{"schema": "sola.strategy-workspace/1", "brand": "Sola Sovereign Workspace", "tagline": "A controlled path from private strategy workspace to sovereign collaboration.", "positioning": "Position Sola Sovereign Workspace as an editable working brand on the maintained Sola base, with a dedicated Lola account. Its immediate product is a private browser strategy workspace for managing the roadmap, evidence and pilots\u2014not an office suite. Its proposed differentiation from openDesk is governed cross-application AI execution and a separately gated offline deployment track. Test that proposition with Austrian and German SMEs, consultancies and small public-sector teams before pursuing broad procurement. Alternative working names are Sola Desk and Sola Continuity; trademark availability is unverified.", "audience": ["Austrian and German SME operators assessing sovereign collaboration", "Consultancies running controlled client pilots", "Small public-sector teams able to evaluate a bounded pilot"], "assumptions": ["The 12-month planning period starts 2026-10-12; dates and scope are hypotheses, not commitments.", "Role labels designate accountability to be assigned; they do not assert named employees or confirmed staffing.", "Capacity hypothesis, conditional on hiring or allocation: one product lead at 0.5 FTE, two engineers at 1 FTE each, one security/operator engineer at 0.5 FTE, and design, legal and sales support totaling 0.5 FTE. Approximately 3.5 FTE for 12 months at an estimated fully loaded \u20ac110,000\u2013\u20ac160,000 per FTE-year implies \u20ac385,000\u2013\u20ac560,000 in personnel cost.", "Additional 12-month estimates are \u20ac30,000\u2013\u20ac80,000 for hosting, test hardware and model evaluation, plus \u20ac25,000\u2013\u20ac60,000 for legal, accessibility, security and migration reviews. Estimated total is \u20ac440,000\u2013\u20ac700,000, excluding major procurement or production support commitments.", "Minimum viable suite pilot scope is one selected document-and-file integration, read-only permission-aware retrieval, and one controlled cross-application workflow; it is not office-suite parity.", "A dedicated Lola account and private sign-in must be provisioned and verified for the strategy workspace; their requested existence is not treated as completed."], "nonGoals": ["Claiming that today's strategy workspace provides documents, mail, calendar, conferencing or production human login.", "Claiming certification, institutional conformance, production air-gap operation, openDesk integration or signed pilot customers.", "Building replacements for every established office application before testing integration and demand.", "Broad government procurement before bounded pilots and operator evidence."], "phases": [{"id": "P1", "title": "Private workspace and discovery", "window": "2026-10-12 to 2026-11-10 (days 0\u201330)", "outcome": "Make the strategy workspace usable and establish an evidence-based pilot proposition.", "exitCriteria": ["Dedicated Lola account and private sign-in pass an access test.", "Owner can persist and export tasks, notes, sources and prospect records; every capability is labeled current, pilot or planned.", "Staffing and discovery budget receive an explicit stop/go decision."]}, {"id": "P2", "title": "Architecture and bounded prototype", "window": "2026-11-11 to 2027-01-10 (days 31\u201390)", "outcome": "Select an interoperable path and test a narrow, permission-aware prototype.", "exitCriteria": ["Buy/build/integrate decision records cover licenses, maintenance and openDesk interoperability.", "Read-only retrieval demonstrates authorized results and denial cases on test data.", "At least five discovery interviews are documented, or the demand gate records insufficient evidence."]}, {"id": "P3", "title": "Controlled suite pilot", "window": "2027-01-11 to 2027-04-10 (days 91\u2013180)", "outcome": "Evaluate a limited document-and-file pilot and governed agent workflow without claiming parity.", "exitCriteria": ["Pilot participants, data boundaries and rollback are approved before access.", "Each agent write or send requires named-user authorization, a preview and exact-action approval, with receipts and negative tests.", "A documented go/no-go decision uses pilot outcomes, migration fidelity and support burden."]