arckit-cli 6.1.1__py3-none-any.whl

arckit_cli-6.1.1.data/data/share/arckit/.arckit/templates/transition-architecture-template.md

@@ -0,0 +1,286 @@
+---
+title: "Transition Architecture"
+docType: TRANS
+templateVersion: "1.0"
+---
+
+# Transition Architecture
+
+## Document Control
+
+| Field | Value |
+|-------|-------|
+| Document ID | `ARC-[PROJECT_ID]-TRANS-v[VERSION]` |
+| Document Type | Transition Architecture |
+| Project | `[PROJECT_NAME]` |
+| Classification | `[CLASSIFICATION]` |
+| Status | DRAFT |
+| Version | `[VERSION]` |
+| Created | `[YYYY-MM-DD]` |
+| Last Modified | `[YYYY-MM-DD]` |
+| Review Cycle | Monthly during active migration, quarterly after migration |
+| Next Review Date | `[YYYY-MM-DD]` |
+| Owner | `[OWNER_NAME_AND_ROLE]` |
+| Reviewed By | `[REVIEWER_NAME]` |
+| Approved By | `[APPROVER_NAME]` |
+| Distribution | `[DISTRIBUTION_LIST]` |
+
+### Revision History
+
+| Version | Date | Author | Description | Reviewer | Approver |
+|---------|------|--------|-------------|----------|----------|
+| `[VERSION]` | `[YYYY-MM-DD]` | ArcKit AI | Initial creation from `/arckit:transition-architecture` command | `[REVIEWER_NAME]` | `[APPROVER_NAME]` |
+
+---
+
+## 1. Transition Overview
+
+| Architecture | Scope | Duration | Investment |
+|--------------|-------|----------|------------|
+| Architecture 1 (Baseline) | Current state — [brief description] | — | — |
+| Architecture 2 | [Wave 1 scope — key capabilities achieved] | [6 months] | [£X] |
+| Architecture 3 | [Wave 2 scope — key capabilities achieved] | [6 months] | [£X] |
+| Target Architecture | Final state — [brief description] | — | — |
+
+### Transition Waves
+
+**Wave 1 — [Wave Name]** (Architecture 2)
+
+- **Objective**: [Brief objective of the wave]
+- **Duration**: [Start] to [End] ([N] months)
+- **Key Deliverables**:
+  - [Deliverable 1]
+  - [Deliverable 2]
+  - [Deliverable 3]
+- **Governance Gate**: [Gate name — e.g., "Wave 1 Complete — ARB review"]
+
+**Wave 2 — [Wave Name]** (Architecture 3)
+
+- **Objective**: [Brief objective of the wave]
+- **Duration**: [Start] to [End] ([N] months)
+- **Key Deliverables**:
+  - [Deliverable 1]
+  - [Deliverable 2]
+  - [Deliverable 3]
+- **Governance Gate**: [Gate name — e.g., "Wave 2 Complete — Steering Committee review"]
+
+---
+
+## 2. Work Packages
+
+### WP-001: [Work Package Name]
+
+- **Wave**: [Wave 1 / Architecture 2]
+- **Scope**: [What this work package delivers — 2-3 sentence description]
+- **Deliverables**:
+  - [Deliverable 1 — concrete, artefact-level output]
+  - [Deliverable 2]
+  - [Deliverable 3]
+- **Dependencies**: [WP-002 (must complete), ADR-001 (technology decision)]
+- **Resources**: [X FTE across roles, £Y budget]
+- **Timeline**: [Start date] → [End date] ([N] months)
+- **GAPA Gaps addressed**: [G-001, G-003, G-005]
+- **Acceptance Criteria**:
+  - [Criterion 1 — measurable and testable, e.g., "API platform handles >= 10,000 concurrent requests with < 200ms latency at 95th percentile"]
+  - [Criterion 2 — e.g., "All critical data migrated with < 0.01% loss rate verified by reconciliation"]
+  - [Criterion 3 — e.g., "Security baseline meets NCSC CAF Level 3 requirements"]
+  - [Criterion 4 — e.g., "UAT pass rate > 95% across all test cases"]
+
+### WP-002: [Work Package Name]
+
+- **Wave**: [Wave 1 / Architecture 2]
+- **Scope**: [What this work package delivers]
+- **Deliverables**:
+  - [Deliverable 1]
+  - [Deliverable 2]
+- **Dependencies**: [WP-001, ADR-002]
+- **Resources**: [X FTE across roles, £Y budget]
+- **Timeline**: [Start date] → [End date] ([N] months)
+- **GAPA Gaps addressed**: [G-002, G-004]
+- **Acceptance Criteria**:
+  - [Criterion 1]
+  - [Criterion 2]
+  - [Criterion 3]
+
+### WP-003: [Work Package Name]
+
+- **Wave**: [Wave 2 / Architecture 3]
