-005", "raw_score": 45, "normalized_score": 36, "residual_score": 21, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-XWYTHW", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-006", "raw_score": 40, "normalized_score": 32, "residual_score": 25, "risk_level": "Medium", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-6H788J", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-007", "raw_score": 36, "normalized_score": 29, "residual_score": 17, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-989LT2", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-008", "raw_score": 48, "normalized_score": 38, "residual_score": 23, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-5XNDR2", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-009", "raw_score": 45, "normalized_score": 36, "residual_score": 25, "risk_level": "Medium", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-ILY1NZ", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-010", "raw_score": 36, "normalized_score": 29, "residual_score": 17, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-IYGP7I", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-011", "raw_score": 24, "normalized_score": 19, "residual_score": 10, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-P1M9NQ", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-012", "raw_score": 40, "normalized_score": 32, "residual_score": 13, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-X4EAQG", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-013", "raw_score": 16, "normalized_score": 13, "residual_score": 1, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-116A7O", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-014", "raw_score": 24, "normalized_score": 19, "residual_score": 8, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-O61TFL", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-015", "raw_score": 36, "normalized_score": 29, "residual_score": 18, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-OI25QF", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-016", "raw_score": 18, "normalized_score": 14, "residual_score": 9, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-CG1LZQ", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-017", "raw_score": 64, "normalized_score": 51, "residual_score": 34, "risk_level": "Medium", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-8M9E2R", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-018", "raw_score": 18, "normalized_score": 14, "residual_score": 10, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-T8SEFA", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-019", "raw_score": 60, "normalized_score": 48, "residual_score": 33, "risk_level": "Medium", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-N8A1OI", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-020", "raw_score": 36, "normalized_score": 29, "residual_score": 17, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-X9A37C", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-021", "raw_score": 48, "normalized_score": 38, "residual_score": 21, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-EAVRGB", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-022", "raw_score": 45, "normalized_score": 36, "residual_score": 22, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-HEIWLJ", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-023", "raw_score": 48, "normalized_score": 38, "residual_score": 25, "risk_level": "Medium", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-7806W4", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-024", "raw_score": 18, "normalized_score": 14, "residual_score": 7, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-Z87T4L", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-025", "raw_score": 24, "normalized_score": 19, "residual_score": 10, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-L16NGX", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-026", "raw_score": 45, "normalized_score": 36, "residual_score": 18, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-9A6IBE", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-027", "raw_score": 30, "normalized_score": 24, "residual_score": 19, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-OJKUNB", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-028", "raw_score": 45, "normalized_score": 36, "residual_score": 24, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-9WO4HL", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-029", "raw_score": 48, "normalized_score": 38, "residual_score": 24, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-TKP65A", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-030", "raw_score": 16, "normalized_score": 13, "residual_score": 5, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-LZ9100", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-031", "raw_score": 36, "normalized_score": 29, "residual_score": 19, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-WYTE4Q", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-032", "raw_score": 36, "normalized_score": 29, "residual_score": 19, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-U9H41J", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-033", "raw_score": 48, "normalized_score": 38, "residual_score": 26, "risk_level": "Medium", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-2G8NM9", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-034", "raw_score": 16, "normalized_score": 13, "residual_score": 9, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-EM7Q3X", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, { "risk_id": "R-035", "raw_score": 27, "normalized_score": 22, "residual_score": 14, "risk_level": "Low", "calculated_at": "2026-07-04T17:06:51.396Z", "id": "RSCORE-MR6M72BO-84HZ7S", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" } ], "mitigation_actions": [ { "id": "MIT-001-01", "risk_id": "R-001", "owner_user_id": null, "owner_display_name": "Security Lead", "title": "Add system prompt hardening", "description": "", "status": "In progress", "progress_percent": 45, "effectiveness_percent": 55, "due_date": "2026-07-08", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-001-02", "risk_id": "R-001", "owner_user_id": null, "owner_display_name": "Security Lead", "title": "Run red-team prompt injection tests", "description": "", "status": "In progress", "progress_percent": 45, "effectiveness_percent": 55, "due_date": "2026-07-08", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-001-03", "risk_id": "R-001", "owner_user_id": null, "owner_display_name": "Security Lead", "title": "Add output policy filter", "description": "", "status": "In progress", "progress_percent": 45, "effectiveness_percent": 55, "due_date": "2026-07-08", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-002-01", "risk_id": "R-002", "owner_user_id": null, "owner_display_name": "Legal Reviewer", "title": "Restrict legal advice responses", "description": "", "status": "In progress", "progress_percent": 35, "effectiveness_percent": 60, "due_date": "2026-07-10", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-002-02", "risk_id": "R-002", "owner_user_id": null, "owner_display_name": "Legal Reviewer", "title": "Add legal escalation path", "description": "", "status": "In progress", "progress_percent": 35, "effectiveness_percent": 60, "due_date": "2026-07-10", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-002-03", "risk_id": "R-002", "owner_user_id": null, "owner_display_name": "Legal Reviewer", "title": "Review high-risk prompts", "description": "", "status": "In progress", "progress_percent": 35, "effectiveness_percent": 60, "due_date": "2026-07-10", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-003-01", "risk_id": "R-003", "owner_user_id": null, "owner_display_name": "Data Protection Lead", "title": "Add PII redaction before summarization", "description": "", "status": "In progress", "progress_percent": 50, "effectiveness_percent": 65, "due_date": "2026-07-08", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-003-02", "risk_id": "R-003", "owner_user_id": null, "owner_display_name": "Data Protection Lead", "title": "Audit prompt and output logs", "description": "", "status": "In progress", "progress_percent": 50, "effectiveness_percent": 65, "due_date": "2026-07-08", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-003-03", "risk_id": "R-003", "owner_user_id": null, "owner_display_name": "Data Protection Lead", "title": "Complete privacy review", "description": "", "status": "Done", "progress_percent": 100, "effectiveness_percent": 80, "due_date": "2026-07-08", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-10T15:23:01.895Z" }, { "id": "MIT-004-01", "risk_id": "R-004", "owner_user_id": null, "owner_display_name": "Responsible AI Lead", "title": "Run fairness evaluation", "description": "", "status": "In progress", "progress_percent": 42, "effectiveness_percent": 60, "due_date": "2026-07-12", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-004-02", "risk_id": "R-004", "owner_user_id": null, "owner_display_name": "Responsible