chris.tonjes/YPMS
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
20 Commits 1 Branch 0 Tags
0c359c926a8ac34ce00f81a59ef96c84399ceb8d
Commit Graph
9 Commits
Author SHA1 Message Date
Chris TonjesandClaude Opus 5.5 170280ed38 Record milestone 0.8 status: pipeline complete, green-on-main pending Gitea runner
ci / test (push) Has been cancelled
Details 
PHASE0_PLAN 0.8 marked in progress with the remaining exit check;
ARCHITECTURE 9.3 and the plan's CI-provider question resolved to Gitea
Actions; YPMS-POAM-042 to in progress; status handoff gets 0.8 details,
runner-registration steps, local gate commands, and the accumulated
upstream-to-OWC list.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-01 10:57:53 -04:00
Chris TonjesandClaude Opus 5.5 20a7fdf262 Mark milestone 0.7 complete in PHASE0_PLAN, POA&M, and status handoff
ci / test (push) Has been cancelled
Details 
Status handoff also records the 0002 unique-constraint drift follow-up
and the CI-host question (Gitea vs. GitHub Actions) blocking 0.8.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-01 09:42:44 -04:00
Chris TonjesandClaude Opus 5.5 7d11f2404f Mark milestone 0.6 complete in PHASE0_PLAN, POA&M, and status handoff
ci / test (push) Has been cancelled
Details 
Status handoff also records four permission-matrix review items the
stub sweep surfaced (no Restore holders; admin-only Program /
EligibilityRule config; admin-only IntegrationEvent; HOST_USER Delete
pending row-level ownership).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-09-30 20:54:51 -04:00
Chris TonjesandClaude Opus 5.5 6b2d0008a1 Mark milestone 0.5 complete in PHASE0_PLAN, POA&M, and status handoff
ci / test (push) Has been cancelled
Details 
PHASE0_STATUS also refreshed: SSH remote, push state, 0.6 as next
milestone, new gotchas (write-only SSN, __audit_redact__, key changes).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-09-30 19:26:34 -04:00
Chris TonjesandClaude Opus 4.7 390e917de9 Mark milestone 0.4 complete in PHASE0_PLAN and POA&M 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-09-30 19:12:46 -04:00
Chris TonjesandClaude Opus 4.7 0050ad129e Mark milestone 0.3 complete in PHASE0_PLAN and POA&M 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-09-30 18:30:56 -04:00
Chris TonjesandClaude Opus 4.7 7379bb4cf1 Mark milestone 0.2 complete in PHASE0_PLAN and POA&M 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-09-30 16:56:12 -04:00
Chris TonjesandClaude Opus 4.7 09d862bf4a Mark milestone 0.1 complete in PHASE0_PLAN and POA&M 
Cross-references commit 393631a in the closed-items table.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-09-30 16:16:08 -04:00
Chris TonjesandClaude Opus 4.7 8712e93258 Initial YPMS planning and ATO artifacts 
Pre-development state; no code yet.

Delivery model: in-house build by DOES OIT on Azure Government,
matching the DCYWP / OWC / Employer 360 pattern.

Stack decision (2026-09-30): Python 3.12 / FastAPI / SQLAlchemy /
Postgres, aligning with OWC.

System Owner / ISSO / AO: Chris Tonjes (DOES CIO). Role concentration
recorded in SSP §5 with risk-acceptance rationale.

Source functional and security requirements derived from the prior
YPMS RFP (Solicitation Docxxxxx, April 2025) — 54 C.5.7 security
requirements and Appendix E non-functional requirements — treated as
source specifications, not as Contractor obligations.

Documents included:

- CLAUDE.md, OVERVIEW.md — project router and program-level summary
- SYSTEM_SECURITY_PLAN.md v0.3 — NIST 800-53 Moderate baseline SSP
- NIST_800_53_CONTROL_MAPPING.md v0.2 — full control-family mapping
  with in-house ownership tags and evidence-artifact expectations
- POAM.md v0.1 — 62-item POA&M seeded from tailorings, open decisions,
  missing companion docs, and pre-ATO deliverables; two items closed
- PRIVACY_IMPACT_ASSESSMENT.md v0.1 — full PIA covering minors, SSN,
  banking, FERPA-covered OSSE records, CFSA foster/ward flags, and
  the dormant emergency health-record path
- ARCHITECTURE.md v0.1 — forward-looking design blueprint, OWC-aligned
- PHASE0_PLAN.md v0.1 — framework vendor-in, auth, RBAC, audit,
  Registrant vertical slice, 501 stubs for remaining entities
- TODO.md — 12-section working checklist tied to POA&M IDs
- OLA_RESPONSE_2026-09-30.md — Q&A for OLA / City Administrator

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-09-30 12:14:24 -04:00