FM / docs

/home/techb158/cosmic-risk.abdallabala.com/docs/

/home/techb158/cosmic-risk.abdallabala.com/docs

Name	Size	Mode	Actions
00-design-study.md	3678	0644	edit dl rm
01-uml-class-diagram.puml	11869	0644	edit dl rm
02-use-case-diagram.puml	3763	0644	edit dl rm
03-sequence-diagrams.puml	9732	0644	edit dl rm
04-database-entity-model.mmd	7051	0644	edit dl rm
05-database-schema.sql	13372	0644	edit dl rm
06-diagram-preview.html	5021	0644	edit dl rm
07-design-checklist.md	3256	0644	edit dl rm
08-step-2-storage-layer.md	5325	0644	edit dl rm
09-step-3-risk-crud-ui.md	3380	0644	edit dl rm
10-step-4-mitigation-workflow.md	3996	0644	edit dl rm
11-step-5-deployment-gate-workflow.md	2292	0644	edit dl rm
12-step-6-multi-pm-integration.md	3770	0644	edit dl rm
13-step-6-1-microsoft-planner-integration.md	2335	0644	edit dl rm
14-step-7-reporting-export.md	4158	0644	edit dl rm
15-step-7-1-oauth-live-connectors.md	4545	0644	edit dl rm
16-step-8-user-roles-access-control.md	3297	0644	edit dl rm
17-step-9-production-deployment-security.md	4228	0644	edit dl rm
18-step-10-final-academic-submission.md	3199	0644	edit dl rm
19-final-report-draft.md	6814	0644	edit dl rm
20-instructor-submission-checklist.md	3639	0644	edit dl rm
21-demo-script.md	3948	0644	edit dl rm
22-traceability-matrix.md	4847	0644	edit dl rm
23-testing-evidence.md	2961	0644	edit dl rm
24-evaluation-rubric-mapping.md	2910	0644	edit dl rm
25-final-deployment-runbook.md	3214	0644	edit dl rm
26-known-limitations-and-future-work.md	2632	0644	edit dl rm
27-final-qa-checklist.md	2893	0644	edit dl rm
28-demo-rehearsal-script.md	3618	0644	edit dl rm
29-submission-freeze-report.md	2769	0644	edit dl rm
30-final-known-issues.md	1876	0644	edit dl rm
31-saas-rebuild-implementation.md	2573	0644	edit dl rm
application-documentation.md	27515	0644	edit dl rm
conversation-log.md	18503	0644	edit dl rm
dashboard-spec.md	3691	0644	edit dl rm
database-guide.md	37826	0644	edit dl rm
development-summary.md	7070	0644	edit dl rm
github-architecture.svg	6288	0644	edit dl rm
integration-pull-push-plan.md	7384	0644	edit dl rm

Edit: /home/techb158/cosmic-risk.abdallabala.com/docs/14-step-7-reporting-export.md (4158B)

# Step 7: Reporting and Export Module

## Purpose

The reporting module converts the COSMIC AI-Risk Dashboard evidence into instructor-ready and reviewer-ready exports.

This step is an implementation extension. The source project defines the need for a measurable AI risk framework, software prototype, REST API, indicators, risk analysis engine, and project-management integration. The reporting module packages that evidence so it can be submitted, reviewed, audited, or printed.

## Source-derived concepts used

| Source concept | Reporting implementation |
|---|---|
| Quantified AI project risk | Executive report and risk register export |
| Organizational, technical, and human dimensions | Governance triangle section in the report |
| ISO-style indicators | Indicator report with measurand, unit, threshold, and interpretation |
| Software prototype and REST API | Report endpoints under `/api/projects/{projectId}/reports` |
| Project-management integration | Integration report for Trello, Jira, Asana, and Microsoft Planner |
| Validation and transfer | Printable HTML report and machine-readable JSON evidence package |

## Reports implemented

| Report | Endpoint | Format |
|---|---|---|
| Executive report | `/api/projects/{projectId}/reports/executive` | JSON |
| Printable executive report | `/api/projects/{projectId}/reports/executive.html` | HTML |
| Full evidence package | `/api/projects/{projectId}/reports/full` | JSON |
| Downloadable full evidence package | `/api/projects/{projectId}/reports/full.json` | JSON file |
| Risk register | `/api/projects/{projectId}/reports/risk-register` | JSON |
| Risk register export | `/api/projects/{projectId}/reports/risk-register.csv` | CSV |
| Mitigation report | `/api/projects/{projectId}/reports/mitigations` | JSON |
| Mitigation export | `/api/projects/{projectId}/reports/mitigations.csv` | CSV |
| Deployment gate report | `/api/projects/{projectId}/reports/gate` | JSON |
| Indicator report | `/api/projects/{projectId}/reports/indicators` | JSON |
| Integration report | `/api/projects/{projectId}/reports/integrations` | JSON |
| Audit trail report | `/api/projects/{projectId}/reports/audit` | JSON |

## UI changes

The dashboard now includes a Reports tab with these actions:

1. Open executive HTML report.
2. Download full JSON evidence package.
3. Download risk register CSV.
4. Download mitigations CSV.
5. Download gate report JSON.
6. Download audit report JSON.