+- **Scope**: [What this work package delivers]
+- **Deliverables**:
+  - [Deliverable 1]
+  - [Deliverable 2]
+  - [Deliverable 3]
+- **Dependencies**: [WP-001, WP-002]
+- **Resources**: [X FTE across roles, £Y budget]
+- **Timeline**: [Start date] → [End date] ([N] months)
+- **GAPA Gaps addressed**: [G-006, G-007]
+- **Acceptance Criteria**:
+  - [Criterion 1]
+  - [Criterion 2]
+  - [Criterion 3]
+
+### WP-004: [Work Package Name]
+
+- **Wave**: [Wave 2 / Architecture 3]
+- **Scope**: [What this work package delivers]
+- **Deliverables**:
+  - [Deliverable 1]
+  - [Deliverable 2]
+- **Dependencies**: [WP-002, WP-003]
+- **Resources**: [X FTE across roles, £Y budget]
+- **Timeline**: [Start date] → [End date] ([N] months)
+- **GAPA Gaps addressed**: [G-008]
+- **Acceptance Criteria**:
+  - [Criterion 1]
+  - [Criterion 2]
+
+[Continue for additional work packages as needed — add WP-005, WP-006, etc.]
+
+---
+
+## 3. Work Package Dependencies
+
+```mermaid
+flowchart TD
+    WP1[WP-001: Platform Foundation] --> WP2[WP-002: Data Migration]
+    WP1 --> WP3[WP-003: Application Modernization]
+    WP2 --> WP4[WP-004: Integration]
+    WP3 --> WP4
+    WP4 --> WP5[WP-005: Decommission Legacy]
+
+    M1[Milestone: Wave 1 Complete] -.-> WP3
+    M1 -.-> WP2
+
+    style WP1 fill:#e8f5e9
+    style WP5 fill:#fff3e0
+```
+
+### Dependency Legend
+
+- **Solid arrow** (`→`): Hard dependency — predecessor must complete before successor can begin
+- **Dashed arrow** (`-.→`): Soft dependency — information flow or soft milestone alignment
+- **Coloured nodes**: Wave assignment (green = Wave 1, orange = Wave 2, red = final)
+
+---
+
+## 4. Resource Plan
+
+| Resource | WP-001 | WP-002 | WP-003 | WP-004 | WP-005 |
+|----------|--------|--------|--------|--------|--------|
+| Architecture | [X FTE] | [X FTE] | [X FTE] | [X FTE] | [X FTE] |
+| Development | [X FTE] | [X FTE] | [X FTE] | [X FTE] | [X FTE] |
+| Data Engineering | [X FTE] | [X FTE] | [X FTE] | [X FTE] | — |
+| Security | [X FTE] | [X FTE] | [X FTE] | [X FTE] | [X FTE] |
+| Operations | [X FTE] | [X FTE] | [X FTE] | [X FTE] | [X FTE] |
+| Business Analyst | [X FTE] | [X FTE] | [X FTE] | [X FTE] | — |
+| QA/Testing | — | [X FTE] | [X FTE] | [X FTE] | [X FTE] |
+| PMO | [X FTE] | [X FTE] | [X FTE] | [X FTE] | [X FTE] |
+| **Total FTE** | **[X]** | **[X]** | **[X]** | **[X]** | **[X]** |
+
+### Peak Resource Requirements
+
+| Period | Total FTE | Peak Resource Type | Contention Risk |
+|--------|-----------|-------------------|-----------------|
+| [Wave 1 period] | [X] | [e.g., Development — 8 FTE] | [Low/Medium/High] |
+| [Wave 2 period] | [X] | [e.g., Data Engineering — 5 FTE] | [Low/Medium/High] |
+
+---
+
+## 5. Risk & Contingency
+
+| Risk ID | Risk | Likelihood | Impact | WP Affected | Contingency Plan | Trigger Conditions | Risk Owner |
+|---------|------|------------|--------|-------------|------------------|-------------------|------------|
+| R-001 | [Data migration timeline overrun due to legacy data quality issues] | Medium | High | WP-002 | [Extend WP-002 by 4 weeks; activate data cleansing sprint] | [Data quality scan reveals > 5% corruption rate] | [Lead Data Engineer] |
+| R-002 | [Key vendor delivery delay affecting platform readiness] | Medium | High | WP-001 | [Engage secondary vendor; switch to open-source alternative] | [Vendor misses first milestone by > 2 weeks] | [Technical Architect] |
+| R-003 | [Skills gap — insufficient cloud engineering capacity] | High | Medium | WP-001, WP-003 | [Contract external cloud experts; fast-track internal training] | [FTE gap > 30% of requirement] | [PMO Lead] |
+| R-004 | [Stakeholder resistance to application retirement] | Low | Critical | WP-005 | [Escalate to steering committee; document risk of continued legacy operation] | [Sponsor blocks retirement decision] | [Business Change Manager] |
