# AGM Phase 1 Validation Checklist Date: 2026-04-18 Phase Window: Days 1-14 (Stabilize and Baseline) Owner Group: Platform, DevOps, Service Delivery, Sales Ops, Marketing Ops ## Instructions - Mark each item PASS or FAIL. - For each FAIL, add blocker, owner, and ETA. - Preserve evidence links (API response snippets, screenshots, logs, CSV rows, or commit references). ## A. Command Center Control Validation - [x] PASS/FAIL: Open Strategic Plan Hub button opens planning view. - [x] PASS/FAIL: Open Service Delivery Control button opens delivery view. - [x] PASS/FAIL: Run API/SOAP/REST Audit executes and updates service audit table. - [x] PASS/FAIL: Re-Run API/SOAP/REST Audit behaves identically in planning section. - [x] PASS/FAIL: Role badge selection updates tab and studio domain context. - [x] PASS/FAIL: Role Workflow Router role/topic buttons route correctly. - Section A click-test evidence: AGM_UI_VALIDATION_LOG_SECTION_A_2026-04-18_2127.md - Section A explicit control references: - strategic_command_center.html:543 - strategic_command_center.html:544 - strategic_command_center.html:545 - strategic_command_center.html:635 - strategic_command_center.html:552 - strategic_command_center.html:555 - js/strategic-command-center.js:647 - js/strategic-command-center.js:689 - js/strategic-command-center.js:696 - js/strategic-command-center.js:700 - js/strategic-command-center.js:704 - js/strategic-command-center.js:1265 ## B. API Health and Contract Validation - [x] PASS/FAIL: api/kpi-dashboard.php returns success payload. - [x] PASS/FAIL: api/lead-intelligence.php mode=public returns summary and leads. - [x] PASS/FAIL: api/msp-sla-alerts.php mode=public returns alerts payload. - [x] PASS/FAIL: api/project-pipeline.php returns project records. - [x] PASS/FAIL: api/sdlc-governance.php returns governance payload. - [x] PASS/FAIL: api/soap-gateway.php?wsdl returns WSDL payload. - [x] PASS/FAIL: api/webhook-automation.php rejects invalid token with 403. - API baseline evidence: AGM_API_CONTRACT_BASELINE_REPORT_2026-04-19_0829.md (PASS, 13/13) - API baseline evidence (revalidation): AGM_API_CONTRACT_BASELINE_REPORT_2026-04-19_0910.md (PASS) - Direct health-check confirmation (2026-04-19): webhook-automation GET(no token)=403, webhook-automation POST(invalid token)=403, rbac-profile GET=401, kpi-dashboard GET=200. ## C. Workflow Persistence Validation - [x] PASS/FAIL: Studio record writes to data/offpage/strategic_plan_studio_log.csv. - [x] PASS/FAIL: Studio API GET returns latest recorded row. - [x] PASS/FAIL: Lead update endpoint persists owner/status/SLA changes. - [x] PASS/FAIL: SLA acknowledgement endpoint logs acknowledgement with note. - [x] PASS/FAIL: Project status update persists and appears in audit history. - [x] PASS/FAIL: Milestone update persists and appears in milestone table. - [x] PASS/FAIL: CPQ quote create/transition API baseline initialized with immutable audit log. - WP-006 baseline evidence: AGM_WP006_CPQ_LIFECYCLE_BASELINE_2026-04-18.md - Workflow/data validation evidence: AGM_PHASE1_WORKFLOW_DATA_VALIDATION_REPORT_2026-04-19_0835.md (PASS, 9/9) ## D. Security and Access Baseline - [x] PASS/FAIL: Secure mode endpoints enforce auth and permissions. - [x] PASS/FAIL: Public endpoints expose only intended fields. - [x] PASS/FAIL: Hardcoded secret inventory created and prioritized. - [x] PASS/FAIL: