filegrc 0.2.0 → 0.3.0

package/src/evidence-packet.js

@@ -245,7 +245,7 @@ export async function prepareEvidencePacket(input, options = {}) {
     end,
     timezone: loaded.workspace.timezone
   });
-  const fileGRCRecords = datedRecords.filter((record) => (
+  const filegrcRecords = datedRecords.filter((record) => (
     !NON_EVIDENCE_RECORD_TYPES.has(record.type)
     && controlIdsForRecord(byId.get(record.id), byId).size
   ));
@@ -319,7 +319,7 @@ export async function prepareEvidencePacket(input, options = {}) {
     },
     summary: {
       datedRecords: datedRecords.length,
-      fileGRCRecords: fileGRCRecords.length,
+      filegrcRecords: filegrcRecords.length,
       records: packetRecords.length,
       policies: policyIds.size,
       controls: controlIds.size,
@@ -335,7 +335,7 @@ export async function prepareEvidencePacket(input, options = {}) {
       warnings: warningCount
     },
     datedRecords: datedRecords.sort((a, b) => a.primaryDate.localeCompare(b.primaryDate) || byTitle(a, b)),
-    fileGRCRecords: fileGRCRecords.sort((a, b) => a.primaryDate.localeCompare(b.primaryDate) || byTitle(a, b)),
+    filegrcRecords: filegrcRecords.sort((a, b) => a.primaryDate.localeCompare(b.primaryDate) || byTitle(a, b)),
     policies: [...policyIds].map((id) => recordSummary(byId.get(id))).filter(Boolean).sort(byTitle),
     controls: [...controlIds].map((id) => recordSummary(byId.get(id))).filter(Boolean).sort(byTitle),
     obligations,
@@ -557,7 +557,7 @@ async function writeChecksums(output, files) {
 
 function controlMatrixCsv(packet) {
   return csv([
-    ["Control ID", "Code", "Control", "Control Statement", "Operating Activity", "Status", "Effective On", "Frequency", "Operation Mode", "System IDs", "Requirement IDs", "Policy IDs", "Risk IDs", "FileGRC Evidence IDs", "External Evidence IDs", "Control Test IDs", "Test Outcomes", "Population IDs", "Population Counts", "Sample Sizes", "Exception Counts", "Population Evidence IDs", "Sample Evidence IDs"],
+    ["Control ID", "Code", "Control", "Control Statement", "Operating Activity", "Status", "Effective On", "Frequency", "Operation Mode", "System IDs", "Requirement IDs", "Policy IDs", "Risk IDs", "filegrc Evidence IDs", "External Evidence IDs", "Control Test IDs", "Test Outcomes", "Population IDs", "Population Counts", "Sample Sizes", "Exception Counts", "Population Evidence IDs", "Sample Evidence IDs"],
     ...packet.controlCoverage.map((control) => [
       control.id,
       control.code,
@@ -592,15 +592,15 @@ function packetHandlingMarkdown(packet) {
     "",
     `Evidence classifications: ${packet.handling.classifications.join(", ") || "none recorded"}`,
     `External references present: ${packet.handling.containsExternalReferences ? "yes" : "no"}`,
-    "Encrypted by FileGRC: no",
+    "Encrypted by filegrc: no",
     "",
     "Review every included record and attachment for secrets, unnecessary personal data, customer data, and material outside the audit scope before transfer.",
     "",
-    "Review `external-evidence-index.csv` before delivery. It identifies references that FileGRC did not copy. Reconcile those items to the auditor portal or other approved system so the engagement team can confirm it received the same evidence indexed here.",
+    "Review `external-evidence-index.csv` before delivery. It identifies references that filegrc did not copy. Reconcile those items to the auditor portal or other approved system so the engagement team can confirm it received the same evidence indexed here.",
     "",
     "Transfer this directory through the auditor's approved encrypted channel. Do not email an unencrypted packet. Give access only to the engagement team and retain or remove exported copies under the organization's evidence-retention rules.",
     "",
-    "After transfer, enter the packet directory and run `shasum -a 256 -c SHA256SUMS` or `sha256sum -c SHA256SUMS`. FileGRC does not sign or encrypt the packet because those operations require organization-controlled keys and transfer-system choices.",
+    "After transfer, enter the packet directory and run `shasum -a 256 -c SHA256SUMS` or `sha256sum -c SHA256SUMS`. filegrc does not sign or encrypt the packet because those operations require organization-controlled keys and transfer-system choices.",
     ""
   ].join("\n");
 }
@@ -972,7 +972,7 @@ function packetGaps({
     if (controlNeedsExternalEvidence(control, model) && !coverage.evidenceIds.length) {
       gaps.push(gap("error", "control-missing-external-evidence", `${coverage.code || coverage.title} relies on an external system but has no linked External Evidence in the packet.`, coverage.id));
     } else if (!controlNeedsExternalEvidence(control, model) && !coverage.operatingRecordIds.length) {
-      gaps.push(gap("error", "control-missing-filegrc-evidence", `${coverage.code || coverage.title} has no dated FileGRC operating record in the packet.`, coverage.id));
+      gaps.push(gap("error", "control-missing-filegrc-evidence", `${coverage.code || coverage.title} has no dated filegrc operating record in the packet.`, coverage.id));
     }
     if (audit?.auditKind !== "soc-2-type-1" && coverage.status === "implemented" && !coverage.operatingRecordIds.length && coverage.operationMode !== "automated") {
       gaps.push(gap("warning", "control-missing-operating-record", `${coverage.code || coverage.title} has no dated operating record in the packet period.`, coverage.id));
@@ -1523,7 +1523,7 @@ function recordSummary(record) {
 
