{ "generatedAt": "2026-05-20T16:09:12.203Z", "reportDate": "2026-05-20", "title": "MarketLink CMS EDE Requirements Traceability Matrix", "source": { "fitPacket": "/docs/marketlink-evidence/marketlink-current-auditor-packet.json", "uatEvidenceVault": "/docs/marketlink-evidence/marketlink-uat-evidence-vault.json", "historicalEvidenceVault": "/docs/marketlink-evidence/marketlink-actual-evidence-vault.json", "controlRegister": "/docs/marketlink-evidence/marketlink-control-register.csv" }, "methodology": { "name": "WHPS AI SDLC / Agile agentic delivery model", "summary": "Agile SDLC framework adapted for agentic delivery: backlog-driven planning, scoped role handoffs, human-owned gates, security validation, release evidence, and operating feedback.", "disclosureBoundary": "This matrix exposes requirement sources, Agile artifacts, AI SDLC gates, platform functions, tests, evidence references, audit disposition, and gaps without exposing proprietary implementation mechanics.", "principles": [ "Backlog-driven delivery with visible epics, sprint lanes, acceptance criteria, and owners.", "Structured agentic handoffs through scoped work orders, review artifacts, and human authority gates.", "Security and compliance controls embedded before release movement, not added after build completion.", "Evidence-by-design with source artifacts retained in the vault and traceability exported through CSV/JSON." ], "lifecycle": [ { "gate": "Define and classify", "output": "Requirement source, owner, risk tier, CMS scope, and approval depth." }, { "gate": "Decompose and plan", "output": "Agile epic, sprint lane, backlog item, acceptance criteria, and Definition of Done." }, { "gate": "Architect and secure", "output": "Data flow, integration design, trust boundary, threat model, and control alignment." }, { "gate": "Build and integrate", "output": "Platform function, API/UI behavior, content, workflow, and controlled delivery lane." }, { "gate": "Validate and test", "output": "FIT, UAT, regression, accessibility, security scan, and remediation evidence." }, { "gate": "Package evidence", "output": "Screenshots, recordings, JSON/API proof, vault references, package links, and gaps." }, { "gate": "Release and operate", "output": "Named approvals, export readiness, rollback path, monitoring, archive, and change control." } ] }, "methodologyNote": "AI SDLC traceability view limited to requirement sources, Agile backlog, AI SDLC gates, platform functions, test coverage, evidence references, audit disposition, and open gaps.", "metrics": { "traceabilityRows": 21, "requirementAreas": 8, "fitCases": 13, "sourceBackedFitCases": 12, "rowsWithEvidenceLinks": 21, "traceabilityCoverageRate": 100, "currentEvidenceRows": 1, "currentEvidenceCoverageRate": 8, "evidenceCompletionRate": 0, "evidenceExportReadyCases": 0, "evidenceReviewCandidateCases": 1, "evidencePendingCaptureCases": 11, "evidenceSourcePendingCases": 1, "evidenceRequiredCases": 13, "evidenceOpenGaps": 15, "currentUatArtifacts": 42, "currentUatModules": 6, "historicalEvidenceFiles": 2337, "historicalEvidenceEntries": 2337, "currentAuditorArtifacts": 5 }, "evidenceReadiness": { "summary": { "requiredCases": 13, "exportReadyCases": 0, "reviewCandidateCases": 1, "pendingCaptureCases": 11, "sourcePendingCases": 1, "currentArtifactCount": 5, "currentVideoCount": 2, "totalOpenGaps": 15, "completionRate": 0, "captureCoverageRate": 8, "enrollmentEvidenceStatus": "Pending full enrollment capture", "statusLabel": "Evidence capture in progress" }, "areas": [ { "evidenceArea": "FIT case evidence package", "required": 13, "exportReady": 0, "inReview": 1, "pendingCapture": 11, "sourcePending": 1, "completionRate": 0, "posture": "Case-level evidence packages exist for navigation and planning; export readiness requires current UAT capture and reviewer approval." }, { "evidenceArea": "Full enrollment walkthrough", "required": 1, "exportReady": 0, "inReview": 0, "pendingCapture": 1, "sourcePending": 0, "completionRate": 0, "posture": "A current end-to-end enrollment walkthrough with screenshots or recording is still required before evidence completion can be marked ready." }, { "evidenceArea": "CMS Hub API request/response evidence", "required": 13, "exportReady": 0, "inReview": 0, "pendingCapture": 12, "sourcePending": 1, "completionRate": 0, "posture": "Raw request/response evidence still requires authorized UAT access, correlation IDs, and redaction review." }, { "evidenceArea": "Supporting UAT repository", "required": 42, "exportReady": 0, "inReview": 42, "pendingCapture": 0, "sourcePending": 0, "completionRate": 0, "posture": "Supporting screenshots, JSON, and documents are available in the vault but are not counted as final export-ready auditor evidence until superseded by current approved captures." } ] }, "packages": { "csv": "/docs/marketlink-evidence/marketlink-traceability-matrix.csv", "json": "/docs/marketlink-evidence/marketlink-traceability-matrix.json", "readme": "/docs/marketlink-evidence/marketlink-traceability-readme.md", "zip": { "fileName": "marketlink-traceability-matrix-package.zip", "publicUrl": "/docs/marketlink-evidence/packages/marketlink-traceability-matrix-package.zip", "sizeBytes": 16411, "sha256": "5ba4a49d6493714eb6cfe034f5dc8bfc22ac3980a7941f96baf2a7f6da0b45d7" } }, "dashboard": { "developmentByDomain": [ { "area": "Portal and experience", "epic": "EDE portal experience", "done": 6, "inProgress": 0, "pending": 0, "atRisk": 0, "functions": [ "Broker portal clients, applications, quotes, book of business, commissions, and renewals", "Consumer portal registration, shopping, application, enrollment, and life-event management", "Phase 3 application wizard with household, MEC/SEP, review, and signature flows", "Plan shopping with HealthCare.gov alignment, county lookup, and APTC display", "DMI, SVI, notice, and document metadata surfaces", "Adjacent Medicare, ICHRA, AOR, and campaign paths outside F001" ], "total": 6, "completionRate": 100 }, { "area": "Identity and security", "epic": "Identity assurance and secure access", "done": 4, "inProgress": 0, "pending": 0, "atRisk": 0, "functions": [ "Broker authentication with MFA, lockout, roles, FFE/CMS IDM fields, and NPN binding", "Consumer lifecycle with email and identity verification plus duplicate protection", "CSRF, rate limiting, geo/VPN handling, audit hash chain, and sensitive-access logging", "Legal pages in English and Spanish: privacy, terms, and non-discrimination" ], "total": 4, "completionRate": 100 }, { "area": "CMS integration", "epic": "CMS Hub transaction