+| R-005 | [Security compliance deadline moved forward] | Low | High | WP-001, WP-004 | [Re-prioritise security work packages; parallelise Wave 1 activities] | [Regulatory deadline accelerated > 3 months] | [Security Architect] |
+
+---
+
+## 6. Acceptance Criteria Summary
+
+| Work Package | Criteria Count | Status | Target Completion |
+|-------------|----------------|--------|-------------------|
+| WP-001 | [N] | Pending | [Wave 1 end date] |
+| WP-002 | [N] | Pending | [Wave 1 end date] |
+| WP-003 | [N] | Pending | [Wave 2 end date] |
+| WP-004 | [N] | Pending | [Wave 2 end date] |
+| WP-005 | [N] | Pending | [Wave 2 end date] |
+
+### Acceptance Gate Process
+
+1. **Work Package Review**: Each work package lead confirms acceptance criteria readiness 2 weeks before target
+2. **Architecture Review**: Architecture Board validates technical criteria at governance gate
+3. **Independent Verification**: QA/Security teams independently verify measurable criteria
+4. **Sign-off**: Documented sign-off from work package lead, architecture owner, and business sponsor
+5. **Wave Gate**: All work package criteria for a wave must pass before proceeding to next wave
+
+---
+
+## 7. Traceability
+
+### GAPA → TRANS Mapping
+
+| GAPA Gap | Capability | GAPA Workstream | TRANS Work Package | Transition Architecture |
+|----------|-----------|-----------------|-------------------|-------------------------|
+| G-001 | [Capability] | WS-001 | WP-001 | Architecture 2 |
+| G-002 | [Capability] | WS-002 | WP-002 | Architecture 2 |
+| G-003 | [Capability] | WS-001 | WP-001 | Architecture 2 |
+| G-004 | [Capability] | WS-002 | WP-002 | Architecture 2 |
+| G-005 | [Capability] | WS-003 | WP-003 | Architecture 3 |
+| G-006 | [Capability] | WS-003 | WP-003 | Architecture 3 |
+| G-007 | [Capability] | WS-004 | WP-004 | Architecture 3 |
+| G-008 | [Capability] | WS-004 | WP-004 | Architecture 3 |
+
+### ROAD → TRANS Alignment
+
+| ROAD Theme | Roadmap Phase | TRANS Wave | Work Packages |
+|------------|---------------|-----------|---------------|
+| [Theme 1] | [Phase X] | Wave 1 | WP-001, WP-002 |
+| [Theme 2] | [Phase Y] | Wave 2 | WP-003, WP-004 |
+| [Theme 3] | [Phase Z] | Wave 1 → 2 | WP-005 |
+
+### APPR → TRANS Integration
+
+| APPR Decision | Application | TRANS Work Package | Migration Approach |
+|---------------|-------------|-------------------|-------------------|
+| Retire | [App name] | WP-005 | Decommission |
+| Replace | [App name] | WP-003 | Refactor |
+| Merge | [App name] | WP-004 | Consolidate |
+
+### Source Artefact Traceability
+
+| Source Artifact | Document | Key Information Used |
+|-----------------|----------|---------------------|
+| Gap Analysis | `ARC-[P]-GAPA-v[N].md` | Gaps, workstreams, severity scores, gap-to-risk mappings |
+| Strategic Roadmap | `ARC-[P]-ROAD-v[N].md` | Timeline, themes, investment envelopes, governance gates |
+| Application Rationalisation | `ARC-[P]-APPR-v[N].md` | Application decisions, migration approaches, sequencing |
+| Architecture Decisions | `ARC-[P]-ADR-*.md` | Technology choices, platform decisions, constraints |
+
+---
+
+## 8. Assumptions
+
+1. [Gap analysis (GAPA) accurately reflects current state capabilities]
+2. [Budget envelope of £[X] is confirmed for the transition programme]
+3. [Key stakeholders will be available for governance gate reviews]
+4. [No major regulatory changes affecting migration timeline during programme]
+5. [Vendor commitments for platform delivery hold per contract terms]
+
+## 9. Constraints
+
+1. **Budget**: [Total programme budget cap of £[X]]
+2. **Timeline**: [Must achieve target architecture by [date] due to [driver]]
+3. **Skills**: [Limited cloud engineering capacity — max [X] FTE available internally]
