/Pilot readiness
Synthetic only

Governance and release journeyFrom live signal to accountable activation

Sandbox governance active

Phase 6 · closed pilot hardening

Evidence before launch.

Automated controls, independent reviews, and recovery drills must agree before Meridian can be considered ready for a closed pilot.

Release decisionHOLDThe sandbox remains on hold until all automated checks pass and every review area is independently approved.
Automated checks6/10must all pass
Approved reviews0/6independent decisions
Successful drills0persisted evidence runs
Pilot accessClosedowner-only production site

Automated release gates

Continuously derived controls

No manual override
PASS
Synthetic-only boundary

Real personal data and payment providers remain disabled.

WARN
Administrative redundancy

A second active administrator is required for resilient four-eyes control.

FAIL
Audit chain integrity

One or more audit proofs could not be verified.

PASS
Ledger invariants

Every sandbox transaction remains zero-sum.

PASS
Connector safety

3 metadata-only synthetic connectors are available.

WARN
Recovery evidence

No database recovery tabletop has been recorded.

PASS
Critical incident gate

No unresolved critical security incidents are active.

PASS
Partner verification coverage

Every approved organization has current independent verification evidence.

PASS
Secure delivery privacy invariant

Released delivery results remain threshold-protected and aggregate-only.

WARN
Operational probe evidence

No persisted operational probe has been completed.

Human release gates

Independent review matrix

Four-eyes enforced
Security reviewThreat controls, authorization boundaries, and negative tests.
CHANGES REQUIRED

No review evidence has been submitted.

Privacy reviewMinimisation, purpose limitation, consent, and rights handling.
CHANGES REQUIRED

No review evidence has been submitted.

Legal reviewSandbox terms and jurisdiction activation boundaries.
CHANGES REQUIRED

No review evidence has been submitted.

Accessibility reviewKeyboard flow, semantics, focus visibility, and readable states.
CHANGES REQUIRED

No review evidence has been submitted.

Performance reviewBuild health, response behavior, and operational capacity.
CHANGES REQUIRED

No review evidence has been submitted.

Recovery reviewBackup, restore, rollback, RPO, and RTO evidence.
CHANGES REQUIRED

No review evidence has been submitted.

Immutable operational evidence

Incident and recovery drill history

Open audit trail
No drills recordedThe recovery gate remains incomplete until evidence exists.