Readiness

:::info Source Sourced from services/content-service/SERVICE_READINESS.md in the documentation repo. :::

1. Level per Milestone

M	Level	Scope
M0	—	Package build pipeline skeleton
M1	L3	PlayPackage + bundle + offline + license envelope
M2	L3	SCORM 1.2 export
M3	L4	SCORM 2004 + xAPI + cmi5 export; full conformance
M4	L4	—
M5	L4	Multi-region bundle serving

2. Gates

G1 — Domain

• PlayPackage, Bundle, LicenseEnvelope aggregates; invariants.
• State machine: building → built → revoked (no return).
• 95% unit coverage; 80% mutation.

G2 — API

• OpenAPI; idempotency; problem+json; cursor.
• Pact with authoring, catalog, enrollment, delivery, sync.

G3 — Events

• Subjects registered; outbox+inbox.
• Bundle tamper + revocation events.

G4 — Sync

• Bundle registered as replicable; server_authoritative.
• Delta projector: per-(tenant, user, device) bundle list.

G5 — AI

• Uses AIClient for assistant config generation.
• Provenance tracked.

G6 — Observability

• Build + bundle + import + export dashboards.
• Tamper + revocation alerts.

G7 — Performance

• Build p95 < 120s.
• Bundle create p95 < 30s.
• Signed URL serve p95 < 10ms (CDN).
• 1000 concurrent downloads sustained.

G8 — Security

• Per-device bundle key derivation tested.
• JWS sign/verify round-trip.
• SCORM sandbox tested (RCE, path traversal).
• Two-tenant isolation green.
• License envelope tamper test.

3. SLOs

SLI	Target
Package build success rate	≥ 99%
Bundle create success rate	≥ 99.5%
Signing KMS latency p95	< 200ms
Bundle download availability	99.99%
Tamper → revocation propagation	< 60s online
Revocation → device unmount	< 60s online

4. DoD per Story

• Unit + integration + contract + conformance tests green.
• OpenAPI + event schemas registered.
• Migrations fwd+back.
• Security review if touching crypto / license / signing.
• Two-tenant isolation test.
• Runbook updated.

5. Release Checklists

S1 (M1)

• Bundle encryption + signing fully tested.
• License envelope enforcement verified offline.
• Airplane-mode E2E green.
• Tamper detection E2E.
• Revocation ≤ 60s propagation.
• 7-day offline statements outbox design locked.

S4 (M3)

• SCORM 2004 conformance green (ADL test suite).
• xAPI 1.0.3 export passes ADL conformance.
• cmi5 session/registration semantics validated.
• Pen-test closed for content surfaces.

S6 (M5)

• Per-region bundle serving; < 1s p95 anywhere.
• Data residency migration participation tested.
• White-label bundle branding support.