QA evidence
Record testing evidence against the exact revision, keeping the person recording evidence distinct from the external approver.
RELEASE WORKFLOW
Release the version
your team actually reviewed.
Bring QA, UAT, independent approval, scheduling, and recovery into an explicit form-release journey.
V2 investor-demo baseline available · Production qualification remains in progress. See product status
A visible path to publication
The V2 demo demonstrates the governed release journey. Customer Production deployment remains subject to qualification.
UAT promotion
Promote the tested package into UAT and record its approval before requesting Production.
Independent approval
The normal Production requester and approver must differ. Role eligibility does not bypass separation of duties.
Intentional scheduling
Review local date, time zone, and the resulting publication instant alongside effective-date guidance.
Changes trigger new review
Changing a package or schedule replaces the request and invalidates its previous approval.
Actionable blockers
Needs-attention findings identify the problem, responsible role, remedy, and supported recheck path.
Keep recovery controlled
The history of what happened stays intact even when the current release changes.
Milestones and activity
See the current stage, next action, actor, role, time, reason, retries, approvals, and release outcomes.
Form-specific rollback
The model offers the last three eligible prior Production releases—not the last three uploads—and restores a complete package.
Eligibility before recovery
Authorization, current state, and compatibility checks decide whether a prior release is a valid target.
Coordinate schema and form changes
The later V2 refinement bundles compatible metadata and exact form revisions. Its production and recovery validation remains pending.
One active metadata release
An explicit release portfolio separates active and historical work and avoids overlapping release trains.
Exact release bundles
Freeze the schema and affected form revisions together so environment activation does not expose a partial combination.
Safe rollback and rebase
Restore a compatible prior bundle without restoring the whole database; stale candidates need withdrawal or revalidation.