 function packetMarkdown(packet) {
   const readiness = packet.readiness.status === "delivery-ready"
-    ? "FileGRC management checks passed. The engagement team still determines whether the evidence is sufficient and appropriate."
+    ? "filegrc management checks passed. The engagement team still determines whether the evidence is sufficient and appropriate."
     : `${packet.readiness.errors} errors and ${packet.readiness.warnings} warnings require review. This is a draft packet.`;
   const periodLabel = packet.period.basis === "as-of"
     ? `as of ${packet.period.start}`
@@ -1543,7 +1543,7 @@ function packetMarkdown(packet) {
     "",
     "## Coverage",
     "",
-    `- ${packet.summary.fileGRCRecords} FileGRC Evidence records`,
+    `- ${packet.summary.filegrcRecords} filegrc Evidence records`,
     `- ${packet.summary.obligationOccurrences} recurring obligation occurrences`,
     `- ${packet.summary.eventRuns} event runs`,
     `- ${packet.summary.evidence} External Evidence records`,
@@ -1554,7 +1554,7 @@ function packetMarkdown(packet) {
     `- ${packet.summary.systems} in-scope systems`,
     `- ${packet.summary.sourceSystems} cataloged source systems`,
     "",
-    "Open `index.html` for the auditor-oriented index. `control-matrix.csv` cross-references criteria, controls, FileGRC Evidence, External Evidence, and tests. `source-system-index.csv` identifies the systems of record used to produce External Evidence. `external-evidence-index.csv` lists material that must be delivered or accessed outside this packet. For Type 2, `population-index.csv` records management's population reconciliation and fixed source exports. FileGRC records, governed Markdown, fixed attachments, and committed historical versions are included in their respective directories.",
+    "Open `index.html` for the auditor-oriented index. `control-matrix.csv` cross-references criteria, controls, filegrc Evidence, External Evidence, and tests. `source-system-index.csv` identifies the systems of record used to produce External Evidence. `external-evidence-index.csv` lists material that must be delivered or accessed outside this packet. For Type 2, `population-index.csv` records management's population reconciliation and fixed source exports. filegrc records, governed Markdown, fixed attachments, and committed historical versions are included in their respective directories.",
     "",
     "After transfer, enter the packet directory and run `shasum -a 256 -c SHA256SUMS` or `sha256sum -c SHA256SUMS`. The checksum file covers every other packet file.",
     ""
@@ -1569,7 +1569,7 @@ function packetHtml(packet) {
     : "<p>None.</p>";
   const gaps = packet.gaps.length
     ? `<ul>${packet.gaps.map((item) => `<li class="${item.severity}"><strong>${escapeHtml(item.severity)}</strong> ${escapeHtml(item.message)}</li>`).join("")}</ul>`
-    : "<p>FileGRC management checks passed. The engagement team still evaluates sufficiency and appropriateness.</p>";
+    : "<p>filegrc management checks passed. The engagement team still evaluates sufficiency and appropriateness.</p>";
   const engagementDate = packet.period.basis === "as-of"
     ? `As of ${escapeHtml(packet.period.start)}`
     : `${escapeHtml(packet.period.start)} through ${escapeHtml(packet.period.end)}`;
@@ -1592,25 +1592,25 @@ function packetHtml(packet) {
     ? packet.eventRuns.map((run) => `<article><h3><a href="records/obligation-event/${encodeURIComponent(run.id)}.json">${escapeHtml(run.title)}</a></h3><p>${escapeHtml(run.occurredAt || run.occurredOn)} · ${escapeHtml(run.status)} · ${run.completeCount} of ${run.actions.length} complete</p><table><thead><tr><th>Required action</th><th>Policy cutoff</th><th>Status</th></tr></thead><tbody>${run.actions.map((action) => `<tr><td><a href="records/action-item/${encodeURIComponent(action.actionItemId)}.json">${escapeHtml(action.title)}</a></td><td>${escapeHtml(action.dueWindowEndAt || action.dueWindowEnd)}</td><td>${escapeHtml(action.status)}</td></tr>`).join("")}</tbody></table></article>`).join("")
     : "<p>No event workflows intersect this period.</p>";
   const recordsById = new Map(packet.records.map((record) => [record.id, record]));
-  const fileGRCRecords = packet.fileGRCRecords.length
-    ? `<table><thead><tr><th>Date</th><th>FileGRC record</th><th>Latest committed change</th></tr></thead><tbody>${packet.fileGRCRecords.map((item) => {
+  const filegrcRecords = packet.filegrcRecords.length
+    ? `<table><thead><tr><th>Date</th><th>filegrc record</th><th>Latest committed change</th></tr></thead><tbody>${packet.filegrcRecords.map((item) => {
       const history = recordsById.get(item.id)?.history?.[0];
       const source = history
         ? `${history.timestamp} · ${history.author} · ${history.subject}`
         : "No committed file history";
       return `<tr><td>${escapeHtml(item.primaryDate)}</td><td><a href="records/${encodeURIComponent(item.type)}/${encodeURIComponent(item.id)}.json">${escapeHtml(item.title)}</a><br><small>${escapeHtml(item.type)}</small></td><td>${escapeHtml(source)}</td></tr>`;
     }).join("")}</tbody></table>`
-    : "<p>No FileGRC Evidence records matched this period.</p>";
+    : "<p>No filegrc Evidence records matched this period.</p>";
   const controlCoverage = packet.controlCoverage.length