integration", "done": 4, "inProgress": 0, "pending": 0, "atRisk": 0, "functions": [ "Hub connectivity with implementation success evidence and mTLS configuration", "RIDP/RBA response path evidence", "GetRecord response path evidence", "Application APIs: create, update, submit, get application, ID proofing, DMI, SVI, and notices" ], "total": 4, "completionRate": 100 }, { "area": "Evidence and compliance", "epic": "Evidence package and audit readiness", "done": 6, "inProgress": 0, "pending": 0, "atRisk": 0, "functions": [ "F001 consumer evidence package and case-level traceability", "RIDP case validation matrix", "Raw request/response evidence capture pattern", "Compliance dashboard, SSPP, POA&M, audit reports, and archive", "Auditor UI findings tracked for final release disposition", "Unit, integration, automated browser regression, accessibility, and toolkit coverage evidence" ], "total": 6, "completionRate": 100 } ], "productRequirementTraceability": [ { "requirementArea": "Application UI Toolkit", "total": 1, "done": 1, "inProgress": 0, "pending": 0, "atRisk": 0, "completionRate": 100 }, { "requirementArea": "Identity Proofing", "total": 1, "done": 1, "inProgress": 0, "pending": 0, "atRisk": 0, "completionRate": 100 }, { "requirementArea": "Registration and Onboarding", "total": 1, "done": 1, "inProgress": 0, "pending": 0, "atRisk": 0, "completionRate": 100 }, { "requirementArea": "Communications Toolkit", "total": 1, "done": 1, "inProgress": 0, "pending": 0, "atRisk": 0, "completionRate": 100 }, { "requirementArea": "API Functional Integration Toolkit", "total": 14, "done": 1, "inProgress": 1, "pending": 11, "atRisk": 1, "completionRate": 14 }, { "requirementArea": "S3P / SSPP Security and Privacy", "total": 1, "done": 1, "inProgress": 0, "pending": 0, "atRisk": 0, "completionRate": 100 }, { "requirementArea": "Spanish UI Toolkit", "total": 1, "done": 0, "inProgress": 1, "pending": 0, "atRisk": 0, "completionRate": 100 }, { "requirementArea": "CMS Change Requests", "total": 1, "done": 0, "inProgress": 1, "pending": 0, "atRisk": 0, "completionRate": 100 } ], "evidenceByRequirementArea": [ { "requirementArea": "Application UI Toolkit", "totalArtifacts": 6, "evidenceComplete": 0, "evidenceInProgress": 6, "evidencePending": 0, "evidenceAtRisk": 0, "completionRate": 0, "packageUrl": "/docs/marketlink-evidence/packages/marketlink-uat-application-ui-toolkit.zip" }, { "requirementArea": "Identity Proofing", "totalArtifacts": 4, "evidenceComplete": 0, "evidenceInProgress": 4, "evidencePending": 0, "evidenceAtRisk": 0, "completionRate": 0, "packageUrl": "/docs/marketlink-evidence/packages/marketlink-uat-identity-proofing.zip" }, { "requirementArea": "Registration and Onboarding", "totalArtifacts": 4, "evidenceComplete": 0, "evidenceInProgress": 4, "evidencePending": 0, "evidenceAtRisk": 0, "completionRate": 0, "packageUrl": "/docs/marketlink-evidence/packages/marketlink-uat-registration-onboarding.zip" }, { "requirementArea": "Communications Toolkit", "totalArtifacts": 8, "evidenceComplete": 0, "evidenceInProgress": 8, "evidencePending": 0, "evidenceAtRisk": 0, "completionRate": 0, "packageUrl": "/docs/marketlink-evidence/packages/marketlink-uat-communications-toolkit.zip" }, { "requirementArea": "API Functional Integration Toolkit", "totalArtifacts": 3, "evidenceComplete": 0, "evidenceInProgress": 4, "evidencePending": 11, "evidenceAtRisk": 1, "completionRate": 0, "packageUrl": "/docs/marketlink-evidence/packages/marketlink-uat-api-functional-integration-toolkit.zip" }, { "requirementArea": "S3P / SSPP Security and Privacy Package", "totalArtifacts": 17, "evidenceComplete": 0, "evidenceInProgress": 17, "evidencePending": 0, "evidenceAtRisk": 0, "completionRate": 0, "packageUrl": "/docs/marketlink-evidence/packages/marketlink-uat-s3p-security-privacy.zip" } ], "evidenceReadinessByArea": [ { "evidenceArea": "FIT case evidence package", "required": 13, "exportReady": 0, "inReview": 1, "pendingCapture": 11, "sourcePending": 1, "completionRate": 0, "posture": "Case-level evidence packages exist for navigation and planning; export readiness requires current UAT capture and reviewer approval." }, { "evidenceArea": "Full enrollment walkthrough", "required": 1, "exportReady": 0, "inReview": 0, "pendingCapture": 1, "sourcePending": 0, "completionRate": 0, "posture": "A current end-to-end enrollment walkthrough with screenshots or recording is still required before evidence completion can be marked ready." }, { "evidenceArea": "CMS Hub API request/response evidence", "required": 13, "exportReady": 0, "inReview": 0, "pendingCapture": 12, "sourcePending": 1, "completionRate": 0, "posture": "Raw request/response evidence still requires authorized UAT access, correlation IDs, and redaction review." }, { "evidenceArea": "Supporting UAT repository", "required": 42, "exportReady": 0, "inReview": 42, "pendingCapture": 0, "sourcePending": 0, "completionRate": 0, "posture": "Supporting screenshots, JSON, and documents are available in the vault but are not counted as final export-ready auditor evidence until superseded by current approved captures." } ], "evidenceByType": [ { "type": "Screenshots / UI captures", "complete": 12, "inProgress": 2, "pending": 11, "atRisk": 1, "total": 26, "completionRate": 54 }, { "type": "API requests / responses", "complete": 16, "inProgress": 1, "pending": 11, "atRisk": 0, "total": 28, "completionRate": 61 }, { "type": "Process / policy / workflow docs", "complete": 14, "inProgress": 0, "pending": 0, "atRisk": 0, "total": 14, "completionRate": 100 }, { "type": "Case ZIP packages", "complete": 13, "inProgress": 1, "pending": 11, "atRisk": 1, "total": 26, "completionRate": 54 } ], "nextSteps": [ "FIT F002-F012 authenticated UAT capture remains open for current auditor packet completion.", "Confirm whether current auditor scope includes F013 before collecting or exporting evidence.", "Import approved CMS change request tracker into this matrix once publication is allowed.", "Attach final reviewer sign-off and move superseded artifacts into archive." ], "dependencies": [ "Approved authenticated UAT access for evidence capture.", "CMS Hub / FFE environment availability and correlation IDs for raw request-response evidence.", "Product and compliance review of Spanish content and legal language.", "Final auditor instructions for export-ready evidence naming and redaction." ], "risks": [ "F001 is currently a review candidate; final auditor clip should be a continuous recording from landing page through ID proofing.", "F002-F012 have prepared slots but still need