}, {"id": "P4", "title": "Parity evaluation and separate offline gate", "window": "2027-04-11 to 2027-10-11 (days 181\u2013365)", "outcome": "Determine whether a supportable suite offer and genuinely disconnected deployment are feasible.", "exitCriteria": ["Mail, calendar, files, wiki and project-management integration gaps are tested and recorded, not presumed closed.", "Operator documentation, SBOM, vulnerability handling, upgrade and recovery tests support a release decision.", "Air-gap approval requires a 72-hour disconnected test including cold boot and measured egress; failure leaves it unoffered."]}], "capabilities": [{"name": "Strategy workspace", "current": "A generated blueprint is available as the immediate starting artifact; the requested persistent, private browser workspace and dedicated Lola account require verification before being described as usable.", "competitor": "openDesk is an established suite of European open-source applications, not merely a roadmap workspace.", "gap": "Deliver persistent owner edits, private access, records, comparisons and export while clearly separating roadmap utility from suite functionality.", "taskIds": ["T01", "T02", "T03", "T04"]}, {"name": "Document and collaboration foundation", "current": "The maintained Sola Java cell provides bounded planning and approval primitives, not office editing. Existing repository components are reuse candidates only.", "competitor": "openDesk launched in October 2024 and combines established applications.", "gap": "Choose licensed, maintainable integrations\u2014such as Collabora/Nextcloud, Matrix/Element and Open-Xchange or equivalents\u2014then test document fidelity and suite gaps.", "taskIds": ["T09", "T10", "T11", "T18", "T19", "T25", "T26", "T27"]}, {"name": "Permission-aware AI and controlled agents", "current": "Sola has bounded synthetic composition proofs and a read-only browser evidence view; these do not establish production login, permission-aware retrieval or external actions.", "competitor": "ZenDiS describes agentic AI spanning applications as a roadmap scenario with initial proofs of concept, not a generally available capability.", "gap": "Prove identity-bound retrieval, then separately prove approved cross-application writes and sends with receipts, revocation and adversarial tests.", "taskIds": ["T12", "T13", "T14", "T20", "T21", "T22", "T23"]}, {"name": "Offline and operator readiness", "current": "No supplied evidence establishes Sola air-gap operation; the ERP trial UI currently depends on an OpenUI5 CDN.", "competitor": "ZenDiS has shown an isolated local-server demonstration; its air-gapped operation remains a roadmap scenario.", "gap": "Gate offline identity, inference, assets, DNS, time, certificates, logs, updates and recovery, alongside licensing and maintainability.", "taskIds": ["T15", "T16", "T28", "T29", "T30", "T31", "T32"]}], "tasks": [{"id": "T01", "title": "Provision dedicated Lola account", "phase": "P1", "owner": "Operator engineer", "targetDate": "2026-10-19", "priority": "P0", "status": "planned", "description": "Create the workspace's dedicated account and document its access boundary.", "acceptance": ["Account ownership and recovery procedure are recorded.", "A non-owner access attempt is denied in a witnessed test."], "dependencies": [], "evidence": "Requested deployment; no provisioned account is evidenced."}, {"id": "T02", "title": "Implement private browser sign-in", "phase": "P1", "owner": "Application engineer", "targetDate": "2026-10-26", "priority": "P0", "status": "planned", "description": "Gate strategy records behind authenticated owner access.", "acceptance": ["Owner can sign in and out.", "Unauthenticated requests cannot read or change records.", "Session-expiry and recovery tests are recorded."], "dependencies": ["T01"], "evidence": "Production human login is not established by the maintained cell evidence."}, {"id": "T03", "title": "Persist editable roadmap records", "phase": "P1", "owner": "Application engineer", "targetDate": "2026-11-02", "priority": "P0", "status": "planned", "description": "Provide owner edits for task status, role, date and evidence, plus notes, prospect records and sources.", "acceptance": ["Edits survive restart.", "A test owner can create, edit and retrieve each record type.", "Initial tasks remain planned or blocked."], "dependencies": ["T02"], "evidence": "The supplied immediate-workspace scope calls for persistent owner-editable records."