Phase 07
Testing, change and executive recommendation
Validate the proposed design, preserve defect evidence and plan a phased, reversible implementation with clear stop/go gates.
Inspect the evidence
One defect, from failure to retest
| Test / cycle | Expected | Actual result | Decision |
|---|---|---|---|
| UAT-006 · Cycle 1 | Public status excludes internal risk notes. | EX-007 / EVD-007: internal risk note was exposed. | Fail · DEF-002 Critical |
| UAT-006 · Cycle 2 | Only allow-listed status, next action and update time. | EX-008 / EVD-008: allow-list passed the simulated retest. | Pass in model · formal privacy assessment still required |
Historical simulation executed 1 September 2026. Seeded defects demonstrate correction and retest; these are not production incidents or acceptance of the current public website.
Defects preserved as evidence
| ID | Severity | Observed finding | Outcome |
|---|---|---|---|
| DEF-001 | Medium | Conditional document rule omitted declared circumstance | Closed after retest |
| DEF-002 | Critical | Internal note appeared in applicant-facing status | Closed after retest |
| DEF-003 | High | Notification retry created duplicate delivery | Closed after retest |
Confirm sponsor, scope, discovery, controls and pilot cohort.
Guided intake, validation, one case ID, routing and audit events.
Safe status, communications, alerts, reporting and workload views.
Compare baseline, benefits, guardrails, workload and unintended effects.
Go-live gates
- Requirements and rules approved
- Privacy, accessibility and security approval
- Data reconciliation and recovery passed
- Training, support and rollback ready
Do not automate
- Unreviewable final eligibility decisions
- Removal of assisted service routes
- Exposure of internal notes or risk flags
- Benefit claims before pilot evidence
Run one program/team pilot with controlled volume. Scale only when service, equity, privacy, accessibility, defect and operational-readiness evidence supports the decision.
My analysis and method Why this phase matters
A portfolio solution is not complete because the diagram looks convincing. Testing, risk, change and governance determine whether a pilot is safe.
Capability demonstrated
What this work shows
Linked scenarios to requirements, owners, expected outcomes and evidence.
Defined mobilization, two releases, pilot, hypercare and adoption workstreams.
Separated pilot gates, strategic targets, risks and evidence still required.
Fictional municipal scenario, synthetic data, simulated discovery and validation. No City of Toronto affiliation or claimed production outcome.