AI Lead", "title": "Tune decision thresholds", "description": "", "status": "In progress", "progress_percent": 42, "effectiveness_percent": 60, "due_date": "2026-07-12", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-004-03", "risk_id": "R-004", "owner_user_id": null, "owner_display_name": "Responsible AI Lead", "title": "Add reviewer override process", "description": "", "status": "In progress", "progress_percent": 42, "effectiveness_percent": 60, "due_date": "2026-07-12", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-005-01", "risk_id": "R-005", "owner_user_id": null, "owner_display_name": "Model Owner", "title": "Improve class weighting", "description": "", "status": "In progress", "progress_percent": 62, "effectiveness_percent": 65, "due_date": "2026-07-18", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-005-02", "risk_id": "R-005", "owner_user_id": null, "owner_display_name": "Model Owner", "title": "Review false negatives", "description": "", "status": "In progress", "progress_percent": 62, "effectiveness_percent": 65, "due_date": "2026-07-18", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-005-03", "risk_id": "R-005", "owner_user_id": null, "owner_display_name": "Model Owner", "title": "Update model threshold", "description": "", "status": "In progress", "progress_percent": 62, "effectiveness_percent": 65, "due_date": "2026-07-18", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-006-01", "risk_id": "R-006", "owner_user_id": null, "owner_display_name": "Clinical Safety Reviewer", "title": "Block medical diagnosis content", "description": "", "status": "In progress", "progress_percent": 30, "effectiveness_percent": 70, "due_date": "2026-07-06", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-006-02", "risk_id": "R-006", "owner_user_id": null, "owner_display_name": "Clinical Safety Reviewer", "title": "Add emergency disclaimer", "description": "", "status": "In progress", "progress_percent": 30, "effectiveness_percent": 70, "due_date": "2026-07-06", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-006-03", "risk_id": "R-006", "owner_user_id": null, "owner_display_name": "Clinical Safety Reviewer", "title": "Route users to human professional", "description": "", "status": "In progress", "progress_percent": 30, "effectiveness_percent": 70, "due_date": "2026-07-06", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-007-01", "risk_id": "R-007", "owner_user_id": null, "owner_display_name": "Supplier Manager", "title": "Define fallback provider", "description": "", "status": "In progress", "progress_percent": 58, "effectiveness_percent": 70, "due_date": "2026-07-20", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-007-02", "risk_id": "R-007", "owner_user_id": null, "owner_display_name": "Supplier Manager", "title": "Add circuit breaker", "description": "", "status": "In progress", "progress_percent": 58, "effectiveness_percent": 70, "due_date": "2026-07-20", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-007-03", "risk_id": "R-007", "owner_user_id": null, "owner_display_name": "Supplier Manager", "title": "Test degraded mode", "description": "", "status": "In progress", "progress_percent": 58, "effectiveness_percent": 70, "due_date": "2026-07-20", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-008-01", "risk_id": "R-008", "owner_user_id": null, "owner_display_name": "MLOps Lead", "title": "Monitor input distribution drift", "description": "", "status": "In progress", "progress_percent": 55, "effectiveness_percent": 70, "due_date": "2026-07-22", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-008-02", "risk_id": "R-008", "owner_user_id": null, "owner_display_name": "MLOps Lead", "title": "Set retraining triggers", "description": "", "status": "In progress", "progress_percent": 55, "effectiveness_percent": 70, "due_date": "2026-07-22", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-008-03", "risk_id": "R-008", "owner_user_id": null, "owner_display_name": "MLOps Lead", "title": "Define rollback threshold", "description": "", "status": "In progress", "progress_percent": 55, "effectiveness_percent": 70, "due_date": "2026-07-22", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-009-01", "risk_id": "R-009", "owner_user_id": null, "owner_display_name": "Data Steward", "title": "Trace consent records", "description": "", "status": "In progress", "progress_percent": 40, "effectiveness_percent": 75, "due_date": "2026-07-09", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-009-02", "risk_id": "R-009", "owner_user_id": null, "owner_display_name": "Data Steward", "title": "Remove unverified data", "description": "", "status": "In progress", "progress_percent": 40, "effectiveness_percent": 75, "due_date": "2026-07-09", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-009-03", "risk_id": "R-009", "owner_user_id": null, "owner_display_name": "Data Steward", "title": "Update data source register", "description": "", "status": "In progress", "progress_percent": 40, "effectiveness_percent": 75, "due_date": "2026-07-09", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-010-01", "risk_id": "R-010", "owner_user_id": null, "owner_display_name": "UX Lead", "title": "Add model explanation card", "description": "", "status": "In progress", "progress_percent": 63, "effectiveness_percent": 65, "due_date": "2026-07-13", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-010-02", "risk_id": "R-010", "owner_user_id": null, "owner_display_name": "UX Lead", "title": "Define reason code taxonomy", "description": "", "status": "In progress", "progress_percent": 63, "effectiveness_percent": 65, "due_date": "2026-07-13", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-010-03", "risk_id": "R-010", "owner_user_id": null, "owner_display_name": "UX Lead", "title": "Validate reviewer comprehension", "description": "", "status": "In progress", "progress_percent": 63, "effectiveness_percent": 65, "due_date": "2026-07-13", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-011-01", "risk_id": "R-011", "owner_user_id": null, "owner_display_name": "ML Engineer", "title": "Compare candidate models", "description": "", "status": "In progress", "progress_percent": 66, "effectiveness_percent": 70, "due_date": "2026-07-11", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-011-02", "risk_id": "R-011", "owner_user_id": null, "owner_display_name": "ML Engineer", "title": "Tune hyperparameters", "description": "", "status": "In progress", "progress_percent": 66, "effectiveness_percent": 70, "due_date": "2026-07-11", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-011-03", "risk_id": "R-011", "owner_user_id": null, "owner_display_name": "ML Engineer", "title": "Validate on holdout set", "description": "", "status": "In progress", "progress_percent": 66, "effectiveness_percent": 70, "due_date": "2026-07-11", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-012-01", "risk_id": "R-012", "owner_user_id": null, "owner_display_name": "Data Scientist", "title": "Rebuild train-test split", "description": "", "status": "In progress", "progress_percent": 75, "effectiveness_percent": 80, "due_date": "2026-07-14", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-012-02", "risk_id": "R-012", "owner_user_id": null, "owner_display_name": "Data Scientist", "title": "Audit feature generation", "description": "", "status": "In progress", "progress_percent": 75, "effectiveness_percent": 80, "due_date": "2026-07-14", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-012-03", "risk_id": "R-012", "owner_user_id": null, "owner_display_name": "Data Scientist", "title": "Lock validation set", "description": "", "status": "In progress", "progress_percent": 75, "effectiveness_percent": 80, "due_date": "2026-07-14", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-013-01", "risk_id": "R-013", "owner_user_id": null, "owner_display_name": "Product Owner", "title": "Define measurable objective", "description": "", "status": "In progress", "progress_percent": 90, "effectiveness_percent": 75, "due_date": "2026-06-25", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-013-02", "risk_id": "R-013", "owner_user_id": null, "owner_display_name": "Product Owner", "title": "Confirm stakeholder acceptance criteria", "description": "", "status": "In progress", "progress_percent": 90, "effectiveness_percent": 75, "due_date": "2026-06-25", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-014-01", "risk_id": "R-014", "owner_user_id": null, "owner_display_name": "PMO Lead", "title": "Assign gate owner", "description": "", "status": "In progress", "progress_percent": 70, "effectiveness_percent": 80, "due_date": "2026-07-05", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-014-02", "risk_id": "R-014", "owner_user_id": null, "owner_display_name": "PMO Lead", "title": "Document approval workflow", "description": "", "status": "In progress", "progress_percent": 70, "effectiveness_percent": 