}, {"id": "T04", "title": "Add comparison, export and capability labels", "phase": "P1", "owner": "Product engineer", "targetDate": "2026-11-09", "priority": "P0", "status": "planned", "description": "Expose source-linked comparisons and downloadable strategy data.", "acceptance": ["Export and re-import preserve a test record set.", "Screens distinguish current, bounded pilot and planned capabilities.", "Comparison entries link to recorded sources."], "dependencies": ["T03"], "evidence": "These are requested strategy-workspace functions, not evidenced suite functions."}, {"id": "T05", "title": "Approve capacity and spending gate", "phase": "P1", "owner": "Product lead", "targetDate": "2026-10-30", "priority": "P0", "status": "planned", "description": "Decide whether the assumed team and estimated \u20ac440,000\u2013\u20ac700,000 annual envelope are fundable.", "acceptance": ["Decision records assigned capacity, budget ceiling and scope cuts if unfunded."], "dependencies": [], "evidence": "Staffing and costs are estimates, not confirmed commitments."}, {"id": "T06", "title": "Test brand and audience language", "phase": "P1", "owner": "Product lead", "targetDate": "2026-11-06", "priority": "P1", "status": "planned", "description": "Compare Sola Sovereign Workspace, Sola Desk and Sola Continuity with target buyers.", "acceptance": ["At least five interviews compare comprehension of all three names.", "Trademark review is requested before any final naming decision."], "dependencies": [], "evidence": "Names are working alternatives; availability is unverified."}, {"id": "T07", "title": "Define discovery and pilot offer", "phase": "P1", "owner": "Commercial lead", "targetDate": "2026-11-10", "priority": "P0", "status": "planned", "description": "Specify eligible teams, pilot boundaries, pricing test and explicit exclusions.", "acceptance": ["Offer states duration, participant cap, data rules, exit terms and that suite and air-gap capabilities are unproven."], "dependencies": ["T05"], "evidence": "Demand testing is required before broad procurement."}, {"id": "T08", "title": "Conduct buyer discovery", "phase": "P2", "owner": "Commercial lead", "targetDate": "2026-12-04", "priority": "P0", "status": "planned", "description": "Interview Austrian and German SMEs, consultancies and small public-sector teams without representing them as customers.", "acceptance": ["At least five consented interview summaries record workflow, budget authority, deployment constraint and objections.", "No prospect is labeled a customer without an agreement."], "dependencies": ["T07"], "evidence": "No pilot customers or demand counts are supplied."}, {"id": "T09", "title": "Decide buy, build or integrate by function", "phase": "P2", "owner": "Technical lead", "targetDate": "2026-12-11", "priority": "P0", "status": "planned", "description": "Compare existing document, file, messaging, mail and calendar tools against building Sola-native functions.", "acceptance": ["Decision matrix scores interoperability, license, maintenance, security, offline feasibility and cost for each function.", "No tool is described as deployed solely because it exists in the repository."], "dependencies": ["T05"], "evidence": "Existing ecosystem components are reuse potential, not completed integrations."}, {"id": "T10", "title": "Assess openDesk interoperability", "phase": "P2", "owner": "Integration engineer", "targetDate": "2026-12-18", "priority": "P1", "status": "planned", "description": "Keep integration with openDesk itself as an option rather than assuming replacement.", "acceptance": ["Documented interface and license assessment identifies one testable integration path or records why none is viable.", "Any test uses authorized test systems and data."], "dependencies": ["T09"], "evidence": "openDesk combines established applications; no Sola integration is evidenced."}, {"id": "T11", "title": "Specify identity and permissions model", "phase": "P2", "owner": "Security engineer", "targetDate": "2026-12-18", "priority": "P0", "status": "planned", "description": "Define named users, source permissions, service identities and revocation for the pilot.", "acceptance": ["Threat model includes cross-tenant access, stale permissions and delegated actions.", "Test fixtures contain allowed and denied users."], "dependencies": ["T09"], "evidence": "Maintained cell proofs do not establish production human login."