Lifecycle

AI use-case inventory and stage matrix

Each row is a registered AI use case; each column is a lifecycle stage from the coverage contract. Unknown is drawn with a dashed outline and not applicable is drawn flat, so neither can be mistaken for a pass.

Observed at 24 Sep 2026, 06:15 UTC5 of 5 fixture use cases shown · stage badges are not release-gate verification

AI lifecycle × DSPM cycle

The same eight-step review repeats within each of the 14 lifecycle stages; this is an illustrative planning view, not an executed control.

Lifecycle stageDSPM cycle step

Sample action · A01 / C01

Inventory the purpose register and owner.

Enumerate assets and movement; record inventory denominator and inaccessible surfaces.

Evidence expectation

A dated approved purpose and named owner, with scope and reviewer attached.

Illustrative frontend only · no collection, enforcement or verification is performed here.

Open related sample screen →

Filters

Narrow the matrix by stage, model, dataset or environment.

Stage

Model

Dataset

Environment

PassPartialFailStaleUnknownNot applicable

Stage and control matrix

Select any cell to read the recorded note and evidence age for that stage.

Lifecycle stage status per AI use case
Use case	A01	A02	A03	A04	A05	A06	A07	A08	A09	A10	A11	A12	A13	A14	Owner / evidence
Customer Support Copilothighproduction															Priya Ramanlast evidence 5 min ago · review due 30 Nov 2026
Contract Clause Analystcriticalproduction															Daniel Okoyelast evidence 9 h ago · review due 15 Oct 2026
Internal Code Agenthighstaging															Mei Tanakalast evidence 1 h ago · review due 2 Oct 2026
HR Insights Assistantcriticaldevelopment															No accountable ownerlast evidence 16 d ago · review due 30 Sep 2026
Air-Gapped Field Advisormediumair-gapped															Sofia Lindqvistlast evidence 3 d ago · review due 1 Dec 2026

Stage detail

Nothing selected yet.

Select a cell

Choose any status cell in the matrix to read its recorded note, evidence age and linked records.

Stage reference

A01–A14 of the lifecycle coverage contract.

Scroll table sideways for more columns →

Stage	Required security work
A01 — Purpose and ownership	Use case, owner, permitted data and actions, retirement responsibility.
A02 — Acquire data and providers	Origin, permissions, processing conditions, regions and unknowns.
A03 — Discover and collect	Inventory and classify raw, shadow and transient data with coverage receipts.
A04 — Prepare and label	Cleaning, joins, chunking, labelling, synthetic data and inherited constraints.
A05 — Select model and architecture	Base weights, licensing, retention options, isolation and supply chain.
A06 — Train and adapt	Run and input manifests, training identities, secured checkpoints.
A07 — Build RAG, agents and tools	Source versions and ACLs bound to indexes; memory, tools and identities.
A08 — Evaluate and approve	Quality, privacy leakage, adversarial paths, access control and isolation tests.
A09 — Package, release, deploy	Release manifest, approval, observed deployment and rollback candidate.
A10 — Infer and act	Prompt and output inspection, retrieval authorization, tenant and egress control.
A11 — Monitor and respond	Drift detection, blind intervals, investigation and verified closure.
A12 — Change and improve	Feedback, reindexing, retraining, provider swaps and rollback governance.
A13 — Retire the AI system	Stop activity, drain work, disable identities, inventory retained derivatives.
A14 — Retain, dispose and verify	Holds, expiry, item-level deletion ledger, backups and model residuals.