Actual capability state
What works, what is degraded, and what is not connected
Every capability is tied to a user journey, state, and latest successful check. Engineering checks and external gates are listed separately below.
Functional readiness
Capabilities that perform a real action
The measure counts only available working capabilities. Catalogues, placeholders, disabled and degraded services do not increase the percentage.
working: 40/50 · verified on this revision: 40%
Sources
88%Capture
83%EvidenceResearch material whose provenance, time, integrity state and link to an exact source version are preserved.
100%Analysis
75%Search
80%Graph
100%Maps
67%Collaboration
33%Publication
75%Operations
71%Sources7/8
| Capability | Status | Last successful check |
|---|---|---|
| Kazakhstan Source AtlasA research catalog of potential Kazakhstan sources with their coverage, owner, risk and mandatory admission gates.Open the Atlas and inspect a source card | working | local-tested |
| Source guidesOpen a guide and inspect its search boundaries | working | local-tested |
| Add an Atlas source to a caseAdd an Atlas card to a protected case, reopen the plan, and export it | working | local-tested |
| QazLake exchange ratesCapture rates, open the JSON snapshotAn immutable control copy of an open dataset or page at a defined point in time., and export the case | working | local-tested · verified on this revision |
| QazLake source summaryCapture the summary and verify the snapshot digest | working | local-tested · verified on this revision |
| QazLake economic indicatorsCapture indicators and open the versioned JSON | working | local-tested · verified on this revision |
| QazLake data qualityCapture quality status and open the resulting version | working | local-tested · verified on this revision |
| Portfolio integration catalogueInspect adapter state, version, limits, and kill switchA control that immediately disables a connector or risky capability and prevents unauthorized reactivation. | catalogue or contract only | local-tested |
Capture5/6
| Capability | Status | Last successful check |
|---|---|---|
| Browser evidence packageEnter a URL, build a package, and reopen it | working | local-tested |
| Import a local package into a protected caseUpload an encrypted local package, verify its digest and anchor, and open the protected evidence | working | local-tested · verified on this revision |
| Owner public URL captureCapture a URL and open the hashed evidence | working | local-tested |
| Owner file ingestAdd a file and open its digest-verified snapshot | working | local-tested · verified on this revision |
| Capture NBK rates through QazPipeQueue NBK rates, verify the receipt and artifact digest, and reopen the protected evidence | working | local-tested · verified on this revision |
| TenantA security boundary isolating one organization's users, cases, keys and policy from every other organization. network captureCapture an admitted URL inside a tenant case | disabled Tenant identity and the execution contour are not connected | no successful check yet |
Evidence6/6
| Capability | Status | Last successful check |
|---|---|---|
| Protected document text derivativeUpload a Kazakh, Russian or English document and open its encrypted text, exact tool version, original digest and page anchors | working | local-tested · verified on this revision |
| Protected media metadata and frameUpload owner media and open the encrypted metadata summary, representative frame, perceptual hash and original digest | working | local-tested |
| Synthetic case workbenchCreate a case and reopen its evidence and claimAn atomic, verifiable statement linked to evidence, a coverage envelope and separate human assessment dimensions. | working | local-tested |
| Protected owner caseAdd multiple evidence items and a claim to one case | working | local-tested |
| Protected evidence readerOpen text or JSON and compare the snapshot digest | working | local-tested |
| Evidence anchorsAn exact pointer to a fragment of a document, page, image or media item that supports or refutes a conclusion. and provenanceNavigate from a claim to its exact evidence anchor | working | local-tested |
Analysis3/4
| Capability | Status | Last successful check |
|---|---|---|
| Synthetic analyzersAnalyze an approved fixture and inspect its findings | working | local-tested |
| Science methodsOpen a method cardA versioned record of a method's purpose, inputs, steps, version, limits and failure mode., current control run, dataset provenance, and review log | working | local-tested · verified on this revision |
| Owner evidence analysisAnalyze evidence and send the result for review | working | local-tested · verified on this revision |
| QazCompute contractInspect the input policy and execution state | catalogue or contract only | no successful check yet |
Search4/5
| Capability | Status | Last successful check |
|---|---|---|
| Synthetic case searchFind case records by query and open a result | working | local-tested |
| Atlas filteringFind a source using RU, KK or EN text and transliterationA rule for rendering a name in another script; it aids discovery but does not prove identity., then save the filters in the browser | working | local-tested |
| Reproducible owner case searchSearch one case in Russian, Kazakh or transliteration, save the query, and compare its result after the index changes | working | local-tested · verified on this revision |