}, {"id": "T12", "title": "Prototype read-only permission-aware retrieval", "phase": "P2", "owner": "AI engineer", "targetDate": "2027-01-05", "priority": "P0", "status": "planned", "description": "Retrieve cited test content without granting the model broader access than the named user.", "acceptance": ["Allowed results carry source references.", "Denied documents never appear in results across the recorded test matrix.", "Permission revocation blocks subsequent retrieval."], "dependencies": ["T11"], "evidence": "Current browser evidence is read-only; permission-aware retrieval is not established."}, {"id": "T13", "title": "Specify controlled agent action contract", "phase": "P2", "owner": "Technical lead", "targetDate": "2027-01-08", "priority": "P0", "status": "planned", "description": "Define plan-only previews and exact-action authorization for writes and sends.", "acceptance": ["Contract defines named-user binding, approval scope, receipts, revocation, idempotency and escalation.", "A supplied Boolean flag alone cannot attest an external action."], "dependencies": ["T11"], "evidence": "Sola's bounded exact-plan and approval primitives are not proof of external execution."}, {"id": "T14", "title": "Establish AI evaluation set", "phase": "P2", "owner": "AI engineer", "targetDate": "2027-01-10", "priority": "P1", "status": "planned", "description": "Prepare consented or synthetic meeting-note and document-review workflow cases.", "acceptance": ["Versioned cases include denied content, prompt injection, duplicate requests and revoked access.", "Success and failure thresholds are recorded before execution tests."], "dependencies": ["T12", "T13"], "evidence": "Agentic AI remains a proposed differentiation track."}, {"id": "T15", "title": "Inventory offline dependencies", "phase": "P2", "owner": "Operator engineer", "targetDate": "2026-12-22", "priority": "P0", "status": "planned", "description": "Identify every required network, asset, identity and licensing dependency.", "acceptance": ["Inventory explicitly covers inference, assets, DNS, time, certificates, logs, updates and recovery.", "OpenUI5 CDN use is recorded as an offline blocker wherever relevant."], "dependencies": ["T09"], "evidence": "The ERP trial UI has an OpenUI5 CDN dependency."}, {"id": "T16", "title": "Assess local model feasibility", "phase": "P2", "owner": "AI engineer", "targetDate": "2027-01-10", "priority": "P1", "status": "planned", "description": "Estimate hardware, model license, latency and quality for disconnected inference.", "acceptance": ["At least two candidate configurations have recorded license terms, hardware costs and measured test latency.", "An infeasible result blocks offline AI claims."], "dependencies": ["T15"], "evidence": "No self-hosted inference is evidenced."}, {"id": "T17", "title": "Authorize bounded pilot and data rules", "phase": "P3", "owner": "Product lead", "targetDate": "2027-01-29", "priority": "P0", "status": "planned", "description": "Select consenting pilot teams only if discovery, staffing and security gates pass.", "acceptance": ["Written pilot scope names participants, permitted data, retention, rollback and support contact.", "If no team qualifies, a no-pilot decision is recorded."], "dependencies": ["T08", "T11", "T12"], "evidence": "No pilot customer or signed agreement is supplied."}, {"id": "T18", "title": "Integrate one document-and-file path", "phase": "P3", "owner": "Integration engineer", "targetDate": "2027-02-26", "priority": "P0", "status": "planned", "description": "Implement the selected interoperable pilot path rather than claiming broad suite coverage.", "acceptance": ["Authorized test users can create, retrieve and export a document through the selected path.", "Permissions and failure recovery pass documented tests."], "dependencies": ["T09", "T11", "T17"], "evidence": "Neither document editing nor file integration is currently established for the new workspace."}, {"id": "T19", "title": "Measure document fidelity and migration", "phase": "P3", "owner": "Integration engineer", "targetDate": "2027-03-12", "priority": "P0", "status": "planned", "description": "Test import, edit and export using representative formats and a reversible migration sample.", "acceptance": ["A versioned corpus records formatting losses, comments and metadata behavior.", "Export is readable without Sola; unresolved critical losses block migration claims."], "dependencies": ["T18"], "evidence": "Office-format fidelity and migration are not established."