| Pre-alpha status: breaking changes expected |
High |
Ongoing |
All components are subject to breaking interface and behaviour changes. No stable API contract is guaranteed at this stage. |
| No audit system |
Medium |
Planned |
Data access is not currently logged for compliance or traceability purposes. An audit system is planned but not yet designed or implemented. |
| Consent flow not demonstrated |
Medium |
Planned |
The current r-squared demo runs without data owner consent. Future scenarios will address this. |
| Reference Contract Service is not production-ready |
Medium |
Accepted |
The Reference Contract Service approves all contract transitions without policy enforcement. Production deployments must replace it with a compliant implementation. |
| Identity architecture under development |
Medium |
In progress |
The Signature-Auth-Handler and HST-DID are deployed and functional, but the overall identity model, particularly the integration with Gaia-X Trust Anchors and eIDAS, is not yet finalised. |
| CMA implementation to be redesigned |
Medium |
Planned |
The current Consent Management App implementation is a prototype and will be fully redesigned. It should be treated as conceptual documentation only. |