Promotion board · from forged to production
1 of 4 agents is in production. 1 is waiting in Security & Compliance.
illustrative sample organization · its promotion records
The four stages — BDE is Business Dev Environment; ODAT is Org dev acceptance testing; S&C is Security & Compliance; Prod is Production.
The check — The automated assay runs on the way into the security review; production needs a passing assay and a fresh human approval.
What it is not — These stages are governance records. They do not move an agent between your Power Platform environments — Aristo holds no write scopes for that.
Agent promotion pipeline
Illustrative organization · read-onlyAt a glance: 1 in Prod, 1 in S&C, 1 in ODAT, 1 in BDE, none blocked.
How this illustrative scenario works
These four governance records are illustrative and exist only to demonstrate the workflow. No package, approval, assay or deployment is created from this page.
This tracks your promotion stages as governance metadata — it does not move the agent between your Power Platform environments. Aristo holds no write scopes to deploy into your tenant. Reaching “Prod” mints the sealed, owned package + a governance record; a real cross-environment / org-catalog publish is a consent-gated Microsoft-preview handoff your admin completes. The automated pre-approval assay runs on entry to S&C; Prod needs a passing assay AND a fresh human approval.
BDE 1
Business Dev Environment
what BDE means
Business Dev Environment. Where a group of business people shape the agent together, before anyone spends a credit on it.Nothing is gated here — anyone working on it can move it forward.
Onboarding buddy
not yet approved for Prod
audit
—
ODAT 1
Org dev acceptance testing
what ODAT means
Org dev acceptance testing. The people who did not build it try it, and the business decides whether it does the job.Moving it on runs the automated assay over the built package.
Bid librarian
not yet approved for Prod
audit
8 September 2026 at 12:00 UTC · Draft → In review · a member of your organization
13 September 2026 at 12:00 UTC · In review → ODAT · a member of your organization
S&C 1
Security & Compliance
what S&C means
Security & Compliance. The automated assay runs the moment it arrives, so a person only rules on what the machine could not clear.It leaves here only with a passing assay AND a fresh, unexpired human approval.
Renewal brief
not yet approved for Prod
audit
21 September 2026 at 12:00 UTC · Draft → In review · a member of your organization · v0.3.0 · automated check passed 8/10 · awaiting an independent approver (illustrative)
Prod 1
Production
what Prod means
Production. A sealed package your organization owns, plus a governance record of how it got here.This tracks your stages; it does not deploy the agent into your environments — Aristo holds no write scopes for that.
Month-end checklist
approved for production
audit
24 August 2026 at 12:00 UTC · Draft → In review · a member of your organization · v1.0.0 · automated check passed 9/10 (illustrative)
26 August 2026 at 12:00 UTC · In review → Approved · a member of your organization · v1.0.0 · approved by an independent approver role, not the maker · expiry 90 days · no rollback yet (illustrative)