current UAT capture before final submission.", "F013 remains source-pending until an official toolkit or auditor scope confirms it." ] }, "rows": [ { "id": "TRACE-APPLICATION-UI-TOOLKIT", "requirementArea": "Application UI Toolkit", "requirementSource": "CMS Application UI Toolkit and Phase 3 UI questions", "requirementStatement": "Application UI Toolkit UI questions, pathway screenshots, source-row traceability, applicationAnswers JSON.", "aisdlcGate": "Validate and test", "deliveryControl": "Requirement coverage is managed through Agile backlog acceptance criteria, human review ownership, evidence vault references, and export-ready package gates.", "agileEpic": "EDE-UI-001", "backlogItem": "Application UI Toolkit coverage and evidence", "sprintLane": "UI toolkit backlog", "acceptanceCriteria": "Consumer and broker screens expose required content, navigation, legal notices, and application-state behavior with source-row traceability.", "platformFunctions": [ "Consumer and broker routes", "Application wizard", "Legal notices", "Responsive UI proof points" ], "ownerRole": "Product / UX", "testKit": "Application UI Toolkit", "testCases": [ "consumer-broker-entry", "application-start", "portal-boundary" ], "status": "Evidence references established", "evidenceStatus": "6 current UAT artifacts linked", "evidenceCount": 6, "evidencePreviewUrl": "/docs/marketlink-evidence/uat-latest/application-ui-toolkit/screenshots/01-home.png", "evidenceRefs": [ { "label": "Application UI Toolkit evidence package", "type": "package", "url": "/docs/marketlink-evidence/packages/marketlink-uat-application-ui-toolkit.zip" }, { "label": "Application UI Toolkit evidence manifest", "type": "manifest", "url": "/docs/marketlink-evidence/marketlink-uat-evidence-vault.json" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-uat-application-ui-toolkit.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#evidence-repository", "auditDisposition": "Referenced through the evidence vault; download source evidence from the vault package rather than duplicating files in the matrix.", "gaps": [], "tone": "complete" }, { "id": "TRACE-IDENTITY-PROOFING", "requirementArea": "Identity Proofing", "requirementSource": "RIDP, RBA, GetRecord, and identity assurance evidence expectations", "requirementStatement": "RIDP/RBA/GetRecord evidence, identity assurance, fallback and documentation path proof.", "aisdlcGate": "Architect and secure", "deliveryControl": "Requirement coverage is managed through Agile backlog acceptance criteria, human review ownership, evidence vault references, and export-ready package gates.", "agileEpic": "EDE-ID-001", "backlogItem": "Identity Proofing coverage and evidence", "sprintLane": "Identity assurance backlog", "acceptanceCriteria": "Identity and authentication entry points are traceable to RIDP/RBA evidence, session boundary proof, and protected-action gates.", "platformFunctions": [ "Consumer sign-in", "Create account", "Identity verification entry", "Authenticated boundary controls" ], "ownerRole": "Identity / Security", "testKit": "Identity Proofing", "testCases": [ "authentication-entry", "portal-login" ], "status": "Evidence references established", "evidenceStatus": "4 current UAT artifacts linked", "evidenceCount": 4, "evidencePreviewUrl": "/docs/marketlink-evidence/uat-latest/identity-proofing/screenshots/04-auth-login.png", "evidenceRefs": [ { "label": "Identity Proofing evidence package", "type": "package", "url": "/docs/marketlink-evidence/packages/marketlink-uat-identity-proofing.zip" }, { "label": "Identity Proofing evidence manifest", "type": "manifest", "url": "/docs/marketlink-evidence/marketlink-uat-evidence-vault.json" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-uat-identity-proofing.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#evidence-repository", "auditDisposition": "Referenced through the evidence vault; download source evidence from the vault package rather than duplicating files in the matrix.", "gaps": [], "tone": "complete" }, { "id": "TRACE-REGISTRATION-ONBOARDING", "requirementArea": "Registration and Onboarding", "requirementSource": "Broker, agency, agent, and user onboarding requirements", "requirementStatement": "Registration, MFA setup, approval gates, and role-specific access controls.", "aisdlcGate": "Build and integrate", "deliveryControl": "Requirement coverage is managed through Agile backlog acceptance criteria, human review ownership, evidence vault references, and export-ready package gates.", "agileEpic": "EDE-ONB-001", "backlogItem": "Registration and Onboarding coverage and evidence", "sprintLane": "Registration backlog", "acceptanceCriteria": "Registration and onboarding flows show role-aware access, approval gates, and account lifecycle evidence.", "platformFunctions": [ "Broker registration", "Agency onboarding", "Role gates", "Access setup" ], "ownerRole": "Product / Operations", "testKit": "Registration and Onboarding", "testCases": [ "registration-flow", "approval-gate" ], "status": "Evidence references established", "evidenceStatus": "4 current UAT artifacts linked", "evidenceCount": 4, "evidencePreviewUrl": "/docs/marketlink-evidence/uat-latest/registration-onboarding/screenshots/06-portal-register.png", "evidenceRefs": [ { "label": "Registration and Onboarding evidence package", "type": "package", "url": "/docs/marketlink-evidence/packages/marketlink-uat-registration-onboarding.zip" }, { "label": "Registration and Onboarding evidence manifest", "type": "manifest", "url": "/docs/marketlink-evidence/marketlink-uat-evidence-vault.json" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-uat-registration-onboarding.