/home/techb158/trellopowerup.abdallabala.com/docs
Edit: /home/techb158/trellopowerup.abdallabala.com/docs/22-traceability-matrix.md (4847B)
# Traceability Matrix
This matrix links the academic concept, software design, implementation module, API, and tests.
## 1. Concept to implementation traceability
| Concept | Design artifact | Implementation | API or UI evidence | Test evidence |
|---|---|---|---|---|
| AI project risk | UML `Risk` class | `riskRepository.js` | Risk Register tab, `/api/projects/{id}/risks` | `api-workflow.test.js` |
| Risk scoring | `RiskScore`, `RiskScoringService` | `risk-engine.js` | Dashboard cards, risk score preview | `risk-engine.test.js` |
| Governance triangle | Risk dimension model | Dashboard aggregation | Overview tab | `storage-layer.test.js` |
| Lifecycle phases | `LifecyclePhase` entity | `database.json` phases | Lifecycle map | `storage-layer.test.js` |
| Mitigation | `MitigationAction` class | `riskRepository.js` | Mitigations tab | `mitigation-workflow.test.js` |
| Residual risk | Risk score relation | `risk-engine.js` | Residual score display | `risk-engine.test.js` |
| Deployment gate | `DeploymentGate`, `GateCriterion` | `gateWorkflowService.js` | Deployment Gate tab | `gate-workflow.test.js` |
| Reviewer decision | `GateDecision` entity | `gateWorkflowService.js` | Decision form and history | `gate-workflow.test.js` |
| Indicators | `Indicator`, `MeasurementRecord` | `dataMapper.js` | Indicators report | `reporting-workflow.test.js` |
| Experiment tracking | `Experiment`, `ModelMetric` | Data model and API | Metrics table | `api-workflow.test.js` |
| PM integration | `ProjectManagementIntegration` | `integrationService.js` | PM Integrations tab | `integration-workflow.test.js` |
| OAuth live clients | OAuth service classes | `oauthService.js`, PM clients | OAuth endpoints | `oauth-live-connectors.test.js` |
| Reporting | `ReportingService` | `reportingService.js` | Reports tab and report endpoints | `reporting-workflow.test.js` |
| User roles | `User`, `Role` | `accessControl.js` | Access Control tab | `access-control.test.js` |
| Production readiness | Operations service | `operationsService.js` | `/api/ready`, backups | `production-hardening.test.js` |
## 2. Use case coverage
| Use case | Actor | Implemented in | Status |
|---|---|---|---|
| View dashboard | Project Manager | Dashboard UI and `/api/projects/{id}/dashboard` | Complete |
| Register risk | Risk Owner | Risk Register tab and POST risk API | Complete |
| Edit risk | Risk Owner | Risk form and PATCH risk API | Complete |
| Delete risk | Project Manager or Admin | Delete risk API | Complete |
| Add mitigation | Risk Owner | Mitigation form and API | Complete |
| Attach evidence | Risk Owner | Evidence fields and API | Complete |
| Evaluate deployment gate | Governance Reviewer | Gate service and UI | Complete |
| Record gate decision | Governance Reviewer | Gate decision workflow | Complete |
| Review reports | Project Manager | Reports tab | Complete |
| Export data | Project Manager | CSV and JSON endpoints | Complete |
| Sync PM tool | Integration Admin | Integration service | Complete |
| Configure OAuth | Integration Admin | OAuth service | Complete |
| Manage users and roles | System Admin | Access control service | Complete |
| Check production readiness | System Admin | Operations endpoints | Complete |
## 3. API endpoint coverage
| Module | Endpoint examples | Status |
|---|---|---|
| Health | `/api/health`, `/api/ready` | Complete |
| Projects | `/api/projects`, `/api/projects/{projectId}` | Complete |
| Dashboard | `/api/projects/{projectId}/dashboard` | Complete |
| Risks | `/api/projects/{projectId}/risks`, `/api/risks/{riskId}` | Complete |
| Mitigations | `/api/projects/{projectId}/mitigations`, `/api/mitigations/{id}` | Complete |
| Gate | `/api/projects/{projectId}/gate`, `/api/gates/{id}/decisions` | Complete |
| Indicators | `/api/projects/{projectId}/indicators` | Complete |
| Metrics | `/api/projects/{projectId}/metrics` | Complete |
| Integrations | `/api/projects/{projectId}/integrations` | Complete |
| OAuth | `/api/oauth/{provider}/authorize`, `/api/oauth/{provider}/callback` | Complete |
| Reports | `/api/projects/{projectId}/reports/full.json` | Complete |
| Access | `/api/access/me`, `/api/users`, `/api/roles` | Complete |
| Operations | `/api/operations/security`, `/api/operations/backups` | Complete |
## 4. Documentation coverage
| Requirement | Evidence |
|---|---|
| UML class diagram | `docs/01-uml-class-diagram.puml` |
| Use case diagram | `docs/02-use-case-diagram.puml` |
| Sequence diagrams | `docs/03-sequence-diagrams.puml` |
| Database model | `docs/04-database-entity-model.mmd` |
| SQL schema | `docs/05-database-schema.sql` |
| API specification | `openapi.yaml` |
| Installation guide | `README.md` and `docs/25-final-deployment-runbook.md` |
| Testing evidence | `docs/23-testing-evidence.md` |
| Final report | `docs/19-final-report-draft.md` |