The header Export report JSON button now uses the full reporting package when the API is available.

## Report package coverage

The full evidence package includes:

1. Executive summary.
2. Governance triangle scores.
3. Lifecycle readiness map.
4. Risk register.
5. Mitigation workflow data.
6. Deployment gate criteria and decisions.
7. Indicator catalog.
8. Project-management integration mappings.
9. Audit trail.

## Acceptance criteria

| Check | Expected result |
|---|---|
| Executive JSON | Includes summary, dimensions, lifecycle, top risks, gate, indicators, and integration summary |
| Executive HTML | Opens as a printable report and can be saved as PDF from the browser |
| Risk CSV | Contains all project risks with normalized and residual scores |
| Mitigation CSV | Contains all mitigation actions with linked risks and evidence counts |
| Gate report | Includes current gate and persisted gate history |
| Audit report | Includes governance workflow audit events |
| Tests | `npm test` passes |

## Implementation files

| File | Role |
|---|---|
| `src/services/reportingService.js` | Builds JSON, CSV, and HTML reports |
| `server.js` | Serves report endpoints |
| `public/index.html` | Adds Reports page |
| `public/app.js` | Adds report rendering and export actions |
| `public/styles.css` | Adds report action layout |
| `tests/reporting-workflow.test.js` | Validates report service output |

## Production note

The executive HTML report is the dependency-light PDF path for the prototype. In production, the same HTML could be rendered to PDF by a server-side HTML-to-PDF service. The prototype avoids that dependency so the application remains runnable with native Node.js only.

# Step 7: Reporting and Export Module ## Purpose The reporting module converts the COSMIC AI-Risk Dashboard evidence into instructor-ready and reviewer-ready exports. This step is an implementation extension. The source project defines the need for a measurable AI risk framework, software prototype, REST API, indicators, risk analysis engine, and project-management integration. The reporting module packages that evidence so it can be submitted, reviewed, audited, or printed. ## Source-derived concepts used | Source concept | Reporting implementation | |---|---| | Quantified AI project risk | Executive report and risk register export | | Organizational, technical, and human dimensions | Governance triangle section in the report | | ISO-style indicators | Indicator report with measurand, unit, threshold, and interpretation | | Software prototype and REST API | Report endpoints under `/api/projects/{projectId}/reports` | | Project-management integration | Integration report for Trello, Jira, Asana, and Microsoft Planner | | Validation and transfer | Printable HTML report and machine-readable JSON evidence package | ## Reports implemented | Report | Endpoint | Format | |---|---|---| | Executive report | `/api/projects/{projectId}/reports/executive` | JSON | | Printable executive report | `/api/projects/{projectId}/reports/executive.html` | HTML | | Full evidence package | `/api/projects/{projectId}/reports/full` | JSON | | Downloadable full evidence package | `/api/projects/{projectId}/reports/full.json` | JSON file | | Risk register | `/api/projects/{projectId}/reports/risk-register` | JSON | | Risk register export | `/api/projects/{projectId}/reports/risk-register.csv` | CSV | | Mitigation report | `/api/projects/{projectId}/reports/mitigations` | JSON | | Mitigation export | `/api/projects/{projectId}/reports/mitigations.csv` | CSV | | Deployment gate report | `/api/projects/{projectId}/reports/gate` | JSON | | Indicator report | `/api/projects/{projectId}/reports/indicators` | JSON | | Integration report | `/api/projects/{projectId}/reports/integrations` | JSON | | Audit trail report | `/api/projects/{projectId}/reports/audit` | JSON | ## UI changes The dashboard now includes a Reports tab with these actions: 1. Open executive HTML report. 2. Download full JSON evidence package. 3. Download risk register CSV. 4. Download mitigations CSV. 5. Download gate report JSON. 6. Download audit report JSON. The header Export report JSON button now uses the full reporting package when the API is available. ## Report package coverage The full evidence package includes: 1. Executive summary. 2. Governance triangle scores. 3. Lifecycle readiness map. 4. Risk register. 5. Mitigation workflow data. 6. Deployment gate criteria and decisions. 7. Indicator catalog. 8. Project-management integration mappings. 9. Audit trail. ## Acceptance criteria | Check | Expected result | |---|---| | Executive JSON | Includes summary, dimensions, lifecycle, top risks, gate, indicators, and integration summary | | Executive HTML | Opens as a printable report and can be saved as PDF from the browser | | Risk CSV | Contains all project risks with normalized and residual scores | | Mitigation CSV | Contains all mitigation actions with linked risks and evidence counts | | Gate report | Includes current gate and persisted gate history | | Audit report | Includes governance workflow audit events | | Tests | `npm test` passes | ## Implementation files | File | Role | |---|---| | `src/services/reportingService.js` | Builds JSON, CSV, and HTML reports | | `server.js` | Serves report endpoints | | `public/index.html` | Adds Reports page | | `public/app.js` | Adds report rendering and export actions | | `public/styles.css` | Adds report action layout | | `tests/reporting-workflow.test.js` | Validates report service output | ## Production note The executive HTML report is the dependency-light PDF path for the prototype. In production, the same HTML could be rendered to PDF by a server-side HTML-to-PDF service. The prototype avoids that dependency so the application remains runnable with native Node.js only.