Embed in a route
<FigureFromSource sourcePath="content/publications/figures/services/launch-review.dsl.md" figureId="LAUNCH-01" />
LAUNCH-01
Launch Review Scope
A launch review covers the architecture, data, models, retrieval, tools, authority, and evidence needed to make a release decision.
coverage matrix
Review domains
Map
Test
Remediate
Retest
Decision
Architecture and trust boundaries
Components, deployment, data paths, external systems, and trust transitions.
Included
Partial
Included
Optional
Advisory
Data and privacy boundaries
Sensitive data, tenant boundaries, retention, provenance, and external sinks.
Included
Partial
Included
Optional
Advisory
Model and prompt controls
Model choice, system instructions, guardrails, and policy boundaries.
Included
Included
Included
Optional
Advisory
Retrieval and RAG
Corpus access, provenance, ranking, prompt assembly, and tenant isolation.
Included
Included
Included
Optional
Advisory
Tools, agents, and MCP
Tool schemas, delegated actions, workflow transitions, and external effects.
Included
Included
Included
Optional
Advisory
Included
Partial
Included
Optional
Advisory
Evidence and operations
Logging, incident visibility, remediation, retest, and decision records.
Included
Included
Included
Optional
Advisory
Architecture and trust boundaries
Components, deployment, data paths, external systems, and trust transitions.
- Map
- Included
- Test
- Partial
- Remediate
- Included
- Retest
- Optional
- Decision
- Advisory
Data and privacy boundaries
Sensitive data, tenant boundaries, retention, provenance, and external sinks.
- Map
- Included
- Test
- Partial
- Remediate
- Included
- Retest
- Optional
- Decision
- Advisory
Model and prompt controls
Model choice, system instructions, guardrails, and policy boundaries.
- Map
- Included
- Test
- Included
- Remediate
- Included
- Retest
- Optional
- Decision
- Advisory
Retrieval and RAG
Corpus access, provenance, ranking, prompt assembly, and tenant isolation.
- Map
- Included
- Test
- Included
- Remediate
- Included
- Retest
- Optional
- Decision
- Advisory
Tools, agents, and MCP
Tool schemas, delegated actions, workflow transitions, and external effects.
- Map
- Included
- Test
- Included
- Remediate
- Included
- Retest
- Optional
- Decision
- Advisory
Identity and authority
Users, agents, service identities, permissions, and approval gates.
- Map
- Included
- Test
- Partial
- Remediate
- Included
- Retest
- Optional
- Decision
- Advisory
Evidence and operations
Logging, incident visibility, remediation, retest, and decision records.
- Map
- Included
- Test
- Included
- Remediate
- Included
- Retest
- Optional
- Decision
- Advisory
Service states
IncludedPartial or advisoryOptionalRequires scope confirmation
The matrix describes the current service only after each cell is reconciled against the live scope and statement of work.
About this figure
A launch review establishes the minimum evidence needed to decide whether a release is ready. It spans the full system surface: architecture and trust boundaries, data and privacy boundaries, model and prompt controls, retrieval and RAG behavior, tools and agent integrations, identity and authority, and the evidence and operational practices that support the decision. The review is staged across map, test, remediate, retest, and decision, with each service assessed as included, partial, optional, or advisory depending on its role and risk. This scope is intended to make release decisions explicit, repeatable, and grounded in verified system behavior.
Citation
Launch Review Scope (LAUNCH-01). AI Security LLC Figure Library. https://aisecurity.llc/publication-dsl/figures/LAUNCH-01