80, "due_date": "2026-07-05", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-015-01", "risk_id": "R-015", "owner_user_id": null, "owner_display_name": "Data Governance Lead", "title": "Review data source approval", "description": "", "status": "In progress", "progress_percent": 52, "effectiveness_percent": 70, "due_date": "2026-07-15", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-015-02", "risk_id": "R-015", "owner_user_id": null, "owner_display_name": "Data Governance Lead", "title": "Document data lineage", "description": "", "status": "In progress", "progress_percent": 52, "effectiveness_percent": 70, "due_date": "2026-07-15", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-015-03", "risk_id": "R-015", "owner_user_id": null, "owner_display_name": "Data Governance Lead", "title": "Add approval gate to pipeline", "description": "", "status": "In progress", "progress_percent": 52, "effectiveness_percent": 70, "due_date": "2026-07-15", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-016-01", "risk_id": "R-016", "owner_user_id": null, "owner_display_name": "Finance Lead", "title": "Add usage caps", "description": "", "status": "In progress", "progress_percent": 65, "effectiveness_percent": 60, "due_date": "2026-07-19", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-016-02", "risk_id": "R-016", "owner_user_id": null, "owner_display_name": "Finance Lead", "title": "Introduce caching", "description": "", "status": "In progress", "progress_percent": 65, "effectiveness_percent": 60, "due_date": "2026-07-19", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-016-03", "risk_id": "R-016", "owner_user_id": null, "owner_display_name": "Finance Lead", "title": "Track cost per request", "description": "", "status": "In progress", "progress_percent": 65, "effectiveness_percent": 60, "due_date": "2026-07-19", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-017-01", "risk_id": "R-017", "owner_user_id": null, "owner_display_name": "MLOps Lead", "title": "Define monitoring KPIs", "description": "", "status": "In progress", "progress_percent": 48, "effectiveness_percent": 70, "due_date": "2026-07-18", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-017-02", "risk_id": "R-017", "owner_user_id": null, "owner_display_name": "MLOps Lead", "title": "Add model drift alert", "description": "", "status": "In progress", "progress_percent": 48, "effectiveness_percent": 70, "due_date": "2026-07-18", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-017-03", "risk_id": "R-017", "owner_user_id": null, "owner_display_name": "MLOps Lead", "title": "Add incident response workflow", "description": "", "status": "In progress", "progress_percent": 48, "effectiveness_percent": 70, "due_date": "2026-07-18", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-018-01", "risk_id": "R-018", "owner_user_id": null, "owner_display_name": "Change Manager", "title": "Run user training", "description": "", "status": "In progress", "progress_percent": 58, "effectiveness_percent": 55, "due_date": "2026-07-21", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-018-02", "risk_id": "R-018", "owner_user_id": null, "owner_display_name": "Change Manager", "title": "Collect feedback", "description": "", "status": "In progress", "progress_percent": 58, "effectiveness_percent": 55, "due_date": "2026-07-21", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-018-03", "risk_id": "R-018", "owner_user_id": null, "owner_display_name": "Change Manager", "title": "Improve explanation UX", "description": "", "status": "In progress", "progress_percent": 58, "effectiveness_percent": 55, "due_date": "2026-07-21", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-019-01", "risk_id": "R-019", "owner_user_id": null, "owner_display_name": "Operations Lead", "title": "Make review mandatory for high-risk cases", "description": "", "status": "In progress", "progress_percent": 44, "effectiveness_percent": 70, "due_date": "2026-07-17", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-019-02", "risk_id": "R-019", "owner_user_id": null, "owner_display_name": "Operations Lead", "title": "Log reviewer decision", "description": "", "status": "In progress", "progress_percent": 44, "effectiveness_percent": 70, "due_date": "2026-07-17", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-019-03", "risk_id": "R-019", "owner_user_id": null, "owner_display_name": "Operations Lead", "title": "Audit bypass events", "description": "", "status": "In progress", "progress_percent": 44, "effectiveness_percent": 70, "due_date": "2026-07-17", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-020-01", "risk_id": "R-020", "owner_user_id": null, "owner_display_name": "Incident Manager", "title": "Define incident severity levels", "description": "", "status": "In progress", "progress_percent": 57, "effectiveness_percent": 75, "due_date": "2026-07-16", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-020-02", "risk_id": "R-020", "owner_user_id": null, "owner_display_name": "Incident Manager", "title": "Create rollback playbook", "description": "", "status": "In progress", "progress_percent": 57, "effectiveness_percent": 75, "due_date": "2026-07-16", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-020-03", "risk_id": "R-020", "owner_user_id": null, "owner_display_name": "Incident Manager", "title": "Assign escalation contacts", "description": "", "status": "In progress", "progress_percent": 57, "effectiveness_percent": 75, "due_date": "2026-07-16", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-021-01", "risk_id": "R-021", "owner_user_id": null, "owner_display_name": "Security Lead", "title": "Encrypt prompt logs", "description": "", "status": "In progress", "progress_percent": 60, "effectiveness_percent": 75, "due_date": "2026-07-12", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-021-02", "risk_id": "R-021", "owner_user_id": null, "owner_display_name": "Security Lead", "title": "Mask sensitive fields", "description": "", "status": "In progress", "progress_percent": 60, "effectiveness_percent": 75, "due_date": "2026-07-12", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-021-03", "risk_id": "R-021", "owner_user_id": null, "owner_display_name": "Security Lead", "title": "Set retention limits", "description": "", "status": "In progress", "progress_percent": 60, "effectiveness_percent": 75, "due_date": "2026-07-12", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-022-01", "risk_id": "R-022", "owner_user_id": null, "owner_display_name": "Release Manager", "title": "Define rollback trigger", "description": "", "status": "In progress", "progress_percent": 49, "effectiveness_percent": 80, "due_date": "2026-07-14", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-022-02", "risk_id": "R-022", "owner_user_id": null, "owner_display_name": "Release Manager", "title": "Test rollback drill", "description": "", "status": "In progress", "progress_percent": 49, "effectiveness_percent": 80, "due_date": "2026-07-14", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-022-03", "risk_id": "R-022", "owner_user_id": null, "owner_display_name": "Release Manager", "title": "Version model artifacts", "description": "", "status": "In progress", "progress_percent": 49, "effectiveness_percent": 80, "due_date": "2026-07-14", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-023-01", "risk_id": "R-023", "owner_user_id": null, "owner_display_name": "Supplier Manager", "title": "Require version pinning", "description": "", "status": "In progress", "progress_percent": 54, "effectiveness_percent": 65, "due_date": "2026-07-22", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-023-02", "risk_id": "R-023", "owner_user_id": null, "owner_display_name": "Supplier Manager", "title": "Monitor model release notes", "description": "", "status": "In progress", "progress_percent": 54, "effectiveness_percent": 65, "due_date": "2026-07-22", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-023-03", "risk_id": "R-023", "owner_user_id": null, "owner_display_name": "Supplier Manager", "title": "Add supplier notification clause", "description": "", "status": "In progress", "progress_percent": 54, "effectiveness_percent": 65, "due_date": "2026-07-22", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-024-01", "risk_id": "R-024", "owner_user_id": null, "owner_display_name": "ML Engineer", "title": "Track datasets and parameters", "description": "", "status": "In progress", "progress_percent": 72, "effectiveness_percent": 65, "due_date": "2026-07-09", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-024-02", "risk_id": "R-024", "owner_user_id": null, "owner_display_name": "ML Engineer", "title": "Store model artifacts", "description": "", "status": "In progress", "progress_percent": 72, "effectiveness_percent": 65, "due_date": "2026-07-09", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-024-03", "risk_id": "R-024", "owner_user_id": null, "owner_display_name": "ML Engineer", "title": "Record evaluation results", "description": "", "status": "In progress", "progress_percent": 