}, {"id": "T20", "title": "Implement agent preview and exact approval", "phase": "P3", "owner": "AI engineer", "targetDate": "2027-03-05", "priority": "P0", "status": "planned", "description": "Preview meeting notes to document and task, or document review to internal message, without acting until approval.", "acceptance": ["Preview identifies target, content and named authorizer.", "Changing an action after approval requires fresh approval.", "Unapproved plans produce no writes or sends."], "dependencies": ["T13", "T18"], "evidence": "Cross-application execution is planned, not a current capability."}, {"id": "T21", "title": "Execute controlled cross-application workflow", "phase": "P3", "owner": "Application engineer", "targetDate": "2027-03-19", "priority": "P0", "status": "planned", "description": "Run one approved workflow across two pilot applications or record an integration blocker.", "acceptance": ["External systems return independently checked action receipts.", "Retry does not duplicate an action.", "Revocation and escalation prevent unauthorized continuation."], "dependencies": ["T20"], "evidence": "No completed external-action integration is supplied."}, {"id": "T22", "title": "Run agent safety and denial tests", "phase": "P3", "owner": "Security engineer", "targetDate": "2027-03-26", "priority": "P0", "status": "planned", "description": "Evaluate denied content, prompt injection and approval bypass against the controlled workflow.", "acceptance": ["All versioned negative cases have observed outcomes and receipts.", "Any unauthorized write or send blocks pilot expansion."], "dependencies": ["T14", "T21"], "evidence": "Synthetic composition proofs do not establish these security properties."}, {"id": "T23", "title": "Decide agent pilot continuation", "phase": "P3", "owner": "Product lead", "targetDate": "2027-04-09", "priority": "P0", "status": "planned", "description": "Compare workflow utility with safety failures, latency and operator effort.", "acceptance": ["Decision records completion rate, approval burden, failures and a stop, revise or expand outcome.", "No production claim follows solely from a bounded pilot."], "dependencies": ["T21", "T22"], "evidence": "The proposed pilot is distinct from production readiness."}, {"id": "T24", "title": "Evaluate discovery and pilot economics", "phase": "P3", "owner": "Commercial lead", "targetDate": "2027-04-10", "priority": "P0", "status": "planned", "description": "Test willingness to pay and delivery cost without asserting contracted revenue.", "acceptance": ["Decision compares documented buyer feedback, estimated delivery hours and stated pricing hypothesis.", "An insufficient-demand outcome has a defined stop option."], "dependencies": ["T08", "T17"], "evidence": "Pricing and conversion are hypotheses."}, {"id": "T25", "title": "Evaluate mail and calendar integration", "phase": "P4", "owner": "Integration engineer", "targetDate": "2027-06-04", "priority": "P1", "status": "planned", "description": "Test an interoperable mail and calendar route, including identity and export.", "acceptance": ["Test matrix records send/receive, invitations, permissions, export and failure modes.", "Missing critical functions remain explicit gaps."], "dependencies": ["T09", "T11", "T23"], "evidence": "Repository mail experiments are not a deployed mail or calendar suite."}, {"id": "T26", "title": "Evaluate files, wiki and project-management parity", "phase": "P4", "owner": "Product engineer", "targetDate": "2027-06-25", "priority": "P1", "status": "planned", "description": "Assess interoperable integrations against agreed pilot workflows.", "acceptance": ["Function-by-function matrix records tested behavior, ownership and unresolved gaps.", "No parity label is applied while required functions are absent."], "dependencies": ["T18", "T23"], "evidence": "These suite functions are not established for the workspace."}, {"id": "T27", "title": "Evaluate messaging and calls", "phase": "P4", "owner": "Integration engineer", "targetDate": "2027-07-16", "priority": "P1", "status": "planned", "description": "Assess Matrix/Element and call components as reuse candidates.", "acceptance": ["Authorized messaging and call tests document identity, retention, accessibility and support gaps.", "Repository presence alone is not counted as integration."], "dependencies": ["T09", "T11", "T23"], "evidence": "Matrix/Element and call integrations exist in the ecosystem but are not evidenced as integrated here."