-    ? `<p><a href="control-matrix.csv">Download control matrix CSV</a></p><table><thead><tr><th>Control</th><th>Status and scope</th><th>Criteria</th><th>FileGRC Evidence</th><th>External Evidence</th><th>Tests</th></tr></thead><tbody>${packet.controlCoverage.map((control) => `<tr><td><a href="records/control/${encodeURIComponent(control.id)}.json">${escapeHtml(control.code || control.id)}</a><small>${escapeHtml(control.title)}</small></td><td>${escapeHtml(control.status)}<small>${control.systemIds.map(escapeHtml).join(", ") || "No system scope"}</small></td><td>${control.requirementIds.map(escapeHtml).join("<br>") || "None"}</td><td>${control.operatingRecordIds.length}</td><td>${control.evidenceIds.length}</td><td>${control.tests.length}</td></tr>`).join("")}</tbody></table>`
+    ? `<p><a href="control-matrix.csv">Download control matrix CSV</a></p><table><thead><tr><th>Control</th><th>Status and scope</th><th>Criteria</th><th>filegrc Evidence</th><th>External Evidence</th><th>Tests</th></tr></thead><tbody>${packet.controlCoverage.map((control) => `<tr><td><a href="records/control/${encodeURIComponent(control.id)}.json">${escapeHtml(control.code || control.id)}</a><small>${escapeHtml(control.title)}</small></td><td>${escapeHtml(control.status)}<small>${control.systemIds.map(escapeHtml).join(", ") || "No system scope"}</small></td><td>${control.requirementIds.map(escapeHtml).join("<br>") || "None"}</td><td>${control.operatingRecordIds.length}</td><td>${control.evidenceIds.length}</td><td>${control.tests.length}</td></tr>`).join("")}</tbody></table>`
     : "<p>No controls were selected.</p>";
-  const readinessLabel = packet.readiness.status === "delivery-ready" ? "FileGRC management checks passed" : "Draft, do not deliver";
+  const readinessLabel = packet.readiness.status === "delivery-ready" ? "filegrc management checks passed" : "Draft, do not deliver";
   const packetDate = packet.period.basis === "as-of"
     ? `As of ${escapeHtml(packet.period.start)}`
     : `${escapeHtml(packet.period.start)} through ${escapeHtml(packet.period.end)}`;
   return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width"><title>Evidence packet</title><style>
 body{font:14px/1.5 system-ui,sans-serif;color:#161825;max-width:1120px;margin:auto;padding:40px;background:#f7f8fc}header,section{background:#fff;border:1px solid #dfe3ef;border-radius:10px;padding:24px;margin:14px 0}h1,h2{margin-top:0}h1{font-size:26px}h2{font-size:17px}ul{padding-left:20px}li{margin:8px 0}small{display:block;color:#656c7e}.attachment{margin-right:10px;font-size:12px}.error{color:#8a2f28}.warning{color:#76500d}.readiness{display:inline-block;padding:5px 9px;border-radius:999px;background:#f7e4e2;color:#7a2520;font-weight:700}.readiness.ready{background:#e2f1e8;color:#245d3b}table{width:100%;border-collapse:collapse}th,td{padding:9px;border:1px solid #dfe3ef;text-align:left;vertical-align:top}code{overflow-wrap:anywhere}dl{display:grid;grid-template-columns:max-content 1fr;gap:8px 16px}dt{font-weight:700}dd{margin:0}
-</style></head><body><header><p>SOC 2 evidence packet</p><span class="readiness ${packet.readiness.status === "delivery-ready" ? "ready" : ""}">${escapeHtml(readinessLabel)}</span><h1>${packetDate}</h1><p>${escapeHtml(packet.workspace.organizationName)} · revision <code>${escapeHtml(packet.revision.commit || "uncommitted")}</code></p></header>${section("Engagement scope", engagement)}${section("Review status", gaps)}${section("Control coverage", controlCoverage)}${section("Systems of record", sourceSystems)}${packet.period.basis === "period" ? section("Management population reconciliation", populations) : ""}${packet.period.basis === "period" ? section("Recurring obligation coverage", obligations) : ""}${packet.period.basis === "period" ? section("Event workflow coverage", eventRuns) : ""}${section("Policies", links(packet.policies))}${section("FileGRC Evidence", fileGRCRecords)}${section("External Evidence", evidence)}${section("Integrity and history", "<p>Verify all transferred files with <code>SHA256SUMS</code>. Committed prior versions are under <code>history/</code> with an index that records their source paths and Git metadata.</p>")}</body></html>`;
+</style></head><body><header><p>SOC 2 evidence packet</p><span class="readiness ${packet.readiness.status === "delivery-ready" ? "ready" : ""}">${escapeHtml(readinessLabel)}</span><h1>${packetDate}</h1><p>${escapeHtml(packet.workspace.organizationName)} · revision <code>${escapeHtml(packet.revision.commit || "uncommitted")}</code></p></header>${section("Engagement scope", engagement)}${section("Review status", gaps)}${section("Control coverage", controlCoverage)}${section("Systems of record", sourceSystems)}${packet.period.basis === "period" ? section("Management population reconciliation", populations) : ""}${packet.period.basis === "period" ? section("Recurring obligation coverage", obligations) : ""}${packet.period.basis === "period" ? section("Event workflow coverage", eventRuns) : ""}${section("Policies", links(packet.policies))}${section("filegrc Evidence", filegrcRecords)}${section("External Evidence", evidence)}${section("Integrity and history", "<p>Verify all transferred files with <code>SHA256SUMS</code>. Committed prior versions are under <code>history/</code> with an index that records their source paths and Git metadata.</p>")}</body></html>`;
 }
 