72, "effectiveness_percent": 65, "due_date": "2026-07-09", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-025-01", "risk_id": "R-025", "owner_user_id": null, "owner_display_name": "DevOps Lead", "title": "Stabilize CI/CD pipeline", "description": "", "status": "In progress", "progress_percent": 68, "effectiveness_percent": 70, "due_date": "2026-07-16", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-025-02", "risk_id": "R-025", "owner_user_id": null, "owner_display_name": "DevOps Lead", "title": "Add test artifacts", "description": "", "status": "In progress", "progress_percent": 68, "effectiveness_percent": 70, "due_date": "2026-07-16", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-025-03", "risk_id": "R-025", "owner_user_id": null, "owner_display_name": "DevOps Lead", "title": "Automate metric validation", "description": "", "status": "In progress", "progress_percent": 68, "effectiveness_percent": 70, "due_date": "2026-07-16", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-026-01", "risk_id": "R-026", "owner_user_id": null, "owner_display_name": "IAM Lead", "title": "Define admin roles", "description": "", "status": "In progress", "progress_percent": 64, "effectiveness_percent": 80, "due_date": "2026-07-15", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-026-02", "risk_id": "R-026", "owner_user_id": null, "owner_display_name": "IAM Lead", "title": "Enable MFA", "description": "", "status": "In progress", "progress_percent": 64, "effectiveness_percent": 80, "due_date": "2026-07-15", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-026-03", "risk_id": "R-026", "owner_user_id": null, "owner_display_name": "IAM Lead", "title": "Audit privileged actions", "description": "", "status": "In progress", "progress_percent": 64, "effectiveness_percent": 80, "due_date": "2026-07-15", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-027-01", "risk_id": "R-027", "owner_user_id": null, "owner_display_name": "Responsible AI Lead", "title": "Complete ethical review", "description": "", "status": "In progress", "progress_percent": 25, "effectiveness_percent": 90, "due_date": "2026-07-07", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-027-02", "risk_id": "R-027", "owner_user_id": null, "owner_display_name": "Responsible AI Lead", "title": "Document accountability controls", "description": "", "status": "In progress", "progress_percent": 25, "effectiveness_percent": 90, "due_date": "2026-07-07", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-027-03", "risk_id": "R-027", "owner_user_id": null, "owner_display_name": "Responsible AI Lead", "title": "Record reviewer decision", "description": "", "status": "In progress", "progress_percent": 25, "effectiveness_percent": 90, "due_date": "2026-07-07", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-028-01", "risk_id": "R-028", "owner_user_id": null, "owner_display_name": "Legal Reviewer", "title": "Complete privacy impact assessment", "description": "", "status": "In progress", "progress_percent": 38, "effectiveness_percent": 90, "due_date": "2026-07-09", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-028-02", "risk_id": "R-028", "owner_user_id": null, "owner_display_name": "Legal Reviewer", "title": "Review data processing basis", "description": "", "status": "In progress", "progress_percent": 38, "effectiveness_percent": 90, "due_date": "2026-07-09", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-028-03", "risk_id": "R-028", "owner_user_id": null, "owner_display_name": "Legal Reviewer", "title": "Approve retention policy", "description": "", "status": "In progress", "progress_percent": 38, "effectiveness_percent": 90, "due_date": "2026-07-09", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-029-01", "risk_id": "R-029", "owner_user_id": null, "owner_display_name": "Data Engineer", "title": "Add supplier data checks", "description": "", "status": "In progress", "progress_percent": 51, "effectiveness_percent": 70, "due_date": "2026-07-19", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-029-02", "risk_id": "R-029", "owner_user_id": null, "owner_display_name": "Data Engineer", "title": "Monitor missing values", "description": "", "status": "In progress", "progress_percent": 51, "effectiveness_percent": 70, "due_date": "2026-07-19", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-029-03", "risk_id": "R-029", "owner_user_id": null, "owner_display_name": "Data Engineer", "title": "Create feed rejection rule", "description": "", "status": "In progress", "progress_percent": 51, "effectiveness_percent": 70, "due_date": "2026-07-19", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-030-01", "risk_id": "R-030", "owner_user_id": null, "owner_display_name": "Project Manager", "title": "Run gate workshop", "description": "", "status": "In progress", "progress_percent": 80, "effectiveness_percent": 75, "due_date": "2026-07-05", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-030-02", "risk_id": "R-030", "owner_user_id": null, "owner_display_name": "Project Manager", "title": "Document acceptance thresholds", "description": "", "status": "In progress", "progress_percent": 80, "effectiveness_percent": 75, "due_date": "2026-07-05", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-030-03", "risk_id": "R-030", "owner_user_id": null, "owner_display_name": "Project Manager", "title": "Confirm executive sponsor decision", "description": "", "status": "In progress", "progress_percent": 80, "effectiveness_percent": 75, "due_date": "2026-07-05", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-031-01", "risk_id": "R-031", "owner_user_id": null, "owner_display_name": "QA Lead", "title": "Define edge case taxonomy", "description": "", "status": "In progress", "progress_percent": 53, "effectiveness_percent": 65, "due_date": "2026-07-13", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-031-02", "risk_id": "R-031", "owner_user_id": null, "owner_display_name": "QA Lead", "title": "Generate edge-case test set", "description": "", "status": "In progress", "progress_percent": 53, "effectiveness_percent": 65, "due_date": "2026-07-13", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-031-03", "risk_id": "R-031", "owner_user_id": null, "owner_display_name": "QA Lead", "title": "Review failures with domain expert", "description": "", "status": "In progress", "progress_percent": 53, "effectiveness_percent": 65, "due_date": "2026-07-13", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-032-01", "risk_id": "R-032", "owner_user_id": null, "owner_display_name": "ML Engineer", "title": "Lock dependencies", "description": "", "status": "In progress", "progress_percent": 47, "effectiveness_percent": 70, "due_date": "2026-07-12", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-032-02", "risk_id": "R-032", "owner_user_id": null, "owner_display_name": "ML Engineer", "title": "Record random seeds", "description": "", "status": "In progress", "progress_percent": 47, "effectiveness_percent": 70, "due_date": "2026-07-12", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-032-03", "risk_id": "R-032", "owner_user_id": null, "owner_display_name": "ML Engineer", "title": "Store training environment metadata", "description": "", "status": "In progress", "progress_percent": 47, "effectiveness_percent": 70, "due_date": "2026-07-12", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-033-01", "risk_id": "R-033", "owner_user_id": null, "owner_display_name": "Supplier Manager", "title": "Request supplier assessment", "description": "", "status": "In progress", "progress_percent": 41, "effectiveness_percent": 80, "due_date": "2026-07-21", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-033-02", "risk_id": "R-033", "owner_user_id": null, "owner_display_name": "Supplier Manager", "title": "Review data processing agreement", "description": "", "status": "In progress", "progress_percent": 41, "effectiveness_percent": 80, "due_date": "2026-07-21", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-033-03", "risk_id": "R-033", "owner_user_id": null, "owner_display_name": "Supplier Manager", "title": "Add supplier risk score", "description": "", "status": "In progress", "progress_percent": 41, "effectiveness_percent": 80, "due_date": "2026-07-21", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-034-01", "risk_id": "R-034", "owner_user_id": null, "owner_display_name": "Finance Lead", "title": "Prioritize critical validation tests", "description": "", "status": "In progress", "progress_percent": 50, "effectiveness_percent": 60, "due_date": "2026-07-18", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-034-02", "risk_id": "R-034", "owner_user_id": null, "owner_display_name": "Finance Lead", "title": "Reforecast testing budget", "description": "", "status": "In progress", "progress_percent": 50, "effectiveness_percent": 60, "due_date": "2026-07-18", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-034-03", "risk_id": "R-034", "owner_user_id": null, "owner_display_name": "Finance Lead", "title": "Seek sponsor