Environment variable migration backlog created. - Evidence: AGM_PHASE1_SECRET_INVENTORY_MATRIX_2026-04-18.md, AGM_PHASE1_SECRETS_MIGRATION_BACKLOG_2026-04-18.md - Execution update (2026-04-18): Implemented token hardening, DB credential de-hardcoding, and CRM env-only key configuration across Phase 1 scope. - Operations runbook: AGM_PHASE1_ENV_BOOTSTRAP_RUNBOOK_2026-04-18.md - Smoke test script: scripts/smoke-test-phase1-security.ps1 - Smoke test evidence (2026-04-18): - Unconfigured-token baseline returned HTTP 500 (expected fail-fast misconfiguration behavior). - Configured-token run returned: - HTTP 403 for missing token requests. - HTTP 200 for valid header-token requests. - Governance audit evidence: AGM_30_60_90_GOVERNANCE_AUDIT_REPORT_2026-04-19_0829.md (PASS) - Public endpoint field-exposure evidence: AGM_PUBLIC_ENDPOINT_FIELD_EXPOSURE_AUDIT_2026-04-19_0829.md (PASS, 6/6) - UI control hardening evidence (2026-04-18): strategic_command_center.html and js/strategic-command-center.js updated with click fallbacks and resilient endpoint resolution. - Code evidence: - agmnetwork/api/webhook-automation.php - agmnetwork/api/lead-intelligence-export.php - agmnetwork/api/dispatch-sla-escalations.php - agmnetwork/api/acknowledge-sla-escalation.php - agmnetwork/js/strategic-command-center.js - crm/app_validated.py - crm/app_production.py - crm/app_google_ready.py - crm/app_google_search.py - crm/app_improved.py ## E. Data Consistency Checks - [x] PASS/FAIL: Lead summary totals match row-level data. - [x] PASS/FAIL: SLA breached counts match computed due-date logic. - [x] PASS/FAIL: Command-center KPI tiles match API payload values. - [x] PASS/FAIL: Outreach source switching updates metadata and row counts. - WP-005 reconciliation evidence: AGM_WP005_INGESTION_RECONCILIATION_REPORT_LATEST.md - Revalidation evidence (2026-04-19): lead-intelligence public payload summary.total=100 matches returned leads row count=100. ## F. Sign-Off - Execution Lead: Architecture Office (Initiation) - Date: 2026-04-19 - Phase 1 status: READY FOR SIGN-OFF - Blockers: None - Immediate next actions: Continue weekly governance publication cadence and proceed to Day 30/60/90 controlled execution handoff. - Closeout evidence (2026-04-19): AGM_PHASE1_CHECKLIST_CLOSEOUT_2026-04-19_0910.md (PASS) - Workflow revalidation evidence (2026-04-19): AGM_PHASE1_WORKFLOW_DATA_VALIDATION_REPORT_2026-04-19_0910.md (PASS) - Cadence scheduling evidence (2026-04-18): - AGM-WP005-Daily-Ingestion registered (08:15 daily, Ready). - AGM-WP005-WP006-Weekly-Governance registered (08:30 Friday, Ready). - Next-task execution evidence (2026-04-18): - AGM_NEXT_TASKS_EXECUTION_LOG_2026-04-18_2159.md - AGM_30_60_90_GOVERNANCE_AUDIT_REPORT_2026-04-19_0721.md (PASS) - Day-30 execution package evidence (2026-04-19): - AGM_DAY30_EXECUTION_PACKAGE_REPORT_2026-04-19_0731.md (PASS, Score 10/10, Grade A+) - Day-60 execution package evidence (2026-04-19): - AGM_DAY60_EXECUTION_PACKAGE_REPORT_LATEST.md (PASS, Score 10/10, Grade A+) - Day-90 execution package evidence (2026-04-19): - AGM_DAY90_EXECUTION_PACKAGE_REPORT_LATEST.md (PASS, Score 10/10, Grade A+) - Governance publication evidence (2026-04-19): - AGM_WEEKLY_GOVERNANCE_DIGEST_LATEST.md (PASS) - AGM_EXECUTIVE_SCORECARD_LATEST.md (PASS, Composite 10/10, Grade A+) - AGM_30_60_90_GOVERNANCE_AUDIT_REPORT_2026-04-19_0743.md (PASS)