 async function writePacketFile(output, relativePath, source, files) {

package/src/git.js

@@ -227,7 +227,7 @@ async function pushWorkspaceUnlocked(root) {
 
 function syncReadySummary(root, action) {
   const summary = getGitSummary(root);
-  if (!summary.available) throw new Error(`Git history is unavailable for this workspace, so FileGRC cannot ${action}.`);
+  if (!summary.available) throw new Error(`Git history is unavailable for this workspace, so filegrc cannot ${action}.`);
   if (!summary.branch) throw new Error(`Check out a branch before trying to ${action}.`);
   if (!summary.clean) throw new Error(`Commit or discard workspace changes before trying to ${action}.`);
   return summary;

package/src/index.js

@@ -50,7 +50,7 @@ export {
   nextCalendarOccurrence
 } from "./recurrence.js";
 export { searchResources, searchableValues } from "./search.js";
-export { createFileGRCServer, serveWorkspace } from "./server.js";
+export { createFilegrcServer, serveWorkspace } from "./server.js";
 export { normalizeSetupPayload, setupWorkspace } from "./setup.js";
 export { createAppState } from "./state.js";
 export { currentCalendarDate, formatCalendarDate, formatLocalDateTime } from "./time.js";

package/src/model-docs.js

@@ -67,7 +67,7 @@ export function generateModelDocumentation(model) {
     "",
     ...model.evidenceSourceFamilies.map((item) => (
       item.collectionTestRequired === false
-        ? `- **${item.title}** (${item.sourceKinds.map((kind) => `\`${kind}\``).join(", ")}): ${item.description} FileGRC operating records: ${item.operationRecordTypes.map((type) => `\`${type}\``).join(", ")}. No separate collection test is required. ${item.timing}`
+        ? `- **${item.title}** (${item.sourceKinds.map((kind) => `\`${kind}\``).join(", ")}): ${item.description} filegrc operating records: ${item.operationRecordTypes.map((type) => `\`${type}\``).join(", ")}. No separate collection test is required. ${item.timing}`
         : `- **${item.title}** (${item.sourceKinds.map((kind) => `\`${kind}\``).join(", ")}): ${item.description} Test external collection: ${item.testPrompt} ${item.timing}`
     )),
     "",

package/src/parties.js

@@ -0,0 +1,46 @@
+const CURRENT_PERSON_STATUSES = new Set(["active", "external"]);
+const CURRENT_TEAM_STATUSES = new Set(["active"]);
+
+export function partyPeople(ids = [], byId, options = {}, seen = new Set()) {
+  const people = new Set();
+  for (const id of ids) {
+    if (seen.has(id)) continue;
+    seen.add(id);
+    const record = byId.get(id);
+    if (
+      record?.type === "person"
+      && (!options.personStatuses || options.personStatuses.has(record.status))
+    ) {
+      people.add(id);
+    }
+    if (
+      record?.type === "team"
+      && (!options.teamStatuses || options.teamStatuses.has(record.status))
+    ) {
+      for (const personId of partyPeople(
+        [...(record.memberIds || []), ...(record.chairIds || [])],
+        byId,
+        options,
+        seen
+      )) {
+        people.add(personId);
+      }
+    }
+  }
+  return people;
+}
+
+export function currentPartyPeople(ids = [], byId) {
+  return partyPeople(ids, byId, {
+    personStatuses: CURRENT_PERSON_STATUSES,
+    teamStatuses: CURRENT_TEAM_STATUSES
+  });
+}
+
+export function partiesIndependent(ownerIds = [], approverIds = [], byId) {
+  const owners = partyPeople(ownerIds, byId);
+  const approvers = partyPeople(approverIds, byId);
+  return owners.size > 0
+    && approvers.size > 0
+    && ![...owners].some((id) => approvers.has(id));
+}

package/src/paths.js

@@ -15,7 +15,7 @@ export function resolveWorkspaceRoot(input = process.cwd()) {
     current = parent;
   }
 
