Skip to content

The pipeline

Five phases. Five human gates. Nothing ships unsigned.

The pipeline is deterministic and rule-based. LLM calls stay inside the authoring agents, and a named reviewer approves each gate before the next phase starts.

  1. /01 · G1

    Intent expansion

    A short intake resolves into a structured intent map that stakeholders approve.

  2. /02 · G2

    Ingestion

    Docs, PDFs, screenshots and notes become a constraint log your team ratifies.

  3. /03 · G3

    Generation swarm

    Agents, shaped by your framework recipe, author all artifacts in parallel.

  4. /04 · G4

    Quality audit

    RQS scores every requirement. You review the audit diff before export.

  5. /05 · G5

    Finalize and export

    A signed, hash-chained, submission-ready bundle.

Request a trial →

The bundle

Eight artifact types. One signed package.

  • BRD / PRD / SRDBusiness, product and software requirements. The SRD is EARS-scored.
  • Threat modelSTRIDE security architecture and threat analysis.
  • EvidenceFramework-specific evidence, generated with the requirements instead of hunted down at week 12.
  • TraceabilityA matrix linking stakeholder need to requirement to constraint.
  • Risk registerRisks and mitigations, merged across every framework you select.
  • ArchitectureSystem diagrams, emitted from the same run.
  • Audit trailA hash-chained log of who approved what, when and why.

Detected from your intake

Day 3 of 5

Frameworks →

HIPAA + ISO 42001

One integrated build. You can change it at G1.

Artifacts →

BRD / PRD / SRD Threat model Evidence Traceability Risk register Architecture Audit trail

Gates →

  • G1Intent mapApproved
  • G2Constraint logApproved
  • G3Swarm sanityGenerating
  • G4Audit diffQueued
  • G5Final exportQueued
Illustrative project · reference timeline

Show the work

SRD · REQ-042

RQS 0.93

When a clinician exports a patient record, the system shall encrypt the export file before it leaves the application boundary.

Pattern
EARS · event-driven
Traces to
STK-07 → RSK-12 → EVD-HIPAA
Sources
Intake Q4data-flows.pdf · p.3

A sample requirement, shown for illustration. Every line in a Carbon bundle carries its source like this, so reviewers can check a claim instead of having to trust it.