[M0-S TRACKER] Safe Shared Research Platform

[andreazedda]

Milestone objective

Establish the security, authorization, collaboration, deployment, and operational baseline required for multi-user or externally accessible research workflows.

Work items

• [M0-S][SECURITY] Replace insecure SECRET_KEY handling #7 Replace insecure SECRET_KEY handling
• [M0-S][SECURITY] Enforce object-level patient authorization, RBAC, and auditable access #8 Enforce object-level patient authorization, RBAC, and auditable access
• [M0-S][SECURITY] Enforce production HTTPS, security headers, CSP, and iframe policy #9 Enforce production HTTPS, security headers, CSP, and iframe policy
• [M0-S][SECURITY][PERFORMANCE] Add endpoint-specific throttling, quotas, and cost controls #10 Add endpoint-specific throttling, quotas, and cost controls
• [M0-S][ARCHITECTURE] Decompose fat views and models into policy, selector, service, and domain layers #16 Decompose fat views and models into policy, selector, service, and domain layers
• [M0-S][DEPLOYMENT] Build a production-grade settings, database, container, and runtime architecture #17 Build a production-grade settings, database, container, and runtime architecture
• [M0-S][API] Introduce a versioned API contract, OpenAPI schema, and artifact-level authorization #20 Introduce a versioned API contract, OpenAPI schema, and artifact-level authorization
• [M0-S][OBSERVABILITY] Add privacy-safe structured logging, audit events, metrics, and health checks #21 Add privacy-safe structured logging, audit events, metrics, and health checks
• [M0-S][GOVERNANCE] Define maintainers, ownership, contribution, licensing, and decision records #24 Define maintainers, ownership, contribution, licensing, and decision records

Exit definition

OBJECT_LEVEL_AUTHORIZATION = pass
RBAC_AND_ACCESS_AUDIT = active
PRODUCTION_SECURITY_PROFILE = pass
COMPUTATIONAL_COST_CONTROLS = active
CENTRAL_POLICY_AND_SELECTOR_LAYER = active
POSTGRES_AND_NON_ROOT_RUNTIME = verified
API_V1_AND_ARTIFACT_AUTHORIZATION = active
PRIVACY_SAFE_OBSERVABILITY = active
CONTRIBUTION_AND_LICENSE_GOVERNANCE = documented

Evidence required

• role and route permission matrix;
• negative IDOR and artifact-access tests;
• HTTPS/CSP/security-header report;
• rate, concurrency, timeout, and cancellation tests;
• production container and PostgreSQL smoke evidence;
• OpenAPI contract;
• logging-redaction and readiness tests;
• backup/restore and rollback evidence;
• governance, CODEOWNERS, DCO/CLA, licensing, and security-contact decisions.

Non-goals

M0-S does not establish scientific validity. It makes shared research operation secure and governable.