{{ stateTitle }}{{ stateBody }}

Long-term · intended capabilityThe App Factory workflow is designed and simulated here. The delivery engine (agents, repositories, cloud resources) needs backend, tool and provider implementation; nothing on these screens creates or deploys anything.

Initiative: {{ ini.name }} · sponsor {{ ini.sponsor }}·Budget {{ ini.budgetText }}·Your role here: {{ myRoleHere }}

Responsible roles

Budget

Assurance

{{ it.cta }}Inspect cell

Planned, running, tested and approved are different states. A stage opens only when the previous gate has evidence and a named authority; no gate is passed by a score.

Project Cell (isolation)

Repository: tses/grants-suite
Database: PostgreSQL 16 · own instance
Runtime: cell-grants-* (dev, staging, prod planned)
Identity: TSES identity, read-only mapping
Shared with ATM: Nothing (ADR-4 rejected)

Topology and modules

Web (Next.js) → API (Django 5.2 LTS) → PostgreSQL 16
Modules: applications · reviews · reporting · identity-adapter
Trust boundary: TSES cloud account · no external SaaS for personal data

Contracts and data flows

POST /applications · GET /applications/{id} · POST /reviews
Funder report export: period, funder, denominator included
Identity read: TSES staff id → reviewer (no write back)

Architecture decision records

ADR	Decision	State	Actions
{{ a.id }}	{{ a.text }}	{{ a.state }}

Stack versions in ADR-2 are the architect's proposal; the implementer verifies supported versions at build time. Nothing here pins a dependency.

PRD

Grants Management Suite PRD v3 · approved by sponsor 30 Sep · 4 stories, 9 criteria

Personas

Grants officer · Finance reviewer · Programme lead (synthetic personas; no real staff)

Frame version

Frame v4 · 12 screens · last fetched 6 Oct 18:02 WAT

Stories, criteria and design coverage

Story	Acceptance criteria	Design coverage	Actions
{{ st.id }} {{ st.text }}	{{ st.criteria }}	{{ st.coverage }}

Journey

Record application → assign reviewer → review decision (approve / return with reason) → period export. Mobile (390px) and keyboard variants required by GS-4 are unreviewed; the design gate stays open until they are.

Authorised isolated workspace

Repository: {{ build.repo }}
Branch: {{ build.branch }}
Environment: {{ build.env }}
Production access: None — not granted to any build agent

Plan

Source changes

Artifact {{ build.artifact }} · PR grants-suite#7 (draft) · reviewed by Ada Okoro (human) before merge

Trace {{ build.trace }}

Suite	Actual result	Commit · environment	Evidence / verifier	State	Actions
{{ t.suite }}	{{ t.result }}	{{ t.commit }}	{{ t.verifier }}	{{ t.state }}

QA gate · blocked

Security and isolation suite has not run; accessibility has 2 failures; integration not run. The gate opens only when every required suite has a passing, provenance-bound result.

Provenance rule

A result without a commit and environment binding is excluded from the gate, however green it looks.

Release manifest (draft)

Artifact: {{ rel.artifact }}
Target: {{ rel.target }}
Migration: {{ rel.migration }}
Recovery: {{ rel.recovery }}
Window: {{ rel.window }}
Approval: {{ rel.approval }}

Pipeline

No telemetry. The production provider is not paired and the cell has no runtime yet. SLOs show "—", not a healthy default. Pair the provider.

Incidents

None recorded. An incident needs telemetry or a human report; absence of telemetry is not absence of incidents.

Change authority and recovery

{{ ops.changeAuthority }}. Recovery runbook: not yet written (gate blocker for release). Rehearsal: not run.

Cost and dependencies

{{ ops.cost }} · dependencies: {{ ops.dependencies }}

{{ stateTitle }}

{{ stateTitle }}

{{ stateTitle }}

{{ title }}

{{ it.name }}

Architecture decision records

Stories, criteria and design coverage

Plan

Pipeline

{{ dlg.title }}