approval", "description": "", "status": "In progress", "progress_percent": 50, "effectiveness_percent": 60, "due_date": "2026-07-18", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-035-01", "risk_id": "R-035", "owner_user_id": null, "owner_display_name": "Operations Lead", "title": "Define alert severity tiers", "description": "", "status": "In progress", "progress_percent": 59, "effectiveness_percent": 60, "due_date": "2026-07-23", "sequence": 1, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-035-02", "risk_id": "R-035", "owner_user_id": null, "owner_display_name": "Operations Lead", "title": "Group duplicate alerts", "description": "", "status": "In progress", "progress_percent": 59, "effectiveness_percent": 60, "due_date": "2026-07-23", "sequence": 2, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MIT-035-03", "risk_id": "R-035", "owner_user_id": null, "owner_display_name": "Operations Lead", "title": "Tune alert thresholds", "description": "", "status": "In progress", "progress_percent": 59, "effectiveness_percent": 60, "due_date": "2026-07-23", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" } ], "indicators": [ { "id": "IND-001", "project_id": "cosmic-ai-risk-001", "name": "Overall AI Risk Score", "measurand": "Combined residual exposure across active risks", "unit": "0-100 normalized score", "threshold_min": null, "threshold_max": null, "interpretation_rule": "Higher score means greater residual AI project risk.", "dimension": null, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "IND-002", "project_id": "cosmic-ai-risk-001", "name": "Mitigation Completion", "measurand": "Completed mitigation actions divided by planned mitigation actions", "unit": "Percent", "threshold_min": null, "threshold_max": null, "interpretation_rule": "Below 60 percent blocks the deployment gate in this implementation.", "dimension": null, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "IND-003", "project_id": "cosmic-ai-risk-001", "name": "Data Readiness", "measurand": "Data quality, documentation, consent, privacy, and lineage readiness", "unit": "0-100 normalized score", "threshold_min": null, "threshold_max": null, "interpretation_rule": "Below 70 increases technical and legal risk.", "dimension": null, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "IND-004", "project_id": "cosmic-ai-risk-001", "name": "Model Performance Readiness", "measurand": "Selected model performance against project threshold", "unit": "Pass, Warning, Fail", "threshold_min": null, "threshold_max": null, "interpretation_rule": "Fail blocks deployment. Warning requires reviewer acceptance.", "dimension": null, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "IND-005", "project_id": "cosmic-ai-risk-001", "name": "Ethical Review Status", "measurand": "Completion and approval of ethical review", "unit": "Status", "threshold_min": null, "threshold_max": null, "interpretation_rule": "Pending or rejected status blocks deployment for sensitive AI systems.", "dimension": null, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "IND-006", "project_id": "cosmic-ai-risk-001", "name": "Legal Review Status", "measurand": "Completion and approval of legal and privacy review", "unit": "Status", "threshold_min": null, "threshold_max": null, "interpretation_rule": "Pending or rejected status blocks deployment.", "dimension": null, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" } ], "measurement_records": [], "experiments": [ { "id": "EXP-001", "project_id": "cosmic-ai-risk-001", "name": "Baseline classifier", "model_name": "Logistic Regression", "dataset_version": "v1.0", "selected": false, "reproducibility_status": "Complete", "bias_status": "Warning", "stability_score": 72, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "EXP-002", "project_id": "cosmic-ai-risk-001", "name": "Transformer model v2", "model_name": "Fine-tuned transformer", "dataset_version": "v1.1", "selected": true, "reproducibility_status": "Partial", "bias_status": "Fail", "stability_score": 68, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "EXP-003", "project_id": "cosmic-ai-risk-001", "name": "Regularized model v3", "model_name": "Gradient boosted model", "dataset_version": "v1.2", "selected": false, "reproducibility_status": "Complete", "bias_status": "Pass", "stability_score": 81, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" } ], "model_metrics": [ { "id": "MET-001-ACCURACY", "experiment_id": "EXP-001", "metric_name": "accuracy", "metric_value": 0.78, "threshold_value": null, "status": "Pass", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-001-F1", "experiment_id": "EXP-001", "metric_name": "f1", "metric_value": 0.74, "threshold_value": 0.8, "status": "Warning", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-001-PRECISION", "experiment_id": "EXP-001", "metric_name": "precision", "metric_value": 0.76, "threshold_value": null, "status": "Pass", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-001-RECALL", "experiment_id": "EXP-001", "metric_name": "recall", "metric_value": 0.72, "threshold_value": null, "status": "Pass", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-001-AUC", "experiment_id": "EXP-001", "metric_name": "auc", "metric_value": 0.81, "threshold_value": null, "status": "Pass", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-001-STABILITY", "experiment_id": "EXP-001", "metric_name": "stability", "metric_value": 72, "threshold_value": 75, "status": "Warning", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-002-ACCURACY", "experiment_id": "EXP-002", "metric_name": "accuracy", "metric_value": 0.84, "threshold_value": null, "status": "Pass", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-002-F1", "experiment_id": "EXP-002", "metric_name": "f1", "metric_value": 0.82, "threshold_value": 0.8, "status": "Pass", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-002-PRECISION", "experiment_id": "EXP-002", "metric_name": "precision", "metric_value": 0.83, "threshold_value": null, "status": "Pass", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-002-RECALL", "experiment_id": "EXP-002", "metric_name": "recall", "metric_value": 0.81, "threshold_value": null, "status": "Pass", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-002-AUC", "experiment_id": "EXP-002", "metric_name": "auc", "metric_value": 0.88, "threshold_value": null, "status": "Pass", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-002-STABILITY", "experiment_id": "EXP-002", "metric_name": "stability", "metric_value": 68, "threshold_value": 75, "status": "Warning", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-003-ACCURACY", "experiment_id": "EXP-003", "metric_name": "accuracy", "metric_value": 0.82, "threshold_value": null, "status": "Pass", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-003-F1", "experiment_id": "EXP-003", "metric_name": "f1", "metric_value": 0.79, "threshold_value": 0.8, "status": "Warning", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-003-PRECISION", "experiment_id": "EXP-003", "metric_name": "precision", "metric_value": 0.8, "threshold_value": null, "status": "Pass", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-003-RECALL", "experiment_id": "EXP-003", "metric_name": "recall", "metric_value": 0.78, "threshold_value": null, "status": "Pass", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-003-AUC", "experiment_id": "EXP-003", "metric_name": "auc", "metric_value": 0.86, "threshold_value": null, "status": "Pass", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, { "id": "MET-003-STABILITY", "experiment_id": "EXP-003", "metric_name": "stability", "metric_value": 81, "threshold_value": 75, "status": "Pass", "measured_at": "2026-07-03T00:00:00.000Z", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" } ], "deployment_gates": [ { "project_id": "cosmic-ai-risk-001", "status": "Blocked", "review_status": "Pending review", "summary": "Deployment gate blocked by 6 criterion or criteria.", "evaluated_by_user_id": "USER-SYSTEM", "evaluated_at": "2026-07-04T17:06:51.395Z", "reviewed_by_display_name": null, "reviewed_at": null, "id": "GATE-MR6M72BN-YHI8GD", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:06:51.395Z" } ], "gate_criteria": [ { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Overall risk score", "actual_value": "52", "expected_rule": "<= 50", "status": "Fail", "blocking": true, "evidence": "Calculated from residual active risks and approval penalty.", "evidence_title": "Calculated from residual active risks and approval penalty.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-DP6ONP", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:12:31.387Z" }, { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Open critical risks", "actual_value": "0", "expected_rule": "<= 0", "status": "Pass", "blocking": false, "evidence": "Critical risks must be closed, accepted, or approved.", "evidence_title": "Critical risks must be closed, accepted, or approved.