+4. **Technology**: [Legacy system end-of-support date: [date] — must migrate before]
+5. **Compliance**: [Must achieve [standard] certification by [date]]
+
+---
+
+**Generated by**: ArcKit `/arckit:transition-architecture` command
+**Generated on**: `[DATE] [TIME] GMT`
+**ArcKit Version**: `{ARCKIT_VERSION}`
+**Project**: `[PROJECT_NAME]` (Project `[PROJECT_ID]`)
+**AI Model**: `[MODEL_NAME]`
+**Generation Context**: [Brief note about source documents used]

arckit_cli-6.1.1.data/data/share/arckit/.arckit/templates/uae-ai-autonomy-tier-template.md

@@ -0,0 +1,97 @@
+# UAE AI Autonomy Tier Posture
+
+> **Template Origin**: Community | **ArcKit Version**: [VERSION] | **Command**: `/arckit:uae-ai-autonomy-tier`
+
+## Document Control
+
+<!-- DOC-CONTROL-HEADER -->
+<!-- Resolved at command-execution time per _partials/RENDERING.md. -->
+
+## Revision History
+
+| Version | Date | Author | Changes | Approved By | Approval Date |
+|---------|------|--------|---------|-------------|---------------|
+| [VERSION] | [YYYY-MM-DD] | ArcKit AI | Initial creation from `/arckit:uae-ai-autonomy-tier` | [PENDING] | [PENDING] |
+
+## Executive Summary
+
+[Two to three paragraphs describing the AI use-cases in scope, the headline tier mix, and any tier-promotion proposals.]
+
+## AI Use-Case Inventory
+
+| AI use-case ID | Use case | Blast radius | Assigned tier | Rationale |
+|----------------|----------|---------------|----------------|-----------|
+| [AI-001] | [use case] | [internal / external / regulated] | [Tier 1 / Tier 2 / Tier 3] | [rationale] |
+
+> Tier 1 = internal productivity; Tier 2 = investor-facing or external content with mandatory human approval before release; Tier 3 = regulated or financial decisions.
+
+## Per-Tier Guard-Rail Matrix
+
+| Guard-rail | Tier 1 (internal-productivity) | Tier 2 (investor-facing-with-approval) | Tier 3 (regulated / financial) |
+|-----------|-------------------------------|----------------------------------------|--------------------------------|
+| Input filtering | [policy] | [policy] | [policy] |
+| Output filtering | [policy] | [policy] | [policy] |
+| Retrieval grounding | [policy] | [policy] | [policy] |
+| Hallucination controls | [policy] | [policy] | [policy] |
+| Refusal policy | [policy] | [policy] | [policy] |
+| Prompt-injection defences | [policy] | [policy] | [policy] |
+| PII handling | [policy] | [policy] | [policy] |
+
+## Approval Gates per Tier
+
+| Gate | Tier 1 | Tier 2 | Tier 3 |
+|------|--------|--------|--------|
+| Pre-deployment approval | [role] | [role + risk committee] | [role + risk committee + regulator engagement] |
+| Pre-release approval (per change) | [role] | [role — mandatory human review of outputs] | [role + audit officer] |
+| Material-model-change approval | [role] | [role + risk committee] | [role + regulator notification, where applicable] |
+| Decommissioning approval | [role] | [role] | [role + records retention sign-off] |
+
+## Audit Obligations per Tier
+
+| Audit obligation | Tier 1 | Tier 2 | Tier 3 |
+|------------------|--------|--------|--------|
+| Log prompt + response | [Y/N] | [Y/N] | [Y/N — full transcript] |
+| Log model version | [Y/N] | [Y/N] | [Y/N] |
+| Log retrieval context | [Y/N] | [Y/N] | [Y/N] |
+| Log human reviewer + decision | [N/A] | [Y/N] | [Y/N — required] |
+| Retention period | [period] | [period] | [period — typically longest] |
+| Audit cadence | [Annual / Quarterly] | [Quarterly] | [Monthly + on-incident] |
+| Reporting line | [role] | [role + risk committee] | [role + audit officer + regulator, where applicable] |
+
+## Tier-Promotion Criteria
+
+Use-cases may NOT skip tiers. Promotion from Tier 1 to Tier 2, or Tier 2 to Tier 3, requires evidenced operation at the prior tier.