-  throw new Error("No FileGRC workspace was found from the requested path.");
+  throw new Error("No filegrc workspace was found from the requested path.");
 }
 
 export function isWithin(parent, candidate) {

package/src/program-lifecycle.js

@@ -1,4 +1,7 @@
+import { currentPartyPeople } from "./parties.js";
+
 export function obligationProgramStatus(obligation, byId, asOf) {
+  if (currentPartyPeople(obligation.ownerIds || [], byId).size === 0) return "proposed";
   const policyIds = obligation.policyIds || [];
   const policiesReady = policyIds.every((id) => {
     const policy = byId.get(id);

package/src/program-path.js

@@ -1,5 +1,5 @@
 export const RESOURCE_INSTRUCTIONS = {
-  person: "Confirm the people who will own, approve, review, or operate the program. Replace the starter names and contact details with the organization’s actual people.",
+  person: "Confirm the policy owner created during setup, then add the actual people who will approve, review, or operate the program.",
   team: "Review the starter Security and Risk Oversight team, including its members and chair. Add another team only when the organization assigns shared responsibility to it.",
   system: "Catalog all in-scope systems for the program. Treat anything that operates a control or produces evidence as a System, including software provided by a vendor (like HR software).",
   vendor: "Catalog the companies that provide in-scope software or services. Link each vendor-provided System to the company that provides it.",
@@ -14,7 +14,7 @@ export const RESOURCE_INSTRUCTIONS = {
   "risk-assessment": "Complete and approve an assessment of the risks to the in-scope service, systems, vendors, and commitments.",
   risk: "Record each risk identified by an assessment or operating activity. Assign an owner, rate it, and document the chosen response.",
   obligation: "Review the recurring work proposed by effective policies. Confirm who owns it, when it is due, and what proof completion requires.",
-  "obligation-event": "When a policy-triggering event occurs, record it here and complete the actions FileGRC creates for it.",
+  "obligation-event": "When a policy-triggering event occurs, record it here and complete the actions filegrc creates for it.",
   "policy-review": "Record scheduled and change-driven reviews of policies and governed documents, including the decision and any follow-up.",
   meeting: "Record required oversight meetings, including attendees, decisions, minutes, and follow-up work.",
   exception: "Record and approve any time-limited departure from a policy or control before the departure begins.",
@@ -64,13 +64,13 @@ export const PROGRAM_PATH = [
     description: "Ownership, criteria, and service boundary",
     summary: "Confirm the people and teams responsible for the program, set the management goal, review the criteria and customer commitments in scope, then define the customer-facing service, supporting systems, and supplier dependencies.",
     sections: [
-      { id: "ownership", title: "Program Ownership", description: "Confirm the people and teams that own, approve, review, and operate the program.", steps: ["Replace the starter people with the organization’s actual owners and reviewers.", "Review the starter Security and Risk Oversight team, its members, and its chair.", "Add other teams only when the organization assigns shared responsibility to them."], types: ["person", "team"], defaultOpen: true },
+      { id: "ownership", title: "Program Ownership", description: "Confirm the people and teams that own, approve, review, and operate the program.", steps: ["Confirm the policy owner created during setup, then add the organization’s actual reviewers and operators.", "Review the starter Security and Risk Oversight team, its members, and its chair.", "Add other teams only when the organization assigns shared responsibility to them."], types: ["person", "team"], defaultOpen: true },
       { id: "criteria", title: "Criteria", description: "Confirm the criteria used for the program, resolve whether each requirement applies, and record customer commitments that shape the service or control design.", steps: ["Review the included Security criteria references.", "Mark each requirement applicable or not applicable with a rationale.", "Record customer commitments and keep optional criteria out until management deliberately adds them."], types: ["framework", "requirement", "commitment"], defaultOpen: true },
       { id: "boundary", title: "Service Boundary", description: "Record the service and its supporting technology and providers. An application or platform is a System because it operates controls or produces evidence; the company providing it is a Vendor because contracts, due diligence, and supplier risk belong to that relationship.", steps: ["Create a Vendor record for each material provider.", "Create System records for the customer-facing service and each supporting application, platform, or internal system that is in scope or produces evidence, then connect vendor-provided Systems to their providers.", "Assign owners, classification, dependencies, and a clear in-scope decision to each System, and keep supplier reviews with the Vendor."], types: ["vendor", "system"], defaultOpen: false }
     ],
     resourceTypes: ["person", "team", "framework", "requirement", "commitment", "vendor", "system"],
     commands: [
-      "filegrc setup --help",
+      "filegrc setup",
       "filegrc guide person --json",
       "filegrc guide system --json",
       "filegrc list system --json"
@@ -99,7 +99,7 @@ export const PROGRAM_PATH = [
     description: "Tailor and finish the starter control set",
