Status. Proposed design only. Nothing in this vault is DG client approval. No application, service or test has been executed; every scenario is Not executed. Fees and dates are open.

Gap and risk register

Seeded from the vault’s own statements. Owner column names a role to confirm, never a person DG has not named.

ID	Gap or risk	Source	Effect	Next step
G-01	All 25 DG decisions Q01 to Q25 are pending	Decision-Index	Dependent behaviour and oracles blocked	Owner obtains DG decisions; see Decision-Gates
G-02	Start conditions unmet (statement of work, kickoff checklist, accounts, staffing)	Implementation-Order-Overview	Application scaffolding stays locked	Owner confirms (G-3 in the bootstrap guide)
G-03	Two dedicated engineers is an assumption, not a fact	Implementation-Order-Overview	Schedule risk	Confirm staffing
G-04	Identity and email vendors, hosting and region unknown	Q09	Real adapters cannot be built	Code to Integration-Ports
G-05	Retention and deletion policy unknown	Q09	No live data allowed	Keep synthetic data only
G-06	Load, recovery and accessibility targets unagreed (A10 unverified)	Acceptance-Gates-A01-A11	T39 and T40 cannot be judged	Agree targets first
G-07	No penetration test, load test or restore drill performed	Status-and-Honesty	Security and recovery claims unproven	Plan in Step 10
G-08	Physical schema not final	Data-Model	Migration churn	Settle during Steps 01 to 04
G-09	A11 coverage unverified; annex awaits DG confirmation	A11-Language-and-Email-Checklist	Language gate open	Step 11 checklist
G-10	Stack profile is an engineering proposal, not a vault requirement	ADR-0001-Stack-Profile	Owner may change it	Owner accepts or revises the ADR
G-11	Independent review of bootstrap PRs pending where marked	operating-contract	Review state unknown	Run reviewer

Change history

Date	Change
2026-10-20	Created (bootstrap Phase 2)