Skip to main content

Build Orchestration Guide

Build Orchestration Phases​

Phase 1: Foundation Documents​

  • 1.1 Product Definition → Strategic positioning and scope
  • 1.2 Product Requirements (PRD) → Functional/non-functional requirements
  • 1.3 Software Design (SDD) → System architecture and components
  • 1.4 Technical Design (TDD) → Implementation specifications

Phase 2: Architecture Decisions (5 ADRs)​

  • ADR-001 Control Graph Database - Compliance knowledge representation
  • ADR-002 Multi-Agent Orchestration - Agentic automation architecture
  • ADR-003 Evidence Collection Pipeline - Continuous monitoring system
  • ADR-004 Integration Framework - 300+ integration connectors
  • ADR-005 Multi-Tenancy & Isolation - Enterprise security model

Phase 3: Full Stack Component Build​

  • Domain Models, Control Graph Service, Evidence Engine
  • Agent Framework, Integration Connectors, API Layer
  • UI Components, Trust Center, Test Suite
  • Deployment Infrastructure, Documentation

Execution Workflow​

Sequential Execution​

# Phase 1: Foundation Documents (execute prompts 01-04 in sequence)
# Phase 2: Architecture Decisions (execute prompts 05-09 in sequence)
# Phase 3: Component Build (execute prompts 10-20 in sequence)

# Track progress
cat docs/project-management/tasklist.md

Build Prompts​

  • 00-master-orchestration-prompt.md - Complete build sequence and dependencies
  • 01-product-definition-prompt.md - Phase 1.1
  • 02-product-requirements-prompt.md - Phase 1.2
  • 03-software-design-document-prompt.md - Phase 1.3
  • 04-technical-design-document-prompt.md - Phase 1.4
  • 05-adr-control-graph-prompt.md - Phase 2.1
  • 06-adr-agent-orchestration-prompt.md - Phase 2.2
  • 07-adr-evidence-collection-prompt.md - Phase 2.3
  • 08-adr-integration-framework-prompt.md - Phase 2.4
  • 09-adr-multi-tenancy-prompt.md - Phase 2.5
  • 10-20-BUILD-*.md - Phase 3 component builds

Compliance Coverage​

Frameworks Supported​

  • SOC 2 Type I/II
  • ISO 27001, ISO 42001 (AI Governance)
  • HIPAA, FDA (Healthcare AI)
  • PCI DSS (Fintech)
  • GDPR, CCPA (Privacy)
  • EU AI Act (AI Regulation)

Automation Capabilities​

  • 1,200+ automated compliance tests (hourly monitoring)
  • 300-375+ integration connectors
  • 80-90% work automation for common frameworks
  • Cross-framework control mapping (30-35+ standards)

Development Best Practices​

  1. Follow build sequence in 00-master-orchestration-prompt.md
  2. Execute prompts in order - Each builds on previous artifacts
  3. Track progress in docs/project-management/tasklist.md
  4. Use CODITECT agents for specialized compliance tasks
  5. Commit checkpoints after each phase completion

Strategic Differentiators​

CODITECT-COMPLIANCE distinguishes through:

  1. Agentic Compliance Automation - AI agents autonomously monitor, assess, and remediate compliance gaps
  2. Control Graph Architecture - Graph-based compliance knowledge representation enabling cross-framework mapping
  3. Regulated Industry Focus - Deep vertical specialization for healthcare AI and fintech
  4. Autonomous Evidence Collection - Integration-driven continuous compliance monitoring
  5. CODITECT Integration - Native integration with autonomous code generation ensuring compliant-by-default software delivery
  6. Cross-Framework Mapping - Single control implementation satisfies 30-35+ frameworks simultaneously

Last Updated: December 9, 2025