Control · target 2026-11-14

Production Cutover Readiness

Gate-based readiness for the Production switch to the new OBL Directory.

Status
NOT READY

8 of 12 gates passing · 3 blockers · checklist 4/10

The platform provides assurance evidence. The Bank retains responsibility for the production Go/No-Go decision.

Readiness68%
Critical findings5
Evidence coverage81%
Blockers3
Cutover blockers
  • CriticalFND-1042Legacy Directory endpoint detectedTPP Registration ServiceOpen
  • CriticalFND-1043OAuth audience references legacy token endpointJans IAMAssigned
  • CriticalFND-1044Signing key selected by position, not kidJans IAMOpen

Cutover gates

  • PASSSandbox validated; Production change scheduled
  • PASSToken endpoint and scopes verified in Sandbox
  • PASSOrganisation lookup and certificate validation proven
  • PASSChain validated on API Gateway and F5
  • PASSEntrust and Keyfactor certificates accepted at the edge
  • PASSOCSP and CRL reachable; new Directory host allow-listed in Sandbox
  • WARNINGPISP journey not yet run; AISP journey warning
  • FAIL5 critical findings open, 3 are cutover blockers
  • WARNING81% coverage; target 95%
  • PASSRollback plan approved; rehearsal complete
  • PASSDashboards and alerts updated
  • FAIL3 migration-critical TPP continuity failures remain unresolved.

Existing TPP Continuity sub-gates

Mandatory gate — click a TPP continuity failure to open the affected population

At-risk TPPs
  • PASSExisting registrations preserved
  • FAILDirectory identity resolution
  • PASSEntrust certificate continuity
  • FAILKeyfactor certificate readiness
  • WARNINGDual trust
  • PASSSSA validation
  • WARNINGRole / permission validation
  • WARNINGRepresentative end-to-end testing
  • FAILCritical TPP exceptions
  • WARNINGEvidence completeness

Cutover checklist

4 of 10 complete

Go / No-Go decision

Only Migration Programme Manager, Risk / Compliance and Administrator can record the decision

GO is disabled until all gates pass.