+
+| Promotion path | Criteria | Evidence required |
+|----------------|----------|--------------------|
+| Tier 1 → Tier 2 | [criteria] | [evidence] |
+| Tier 2 → Tier 3 | [criteria] | [evidence] |
+
+## External References
+
+### Document Register
+
+| Doc ID | Title | URL | Verified date |
+|--------|-------|-----|---------------|
+| UAE-AI-CHARTER | UAE Charter for the Development and Use of Artificial Intelligence | <https://uaelegislation.gov.ae/en/policy/details/the-uae-charter-for-the-development-and-use-of-artificial-intelligence> | [YYYY-MM-DD] |
+| UAE-PDPL-FDL45-2021 | Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data | <https://uaelegislation.gov.ae/en/legislations/1972/download> | [YYYY-MM-DD] |
+
+### Citations
+
+| Citation | Doc ID | Section | Used in |
+|----------|--------|---------|---------|
+| [AUTI-1] | UAE-AI-CHARTER | Principle 6 (Human Oversight) | Approval Gates per Tier |
+| [AUTI-2] | UAE-AI-CHARTER | Principle 7 (Governance and Accountability) | Audit Obligations per Tier |
+| [AUTI-3] | UAE-PDPL-FDL45-2021 | Article 7 (sensitive categories) | Per-Tier Guard-Rail Matrix (PII handling) |
+
+### Unreferenced Documents
+
+[List any documents read during generation but not cited, or "None".]
+
+---
+
+**Generated by**: ArcKit `/arckit:uae-ai-autonomy-tier` command
+**Generated on**: [DATE]
+**ArcKit Version**: [VERSION]
+**Project**: [PROJECT_NAME]
+**Model**: [AI_MODEL]

arckit_cli-6.1.1.data/data/share/arckit/.arckit/templates/uae-ai-charter-template.md

@@ -0,0 +1,81 @@
+# UAE AI Charter Compliance Assessment
+
+> **Template Origin**: Community | **ArcKit Version**: [VERSION] | **Command**: `/arckit:uae-ai-charter`
+
+## Document Control
+
+<!-- DOC-CONTROL-HEADER -->
+<!-- Resolved at command-execution time per _partials/RENDERING.md. -->
+
+## Revision History
+
+| Version | Date | Author | Changes | Approved By | Approval Date |
+|---------|------|--------|---------|-------------|---------------|
+| [VERSION] | [YYYY-MM-DD] | ArcKit AI | Initial creation from `/arckit:uae-ai-charter` | [PENDING] | [PENDING] |
+
+## Executive Summary
+
+[Two to three paragraphs describing the AI capabilities in scope, the headline compliance posture against the 12 Charter principles, and any principle judged non-compliant.]