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#evidence-repository", "auditDisposition": "Referenced through the evidence vault; download source evidence from the vault package rather than duplicating files in the matrix.", "gaps": [], "tone": "complete" }, { "id": "TRACE-COMMUNICATIONS-TOOLKIT", "requirementArea": "Communications Toolkit", "requirementSource": "CMS Communications Toolkit and consumer-facing content requirements", "requirementStatement": "Communications Toolkit notices, standardized disclaimers, language assistance, and consumer-facing content.", "aisdlcGate": "Validate and test", "deliveryControl": "Requirement coverage is managed through Agile backlog acceptance criteria, human review ownership, evidence vault references, and export-ready package gates.", "agileEpic": "EDE-COMM-001", "backlogItem": "Communications Toolkit coverage and evidence", "sprintLane": "Communications backlog", "acceptanceCriteria": "Notices, terms, privacy, non-discrimination, and language-assistance content are reviewable and tied to evidence artifacts.", "platformFunctions": [ "Legal notices", "Privacy policy", "Non-discrimination language", "Consumer communication surfaces" ], "ownerRole": "Product / Compliance", "testKit": "Communications Toolkit", "testCases": [ "privacy-notice", "non-discrimination-notice", "terms-of-use", "agent-terms" ], "status": "Evidence references established", "evidenceStatus": "8 current UAT artifacts linked", "evidenceCount": 8, "evidencePreviewUrl": "/docs/marketlink-evidence/uat-latest/communications-toolkit/screenshots/08-privacy.png", "evidenceRefs": [ { "label": "Communications Toolkit evidence package", "type": "package", "url": "/docs/marketlink-evidence/packages/marketlink-uat-communications-toolkit.zip" }, { "label": "Communications Toolkit evidence manifest", "type": "manifest", "url": "/docs/marketlink-evidence/marketlink-uat-evidence-vault.json" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-uat-communications-toolkit.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#evidence-repository", "auditDisposition": "Referenced through the evidence vault; download source evidence from the vault package rather than duplicating files in the matrix.", "gaps": [], "tone": "complete" }, { "id": "TRACE-API-FUNCTIONAL-INTEGRATION-TOOLKIT", "requirementArea": "API Functional Integration Toolkit", "requirementSource": "CMS API Functional Integration Toolkit cases F001-F013", "requirementStatement": "API Functional Integration Toolkit request/response evidence, FIT traceability, payload and endpoint behavior.", "aisdlcGate": "Validate and test", "deliveryControl": "Requirement coverage is managed through Agile backlog acceptance criteria, human review ownership, evidence vault references, and export-ready package gates.", "agileEpic": "EDE-FIT-001", "backlogItem": "API Functional Integration Toolkit coverage and evidence", "sprintLane": "FIT backlog", "acceptanceCriteria": "Each FIT case maps to source requirement, acceptance criteria, target APIs, required evidence, current evidence, and unresolved capture gaps.", "platformFunctions": [ "CMS Hub API probes", "Request/response evidence", "FIT case packaging", "Correlation and payload traceability" ], "ownerRole": "Engineering / Integration", "testKit": "API Functional Integration Toolkit", "testCases": [ "health-probe", "auth-provider-discovery", "csrf-boundary" ], "status": "Evidence references established", "evidenceStatus": "3 current UAT artifacts linked", "evidenceCount": 3, "evidencePreviewUrl": "", "evidenceRefs": [ { "label": "API Functional Integration Toolkit evidence package", "type": "package", "url": "/docs/marketlink-evidence/packages/marketlink-uat-api-functional-integration-toolkit.zip" }, { "label": "API Functional Integration Toolkit evidence manifest", "type": "manifest", "url": "/docs/marketlink-evidence/marketlink-uat-evidence-vault.json" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-uat-api-functional-integration-toolkit.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#evidence-repository", "auditDisposition": "Referenced through the evidence vault; download source evidence from the vault package rather than duplicating files in the matrix.", "gaps": [ "Authenticated CMS Hub request/response captures still need approved access for final auditor-ready FIT export." ], "tone": "complete" }, { "id": "TRACE-S3P-SECURITY-PRIVACY", "requirementArea": "S3P / SSPP Security and Privacy", "requirementSource": "CMS security/privacy package, MARS-E, ARC-AMPE, SSPP, SAR, POA&M, ISA, and NIST SP 800-53 aligned controls", "requirementStatement": "CMS security/privacy package, SSPP, SAR, POA&M, ISA, ARC-AMPE, MARS-E, and NIST SP 800-53 aligned controls.", "aisdlcGate": "Architect and secure", "deliveryControl": "Requirement coverage is managed through Agile backlog acceptance criteria, human review ownership, evidence vault references, and export-ready package gates.", "agileEpic": "EDE-SEC-001", "backlogItem": "S3P / SSPP Security and Privacy Package coverage and evidence", "sprintLane": "Security and privacy backlog", "acceptanceCriteria": "Security and privacy controls reference required templates, supporting documents, evidence artifacts, owners, and remediation posture.", "platformFunctions": [ "SSPP package", "POA&M", "ISA", "Risk assessment", "Security artifact vault" ], "ownerRole": "Security / Compliance", "testKit": "S3P / SSPP Security and Privacy Package", "testCases": [ "cms-mars-e-22", "security-posture" ], "status": "Evidence references established", "evidenceStatus": "17 current UAT artifacts linked", "evidenceCount": 17, "evidencePreviewUrl": "/docs/marketlink-evidence/uat-latest/s3p-security-privacy/screenshots/12-trust.png", "evidenceRefs": [ { "label": "S3P / SSPP Security and Privacy Package evidence package", "type": "package", "url": "/docs/marketlink-evidence/packages/marketlink-uat-s3p-security-privacy.zip" }, { "label": "S3P / SSPP Security and Privacy Package evidence manifest", "type": "manifest", "url": "/docs/marketlink-evidence/marketlink-uat-evidence-vault.json" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-uat-s3p-security-privacy.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#evidence-repository", "auditDisposition": "Referenced through the evidence vault; download source evidence from the vault package rather than duplicating files in the matrix.", "gaps": [], "tone": "complete" }, { "id": "TRACE-SPANISH-UI", "requirementArea": "Spanish UI Toolkit", "requirementSource": "CMS language access and Spanish content review expectations", "requirementStatement": "Spanish-language consumer-facing content and required legal/support language are tracked as a distinct review lane.", "aisdlcGate": "Validate and test", "deliveryControl": "Content validation is tracked as an Agile backlog lane with product and compliance review before evidence export.", "agileEpic": "EDE-COMM-002", "backlogItem": "Spanish content review and validation", "sprintLane": "Communications backlog", "acceptanceCriteria": "Spanish content, legal language, and user-facing communication surfaces are reviewed against CMS language expectations and linked to communication evidence.", "platformFunctions": [ "Spanish legal pages", "Language assistance content", "Consumer notices", "Content review workflow" ], "ownerRole": "Product / Compliance", "testKit": "Spanish UI Toolkit", "testCases": [ "SPANISH-CONTENT-REVIEW", "LEGAL-LANGUAGE-REVIEW" ], "status": "In