FM / docs

/home/techb158/cosmic-risk.abdallabala.com/docs/

/home/techb158/cosmic-risk.abdallabala.com/docs

Name	Size	Mode	Actions
00-design-study.md	3678	0644	edit dl rm
01-uml-class-diagram.puml	11869	0644	edit dl rm
02-use-case-diagram.puml	3763	0644	edit dl rm
03-sequence-diagrams.puml	9732	0644	edit dl rm
04-database-entity-model.mmd	7051	0644	edit dl rm
05-database-schema.sql	13372	0644	edit dl rm
06-diagram-preview.html	5021	0644	edit dl rm
07-design-checklist.md	3256	0644	edit dl rm
08-step-2-storage-layer.md	5325	0644	edit dl rm
09-step-3-risk-crud-ui.md	3380	0644	edit dl rm
10-step-4-mitigation-workflow.md	3996	0644	edit dl rm
11-step-5-deployment-gate-workflow.md	2292	0644	edit dl rm
12-step-6-multi-pm-integration.md	3770	0644	edit dl rm
13-step-6-1-microsoft-planner-integration.md	2335	0644	edit dl rm
14-step-7-reporting-export.md	4158	0644	edit dl rm
15-step-7-1-oauth-live-connectors.md	4545	0644	edit dl rm
16-step-8-user-roles-access-control.md	3297	0644	edit dl rm
17-step-9-production-deployment-security.md	4228	0644	edit dl rm
18-step-10-final-academic-submission.md	3199	0644	edit dl rm
19-final-report-draft.md	6814	0644	edit dl rm
20-instructor-submission-checklist.md	3639	0644	edit dl rm
21-demo-script.md	3948	0644	edit dl rm
22-traceability-matrix.md	4847	0644	edit dl rm
23-testing-evidence.md	2961	0644	edit dl rm
24-evaluation-rubric-mapping.md	2910	0644	edit dl rm
25-final-deployment-runbook.md	3214	0644	edit dl rm
26-known-limitations-and-future-work.md	2632	0644	edit dl rm
27-final-qa-checklist.md	2893	0644	edit dl rm
28-demo-rehearsal-script.md	3618	0644	edit dl rm
29-submission-freeze-report.md	2769	0644	edit dl rm
30-final-known-issues.md	1876	0644	edit dl rm
31-saas-rebuild-implementation.md	2573	0644	edit dl rm
application-documentation.md	27515	0644	edit dl rm
conversation-log.md	18503	0644	edit dl rm
dashboard-spec.md	3691	0644	edit dl rm
database-guide.md	37826	0644	edit dl rm
development-summary.md	7070	0644	edit dl rm
github-architecture.svg	6288	0644	edit dl rm
integration-pull-push-plan.md	7384	0644	edit dl rm

Edit: /home/techb158/cosmic-risk.abdallabala.com/docs/30-final-known-issues.md (1876B)

# Final Known Issues and Controlled Limitations

Date: 2026-07-04

## Known limitations

| Area | Limitation | Rationale |
|---|---|---|
| Storage | Uses JSON file storage in prototype mode | Keeps the academic prototype lightweight and easy to run |
| Live integrations | OAuth-ready clients are included, but real production use requires provider credentials | Prevents hardcoded secrets and unsafe testing |
| PDF export | Executive report is printable HTML, not server-side PDF | Avoids extra dependencies and keeps the prototype simple |
| Authentication | Role switching is suitable for prototype demonstration | Production deployment should connect to real identity provider |
| Risk scoring | Scoring model is an implementation extension | The source framework provides conceptual direction, not a final universal scoring formula |
| Industrial validation | Uses sample data and workflow validation | Full industrial validation requires real project data and stakeholder review |
| PM sync | Shared adapter model supports simulated and live sync boundaries | Each provider API requires organization-specific setup and permissions |

## Not defects

The following are intentional prototype decisions:

1. No real OAuth secrets are included.
2. Live API calls are disabled unless explicitly enabled.
3. JSON storage is used before database migration.
4. Deployment gate thresholds are configurable implementation logic.
5. The dashboard is designed as a working academic prototype, not a commercial SaaS product.

## Future work

Recommended next improvements:

1. PostgreSQL migration.
2. Real identity provider integration.
3. Live industrial case study.
4. Configurable scoring weights by AI project typology.
5. Advanced dashboard analytics.
6. Automated PDF generation.
7. Provider-specific sync conflict resolution.
8. Deployment monitoring and incident tracking.

# Final Known Issues and Controlled Limitations Date: 2026-07-04 ## Known limitations | Area | Limitation | Rationale | |---|---|---| | Storage | Uses JSON file storage in prototype mode | Keeps the academic prototype lightweight and easy to run | | Live integrations | OAuth-ready clients are included, but real production use requires provider credentials | Prevents hardcoded secrets and unsafe testing | | PDF export | Executive report is printable HTML, not server-side PDF | Avoids extra dependencies and keeps the prototype simple | | Authentication | Role switching is suitable for prototype demonstration | Production deployment should connect to real identity provider | | Risk scoring | Scoring model is an implementation extension | The source framework provides conceptual direction, not a final universal scoring formula | | Industrial validation | Uses sample data and workflow validation | Full industrial validation requires real project data and stakeholder review | | PM sync | Shared adapter model supports simulated and live sync boundaries | Each provider API requires organization-specific setup and permissions | ## Not defects The following are intentional prototype decisions: 1. No real OAuth secrets are included. 2. Live API calls are disabled unless explicitly enabled. 3. JSON storage is used before database migration. 4. Deployment gate thresholds are configurable implementation logic. 5. The dashboard is designed as a working academic prototype, not a commercial SaaS product. ## Future work Recommended next improvements: 1. PostgreSQL migration. 2. Real identity provider integration. 3. Live industrial case study. 4. Configurable scoring weights by AI project typology. 5. Advanced dashboard analytics. 6. Automated PDF generation. 7. Provider-specific sync conflict resolution. 8. Deployment monitoring and incident tracking.