+
+## AI System Inventory
+
+| AI system ID | Use case | Model family | Vendor / source | Deployment mode | User population |
+|--------------|----------|--------------|------------------|------------------|-----------------|
+| [AI-001] | [use case] | [model] | [vendor] | [on-prem / sovereign-cloud / hosted-API] | [population] |
+
+## 12-Principle Assessment
+
+| # | Principle | Applies? | Evidence of compliance | Gap | Mitigation |
+|---|-----------|----------|------------------------|-----|------------|
+| 1 | Human-Machine Ties | [Y/N] | [evidence] | [gap] | [mitigation] |
+| 2 | Safety | [Y/N] | [evidence] | [gap] | [mitigation] |
+| 3 | Bias Mitigation | [Y/N] | [evidence] | [gap] | [mitigation] |
+| 4 | Data Privacy | [Y/N] | [evidence] | [gap] | [mitigation] |
+| 5 | Transparency | [Y/N] | [evidence] | [gap] | [mitigation] |
+| 6 | Human Oversight | [Y/N] | [evidence] | [gap] | [mitigation] |
+| 7 | Governance and Accountability | [Y/N] | [evidence] | [gap] | [mitigation] |
+| 8 | Technological Excellence | [Y/N] | [evidence] | [gap] | [mitigation] |
+| 9 | Human Commitment | [Y/N] | [evidence] | [gap] | [mitigation] |
+| 10 | Peaceful Coexistence | [Y/N] | [evidence] | [gap] | [mitigation] |
+| 11 | Inclusive Access | [Y/N] | [evidence] | [gap] | [mitigation] |
+| 12 | Lawful Compliance | [Y/N] | [evidence] | [gap] | [mitigation] |
+
+## Bias & Fairness Assessment
+
+| AI system ID | Protected attributes considered | Fairness metric(s) measured | Dataset provenance | Mitigation taken | Residual risk |
+|--------------|---------------------------------|------------------------------|---------------------|-------------------|----------------|
+| [AI-001] | [age / gender / nationality / ...] | [demographic parity / equal opportunity / ...] | [provenance] | [mitigation] | [risk] |
+
+## Human-in-the-Loop Design
+
+| AI system ID | Decision class | Reviewer role | Trigger for human review | Override mechanism | Audit trail of human decisions |
+|--------------|----------------|---------------|---------------------------|---------------------|---------------------------------|
+| [AI-001] | [class] | [role] | [confidence threshold / sensitive context / ...] | [override flow] | [audit-log location + retention] |
+
+## External References
+
+### Document Register
+
+| Doc ID | Title | URL | Verified date |
+|--------|-------|-----|---------------|
+| UAE-AI-CHARTER | UAE Charter for the Development and Use of Artificial Intelligence | <https://uaelegislation.gov.ae/en/policy/details/the-uae-charter-for-the-development-and-use-of-artificial-intelligence> | [YYYY-MM-DD] |
+
+### Citations
+
+| Citation | Doc ID | Section | Used in |
+|----------|--------|---------|---------|
+| [AICH-1] | UAE-AI-CHARTER | Principle 3 (Bias Mitigation) | Bias & Fairness Assessment |
+| [AICH-2] | UAE-AI-CHARTER | Principle 6 (Human Oversight) | Human-in-the-Loop Design |
+| [AICH-3] | UAE-AI-CHARTER | All 12 principles | 12-Principle Assessment |
+
+### Unreferenced Documents
+
+[List any documents read during generation but not cited, or "None".]
+
+---
+
+**Generated by**: ArcKit `/arckit:uae-ai-charter` command
+**Generated on**: [DATE]
+**ArcKit Version**: [VERSION]
+**Project**: [PROJECT_NAME]
+**Model**: [AI_MODEL]

arckit_cli-6.1.1.data/data/share/arckit/.arckit/templates/uae-classification-template.md

@@ -0,0 +1,86 @@
+# UAE Smart Data Classification Register
+
+> **Template Origin**: Community | **ArcKit Version**: [VERSION] | **Command**: `/arckit:uae-classification`
+
+## Document Control
+
+<!-- DOC-CONTROL-HEADER -->
+<!-- Resolved at command-execution time to _partials/document-control-uk.md or _partials/document-control-uae.md based on plugin userConfig classification_scheme + governance_framework. See _partials/RENDERING.md. -->
+
+## Revision History
+
+| Version | Date | Author | Changes | Approved By | Approval Date |
+|---------|------|--------|---------|-------------|---------------|
+| [VERSION] | [YYYY-MM-DD] | ArcKit AI | Initial creation from `/arckit:uae-classification` | [PENDING] | [PENDING] |
+
+## Executive Summary
+
+[Two to three paragraphs describing the project's data estate, the proposed classification posture across the UAE Smart Data ladder (Open / Shared / Confidential / Secret / Top Secret), and the residency implications that flow from it.]
+
+## Classification Levels Used
+
+For each Smart Data level (Open, Shared, Confidential, Secret, Top Secret), state whether the project holds data at that level and the count of datasets per level.
