[M0-D09 follow-up] Collect commitment source artifacts and draft the first lists

[smiggleworth]

Note

Follow-up discovery issue created 2026-09-22 when M0-D09 #66 closed. It gathers organization facts; R1-13 delivery uses the decided record shape and does not wait on it.

Decision needed

Collect the first client's commitment source artifacts and draft the first commitment, requirement, CUEC, and CSOC lists.

Questions to answer

• Collect the source artifacts: MSAs, SLAs, the security addendum, privacy notices, and policies.
• Draft the first service commitments and system requirements with owners.
• Draft the first CUECs and CSOCs with the readiness advisor.
• Name the management approver who holds commitment approval for the first client.

Involve

Compliance lead, legal or contracts owner, readiness advisor.

Done when

• The artifacts are listed, the drafts exist as commitment drafts in the product or are recorded here, and the approver is named, with owner and date.