progress", "evidenceStatus": "Evidence slot prepared", "evidenceRefs": [ { "label": "Communications Toolkit evidence package", "type": "package", "url": "/docs/marketlink-evidence/packages/marketlink-uat-communications-toolkit.zip" } ], "auditDisposition": "Track as a dedicated product/content review lane; package with communications evidence when reviewer-approved.", "gaps": [ "Final CMS language review sign-off and screenshots should be captured in the current evidence vault." ], "tone": "progress" }, { "id": "TRACE-CMS-CR", "requirementArea": "CMS Change Requests", "requirementSource": "CMS change request and release disposition tracking", "requirementStatement": "CMS-directed changes, reviewer findings, and release exceptions remain visible as backlog items with owner, status, and evidence reference.", "aisdlcGate": "Release and operate", "deliveryControl": "Change requests are reconciled to backlog items, owner decisions, evidence links, and closeout disposition before release movement.", "agileEpic": "EDE-REL-001", "backlogItem": "CMS change request disposition and audit closeout", "sprintLane": "Release governance backlog", "acceptanceCriteria": "Each CMS change request or auditor finding has a backlog item, owner, acceptance criteria, current status, evidence link, and closeout decision.", "platformFunctions": [ "Change request register", "Finding disposition", "Release decision", "Audit closeout evidence" ], "ownerRole": "Program / Product / Compliance", "testKit": "CMS Change Request Log", "testCases": [ "CMS-CR-DISPOSITION", "AUDIT-FINDING-CLOSEOUT" ], "status": "In progress", "evidenceStatus": "Evidence references established", "evidenceRefs": [ { "label": "Control register CSV", "type": "csv", "url": "/docs/marketlink-evidence/marketlink-control-register.csv" }, { "label": "Evidence vault manifest", "type": "json", "url": "/docs/marketlink-evidence/marketlink-uat-evidence-vault.json" } ], "auditDisposition": "Use this lane to reconcile CMS/auditor requests to backlog items, owners, evidence references, and closeout decisions within the review boundary.", "gaps": [ "Current CMS change request list should be imported when the active tracker is approved for publication." ], "tone": "progress" }, { "id": "TRACE-F001", "requirementArea": "API Functional Integration Toolkit", "requirementSource": "MTST_EDE_E2E_F001 / API Functional Integration Toolkit", "requirementStatement": "Prove the full first-time consumer financial-assistance application can start outside the EDE environment, move through account creation and remote identity proofing, and continue into application, eligibility, enrollment, and payment-redirect evidence without DMI or SVI blockers.", "aisdlcGate": "Validate and test", "deliveryControl": "FIT cases move through prepared evidence slots, current UAT capture, source-row validation, package review, and auditor export gates.", "agileEpic": "EDE-FIT-001", "backlogItem": "F001 - Initial financial assistance application with no SVI or DMI", "sprintLane": "FIT UAT evidence backlog", "acceptanceCriteria": "A fresh continuous MP4 beginning before EDE login, plus UI screenshots, source-row mapping, and raw unmodified CMS Hub payload captures for the case steps.", "platformFunctions": [ "Store ID Proofing", "Person Search", "Create App", "Store Permission", "Add Member", "Update App", "Submit App", "Get App / Fetch Eligibility" ], "ownerRole": "Engineering / QA / Compliance", "testKit": "API Functional Integration Toolkit", "testCases": [ "MTST_EDE_E2E_F001" ], "status": "In review", "evidenceStatus": "5 current artifacts staged", "evidenceCount": 5, "evidencePreviewUrl": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F001/pre-id-proof-entry/marketlink-uat-f001-landing-before-consumer-signin.png", "evidenceRefs": [ { "label": "F001 case package", "type": "zip", "url": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F001.zip" }, { "label": "F001 case index", "type": "index", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F001/index.md" }, { "label": "F001 landing-to-ID-proofing review video candidate", "type": "video/mp4", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F001/video/marketlink-uat-f001-landing-to-id-proof-review-candidate.mp4" }, { "label": "F001 landing page before consumer sign-in", "type": "image/png", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F001/pre-id-proof-entry/marketlink-uat-f001-landing-before-consumer-signin.png" }, { "label": "F001 consumer sign-in page before Create account", "type": "image/png", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F001/pre-id-proof-entry/marketlink-uat-f001-consumer-signin-before-create-account.png" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F001.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#fit-auditor-packet", "auditDisposition": "Review candidate", "gaps": [ "Current assembled video is a review candidate only because it prepends the missing landing/sign-in pre-step to the provided account-creation clip.", "F001 export gate: fresh continuous recording from landing page through successful ID proofing required before export approval.", "CMS UAT Hub request/response payloads still require authorized API access and redaction review." ], "tone": "progress" }, { "id": "TRACE-F002", "requirementArea": "API Functional Integration Toolkit", "requirementSource": "MTST_EDE_E2E_F002 / API Functional Integration Toolkit", "requirementStatement": "Prove a change-in-circumstance financial-assistance application can continue from the F001 state, return eligibility results, retrieve the eligibility determination notice, and proceed without DMI or SVI conditions.", "aisdlcGate": "Validate and test", "deliveryControl": "FIT cases move through prepared evidence slots, current UAT capture, source-row validation, package review, and auditor export gates.", "agileEpic": "EDE-FIT-001", "backlogItem": "F002 - CIC FA application with no DMI or SVI", "sprintLane": "FIT UAT evidence backlog", "acceptanceCriteria": "Eligibility result screens, EDN/notice retrieval evidence, no-DMI/no-SVI responses, enrollment status confirmation, and raw API payloads tied to F002.", "platformFunctions": [ "Get App", "Submit App", "Metadata Search", "Notice Retrieval", "Get DMI", "Get SVI", "Submit Enrollment", "Get Enrollment" ], "ownerRole": "Engineering / QA / Compliance", "testKit": "API Functional Integration Toolkit", "testCases": [ "MTST_EDE_E2E_F002" ], "status": "Ready for UAT capture", "evidenceStatus": "Evidence slot prepared", "evidenceCount": 0, "evidencePreviewUrl": "", "evidenceRefs": [ { "label": "F002 case package", "type": "zip", "url": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F002.zip" }, { "label": "F002 case index", "type": "index", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F002/index.md" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F002.