}, {"id": "T28", "title": "Prepare licensing, SBOM and maintenance plan", "phase": "P4", "owner": "Operator engineer", "targetDate": "2027-07-30", "priority": "P0", "status": "planned", "description": "Establish operator obligations for selected components and models.", "acceptance": ["Component and model licenses are reviewed.", "A reproducible SBOM, vulnerability triage owner and upgrade policy are documented."], "dependencies": ["T09", "T16", "T25", "T26"], "evidence": "No operator licensing or support readiness is established."}, {"id": "T29", "title": "Prepare procurement and deployment pack", "phase": "P4", "owner": "Product lead", "targetDate": "2027-08-13", "priority": "P1", "status": "planned", "description": "Document scope, data flows, accessibility findings, support assumptions and exclusions.", "acceptance": ["Pack distinguishes tested pilot features from proposed features.", "Security, migration, licensing and incident contacts have assigned roles."], "dependencies": ["T19", "T24", "T28"], "evidence": "No institutional conformance or procurement approval is supplied."}, {"id": "T30", "title": "Build disconnected deployment candidate", "phase": "P4", "owner": "Operator engineer", "targetDate": "2027-08-27", "priority": "P0", "status": "planned", "description": "Package a test candidate with local services and no required SaaS, CDN or live license check.", "acceptance": ["Cold boot works without external network.", "Identity, inference, assets, DNS, time, certificates and logging resolve locally or are recorded as blockers."], "dependencies": ["T15", "T16", "T28"], "evidence": "Air-gap operation is a separate unproven product track."}, {"id": "T31", "title": "Test offline updates and recovery", "phase": "P4", "owner": "Operator engineer", "targetDate": "2027-09-17", "priority": "P0", "status": "planned", "description": "Exercise signed update media, backup restore and failure recovery without internet access.", "acceptance": ["A clean installation restores from backup.", "Update and rollback evidence records versions, elapsed time and failures.", "No external certificate or license service is required."], "dependencies": ["T30"], "evidence": "Offline updates and recovery are not currently established."}, {"id": "T32", "title": "Run 72-hour disconnected gate", "phase": "P4", "owner": "Security engineer", "targetDate": "2027-10-01", "priority": "P0", "status": "planned", "description": "Validate the entire candidate under a physically or logically disconnected, instrumented test.", "acceptance": ["72 continuous hours include cold boot, local identity, inference, assets, DNS, time, certificates, logs, update and restore exercises.", "Measured egress and all attempted external dependencies are reported.", "Any required external service blocks an air-gap claim."], "dependencies": ["T30", "T31"], "evidence": "ZenDiS describes its isolated demonstration as a proof of concept; Sola has no supplied air-gap proof."}, {"id": "T33", "title": "Exercise vulnerability and upgrade response", "phase": "P4", "owner": "Operator engineer", "targetDate": "2027-10-05", "priority": "P0", "status": "planned", "description": "Test the maintenance process against a simulated vulnerable dependency.", "acceptance": ["Triage, patch or mitigation, regression test and rollback each have recorded owners and timestamps.", "Unsupported components block a supportable-suite decision."], "dependencies": ["T28", "T31"], "evidence": "A support SLA and vulnerability maintenance are not evidenced."}, {"id": "T34", "title": "Make 12-month product and market decision", "phase": "P4", "owner": "Product lead", "targetDate": "2027-10-11", "priority": "P0", "status": "planned", "description": "Choose stop, extend bounded pilots, integrate with openDesk, or invest in a supportable suite offer.", "acceptance": ["Decision cites demand, fidelity, agent safety, parity gaps, operating cost and offline gate results.", "Claims and sales materials match only verified scope."], "dependencies": ["T10", "T24", "T26", "T27", "T29", "T32", "T33"], "evidence": "A 12-month roadmap is a sequence of gates, not a commitment to production parity."