# SPC-05 Deployment gate

Domain: SPC Agent Specification & Pre-Deployment Assurance · HI-AAF v1.3 · Public review · https://humanintel.net/standard/spc/spc-05

A deployment gate prevents production release without documented sign-off from the technical owner, security, and compliance (where applicable).

No agent reaches production without passing through a documented gate that requires sign-off from the technical owner, security review, and compliance review where applicable. The gate is enforced by process or tooling, not by convention alone. Bypasses are logged and treated as incidents.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for SPC-05: Deployment gate is enforced for all production deployments; sign-off records exist for the most recent deployment of each agent; no bypasses have occurred without documented incident follow-up.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Deployment gate is enforced for all production deployments.
- Sign-off records exist for the most recent deployment of each agent.
- No bypasses have occurred without documented incident follow-up.

## Framework mappings

- NIST AI RMF: MEASURE 2.5, MEASURE 2.6
- ISO/IEC 42001: A.6.2.5
- OWASP LLM Top 10: LLM01, LLM02
- SOC 2 (TSC): CC7.1
- EU AI Act: Art. 9(1), Art. 15(1)
- Singapore: MAIGF Testing & Assurance

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Cite this control

Human Intelligence. HI-AAF v1.3, SPC-05 Deployment gate. Public review edition, July 2026. https://humanintel.net/standard/spc/spc-05