| Tenant multilingual searchSearch tenant cases in Kazakh, Russian, and English | disabled organization-identity | local-tested · verified on this revision |
| Shared search, graph and timeline resultSelect a table record and open the same query, digest and selection in graph and timeline | working | local-tested · verified on this revision |
Graph4/4
| Capability | Status | Last successful check |
|---|---|---|
| Synthetic evidence graphPropose, accept, or reject a relationship | working | local-tested |
| Evidence-anchored entity candidatesPreserve two candidates with matching values, open their evidence anchors, and record a human same-object decision | working | local-tested · verified on this revision |
| Evidence-anchored relationship graphPropose a temporally bounded relationship between two objects, open its exact evidence, and record a human decision | working | local-tested · verified on this revision |
| Unified case timelineReview source versions, jobs, findings, decisions and exports in one stable order, then open the exact evidence behind a finding | working | local-tested · verified on this revision |
Maps2/3
| Capability | Status | Last successful check |
|---|---|---|
| Safe QazGeo regional surfaceOpen a regional layer as a map and table | working | local-tested |
| Evidence-linked case placesAdd a place candidate with an evidence anchor, select it in the table, and record a human decision with a disclosure boundary | working | local-tested · verified on this revision |
| QazGeo case mapCompare case evidence on a provenance-linked map | disabled The QazGeo adapter remains contract-only | no successful check yet |
Collaboration1/3
| Capability | Status | Last successful check |
|---|---|---|
| Synthetic human reviewThe stage where an authorized professional examines evidence, method, limitations and harm risk and records a decision.Record an alternative hypothesis and make a review decision | working | local-tested |
| Organizations and rolesUse isolated case workspaces for two organizations | disabled organization-identity | local-tested · verified on this revision |
| Team review queueAssign a case to a reviewer and receive a decision | disabled organization-identity | local-tested · verified on this revision |
Publication3/4
| Capability | Status | Last successful check |
|---|---|---|
| Synthetic case exportDownload JSON and the print report | working | local-tested |
| Encrypted owner exportDownload a case bundle and verify its receipt digest | working | local-tested |
| Editorial handoffRecord redactionControlled removal or masking of personal, confidential or potentially harmful material before disclosure. and editorial disclosure decisionsA recorded decision defining which material may be disclosed, to which audience, after what redaction and under which policy version. for an accepted claim, then download the bounded brief | working | local-tested · verified on this revision |
| Autonomous publicationPublish material without a human decision | disabled The product contract requires a human decision | no successful check yet |
Operations5/7
| Capability | Status | Last successful check |
|---|---|---|
| Public runtime healthVerify readiness and exact release identity | working | local-tested |
| Functional readiness registryInspect ten readiness categories and their latest checks | working | local-tested |
| Owner action dashboardInspect cases, tasks, reviews, exports, and errors on one protected page | working | local-tested · verified on this revision |
| Owner durable operation queueQueue a task and reopen its evidence and receipt after a worker restart | working | local-tested · verified on this revision |
| Integration observabilityInspect health, latency, and error class for every adapter | working | local-tested · verified on this revision |
| Database recovery drillRestore a local snapshot and verify integrity | catalogue or contract only | no successful check yet |
| Production monitoring and alertingReceive a failure alert before a user report | not connected No formal runtime owner or alerting contour is assigned | no successful check yet |
Readiness
Synthetic local contour only
local-engineering-pass · production=false · private-data=false
Evidence SpineThe connected chain from source to conclusion that preserves versions, exact anchors, limitations, transformations and human decisions. and strict persisted contracts
schemastests/test_domain_models.pytests/test_service_workflow.py
Tenant and case isolation with purpose-bound roles
app/context.pyapp/storage.pytests/test_storage.py
Hash-chained auditA log where every event is linked to the previous event hash, making later undisclosed alteration detectable. and tamper detection
app/storage.pytests/test_storage.py
No-network capture target and DNS policy
app/capture_policy.pyscience/benchmarks/capture-policy-hostile-v1.jsontests/test_capture_policy.py
Idempotent durable operation lifecycle
schemas/operation-job-v1.schema.jsonschemas/run-receipt-v1.schema.jsonapp/services/hub.pyapp/runner.pytests/test_jobs.pytests/test_runner.py
Tenant-local multilingual reference search
app/search.pyscience/benchmarks/local-search-multilingual-v1.jsontests/test_search.py
Database and immutable-vault recovery rehearsal
app/storage.pyapp/vault.pyscripts/verify_pilot.pytests/test_recovery.py