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#fit-auditor-packet", "auditDisposition": "Pending capture", "gaps": [ "Current UAT run and source-row evidence capture pending." ], "tone": "pending" }, { "id": "TRACE-F003", "requirementArea": "API Functional Integration Toolkit", "requirementSource": "MTST_EDE_E2E_F003 / API Functional Integration Toolkit", "requirementStatement": "Prove MarketLink can locate an application that is not currently in the EDE system, resume it safely, add a household member, and support the BAR opt-out path.", "aisdlcGate": "Validate and test", "deliveryControl": "FIT cases move through prepared evidence slots, current UAT capture, source-row validation, package review, and auditor export gates.", "agileEpic": "EDE-FIT-001", "backlogItem": "F003 - CIC with added member for app not currently in EDE system, then BAR opt-out", "sprintLane": "FIT UAT evidence backlog", "acceptanceCriteria": "Screenshots of resumed application and added-member flow, Add Member/Update App/Submit App raw transactions, and source-row evidence mapping for F003.", "platformFunctions": [ "Store ID Proofing", "Person Search", "Store Permission", "Get App", "Add Member", "Update App", "Submit App" ], "ownerRole": "Engineering / QA / Compliance", "testKit": "API Functional Integration Toolkit", "testCases": [ "MTST_EDE_E2E_F003" ], "status": "Ready for UAT capture", "evidenceStatus": "Evidence slot prepared", "evidenceCount": 0, "evidencePreviewUrl": "", "evidenceRefs": [ { "label": "F003 case package", "type": "zip", "url": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F003.zip" }, { "label": "F003 case index", "type": "index", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F003/index.md" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F003.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#fit-auditor-packet", "auditDisposition": "Pending capture", "gaps": [ "Current UAT run and source-row evidence capture pending." ], "tone": "pending" }, { "id": "TRACE-F004", "requirementArea": "API Functional Integration Toolkit", "requirementSource": "MTST_EDE_E2E_F004 / API Functional Integration Toolkit", "requirementStatement": "Prove a consumer or broker can return to an existing in-progress financial-assistance application and remove a household member while maintaining the correct application state.", "aisdlcGate": "Validate and test", "deliveryControl": "FIT cases move through prepared evidence slots, current UAT capture, source-row validation, package review, and auditor export gates.", "agileEpic": "EDE-FIT-001", "backlogItem": "F004 - Pick up existing in-progress FA application and remove a member", "sprintLane": "FIT UAT evidence backlog", "acceptanceCriteria": "Before/after household UI screenshots, Remove Member transaction evidence, application state retrieval, and source-row map for F004.", "platformFunctions": [ "Store ID Proofing", "Person Search", "Create App", "Store Permission", "Add Member", "Update App", "Get App", "Remove Member" ], "ownerRole": "Engineering / QA / Compliance", "testKit": "API Functional Integration Toolkit", "testCases": [ "MTST_EDE_E2E_F004" ], "status": "Ready for UAT capture", "evidenceStatus": "Evidence slot prepared", "evidenceCount": 0, "evidencePreviewUrl": "", "evidenceRefs": [ { "label": "F004 case package", "type": "zip", "url": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F004.zip" }, { "label": "F004 case index", "type": "index", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F004/index.md" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F004.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#fit-auditor-packet", "auditDisposition": "Pending capture", "gaps": [ "Current UAT run and source-row evidence capture pending." ], "tone": "pending" }, { "id": "TRACE-F005", "requirementArea": "API Functional Integration Toolkit", "requirementSource": "MTST_EDE_E2E_F005 / API Functional Integration Toolkit", "requirementStatement": "Prove a non-SEP CIC can update communication preferences, elect APTC, retrieve the EDN, and move into the expected pended plan-selection state.", "aisdlcGate": "Validate and test", "deliveryControl": "FIT cases move through prepared evidence slots, current UAT capture, source-row validation, package review, and auditor export gates.", "agileEpic": "EDE-FIT-001", "backlogItem": "F005 - Non-SEP CIC with communication preference changes and elected APTC", "sprintLane": "FIT UAT evidence backlog", "acceptanceCriteria": "Preference-change UI evidence, EDN retrieval, APTC election confirmation, pended enrollment status, and raw payloads linked to F005.", "platformFunctions": [ "Get App", "Submit App", "Metadata Search", "Notice Retrieval", "Get DMI", "Get SVI", "Submit Enrollment", "Get Enrollment" ], "ownerRole": "Engineering / QA / Compliance", "testKit": "API Functional Integration Toolkit", "testCases": [ "MTST_EDE_E2E_F005" ], "status": "Ready for UAT capture", "evidenceStatus": "Evidence slot prepared", "evidenceCount": 0, "evidencePreviewUrl": "", "evidenceRefs": [ { "label": "F005 case package", "type": "zip", "url": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F005.zip" }, { "label": "F005 case index", "type": "index", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F005/index.md" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F005.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#fit-auditor-packet", "auditDisposition": "Pending capture", "gaps": [ "Current UAT run and source-row evidence capture pending." ], "tone": "pending" }, { "id": "TRACE-F006", "requirementArea": "API Functional Integration Toolkit", "requirementSource": "MTST_EDE_E2E_F006 / API Functional Integration Toolkit", "requirementStatement": "Prove a consumer can cancel coverage and revoke permission for the current EDE entity, and that post-revocation access behaves correctly.", "aisdlcGate": "Validate and test", "deliveryControl": "FIT cases move through prepared evidence slots, current UAT capture, source-row validation, package review, and auditor export gates.", "agileEpic": "EDE-FIT-001", "backlogItem": "F006 - Consumer cancels coverage and revokes permission for current EDE Entity", "sprintLane": "FIT UAT evidence backlog", "acceptanceCriteria": "Cancellation confirmation, Revoke Permission request/response, post-revocation access evidence, and status screenshots tied to F006.", "platformFunctions": [ "Get SVI", "Update Policy", "Revoke Permission" ], "ownerRole": "Engineering / QA / Compliance", "testKit": "API Functional Integration Toolkit", "testCases": [ "MTST_EDE_E2E_F006" ], "status": "Ready for UAT capture", "evidenceStatus": "Evidence slot prepared", "evidenceCount": 0, "evidencePreviewUrl": "", "evidenceRefs": [ { "label": "F006 case package", "type": "zip", "url": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F006.zip" }, { "label": "F006 case index", "type": "index", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F006/index.md" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F006.