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-PFGF69", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:12:31.360Z" }, { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Mitigation completeness", "actual_value": "54%", "expected_rule": ">= 60%", "status": "Fail", "blocking": true, "evidence": "Average mitigation progress across active risks.", "evidence_title": "Average mitigation progress across active risks.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-VQYRQV", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:12:31.376Z" }, { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Data readiness", "actual_value": "68", "expected_rule": ">= 70", "status": "Fail", "blocking": true, "evidence": "Data lineage and consent records incomplete for two sources.", "evidence_title": "Data lineage and consent records incomplete for two sources.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-S6UY67", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:12:31.348Z" }, { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Selected model performance", "actual_value": "0.82", "expected_rule": "F1 >= 0.8", "status": "Pass", "blocking": false, "evidence": "Transformer model v2 selected for gate review.", "evidence_title": "Transformer model v2 selected for gate review.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-LPRP2P", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:12:31.392Z" }, { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Selected model stability", "actual_value": "68", "expected_rule": ">= 75", "status": "Warning", "blocking": false, "evidence": "Stability is based on repeated evaluation variation.", "evidence_title": "Stability is based on repeated evaluation variation.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-FFM1LR", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:12:31.370Z" }, { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Ethical review", "actual_value": "Pending", "expected_rule": "Approved or Accepted", "status": "Fail", "blocking": true, "evidence": "Bias and accountability review still open.", "evidence_title": "Bias and accountability review still open.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-QLYPCA", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:12:31.381Z" }, { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Legal review", "actual_value": "Pending", "expected_rule": "Approved or Accepted", "status": "Fail", "blocking": true, "evidence": "Privacy impact assessment not approved.", "evidence_title": "Privacy impact assessment not approved.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BO-M1P4TW", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:12:31.365Z" }, { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "High-risk approval state", "actual_value": "3", "expected_rule": "No unapproved high risks", "status": "Fail", "blocking": true, "evidence": "High risks require owner approval, acceptance, closure, or documented treatment.", "evidence_title": "High risks require owner approval, acceptance, closure, or documented treatment.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BO-IVO70Z", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:12:31.354Z" } ], "gate_decisions": [], "evidence_artifacts": [ { "id": "EVD-001", "project_id": "cosmic-ai-risk-001", "risk_id": "R-001", "type": "Review", "title": "Adversarial prompt test suite partially complete.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-002", "project_id": "cosmic-ai-risk-001", "risk_id": "R-002", "type": "Review", "title": "Legal disclaimer and escalation workflow not approved.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-003", "project_id": "cosmic-ai-risk-001", "risk_id": "R-003", "type": "Review", "title": "PII masking checks passing for structured fields only.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-004", "project_id": "cosmic-ai-risk-001", "risk_id": "R-004", "type": "Review", "title": "Disparate impact metric exceeds threshold for one group.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-005", "project_id": "cosmic-ai-risk-001", "risk_id": "R-005", "type": "Review", "title": "Recall is below target in high-risk segment.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-006", "project_id": "cosmic-ai-risk-001", "risk_id": "R-006", "type": "Review", "title": "Unsafe advice scenario failed review.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-007", "project_id": "cosmic-ai-risk-001", "risk_id": "R-007", "type": "Review", "title": "Fallback model contract still under review.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-008", "project_id": "cosmic-ai-risk-001", "risk_id": "R-008", "type": "Review", "title": "Drift dashboard exists but alert thresholds are not approved.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-009", "project_id": "cosmic-ai-risk-001", "risk_id": "R-009", "type": "Review", "title": "Consent status missing for two supplier data feeds.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-010", "project_id": "cosmic-ai-risk-001", "risk_id": "R-010", "type": "Review", "title": "Reason codes displayed for only three decision classes.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-011", "project_id": "cosmic-ai-risk-001", "risk_id": "R-011", "type": "Review", "title": "Selected model meets F1 threshold but stability warning remains.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-012", "project_id": "cosmic-ai-risk-001", "risk_id": "R-012", "type": "Review", "title": "Leakage scan passed after split correction.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-013", "project_id": "cosmic-ai-risk-001", "risk_id": "R-013", "type": "Review", "title": "Business objective and acceptance criteria approved.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-014", "project_id": "cosmic-ai-risk-001", "risk_id": "R-014", "type": "Review", "title": "Delegated owner named, final approval pending.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-015", "project_id": "cosmic-ai-risk-001", "risk_id": "R-015", "type": "Review", "title": "Supplier data source missing governance approval.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-016", "project_id": "cosmic-ai-risk-001", "risk_id": "R-016", "type": "Review", "title": "Monthly inference budget forecast exceeds baseline by 18 percent.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-017", "project_id": "cosmic-ai-risk-001", "risk_id": "R-017", "type": "Review", "title": "Monitoring coverage excludes bias and latency alerts.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-018", "project_id": "cosmic-ai-risk-001", "risk_id": "R-018", "type": "Review", "title": "User training plan drafted but not delivered.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-019", "project_id": "cosmic-ai-risk-001", "risk_id": "R-019", "type": "Review", "title": "No enforcement mechanism for mandatory review cases.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-020", "project_id": "cosmic-ai-risk-001", "risk_id": "R-020", "type": "Review", "title": "Runbook lacks AI-specific rollback decision tree.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-021", "project_id": "cosmic-ai-risk-001", "risk_id": "R-021", "type": "Review", "title": "Sensitive prompt fields encrypted, retention policy pending.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-022", "project_id": "cosmic-ai-risk-001", "risk_id": "R-022", "type": "Review", "title": "Rollback documented but not tested.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-023", "project_id": "cosmic-ai-risk-001", "risk_id": "R-023", "type": "Review", "title": "Vendor notice clause missing from service agreement.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-024", "project_id": "cosmic-ai-risk-001", "risk_id": "R-024", "type": "Review", "title": "Experiment parameters captured for latest three runs.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-025", "project_id": "cosmic-ai-risk-001", "risk_id": "R-025", "type": "Review", "title": "Pipeline retry logic added, full test pending.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-026", "project_id": "cosmic-ai-risk-001", "risk_id": "R-026", "type": "Review", "title": "Role-based permissions configured, audit review pending.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-027", "project_id": "cosmic-ai-risk-001", "risk_id": "R-027", "type": "Review", "title": "Ethical review meeting scheduled but decision not recorded.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-028", "project_id": "cosmic-ai-risk-001", "risk_id": "R-028", "type": "Review", "title": "Privacy impact assessment is incomplete.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-029", "project_id": "cosmic-ai-risk-001", "risk_id": "R-029", "type": "Review", "title": "Missing value rate increased above tolerance in one feed.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-030", "project_id": "cosmic-ai-risk-001", "risk_id": "R-030", "type": "Review", "title": "Gate criteria agreed except legal approval state.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-031", "project_id": "cosmic-ai-risk-001", "risk_id": "R-031", "type": "Review", "title": "Synthetic edge-case tests cover only critical class A.