Skip to content

OPERATIONS_AND_HOMOLOGATION.md

Latest commit

 

History

History
125 lines (91 loc) · 3.38 KB

OPERATIONS_AND_HOMOLOGATION.md

File metadata and controls

125 lines (91 loc) · 3.38 KB
Raw

Operations and Homologation — CreditAI

Unified document: deploy, runbooks, E2E tests, checklists, and evidence dossier.

1. Local Deploy

1.1 Prerequisites

  • .NET SDK 9.0
  • PostgreSQL (local Docker or remote)
  • Optional: Docker Desktop (Postgres/E2E), OpenAI-compatible LLM host / ContextMemory

1.2 Database

docker compose up -d   # Optional local PostgreSQL
# or use remote DB in ConnectionStrings__CreditAiDatabase

Migrations applied automatically on API and Web startup.

1.3 Startup

dotnet run --project src/CreditAI.API
dotnet run --project src/CreditAI.Web

1.4 Post-deploy Verification

Verification URL
Web http://localhost:5188
Health GET /health
ReDoc /redoc (Development)
Login /Identity/Account/Login

2. Technical Homologation

2.1 Recommended Sequence

  1. dotnet build CreditAI.sln
  2. dotnet run --project tools/CreditAI.MrmGate
  3. dotnet test CreditAI.sln
  4. .\scripts\generate-homologation-evidence.ps1 -StartApp
  5. Execute manual scenarios — E2E_HOMOLOGATION.md
  6. Fill HOMOLOGATION_CHECKLIST.md
  7. Pen test → SECURITY_PEN_TEST_CHECKLIST.md

2.2 Homologation Documents

Document File
Checklist HOMOLOGATION_CHECKLIST.md
E2E scenarios E2E_HOMOLOGATION.md
Technical runbook HOMOLOGATION_RUNBOOK.md
Requirements matrix INSTITUTIONAL_REQUIREMENTS_MATRIX.md
Pen test SECURITY_PEN_TEST_CHECKLIST.md

3. CI (Azure Pipelines)

File: azure-pipelines.yml

Stages: Build + MRM gate → Unit + Architecture → Integration → Postgres (Testcontainers) → E2E Playwright.

4. Evidence Dossier

Structure in dossier/README.md:

docs/dossier/
  01-pipeline-core/      → F1, intake, human review, Art. 22
  02-model-risk/         → MRM gate, model cards, drift
  03-aml-solvency/       → AML, solvency, goAML
  04-narrative-ai/       → grounding, OpenAI-compatible LLM
  05-monitoring/         → EWI, watchlist
  06-audit/              → audit export, immutability
  07-regulatory-exports/ → supervisor, CIRBE, CRC
  08-manual-data/        → manual entry contingency
  09-e2e/                → .trx, health, OpenAPI, logs
  10-security/           → pen test

Generate automatically:

.\scripts\generate-homologation-evidence.ps1
.\scripts\run-e2e-ui-homologation.ps1
.\scripts\run-homologation-full.ps1
cd scripts/generate-docx-docs && npm install && npm run generate

5. Production Dependencies (outside repo)

Integration Institutional responsibility
BPnet CRC mTLS Bank integration team
World-Check API Compliance / IT
Yapily open banking Digital banking
FIU goAML Portal AML compliance
Iberian CIRBE Credit risk
Internal LLM GPU (OpenAI-compatible) AI infrastructure
Entra ID app registrations IAM
Azure Key Vault Cloud platform

6. Homologation Contacts

Role Responsible Date
Compliance
Model validation
CISO / pen test
DPO (DPIA)