+
+| Level | Holds data? | Count | Notes |
+|-------|-------------|-------|-------|
+| Open | [Y/N] | [n] | [notes] |
+| Shared | [Y/N] | [n] | [notes] |
+| Confidential | [Y/N] | [n] | [notes] |
+| Secret | [Y/N] | [n] | [notes] |
+| Top Secret | [Y/N] | [n] | [notes] |
+
+## Dataset Register
+
+| Dataset ID | Description | Source system | Classification | Handling rules | Storage location | Declassification schedule |
+|------------|-------------|---------------|----------------|----------------|------------------|---------------------------|
+| [DS-001] | [description] | [source] | [Open / Shared / Confidential / Secret / Top Secret] | [rules] | [location] | [schedule] |
+
+## Handling Rules per Level
+
+For each level the project uses, state the handling rules:
+
+- Encryption at rest
+- Encryption in transit
+- Network controls (private endpoint, VPN, air-gap)
+- Access controls (role, MFA, just-in-time)
+- Audit-log retention
+- Residency obligations (UAE-resident infrastructure required from Confidential upwards under National Cloud Security Policy v2)
+
+## Cross-Reference Index
+
+Map each Dataset ID to:
+
+- Upstream BR / DR requirements that drove its capture
+- Downstream INT requirements that consume it
+- The applicable PDPL lawful basis (if personal data is in scope)
+
+| Dataset ID | Upstream BR/DR | Downstream INT | PDPL lawful basis (if applicable) |
+|------------|----------------|----------------|------------------------------------|
+| [DS-001] | [BR-xxx, DR-xxx] | [INT-xxx] | [Article 5(x) / N/A] |
+
+## External References
+
+### Document Register
+
+| Doc ID | Title | URL | Verified date |
+|--------|-------|-----|---------------|
+| UAE-SMARTDATA | UAE Smart Data Classifications | <https://u.ae/en/about-the-uae/digital-uae/data/data-operability> | [YYYY-MM-DD] |
+
+### Citations
+
+| Citation | Doc ID | Section | Used in |
+|----------|--------|---------|---------|
+| [SDC-1] | UAE-SMARTDATA | Classification levels | Classification Levels Used |
+| [SDC-2] | UAE-SMARTDATA | Handling rules per level | Handling Rules per Level |
+
+### Unreferenced Documents
+
+[List any documents read during generation but not cited, or "None".]
+
+---
+
+**Generated by**: ArcKit `/arckit:uae-classification` command
+**Generated on**: [DATE]
+**ArcKit Version**: [VERSION]
+**Project**: [PROJECT_NAME]
+**Model**: [AI_MODEL]

arckit_cli-6.1.1.data/data/share/arckit/.arckit/templates/uae-cloud-residency-template.md

@@ -0,0 +1,136 @@
+# UAE Sovereign Cloud Residency Assessment
+
+> **Template Origin**: Community | **ArcKit Version**: [VERSION] | **Command**: `/arckit:uae-cloud-residency`
+
+## Document Control
+
+<!-- DOC-CONTROL-HEADER -->
+<!-- Resolved at command-execution time per _partials/RENDERING.md. -->
+
+## Revision History
+
+| Version | Date | Author | Changes | Approved By | Approval Date |
+|---------|------|--------|---------|-------------|---------------|
+| [VERSION] | [YYYY-MM-DD] | ArcKit AI | Initial creation from `/arckit:uae-cloud-residency` | [PENDING] | [PENDING] |
+
+## Executive Summary
+
+[Two to three paragraphs describing the residency posture, the chosen sovereign cloud combination, residual non-compliance (if any), and the exit / portability stance under the UAE National Cloud Security Policy v2.]
+
+## Scope
+
+| Item | Value |
+|------|-------|
+| Services in scope | [list] |
+| Upstream dependencies | [services / platforms] |
+| Downstream dependencies | [services / platforms] |
+| Shared platform components | [identity / observability / backup / secrets / etc.] |
+| Out-of-scope (with rationale) | [list] |
+
+## Per-Dataset Residency Assessment
+
+For each Dataset ID from the project's Smart Data Classification Register (`ARC-<project-id>-CLAS-v*.md`), assess required and actual residency.
+
+| Dataset ID | Classification | Required residency | Chosen CSP | Region | Compliance check |
+|------------|----------------|---------------------|------------|--------|-------------------|
+| [DS-001] | [Open / Shared / Confidential / Secret / Top Secret] | [UAE-resident / no constraint] | [Core42 / G42 / Microsoft UAE North / UAE Central / FedNet / e& Sovereign Launchpad / etc.] | [region] | [Compliant / Non-compliant — rationale] |
+
+> Confidential, Secret, and Top Secret datasets MUST resolve to UAE-resident sovereign infrastructure under the National Cloud Security Policy v2. Any non-compliant row is a critical gap.