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-032", "project_id": "cosmic-ai-risk-001", "risk_id": "R-032", "type": "Review", "title": "Random seeds captured, dependency lock incomplete.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-033", "project_id": "cosmic-ai-risk-001", "risk_id": "R-033", "type": "Review", "title": "Supplier security and privacy questionnaire not returned.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-034", "project_id": "cosmic-ai-risk-001", "risk_id": "R-034", "type": "Review", "title": "Additional validation budget requested.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "id": "EVD-035", "project_id": "cosmic-ai-risk-001", "risk_id": "R-035", "type": "Review", "title": "Monitoring thresholds produce too many low-priority alerts.", "uri": null, "created_by_user_id": "USER-SYSTEM", "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "mitigation_id": null }, { "project_id": "cosmic-ai-risk-001", "risk_id": "R-003", "mitigation_id": "MIT-003-03", "type": "Review", "title": "Mitigation marked done: Complete privacy review", "uri": null, "created_by_user_id": "USER-SYSTEM", "id": "EVD-MRF34NLZ-KB2AR5", "created_at": "2026-07-10T15:23:01.895Z", "updated_at": "2026-07-10T15:23:01.895Z" } ], "audit_events": [ { "project_id": "system", "actor_user_id": "USER-SYSTEM", "entity_type": "AccessControl", "entity_id": "defaults", "action": "seed-defaults", "before_json": null, "after_json": { "roleCount": 8, "userCount": 8 }, "created_at": "2026-07-04T03:46:11.527Z", "updated_at": "2026-07-04T03:46:11.527Z", "id": "AUDIT-MR5TLEIV-YHIUJW" }, { "project_id": "system", "actor_user_id": "USER-SYSTEM", "entity_type": "AccessControl", "entity_id": "defaults", "action": "seed-defaults", "before_json": null, "after_json": { "roleCount": 8, "userCount": 8 }, "created_at": "2026-07-04T04:11:10.213Z", "updated_at": "2026-07-04T04:11:10.213Z", "id": "AUDIT-MR5UHIX1-B09EAZ" }, { "project_id": "system", "actor_user_id": "USER-SYSTEM", "entity_type": "AccessControl", "entity_id": "defaults", "action": "seed-defaults", "before_json": null, "after_json": { "roleCount": 8, "userCount": 8 }, "created_at": "2026-07-04T16:58:58.649Z", "updated_at": "2026-07-04T16:58:58.649Z", "id": "AUDIT-MR6LWXJT-18KPOR" }, { "project_id": "system", "actor_user_id": "USER-SYSTEM", "entity_type": "AccessControl", "entity_id": "defaults", "action": "seed-defaults", "before_json": null, "after_json": { "roleCount": 8, "userCount": 8 }, "created_at": "2026-07-04T17:05:33.594Z", "updated_at": "2026-07-04T17:05:33.594Z", "id": "AUDIT-MR6M5EAI-BJLGSR" }, { "project_id": "cosmic-ai-risk-001", "actor_user_id": "USER-SYSTEM", "entity_type": "GateCriterion", "entity_id": "GCR-MR6M72BN-S6UY67", "action": "update", "before_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Data readiness", "actual_value": "68", "expected_rule": ">= 70", "status": "Fail", "blocking": true, "evidence": "Data lineage and consent records incomplete for two sources.", "evidence_title": "Data lineage and consent records incomplete for two sources.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-S6UY67", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:06:51.395Z" }, "after_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Data readiness", "actual_value": "68", "expected_rule": ">= 70", "status": "Fail", "blocking": true, "evidence": "Data lineage and consent records incomplete for two sources.", "evidence_title": "Data lineage and consent records incomplete for two sources.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-S6UY67", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:12:31.348Z" }, "created_at": "2026-07-04T17:12:31.348Z", "updated_at": "2026-07-04T17:12:31.348Z", "id": "AUDIT-MR6MECMS-Q60F55" }, { "project_id": "cosmic-ai-risk-001", "actor_user_id": "USER-SYSTEM", "entity_type": "GateCriterion", "entity_id": "GCR-MR6M72BO-IVO70Z", "action": "update", "before_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "High-risk approval state", "actual_value": "3", "expected_rule": "No unapproved high risks", "status": "Fail", "blocking": true, "evidence": "High risks require owner approval, acceptance, closure, or documented treatment.", "evidence_title": "High risks require owner approval, acceptance, closure, or documented treatment.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BO-IVO70Z", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, "after_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "High-risk approval state", "actual_value": "3", "expected_rule": "No unapproved high risks", "status": "Fail", "blocking": true, "evidence": "High risks require owner approval, acceptance, closure, or documented treatment.", "evidence_title": "High risks require owner approval, acceptance, closure, or documented treatment.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BO-IVO70Z", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:12:31.354Z" }, "created_at": "2026-07-04T17:12:31.354Z", "updated_at": "2026-07-04T17:12:31.354Z", "id": "AUDIT-MR6MECMZ-QOKHJF" }, { "project_id": "cosmic-ai-risk-001", "actor_user_id": "USER-SYSTEM", "entity_type": "GateCriterion", "entity_id": "GCR-MR6M72BN-PFGF69", "action": "update", "before_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Open critical risks", "actual_value": "0", "expected_rule": "<= 0", "status": "Pass", "blocking": false, "evidence": "Critical risks must be closed, accepted, or approved.", "evidence_title": "Critical risks must be closed, accepted, or approved.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-PFGF69", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:06:51.395Z" }, "after_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Open critical risks", "actual_value": "0", "expected_rule": "<= 0", "status": "Pass", "blocking": false, "evidence": "Critical risks must be closed, accepted, or approved.", "evidence_title": "Critical risks must be closed, accepted, or approved.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-PFGF69", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:12:31.360Z" }, "created_at": "2026-07-04T17:12:31.360Z", "updated_at": "2026-07-04T17:12:31.360Z", "id": "AUDIT-MR6MECN4-5NZNEY" }, { "project_id": "cosmic-ai-risk-001", "actor_user_id": "USER-SYSTEM", "entity_type": "GateCriterion", "entity_id": "GCR-MR6M72BO-M1P4TW", "action": "update", "before_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Legal review", "actual_value": "Pending", "expected_rule": "Approved or Accepted", "status": "Fail", "blocking": true, "evidence": "Privacy impact assessment not approved.", "evidence_title": "Privacy impact assessment not approved.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BO-M1P4TW", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:06:51.396Z" }, "after_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Legal review", "actual_value": "Pending", "expected_rule": "Approved or Accepted", "status": "Fail", "blocking": true, "evidence": "Privacy impact assessment not approved.", "evidence_title": "Privacy impact assessment not approved.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BO-M1P4TW", "created_at": "2026-07-04T17:06:51.396Z", "updated_at": "2026-07-04T17:12:31.365Z" }, "created_at": "2026-07-04T17:12:31.365Z", "updated_at": "2026-07-04T17:12:31.365Z", "id": "AUDIT-MR6MECN9-172P34" }, { "project_id": "cosmic-ai-risk-001", "actor_user_id": "USER-SYSTEM", "entity_type": "GateCriterion", "entity_id": "GCR-MR6M72BN-FFM1LR", "action": "update", "before_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Selected model stability", "actual_value": "68", "expected_rule": ">= 75", "status": "Warning", "blocking": false, "evidence": "Stability is based on repeated evaluation variation.", "evidence_title": "Stability is based on repeated evaluation variation.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-FFM1LR", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:06:51.395Z" }, "after_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Selected model stability", "actual_value": "68", "expected_rule": ">= 75", "status": "Warning", "blocking": false, "evidence": "Stability is based on repeated evaluation variation.", "evidence_title": "Stability is based on repeated evaluation variation.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-FFM1LR", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:12:31.370Z" }, "created_at": "2026-07-04T17:12:31.370Z", "updated_at": "2026-07-04T17:12:31.370Z", "id": "AUDIT-MR6MECNE-GYA8QL" }, { "project_id": "cosmic-ai-risk-001", "actor_user_id": "USER-SYSTEM", "entity_type": "GateCriterion", "entity_id": "GCR-MR6M72BN-VQYRQV", "action": "update", "before_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Mitigation completeness", "actual_value": "54%", "expected_rule": ">= 60%", "status": "Fail", "blocking": true, "evidence": "Average mitigation progress across active risks.", "evidence_title": "Average mitigation progress across active risks.