{
  "goal": "FedRAMP 20x Class C (Moderate) certification of Pitbull Audit through the Program path, with the application to FedRAMP in the first quarter of 2027.",
  "reviewed": "2026-11-12",
  "nextReview": "2027-02-12",
  "milestones": [
    {
      "date": "2026-10-28",
      "milestone": "FedRAMP 20x Class C plan adopted; dedicated production AWS account chosen over shared hosting",
      "status": "done"
    },
    {
      "date": "2026-11-03",
      "milestone": "Production built entirely from templates, with operators signing in through security keys or passkeys only",
      "status": "done"
    },
    {
      "date": "2026-11-03",
      "milestone": "Daily automated record of all 46 Key Security Indicators begins, kept three years and locked against change",
      "status": "done"
    },
    {
      "date": "2026-11-04",
      "milestone": "Vulnerability disclosure program and security contact published",
      "status": "done"
    },
    {
      "date": "2026-11-06",
      "milestone": "Security policies and procedures approved by the accountable official",
      "status": "done"
    },
    {
      "date": "2026-11-12",
      "milestone": "Honest self-assessment against every FedRAMP rule and indicator; first monthly vulnerability report produced",
      "status": "done"
    },
    {
      "date": "2026-11-30",
      "milestone": "Independent assessor chosen and booked",
      "status": "in progress"
    },
    {
      "date": "2026-12-07",
      "milestone": "Monthly vulnerability reporting in force (FedRAMP's date for these rules)",
      "status": "on track"
    },
    {
      "date": "2026-12-15",
      "milestone": "Trust center complete: availability page, and agency access to the certification package",
      "status": "in progress"
    },
    {
      "date": "2026-12-31",
      "milestone": "Certification package drafted in human-readable and JSON forms; FedRAMP Marketplace listing requested",
      "status": "on track"
    },
    {
      "date": "2027-02-28",
      "milestone": "Independent assessment complete, findings fixed",
      "status": "planned"
    },
    {
      "date": "2027-03-31",
      "milestone": "Application submitted to FedRAMP",
      "status": "planned"
    }
  ]
}