}], "commercial": {"offer": "Hypothesis: a paid, 6\u20138-week discovery and bounded pilot for one team of up to 20 users, beginning with workflow mapping and the private strategy workspace. Suite access, if offered, follows separate security and product gates. Exclude production SLA, migration guarantees and air-gap claims.", "pricingHypothesis": "Estimate \u20ac5,000\u2013\u20ac15,000 per discovery/pilot engagement, tested against approximately 40\u2013100 delivery hours plus infrastructure and review costs. Future subscription or operator pricing remains undecided until support costs and willingness to pay are measured.", "channels": ["Direct discovery with Austrian and German SMEs and consultancies", "Targeted outreach to small public-sector evaluation teams", "Interoperability discussions, including an openDesk integration option, without implying a partnership"], "pilotCriteria": ["A decision-maker agrees to a documented problem, scope, data boundary and exit interview.", "Named participants and permitted test data are approved before access.", "The team accepts that planned suite and offline features are not available merely because they appear on the roadmap.", "Pilot expansion requires the retrieval, agent safety, migration and operator gates applicable to its scope."], "successMetrics": ["At least five documented discovery interviews by the P2 gate; otherwise record insufficient evidence.", "For each authorized pilot, record baseline and observed time for the selected workflow, completion, failures and approval burden.", "Record willingness to pay, delivery hours and estimated gross margin rather than assuming conversion.", "Zero unauthorized agent writes or sends in the evaluated cases; any occurrence stops expansion."]}, "risks": [{"risk": "A roadmap workspace could be mistaken for a working office suite.", "mitigation": "Label every surface and sales statement by evidence level; gate pilot and production claims separately.", "taskIds": ["T04", "T07", "T29", "T34"]}, {"risk": "Small-team capacity or budget may not support integration and maintenance.", "mitigation": "Confirm staffing early, integrate before building replacements, and stop or narrow scope at explicit gates.", "taskIds": ["T05", "T09", "T24", "T34"]}, {"risk": "AI may disclose denied content or perform an unauthorized external action.", "mitigation": "Bind retrieval and approvals to named users; verify external receipts and test revocation, idempotency and injection failures.", "taskIds": ["T11", "T12", "T13", "T21", "T22"]}, {"risk": "Office-format losses could make migration impractical.", "mitigation": "Measure a representative import-edit-export corpus and block migration claims on critical losses.", "taskIds": ["T18", "T19"]}, {"risk": "An alleged air-gap deployment may depend on external assets, licensing or infrastructure.", "mitigation": "Inventory dependencies and require cold boot, recovery and a measured 72-hour disconnected gate.", "taskIds": ["T15", "T16", "T30", "T31", "T32"]}, {"risk": "Licenses, vulnerabilities and upgrades may make a composed suite unsupportable.", "mitigation": "Review licenses and SBOM, assign maintenance ownership and exercise an upgrade and vulnerability response before release decisions.", "taskIds": ["T09", "T28", "T33"]}], "sources": [{"title": "ZenDiS announcement, 9 October 2026", "url": "https://www.zendis.de/newsroom/presse/pressemeldung-poc-opendesk-ki-airgapped", "fact": "Agentic AI and air-gapped operation are roadmap scenarios with initial SCCON proofs of concept; openDesk launched in October 2024 and combines established European open-source applications. ZenDiS reports 100,000 administrative workstations."}, {"title": "openDesk emergency workspace consultation", "url": "https://www.opendesk.eu/de/blog/konsultationnotfallarbeitsplatz", "fact": "CKKI trials preceded preparation for real deployments and a planned emergency-workspace offering from Q4 2026; consultation closed 24 September 2026."}, {"title": "Sola maintained cell release", "url": "https://git.sola-os.com/sola/sola-master/src/branch/main/library/cells/sola-java-template/README.md", "fact": "The maintained selector resolves Java cell 5.5.0 on Lola with bounded planning, approval, signed history, typed gates, timers and readiness. Its browser evidence view is read-only; synthetic proofs do not establish production human login or institutional conformance."}, {"title": "Sola ERP trial", "url": "https://git.sola-os.com/sola/sola-master/src/branch/main/library/cells/erp-lab/README.md", "fact": "A separate persistent Java ERP trial exists; it does not establish office-suite parity. Its current OpenUI5 CDN-dependent UI is unsuitable for an air-gap claim."}, {"title": "Existing ecosystem components", "url": "https://git.sola-os.com/sola/sola-master", "fact": "The repository contains Matrix/Element and call integrations, mail experiments and publishing pilots. Their presence is reuse potential, not proof of integration into the proposed workspace or suite."}]}