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-VQYRQV", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:06:51.395Z" }, "after_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Mitigation completeness", "actual_value": "54%", "expected_rule": ">= 60%", "status": "Fail", "blocking": true, "evidence": "Average mitigation progress across active risks.", "evidence_title": "Average mitigation progress across active risks.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-VQYRQV", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:12:31.376Z" }, "created_at": "2026-07-04T17:12:31.376Z", "updated_at": "2026-07-04T17:12:31.376Z", "id": "AUDIT-MR6MECNK-3TZZSV" }, { "project_id": "cosmic-ai-risk-001", "actor_user_id": "USER-SYSTEM", "entity_type": "GateCriterion", "entity_id": "GCR-MR6M72BN-QLYPCA", "action": "update", "before_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Ethical review", "actual_value": "Pending", "expected_rule": "Approved or Accepted", "status": "Fail", "blocking": true, "evidence": "Bias and accountability review still open.", "evidence_title": "Bias and accountability review still open.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-QLYPCA", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:06:51.395Z" }, "after_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Ethical review", "actual_value": "Pending", "expected_rule": "Approved or Accepted", "status": "Fail", "blocking": true, "evidence": "Bias and accountability review still open.", "evidence_title": "Bias and accountability review still open.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-QLYPCA", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:12:31.381Z" }, "created_at": "2026-07-04T17:12:31.381Z", "updated_at": "2026-07-04T17:12:31.381Z", "id": "AUDIT-MR6MECNP-W3OVT9" }, { "project_id": "cosmic-ai-risk-001", "actor_user_id": "USER-SYSTEM", "entity_type": "GateCriterion", "entity_id": "GCR-MR6M72BN-DP6ONP", "action": "update", "before_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Overall risk score", "actual_value": "52", "expected_rule": "<= 50", "status": "Fail", "blocking": true, "evidence": "Calculated from residual active risks and approval penalty.", "evidence_title": "Calculated from residual active risks and approval penalty.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-DP6ONP", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:06:51.395Z" }, "after_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Overall risk score", "actual_value": "52", "expected_rule": "<= 50", "status": "Fail", "blocking": true, "evidence": "Calculated from residual active risks and approval penalty.", "evidence_title": "Calculated from residual active risks and approval penalty.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-DP6ONP", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:12:31.387Z" }, "created_at": "2026-07-04T17:12:31.387Z", "updated_at": "2026-07-04T17:12:31.387Z", "id": "AUDIT-MR6MECNV-J0XXHS" }, { "project_id": "cosmic-ai-risk-001", "actor_user_id": "USER-SYSTEM", "entity_type": "GateCriterion", "entity_id": "GCR-MR6M72BN-LPRP2P", "action": "update", "before_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Selected model performance", "actual_value": "0.82", "expected_rule": "F1 >= 0.8", "status": "Pass", "blocking": false, "evidence": "Transformer model v2 selected for gate review.", "evidence_title": "Transformer model v2 selected for gate review.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-LPRP2P", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:06:51.395Z" }, "after_json": { "gate_id": "GATE-MR6M72BN-YHI8GD", "name": "Selected model performance", "actual_value": "0.82", "expected_rule": "F1 >= 0.8", "status": "Pass", "blocking": false, "evidence": "Transformer model v2 selected for gate review.", "evidence_title": "Transformer model v2 selected for gate review.", "evidence_uri": "", "reviewer_status": "Open", "reviewer_note": "", "id": "GCR-MR6M72BN-LPRP2P", "created_at": "2026-07-04T17:06:51.395Z", "updated_at": "2026-07-04T17:12:31.392Z" }, "created_at": "2026-07-04T17:12:31.392Z", "updated_at": "2026-07-04T17:12:31.392Z", "id": "AUDIT-MR6MECO0-EWWNMA" }, { "project_id": "system", "actor_user_id": "USER-SYSTEM", "entity_type": "AccessControl", "entity_id": "defaults", "action": "seed-defaults", "before_json": null, "after_json": { "roleCount": 8, "userCount": 8 }, "created_at": "2026-07-07T17:19:25.988Z", "updated_at": "2026-07-07T17:19:25.988Z", "id": "AUDIT-MRAWYSKK-OBV9FS" }, { "project_id": "cosmic-ai-risk-001", "actor_user_id": "USER-SYSTEM", "entity_type": "MitigationAction", "entity_id": "MIT-003-03", "action": "update", "before_json": { "id": "MIT-003-03", "risk_id": "R-003", "owner_user_id": null, "owner_display_name": "Data Protection Lead", "title": "Complete privacy review", "description": "", "status": "In progress", "progress_percent": 50, "effectiveness_percent": 65, "due_date": "2026-07-08", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z" }, "after_json": { "id": "MIT-003-03", "risk_id": "R-003", "owner_user_id": null, "owner_display_name": "Data Protection Lead", "title": "Complete privacy review", "description": "", "status": "Done", "progress_percent": 100, "effectiveness_percent": 80, "due_date": "2026-07-08", "sequence": 3, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-10T15:23:01.895Z" }, "created_at": "2026-07-10T15:23:01.895Z", "updated_at": "2026-07-10T15:23:01.895Z", "id": "AUDIT-MRF34NLZ-PPPYNU" }, { "project_id": "system", "actor_user_id": "USER-SYSTEM", "entity_type": "AccessControl", "entity_id": "defaults", "action": "seed-defaults", "before_json": null, "after_json": { "roleCount": 8, "userCount": 8 }, "created_at": "2026-07-11T10:39:16.968Z", "updated_at": "2026-07-11T10:39:16.968Z", "id": "AUDIT-MRG8FLRC-J5WRNU" }, { "project_id": "system", "actor_user_id": "USER-SYSTEM", "entity_type": "AccessControl", "entity_id": "defaults", "action": "seed-defaults", "before_json": null, "after_json": { "roleCount": 8, "userCount": 8 }, "created_at": "2026-07-30T18:36:35.594Z", "updated_at": "2026-07-30T18:36:35.594Z", "id": "AUDIT-MS7UUM4R-20JTHP" }, { "project_id": "system", "actor_user_id": "USER-SYSTEM", "entity_type": "AccessControl", "entity_id": "defaults", "action": "seed-defaults", "before_json": null, "after_json": { "roleCount": 8, "userCount": 8 }, "created_at": "2026-07-31T00:16:28.560Z", "updated_at": "2026-07-31T00:16:28.560Z", "id": "AUDIT-MS86ZPG1-8FS31O" }, { "project_id": "system", "actor_user_id": "USER-SYSTEM", "entity_type": "AccessControl", "entity_id": "defaults", "action": "seed-defaults", "before_json": null, "after_json": { "roleCount": 8, "userCount": 8 }, "created_at": "2026-09-04T17:27:32.165Z", "updated_at": "2026-09-04T17:27:32.165Z", "id": "AUDIT-MTN88H1H-R195U6" } ], "trello_mappings": [], "project_management_integrations": [ { "id": "PMI-TRELLO", "project_id": "cosmic-ai-risk-001", "provider": "Trello", "workspace_name": "COSMIC AI-Risk Trello Board", "external_project_key": "TRELLO_LIST_ID_REQUIRED", "base_url": "https://trello.com", "auth_mode": "Trello API key + user token", "connection_status": "Needs configuration", "sync_direction": "COSMIC to PM", "last_sync_at": null, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "live_enabled": false, "live_config_json": "{}" }, { "id": "PMI-JIRA", "project_id": "cosmic-ai-risk-001", "provider": "Jira", "workspace_name": "COSMIC AI-Risk Jira Project", "external_project_key": "AIRISK", "base_url": "https://your-domain.atlassian.net", "auth_mode": "OAuth 2.0 3LO or API token", "connection_status": "Needs configuration", "sync_direction": "Bidirectional", "last_sync_at": null, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "live_enabled": false, "live_config_json": "{\"cloudId\":\"JIRA_CLOUD_ID_REQUIRED\"}" }, { "id": "PMI-ASANA", "project_id": "cosmic-ai-risk-001", "provider": "Asana", "workspace_name": "COSMIC AI-Risk Asana Project", "external_project_key": "1200000000000001", "base_url": "https://app.asana.example.invalid/0/1200000000000001", "auth_mode": "OAuth 2.0 authorization code", "connection_status": "Needs configuration", "sync_direction": "COSMIC to PM", "last_sync_at": null, "created_at": "2026-07-03T00:00:00.000Z", "updated_at": "2026-07-03T00:00:00.000Z", "live_enabled": false, "live_config_json": "{}" }, { "id": "PMI-MICROSOFT-PLANNER", "project_id": "cosmic-ai-risk-001", "provider": "Microsoft Planner", "workspace_name": "COSMIC AI-Risk Microsoft 365 Group", "external_project_key": "PLAN-AI-RISK", "base_url": "https://tasks.office.com/example.invalid/Home/Planner", "auth_mode": "Microsoft Graph OAuth 2.0", "connection_status": "Needs configuration", "sync_direction": "COSMIC to PM", "last_sync_at": null, "created_at": "2026-07-04T02:10:00.000Z", "updated_at": "2026-07-04T02:10:00.000Z", "live_enabled": false, "live_config_json": "{\"bucketId\":\"PLANNER_BUCKET_ID_REQUIRED\"}" } ], "external_work_item_mappings": [], "project_management_sync_runs": [], "report_exports": [], "oauth_states": [], "oauth_tokens": [] } }
Save
cmd:
run