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#fit-auditor-packet", "auditDisposition": "Pending capture", "gaps": [ "Current UAT run and source-row evidence capture pending." ], "tone": "pending" }, { "id": "TRACE-F007", "requirementArea": "API Functional Integration Toolkit", "requirementSource": "MTST_EDE_E2E_F007 / API Functional Integration Toolkit", "requirementStatement": "Prove an initial financial-assistance application with both DMI and SVI can be submitted, adjudicated, resolved, released from pended status, and later terminated.", "aisdlcGate": "Validate and test", "deliveryControl": "FIT cases move through prepared evidence slots, current UAT capture, source-row validation, package review, and auditor export gates.", "agileEpic": "EDE-FIT-001", "backlogItem": "F007 - Initial FA application with DMI and SVI; resolve both and release pended plans; terminate coverage", "sprintLane": "FIT UAT evidence backlog", "acceptanceCriteria": "DMI/SVI before-and-after evidence, notice retrieval, pended-to-active enrollment response, termination transaction, and complete raw payload chain for F007.", "platformFunctions": [ "Get DMI", "Get SVI", "Metadata Search", "Notice Retrieval", "Submit Enrollment", "Get Enrollment", "Update Policy" ], "ownerRole": "Engineering / QA / Compliance", "testKit": "API Functional Integration Toolkit", "testCases": [ "MTST_EDE_E2E_F007" ], "status": "Ready for UAT capture", "evidenceStatus": "Evidence slot prepared", "evidenceCount": 0, "evidencePreviewUrl": "", "evidenceRefs": [ { "label": "F007 case package", "type": "zip", "url": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F007.zip" }, { "label": "F007 case index", "type": "index", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F007/index.md" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F007.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#fit-auditor-packet", "auditDisposition": "Pending capture", "gaps": [ "Current UAT run and source-row evidence capture pending." ], "tone": "pending" }, { "id": "TRACE-F008", "requirementArea": "API Functional Integration Toolkit", "requirementSource": "MTST_EDE_E2E_F008 / API Functional Integration Toolkit", "requirementStatement": "Prove a non-financial-assistance application can enroll members into different plans and later enforce plan-category limitations during a CIC.", "aisdlcGate": "Validate and test", "deliveryControl": "FIT cases move through prepared evidence slots, current UAT capture, source-row validation, package review, and auditor export gates.", "agileEpic": "EDE-FIT-001", "backlogItem": "F008 - Initial non-FA application with each member in different plan and later CIC subject to plan category limitations", "sprintLane": "FIT UAT evidence backlog", "acceptanceCriteria": "Member-level plan selection screenshots, Submit/Get Enrollment responses, CIC limitation evidence, and F008 source-row traceability.", "platformFunctions": [ "Get App", "Submit Enrollment", "Get Enrollment" ], "ownerRole": "Engineering / QA / Compliance", "testKit": "API Functional Integration Toolkit", "testCases": [ "MTST_EDE_E2E_F008" ], "status": "Ready for UAT capture", "evidenceStatus": "Evidence slot prepared", "evidenceCount": 0, "evidencePreviewUrl": "", "evidenceRefs": [ { "label": "F008 case package", "type": "zip", "url": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F008.zip" }, { "label": "F008 case index", "type": "index", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F008/index.md" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F008.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#fit-auditor-packet", "auditDisposition": "Pending capture", "gaps": [ "Current UAT run and source-row evidence capture pending." ], "tone": "pending" }, { "id": "TRACE-F009", "requirementArea": "API Functional Integration Toolkit", "requirementSource": "MTST_EDE_E2E_F009 / API Functional Integration Toolkit", "requirementStatement": "Prove the platform recognizes an SVI expiration scenario and shows that the pending plan selection is cancelled when the SVI expires.", "aisdlcGate": "Validate and test", "deliveryControl": "FIT cases move through prepared evidence slots, current UAT capture, source-row validation, package review, and auditor export gates.", "agileEpic": "EDE-FIT-001", "backlogItem": "F009 - Initial non-FA application with SVI; PPS is cancelled when SVI is expired", "sprintLane": "FIT UAT evidence backlog", "acceptanceCriteria": "SVI expiration response, PPS cancellation screen/API evidence, notice retrieval, and raw transactions mapped to F009.", "platformFunctions": [ "Get SVI", "Submit Enrollment", "Get Enrollment", "Metadata Search", "Notice Retrieval" ], "ownerRole": "Engineering / QA / Compliance", "testKit": "API Functional Integration Toolkit", "testCases": [ "MTST_EDE_E2E_F009" ], "status": "Ready for UAT capture", "evidenceStatus": "Evidence slot prepared", "evidenceCount": 0, "evidencePreviewUrl": "", "evidenceRefs": [ { "label": "F009 case package", "type": "zip", "url": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F009.zip" }, { "label": "F009 case index", "type": "index", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F009/index.md" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F009.