From 486c092c32372f4e7242b9820a401a5e25796d1f Mon Sep 17 00:00:00 2001
From: "Claude Sonnet 4.6" <noreply@anthropic.com>
Date: Fri, 5 Jun 2026 10:12:03 +0000
Subject: [PATCH] feat: Add three concrete deployment options to findings
 backlog

Replace vague 'live where client works' with three ordered options:

Option 1 (default): ADO Work Items
  ASTRAL is already in ADO; Work Items are built in, zero additional
  tooling. Board setup guidance included. M365 Planner/To Do sync
  via ADO connector or Power Automate: non-technical owners see
  assigned findings in their daily task list without opening ADO.
  ASTRAL integration: link Work Items to drift PRs directly.

Option 2 (upgrade): CISO Assistant
  For clients building toward formal GRC. Bridges backlog to risk
  register: findings promoted from operational backlog to documented
  risks with treatment plans and compliance evidence links. Docker
  Compose, self-hosted, 30 minutes to deploy.

Option 3 (fallback): Git flat file
  For clients with technical capability and preference for minimal
  tooling. Template retained. Limitation noted: no notifications,
  no Planner sync - if the IT lead needs nudging, use ADO instead.

Co-Authored-By: Tom Kracmar <tom+claude@cat6.cz>