Release & transfer
Transfer only the approved security baseline into reproducible production and customer delivery.
PSLF-06G6Release authorizedPhase 7 of 9
Gate
G6
Pending
Release authorized
Target date
29 Jan 2027
Gate review
Open blockers
0
none recorded
Accountable
Release Manager
Quality authorizes release; Security confirms prerequisites
Approve residual risk, finalize customer/regulatory evidence, transfer operational obligations, and freeze the release baseline.
- Released software, documentation, and bills of materials match the approved baseline.
- Signing, delivery, and customer-security information are verified.
- Accepted verification and validation
- Residual-risk decisions
- Production and support readiness
- 1Finalize risk-management summary and release baseline
- 2Generate regulatory and customer packages
- 3Transfer monitoring, patching, identity, certificate, logging, backup, and support obligations
- 4Confirm secure defaults and labeling
- Product Security Risk Management Report
- Customer Security Package
- MDS2 where applicable
- Final PSCG, CBOM, PSRTM, VMR, release attestation
- Residual risk approved by authorized rolesPending
- Operational owners accept obligationsPending
- Submission/customer claims reconcile to evidencePending
- Release package is immutable and exportablePending
- Accountable
- Release Manager accountable
- Supporting
- Quality authorizes release; Security confirms prerequisites
- Approved baseline (pending)
- Build (pending)
- Signature (pending)
- Release artifact (pending)
- Customer package (pending)
- Distribution (pending)
- Release prerequisite pass rate
- Baseline drift
- Customer-package completeness