     summary: "Review the starter catalog against the scoped service, then give every applicable internal control an actual procedure, owner, system scope, cadence, policy and criteria mappings, authoritative evidence source, and implementation date. Mark it implemented only after the procedure is operating, then record any controls that customers or carved-out providers must perform.",
     sections: [
-      { id: "catalog", title: "Control Catalog", description: "Finish the starter controls, record applicable complementary controls, and see whether FileGRC tracks operation through Work Queue or evidence records.", steps: ["Open every planned control and confirm its mappings and suggested frequency.", "Write the real procedure in Record Markdown and add system scope and evidence sources.", "Record any required customer or carved-out provider controls as Complementary Controls."], types: ["control", "complementary-control"], defaultOpen: true }
+      { id: "catalog", title: "Control Catalog", description: "Finish the starter controls, record applicable complementary controls, and see whether filegrc tracks operation through Work Queue or evidence records.", steps: ["Open every planned control and confirm its mappings and suggested frequency.", "Write the real procedure in Record Markdown and add system scope and evidence sources.", "Record any required customer or carved-out provider controls as Complementary Controls."], types: ["control", "complementary-control"], defaultOpen: true }
     ],
     resourceTypes: ["control", "complementary-control"],
     commands: [
@@ -170,7 +170,7 @@ export const PROGRAM_PATH = [
       {
         id: "policy-events",
         title: "Policy Events",
-        instructions: "Trigger the matching workflow when an event occurs. FileGRC adds every required action to the Work Queue with its owner and deadline.",
+        instructions: "Trigger the matching workflow when an event occurs. filegrc adds every required action to the Work Queue with its owner and deadline.",
         use: "Preview the full workflow before triggering it, then create the event and every linked task in one validated write.",
         policyBasis: "Active event obligations translate policy-triggering changes into owned, deadline-bound Action Items. Proposed workflows remain unavailable until their governing policies and linked controls are ready.",
         commands: ["filegrc obligations --json", "filegrc trigger EVENT_TYPE (--occurred-on YYYY-MM-DD | --occurred-at RFC3339) --subject RESOURCE_ID --json"]
@@ -201,14 +201,14 @@ export const PROGRAM_PATH = [
     summary: "After the program is collecting reliable evidence, create an Audit record for the real CPA engagement, keep the firm-agreed report period separate from management’s candidate dates, complete management documents, populations, requests, evidence delivery, and fieldwork, then preserve the findings, responses, opinion, and final report.",
     sections: [
       { id: "engagement", title: "Engagement", description: "Record the actual CPA engagement, formal scope and dates, requests, and management responses.", steps: ["Create the Audit after the CPA firm is engaged.", "Record the firm-agreed type, scope, systems, criteria, and dates.", "Track incoming requests and approved response material."], types: ["audit", "audit-request"], defaultOpen: true },
-      { id: "fieldwork", title: "Fieldwork", description: "Prepare management documents, reconcile Type 2 populations, review both evidence paths, support testing, and build the indexed packet.", steps: ["Initialize engagement-specific management documents and populations.", "Review dated FileGRC Evidence and verified External Evidence for the formal period.", "Reconcile complete populations, link samples, and resolve fieldwork requests and findings.", "Build the packet from a clean Git revision; it includes FileGRC records, Markdown, External Evidence, attachments, indexes, history, and checksums."], types: ["audit-population", "control-test"], utility: "audit-packet", defaultOpen: true }
+      { id: "fieldwork", title: "Fieldwork", description: "Prepare management documents, reconcile Type 2 populations, review both evidence paths, support testing, and build the indexed packet.", steps: ["Initialize engagement-specific management documents and populations.", "Review dated filegrc Evidence and verified External Evidence for the formal period.", "Reconcile complete populations, link samples, and resolve fieldwork requests and findings.", "Build the packet from a clean Git revision; it includes filegrc records, Markdown, External Evidence, attachments, indexes, history, and checksums."], types: ["audit-population", "control-test"], utility: "audit-packet", defaultOpen: true }
     ],
     resourceTypes: ["audit", "audit-request", "audit-population", "control-test"],
     utilities: [
       {
         id: "audit-packet",
         title: "Audit Evidence & Packet",
-        instructions: "Review FileGRC Evidence and External Evidence for the formal period, complete engagement preparation, and build the indexed audit packet.",
+        instructions: "Review filegrc Evidence and External Evidence for the formal period, complete engagement preparation, and build the indexed audit packet.",
         use: "Prepare management documents and populations, answer fieldwork requests, review both evidence paths, and compile a delivery bound to a clean Git revision.",
         policyBasis: "Management prepares the scoped records, evidence, populations, assertions, and responses. The CPA firm selects samples, evaluates evidence and exceptions, and issues the report.",
         commands: ["filegrc audit-readiness AUDIT_ID --json", "filegrc evidence-packet --audit AUDIT_ID --preview --json"]

