# Crescendent — Agent release review pack
Agentic SDLC, governed from intent to operation.

## 1. Release identity
- Agent / workflow:
- Release identifier:
- Scope of change:
- Model configuration:
- Harness version:
- Tool inventory version:
- Skill versions:
- Knowledge configuration:
- Memory policy:
- Decision owner:
- Operational owner:
- Review date:

## 2. Access inventory
| Tool or action | Data accessed | Permission | Approval requirement | Access owner | Verification evidence |
|---|---|---|---|---|---|
| | | | | | |

Distinguish reads, proposed changes, and committed actions. Verify that approval occurs before the consequential action.

## 3. Knowledge and memory
- Source ownership and provenance:
- Retrieval and access boundaries:
- Permitted persisted information:
- Retention, deletion, and review rules:
- Evidence that these controls work:

## 4. Threat register
| Scenario | Affected asset | Control | Verification evidence | Remaining concern | Owner |
|---|---|---|---|---|---|
| | | | | | |

Include untrusted inputs, inappropriate tool use, data exposure, context contamination, permission changes, and recovery behavior.

## 5. Evaluation matrix
Use evaluation-matrix.csv. Link each criterion to its test case, observed result, evidence, and decision.
- Expected task behavior:
- Boundary cases:
- Failure and recovery cases:
- Sensitive data handling:
- Tool access and approval behavior:
- Regression cases from operations:

## 6. Durability and recovery
- Checkpoint rules:
- Retry limits:
- Idempotency expectations:
- Resumption behavior:
- Repeated-action detection:
- Stop and escalation conditions:
- Recovery verification evidence:

## 7. Operational readiness
- Trace, log, and metric definitions:
- Operating limits and escalation route:
- Security response procedure:
- Maintenance SOPs:
- Cost observations and assumptions:
- Rollback or deactivation plan:

## 8. Exceptions and decision
| Criterion or concern | Evidence / exception | Conditions | Owner | Review date |
|---|---|---|---|---|
| | | | | |

- Decision:
- Decision maker:
- Date:
- Conditions to satisfy:
- Next review:
- Linked records:

Each release criterion needs evidence or an explicitly accepted exception. Adapt this pack to the intended use and organizational quality process; completing it does not itself establish compliance.