+
+## CSP Due-Diligence Pack
+
+For each candidate CSP, record the diligence posture.
+
+### Core42 / G42 sovereign cloud
+
+| Item | Value |
+|------|-------|
+| Sovereign-data scope | [in scope / out of scope] |
+| Regional footprint | [Abu Dhabi / Dubai / other] |
+| DESC accreditation | [Y/N — date] |
+| CSC accreditation | [Y/N — date] |
+| Documented limitations | [notes] |
+
+### Microsoft UAE North (Dubai) and UAE Central (Abu Dhabi)
+
+| Item | Value |
+|------|-------|
+| Sovereign-data scope | [in scope / out of scope] |
+| Regional footprint | [UAE North / UAE Central / both] |
+| DESC accreditation | [Y/N — date] |
+| CSC accreditation | [Y/N — date] |
+| Documented limitations | [notes] |
+
+### TDRA FedNet
+
+| Item | Value |
+|------|-------|
+| Sovereign-data scope | [in scope / out of scope] |
+| Regional footprint | [federal data centre] |
+| Accreditation | [TDRA — date] |
+| Documented limitations | [notes] |
+
+### e& Sovereign Launchpad on AWS
+
+| Item | Value |
+|------|-------|
+| Sovereign-data scope | [in scope / out of scope] |
+| Regional footprint | [me-central-1 / other] |
+| DESC accreditation | [Y/N — date] |
+| CSC accreditation | [Y/N — date] |
+| Documented limitations | [notes] |
+
+> Add additional candidate CSPs (e.g. Oracle UAE, Google Cloud) using the same pattern.
+
+## Shared-Responsibility Matrix
+
+For the chosen CSP combination, record the division of security responsibilities.
+
+| Layer | CSP responsibility | Customer responsibility | Notes |
+|-------|---------------------|--------------------------|-------|
+| Physical and environmental | [scope] | [scope] | [notes] |
+| Infrastructure (compute / storage / network) | [scope] | [scope] | [notes] |
+| Platform (managed services) | [scope] | [scope] | [notes] |
+| Application | [scope] | [scope] | [notes] |
+| Data and encryption keys | [scope] | [scope] | [notes — BYOK / HYOK / customer-managed] |
+| Identity and access | [scope] | [scope] | [notes — UAE PASS / federation] |
+| Operations and monitoring | [scope] | [scope] | [notes] |
+
+## Exit and Portability Plan
+
+| Item | Plan |
+|------|------|
+| Data egress strategy | [export format, mechanism, owner] |
+| Format portability | [open formats / proprietary mitigations] |
+| Identity migration | [plan] |
+| Encryption key custody on exit | [HSM transfer / re-wrap / re-key] |
+| Contingency residency on regulatory change | [target alt CSP, migration runbook ref] |
+| Estimated exit time-to-restore | [hours / days] |
+
+## External References
+
+### Document Register
+
+| Doc ID | Title | URL | Verified date |
+|--------|-------|-----|---------------|
+| UAE-NCSP-V2 | UAE National Cloud Security Policy v2 (Cybersecurity Council) | <https://csc.gov.ae/documents/38662/489552/National+Cloud+Security+Policy_V2.0.pdf> | [YYYY-MM-DD] |
+
+### Citations
+
+| Citation | Doc ID | Section | Used in |
+|----------|--------|---------|---------|
+| [CRES-1] | UAE-NCSP-V2 | Per-classification residency obligations | Per-Dataset Residency Assessment |
+| [CRES-2] | UAE-NCSP-V2 | Approved CSP scope | CSP Due-Diligence Pack |
+| [CRES-3] | UAE-NCSP-V2 | Shared responsibility expectations | Shared-Responsibility Matrix |
+
+### Unreferenced Documents
+
+[List any documents read during generation but not cited, or "None".]
+
+---
+
+**Generated by**: ArcKit `/arckit:uae-cloud-residency` command
+**Generated on**: [DATE]
+**ArcKit Version**: [VERSION]
+**Project**: [PROJECT_NAME]
+**Model**: [AI_MODEL]