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#fit-auditor-packet", "auditDisposition": "Pending capture", "gaps": [ "Current UAT run and source-row evidence capture pending." ], "tone": "pending" }, { "id": "TRACE-F010", "requirementArea": "API Functional Integration Toolkit", "requirementSource": "MTST_EDE_E2E_F010 / API Functional Integration Toolkit", "requirementStatement": "Prove a citizenship DMI can expire and cause the applicant to become ineligible for QHP coverage, with notices and enrollment status reflecting that outcome.", "aisdlcGate": "Validate and test", "deliveryControl": "FIT cases move through prepared evidence slots, current UAT capture, source-row validation, package review, and auditor export gates.", "agileEpic": "EDE-FIT-001", "backlogItem": "F010 - Initial non-FA application with Citizenship DMI; DMI expires and applicant becomes ineligible for QHP", "sprintLane": "FIT UAT evidence backlog", "acceptanceCriteria": "Citizenship DMI evidence, ineligibility result, supporting notices, Get Enrollment response, and F010 source-row mapping.", "platformFunctions": [ "Get DMI", "Metadata Search", "Notice Retrieval", "Get Enrollment" ], "ownerRole": "Engineering / QA / Compliance", "testKit": "API Functional Integration Toolkit", "testCases": [ "MTST_EDE_E2E_F010" ], "status": "Ready for UAT capture", "evidenceStatus": "Evidence slot prepared", "evidenceCount": 0, "evidencePreviewUrl": "", "evidenceRefs": [ { "label": "F010 case package", "type": "zip", "url": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F010.zip" }, { "label": "F010 case index", "type": "index", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F010/index.md" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F010.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#fit-auditor-packet", "auditDisposition": "Pending capture", "gaps": [ "Current UAT run and source-row evidence capture pending." ], "tone": "pending" }, { "id": "TRACE-F011", "requirementArea": "API Functional Integration Toolkit", "requirementSource": "MTST_EDE_E2E_F011 / API Functional Integration Toolkit", "requirementStatement": "Prove a new coverage-year financial-assistance application can be created from a prior-year application and then processed through eligibility and enrollment.", "aisdlcGate": "Validate and test", "deliveryControl": "FIT cases move through prepared evidence slots, current UAT capture, source-row validation, package review, and auditor export gates.", "agileEpic": "EDE-FIT-001", "backlogItem": "F011 - 2025 FA application created from 2024 application", "sprintLane": "FIT UAT evidence backlog", "acceptanceCriteria": "Create-from-prior transaction evidence, new-year application state, eligibility output, enrollment confirmation, and raw payload package for F011.", "platformFunctions": [ "Create App From Prior", "Get App", "Submit App", "Submit Enrollment", "Get Enrollment" ], "ownerRole": "Engineering / QA / Compliance", "testKit": "API Functional Integration Toolkit", "testCases": [ "MTST_EDE_E2E_F011" ], "status": "Ready for UAT capture", "evidenceStatus": "Evidence slot prepared", "evidenceCount": 0, "evidencePreviewUrl": "", "evidenceRefs": [ { "label": "F011 case package", "type": "zip", "url": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F011.zip" }, { "label": "F011 case index", "type": "index", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F011/index.md" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F011.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#fit-auditor-packet", "auditDisposition": "Pending capture", "gaps": [ "Current UAT run and source-row evidence capture pending." ], "tone": "pending" }, { "id": "TRACE-F012", "requirementArea": "API Functional Integration Toolkit", "requirementSource": "MTST_EDE_E2E_F012 / API Functional Integration Toolkit", "requirementStatement": "Prove AI/AN applicant handling works correctly and that Phase 3 entities can proceed through enrollment while lower-phase routing differences remain visible.", "aisdlcGate": "Validate and test", "deliveryControl": "FIT cases move through prepared evidence slots, current UAT capture, source-row validation, package review, and auditor export gates.", "agileEpic": "EDE-FIT-001", "backlogItem": "F012 - AI/AN applicant handling; Phase 3 entities enroll consumer", "sprintLane": "FIT UAT evidence backlog", "acceptanceCriteria": "AI/AN eligibility screenshots/responses, Submit/Get Enrollment evidence, phase-routing notes, and source-row mapping for F012.", "platformFunctions": [ "Get App / Fetch Eligibility", "Submit Enrollment", "Get Enrollment" ], "ownerRole": "Engineering / QA / Compliance", "testKit": "API Functional Integration Toolkit", "testCases": [ "MTST_EDE_E2E_F012" ], "status": "Ready for UAT capture", "evidenceStatus": "Evidence slot prepared", "evidenceCount": 0, "evidencePreviewUrl": "", "evidenceRefs": [ { "label": "F012 case package", "type": "zip", "url": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F012.zip" }, { "label": "F012 case index", "type": "index", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F012/index.md" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F012.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#fit-auditor-packet", "auditDisposition": "Pending capture", "gaps": [ "Current UAT run and source-row evidence capture pending." ], "tone": "pending" }, { "id": "TRACE-F013", "requirementArea": "API Functional Integration Toolkit", "requirementSource": "MTST_EDE_E2E_F013 / API Functional Integration Toolkit", "requirementStatement": "Hold a visible placeholder for F013 only until the active CMS workbook or auditor scope confirms that an F013 requirement exists.", "aisdlcGate": "Validate and test", "deliveryControl": "FIT cases move through prepared evidence slots, current UAT capture, source-row validation, package review, and auditor export gates.", "agileEpic": "EDE-FIT-001", "backlogItem": "F013 - Source confirmation slot", "sprintLane": "FIT UAT evidence backlog", "acceptanceCriteria": "Official source confirmation that defines F013, or an explicit auditor decision that the current packet scope ends at F012.", "platformFunctions": [ "Source confirmation pending" ], "ownerRole": "Engineering / QA / Compliance", "testKit": "API Functional Integration Toolkit", "testCases": [ "MTST_EDE_E2E_F013" ], "status": "Source confirmation required", "evidenceStatus": "Source pending", "evidenceCount": 0, "evidencePreviewUrl": "", "evidenceRefs": [ { "label": "F013 case package", "type": "zip", "url": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F013.zip" }, { "label": "F013 case index", "type": "index", "url": "/docs/marketlink-evidence/current-auditor-packet/api-functional-integration/F013/index.md" } ], "packageUrl": "/docs/marketlink-evidence/packages/marketlink-current-auditor-packet-F013.zip", "vaultUrl": "/marketlink-evidence-walkthrough.html#fit-auditor-packet", "auditDisposition": "Source pending", "gaps": [ "No source-backed F013 requirement was found in the inspected local toolkit notes." ], "tone": "risk" } ] }