package/src/program-readiness.js

@@ -2,6 +2,7 @@ import { readFile } from "node:fs/promises";
 import { planObligations } from "./obligations.js";
 import { resolveDataPath } from "./paths.js";
 import { obligationIsRunning } from "./program-lifecycle.js";
+import { currentPartyPeople, partiesIndependent, partyPeople } from "./parties.js";
 import { markdownEntries } from "./resource-markdown.js";
 import { currentCalendarDate } from "./time.js";
 import { loadWorkspace } from "./workspace.js";
@@ -33,7 +34,7 @@ export async function assessProgramReadiness(input, options = {}) {
     [...sourceStage.items, ...collectionStage.items]
   );
   const evidenceGateStages = [
-    scopeStage(workspace, scope, records),
+    scopeStage(workspace, scope, records, byId),
     await policiesStage(scope, byId, readMarkdown, asOf),
     await controlsStage(scope, byId, readMarkdown, asOf),
     evidenceStage
@@ -116,7 +117,7 @@ function programScope(workspace, records, byId) {
   };
 }
 
-function scopeStage(workspace, scope, records) {
+function scopeStage(workspace, scope, records, byId) {
   const items = [];
   const goal = workspace?.assuranceGoal || "none";
   items.push(item(
@@ -129,6 +130,8 @@ function scopeStage(workspace, scope, records) {
     workspace || { type: "workspace" }
   ));
 
+  items.push(programOwnershipItem(records, byId));
+
   const completeSystems = scope.systems.filter((system) => (
     system.status === "active"
     && system.inScope === true
@@ -175,7 +178,44 @@ function scopeStage(workspace, scope, records) {
     workspace || { type: "workspace" }
   ));
 
-  return stage("scope", "Define Scope", "Set the management objective, service boundary, criteria, controls, and dependencies.", items);
+  return stage("scope", "Define Scope", "Set program ownership, the management objective, service boundary, criteria, controls, and dependencies.", items);
+}
+
+function programOwnershipItem(records, byId) {
+  const ownedRecords = records.filter((record) => (
+    ["policy", "control", "obligation"].includes(record.type)
+    && !["retired", "superseded", "not-applicable"].includes(record.status)
+  ));
+  const unresolved = ownedRecords.filter((record) => currentPartyPeople(record.ownerIds, byId).size === 0);
+  const currentOwners = new Set(ownedRecords.flatMap((record) => [...currentPartyPeople(record.ownerIds, byId)]));
+  const oversight = byId.get("team-security-risk-oversight");
+  const policyOwnerIds = new Set(records
+    .filter((record) => record.type === "policy" && !["retired", "superseded"].includes(record.status))
+    .flatMap((record) => [...partyPeople(record.ownerIds || [], byId)]));
+  const oversightChairs = oversight?.type === "team"
+    ? currentPartyPeople(oversight.chairIds || [], byId)
+    : new Set();
+  const oversightComplete = !oversight || (
+    oversight.type === "team"
+    && oversight.status === "active"
+    && currentPartyPeople(oversight.memberIds || [], byId).size > 0
+    && oversightChairs.size > 0
+    && ![...oversightChairs].some((id) => policyOwnerIds.has(id))
+  );
+  const complete = currentOwners.size > 0 && unresolved.length === 0 && oversightComplete;
+  const detail = [];
+  if (!currentOwners.size) detail.push("No current person owns the program records.");
+  if (unresolved.length) detail.push(`${unresolved.length} ownership ${unresolved.length === 1 ? "assignment does" : "assignments do"} not resolve to a current person.`);
+  if (!oversightComplete) detail.push("Finish and activate Security and Risk Oversight with a current chair who is separate from policy ownership.");
+  return item(
+    "program-ownership",
+    complete ? "complete" : "action",
+    "Confirm program owners and oversight",
+    complete
+      ? `${currentOwners.size} current ${currentOwners.size === 1 ? "person owns" : "people own"} the program records.${oversight ? " Security and Risk Oversight has a separate current chair." : ""}`
+      : detail.join(" "),
+    !oversightComplete ? oversight : unresolved[0] || { type: "person" }
+  );
 }
 
 async function policiesStage(scope, byId, readMarkdown, asOf) {
@@ -183,14 +223,11 @@ async function policiesStage(scope, byId, readMarkdown, asOf) {
   const policies = [...linkedPolicyIds].map((id) => byId.get(id)).filter((record) => (
     record?.type === "policy" && !["superseded", "retired"].includes(record.status)
   ));
-  const approvers = policies.flatMap((policy) => partyPeople(policy.approverIds || [], byId))
+  const appointedReviewer = policies
+    .filter((policy) => partiesIndependent(policy.ownerIds, policy.approverIds, byId))
+    .flatMap((policy) => [...currentPartyPeople(policy.approverIds || [], byId)])
     .map((id) => byId.get(id))
-    .filter(Boolean);
-  const appointedReviewer = approvers.find((person) => (
-    ["active", "external"].includes(person.status)
-    && person.email
-    && !(person.id === "person-independent-approver" && ["Independent Approver", "Independent Reviewer"].includes(person.title))
-  ));
+    .find(Boolean);
   const items = [
     item(
       "independent-reviewer",
@@ -199,7 +236,7 @@ async function policiesStage(scope, byId, readMarkdown, asOf) {
       appointedReviewer
         ? `${appointedReviewer.title} is recorded as a reviewer separate from policy ownership.`
         : "Appoint a reviewer who is separate from the policy owner. The reviewer may be another person in the organization or an external person, and is separate from the CPA firm that may later perform the audit.",
-      appointedReviewer || { type: "person", id: "person-independent-approver" }
+      appointedReviewer || { type: "person" }
     )
   ];
   if (!policies.length) {
@@ -355,7 +392,7 @@ function evidenceCollectionStage(scope, records, byId, model) {
           ? `${capture.title} is a draft. Open it, select the authoritative source System, collect the named artifact, and have another person verify it.`
           : capture
             ? `${capture.title} is ${capture.status} but must be verified before this family is ready.`
-          : `Run and verify one test export or test capture from an authoritative source outside FileGRC, then link it to a family control.`,
+          : `Run and verify one test export or test capture from an authoritative source outside filegrc, then link it to a family control.`,
       capture || { type: "evidence" },
       {
         familyId: family.id,
@@ -549,26 +586,6 @@ function substantiveMarkdown(source) {
   return (source.match(/[\p{L}\p{N}][\p{L}\p{N}'’-]*/gu) || []).length >= 10;
 }
 