Encrypted private case portability
app/bundles.pytests/test_bundle.py
Typed portfolio adapter admission: QazPipe approved and ten candidates fail-closed
reference/adapters/portfolio-adapters.v2.jsonreference/adapters/adapter-contract-kit.v1.jsonapp/adapters.pyapp/adapter_runtime.pyapp/external_adapters.pytests/test_adapters.pytests/test_external_adapters.py
Reproducible Science benchmarkA test set with expected answers that measures a reference implementation, not real-world quality. and method registry
science/methodsscience/benchmarksapp/benchmarks.pyscripts/verify_benchmarks.py
Dependency locks SBOMA machine-readable inventory of software components, versions and provenance included in a specific product build. and clean-tree release gate
requirements.lockrequirements-dev.lockartifacts/openapi.jsonartifacts/sbom.spdx.jsonscripts/verify_release.py
Static fail-closed container profile without runtime claim
Dockerfiledocker-compose.yml.dockerignoretests/test_deployment_contract.py
Strict multilingual glossary and accessible first-occurrence definitions
reference/glossary/osint-glossary.v1.jsonapp/glossary.pytests/test_glossary.py
Complete read-only synthetic Investigation Workbench
app/workbench.pytemplates/workbench_case.htmltests/test_workbench.py
Content, persona, responsive and accessibility acceptance contract
docs/PERSONA_ACCEPTANCE.mddocs/CONTENT_OPERATING_SYSTEM.mdreference/content/content-registry.v1.jsonreference/content/route-persona-ledger.v1.jsonscripts/verify_ui.pytests/test_content_surface.py
Dense evidence triage, explicit comparison, evidence-bound graph and reviewer workflow
app/workbench.pyapp/operator_session.pytemplates/workbench.htmltests/test_workbench.py
Aggregate-only QazGeo and QazShield-to-candidate contract rehearsals
app/qazgeo_safe.pyapp/qazstack_contracts.pytemplates/tools.htmltests/test_qazgeo_safe.pytests/test_qazstack_contracts.py
Backend-neutral stores and PostgreSQL 17 transactional source of truth
app/storage_contracts.pyapp/postgres_store.pymigrations/versions/0001_postgres_v1.pytests/integration/test_production_data_plane.py
Immutable S3 catalog tenant keys and re-authorized Meilisearch projection
app/s3_vault.pyapp/key_provider.pyapp/search_index.pyapp/search_worker.pytests/test_data_plane_adapters.py
Count digest audit-head object-checksum migration and isolated restore contract
scripts/migrate_sqlite_to_postgres.pyscripts/create_migration_fixture.py.github/workflows/ci.ymldocs/runbooks/INTERNAL_PILOT_RECOVERY.md
Generated capability contract binds routes roles navigation readiness and release
app/capability_registry.pyapp/routers/auth.pyapp/routers/operator.pyapp/routers/cases.pytests/test_osint_v4_contracts.py
Visitor and five-role Playwright acceptance from 320 to 1920 pixels
tests/browser/test_studio_browser.py.github/workflows/ci.yml
Dedicated runtime backup retentionThe approved time and conditions before material is deleted, archived or placed on legal hold. metrics alerts and runbooks
deploy/internal-pilot/docker-compose.runtime.ymldeploy/internal-pilot/prometheus-alerts.ymlapp/backup_worker.pyapp/retention_worker.pyapp/metrics.pytests/test_internal_pilot_release.py
Immutable environment capacity links and six-job CI release controls
scripts/validate_internal_pilot_environment.pyscripts/check_release_capacity.pyscripts/reconcile_runtime_links.pytests/test_deployment_contract.py.github/workflows/ci.yml
Owner required
external owner gates
License legal privacy and source terms
Required closure evidence
Selected project and data licenses, approved legal register, DPIAA prior assessment of risks that personal-data processing creates for people and the measures used to reduce those risks. and connector-specific source admission.
Production QDEV OIDC credentials role mapping revocation and recovery
Required closure evidence
Registered qosint.net callback, production client credentials, five-role smoke, revocation and recovery drill.
Managed KZ evidence and backup S3 policies and tenant keys
Required closure evidence
KZ hosting attestation, distinct evidence and backup buckets, least-privilege policy, object checksum, signed-download and tenant-key isolation evidence.
Dedicated runtime capacity and edge private link
Required closure evidence
Named 8 vCPU 16 GiB 200 GiB NVMe host, at least 15 percent free, private tunnel proof and no production CI runner.
Hosted CI security and parser isolation
Required closure evidence
All six required CI jobs green, dependency and secret audit, IDOR OIDC CSRF SSRFA vulnerability class where an attacker causes a server to request an internal, local or otherwise forbidden address. upload tests and parser isolation review.
Backup restore search rebuild and rollback rehearsal
Required closure evidence
Fresh pre-release backup, RPO at most 15 minutes, RTO at most 4 hours, Meilisearch rebuild within 60 minutes and current rollback link receipt.
Named pilot users operations ownership training and incident tabletop
Required closure evidence
At most five named users, runtime owner, on-call contact, role training, offboarding rehearsal and incident action log.
Maintenance window final migration edge switch and public proof
Required closure evidence
Approved window, exact 691 842 17 53 migration receipt, immutable 0.4.0 image and manifest, edge switch, OIDC smoke and desktop mobile public verification.