-function partiesIndependent(ownerIds = [], approverIds = [], byId) {
-  const owners = new Set(partyPeople(ownerIds, byId));
-  const approvers = partyPeople(approverIds, byId);
-  return owners.size > 0 && approvers.length > 0 && !approvers.some((id) => owners.has(id));
-}
-
-function partyPeople(ids = [], byId, seen = new Set()) {
-  const people = [];
-  for (const id of ids) {
-    if (seen.has(id)) continue;
-    seen.add(id);
-    const record = byId.get(id);
-    if (record?.type === "person") people.push(id);
-    if (record?.type === "team") {
-      people.push(...partyPeople([...(record.memberIds || []), ...(record.chairIds || [])], byId, seen));
-    }
-  }
-  return [...new Set(people)];
-}
-
 function policyCheckLabel(name) {
   return ({
     reviewed: "draft review",

package/src/server.js

@@ -15,7 +15,7 @@ import { setupWorkspace } from "./setup.js";
 import { loadWorkspace } from "./workspace.js";
 import { APP_SCRIPT, APP_STYLES, renderIndex } from "./web.js";
 
-export function createFileGRCServer(input = process.cwd(), options = {}) {
+export function createFilegrcServer(input = process.cwd(), options = {}) {
   return createHttpServer(async (request, response) => {
     try {
       if (!expectedHost(request, options.allowedHosts)) {
@@ -184,7 +184,7 @@ export async function serveWorkspace(input = process.cwd(), options = {}) {
   }
   const loaded = await loadWorkspace(input);
   getResourceDefinition(loaded.model, "workspace");
-  const server = createFileGRCServer(loaded.root, { allowedHosts: [host] });
+  const server = createFilegrcServer(loaded.root, { allowedHosts: [host] });
   await new Promise((resolve, reject) => {
     server.once("error", reject);
     server.listen(port, host, resolve);

package/src/state.js

@@ -47,7 +47,7 @@ export async function createAppState(input = process.cwd(), options = {}) {
     dataModelVersion: loaded.model.modelVersion,
     id: "workspace",
     type: "workspace",
-    title: "FileGRC workspace",
+    title: "filegrc workspace",
     organizationName: "Workspace configuration unavailable",
     timezone: "UTC"
   };

package/src/validate.js

@@ -3,6 +3,7 @@ import { getResourceDefinition } from "../model/index.js";
 import { isCanonicalDataPath, resolveDataPath } from "./paths.js";
 import { parseCalendarDate, validCalendarRecurrence } from "./recurrence.js";
 import { obligationIsRunning } from "./program-lifecycle.js";
+import { partyPeople } from "./parties.js";
 import { isMarkdownChoice, markdownEntries } from "./resource-markdown.js";
 import { currentCalendarDate, isRfc3339Timestamp } from "./time.js";
 import { indexResources, loadWorkspace } from "./workspace.js";
@@ -223,9 +224,10 @@ function validateEvidencePaths(record, path, diagnostics) {
 }
 
 function validateIndependentApproval(record, byId, path, diagnostics) {
-  if (!["policy", "document"].includes(record.type) || !(record.approverIds || []).length) return;
-  const owners = expandPeople(record.ownerIds || [], byId);
-  const approvers = expandPeople(record.approverIds || [], byId);
+  if (!["policy", "document"].includes(record.type)) return;
+  if (!(record.approverIds || []).length) return;
+  const owners = partyPeople(record.ownerIds || [], byId);
+  const approvers = partyPeople(record.approverIds || [], byId);
   const overlap = [...owners].filter((id) => approvers.has(id));
   if (overlap.length) {
     diagnostics.push(error(
@@ -234,37 +236,6 @@ function validateIndependentApproval(record, byId, path, diagnostics) {
       `Approvers must be separate from owners, including through team membership: ${overlap.join(", ")}.`
     ));
   }
-  if (["approved", "active"].includes(record.status)) {
-    const incompleteStarterApprover = [...approvers]
-      .map((id) => byId.get(id))
-      .find((person) => (
-        person?.id === "person-independent-approver"
-        && ["Independent Approver", "Independent Reviewer"].includes(person.title)
-      ));
-    if (incompleteStarterApprover) {
-      diagnostics.push(error(
-        "independent-approver-not-appointed",
-        path,
-        `The selected approver "${incompleteStarterApprover.title}" is still the starter placeholder. Open People and replace it with the reviewer's actual name before approving this record. The reviewer may be internal or external but must be separate from the owner.`
-      ));
-    }
-  }
-}
-
-function expandPeople(ids, byId, seen = new Set()) {
-  const people = new Set();
-  for (const id of ids) {
-    if (seen.has(id)) continue;
-    seen.add(id);
-    const record = byId.get(id);
-    if (record?.type === "person") people.add(id);
-    if (record?.type === "team") {
-      for (const personId of expandPeople([...(record.memberIds || []), ...(record.chairIds || [])], byId, seen)) {
-        people.add(personId);
-      }
-    }
-  }
-  return people;
 }
 
 function validateObligation(record, path, diagnostics) {