Development Organisation Structure

graph LR subgraph WG1["WG1: Platform Engineering"] direction TB WG1L["Lead: EU (Germany)"] CAP_CS["CloudStack Core"] CAP_TF["OpenTofu Providers"] CAP_K8S["Kubernetes Service"] end subgraph WG2["WG2: Compute & Containers"] direction TB WG2L["Lead: EU (France)"] CAP_VM["VM Compute"] CAP_FAAS["FaaS (OpenFaaS)"] CAP_CONT["Container Runtime"] end subgraph WG3["WG3: Storage & Data"] direction TB WG3L["Lead: UK"] CAP_S3["Object Storage"] CAP_BLOCK["Block Storage"] CAP_FILE["File Storage"] end subgraph WG4["WG4: Networking"] direction TB WG4L["Lead: EU (Netherlands)"] CAP_VPC["VPC/SDN"] CAP_LB["Load Balancers"] CAP_DNS["DNS Service"] end subgraph WG5["WG5: Security & Identity"] direction TB WG5L["Lead: UK"] CAP_IAM["IAM (Keycloak)"] CAP_KMS["KMS (OpenBao)"] CAP_WAF["WAF/DDoS"] end subgraph WG6["WG6: Messaging"] direction TB WG6L["Lead: Canada"] CAP_QUEUE["Message Queues"] CAP_STREAM["Event Streaming"] CAP_PUBSUB["Pub/Sub"] end subgraph WG7["WG7: Observability"] direction TB WG7L["Lead: Australia"] CAP_MON["Monitoring"] CAP_LOG["Logging"] CAP_TRACE["Tracing"] end subgraph WG8["WG8: Databases"] direction TB WG8L["Lead: EU (Germany)"] CAP_RDB["PostgreSQL"] CAP_NOSQL["NoSQL"] CAP_CACHE["Caching"] end style WG1 fill:#e3f2fd style WG2 fill:#e8f5e9 style WG3 fill:#fff3e0 style WG4 fill:#fce4ec style WG5 fill:#f3e5f5 style WG6 fill:#e0f2f1 style WG7 fill:#fff8e1 style WG8 fill:#e8eaf6

graph TB subgraph Platform["PLATFORM LAYER"] CS[("☁️ CloudStack
IaaS Foundation")] end subgraph Compute["COMPUTE DOMAIN"] VM["🖥️ VM Compute
(EC2 equiv)"] K8S["☸️ Kubernetes
(EKS equiv)"] FAAS["⚡ FaaS
(Lambda equiv)"] end subgraph Storage["STORAGE DOMAIN"] OBJ["📦 Object Storage
(S3 equiv)"] BLK["💾 Block Storage
(EBS equiv)"] FILE["📁 File Storage
(EFS equiv)"] end subgraph Database["DATABASE DOMAIN"] PG["🐘 PostgreSQL
(RDS equiv)"] NOSQL["📊 NoSQL
(DynamoDB equiv)"] CACHE["⚡ Cache
(ElastiCache equiv)"] end subgraph Network["NETWORK DOMAIN"] VPC["🔒 VPC/SDN"] LB["⚖️ Load Balancer
(ALB/NLB equiv)"] DNS["🌐 DNS
(Route53 equiv)"] CDN["🚀 CDN
(CloudFront equiv)"] end subgraph Security["SECURITY DOMAIN"] IAM["👤 IAM
(Keycloak)"] KMS["🔐 KMS
(OpenBao)"] WAF["🛡️ WAF/DDoS"] end subgraph Messaging["MESSAGING DOMAIN"] QUEUE["📬 Queues
(SQS equiv)"] STREAM["📡 Streaming
(Kinesis equiv)"] EVENTS["📨 Events
(EventBridge equiv)"] end subgraph Observability["OBSERVABILITY DOMAIN"] MON["📈 Metrics
(CloudWatch equiv)"] LOG["📋 Logging
(CloudWatch Logs)"] TRACE["🔍 Tracing
(X-Ray equiv)"] end CS --> VM & K8S & FAAS CS --> OBJ & BLK & FILE CS --> VPC VPC --> LB & DNS & CDN K8S --> PG & NOSQL & CACHE K8S --> IAM & KMS K8S --> QUEUE & STREAM & EVENTS K8S --> MON & LOG & TRACE IAM --> VM & K8S & OBJ KMS --> OBJ & BLK & PG style CS fill:#1d70b8,color:#fff style VM fill:#e3f2fd style K8S fill:#e3f2fd style FAAS fill:#e3f2fd style OBJ fill:#fff3e0 style BLK fill:#fff3e0 style FILE fill:#fff3e0 style PG fill:#e8f5e9 style NOSQL fill:#e8f5e9 style CACHE fill:#e8f5e9 style VPC fill:#fce4ec style LB fill:#fce4ec style DNS fill:#fce4ec style CDN fill:#fce4ec style IAM fill:#f3e5f5 style KMS fill:#f3e5f5 style WAF fill:#f3e5f5 style QUEUE fill:#e0f2f1 style STREAM fill:#e0f2f1 style EVENTS fill:#e0f2f1 style MON fill:#fff8e1 style LOG fill:#fff8e1 style TRACE fill:#fff8e1

gantt title Capability Development Sequence dateFormat YYYY-MM section Foundation CloudStack Core :done, cs, 2025-01, 3M VPC/Networking :done, vpc, 2025-01, 3M IAM (Keycloak) :active, iam, 2025-02, 4M KMS (OpenBao) :active, kms, 2025-02, 3M section Storage Block Storage :blk, after vpc, 2M Object Storage (MinIO) :obj, after kms, 3M File Storage :file, after blk, 2M section Compute VM Compute :vm, after vpc, 2M Kubernetes Service :k8s, after vm, 4M FaaS (OpenFaaS) :faas, after k8s, 3M section Database PostgreSQL Operator :pg, after k8s, 3M NoSQL (ScyllaDB) :nosql, after k8s, 3M Cache (Valkey) :cache, after k8s, 2M section Networking Load Balancer :lb, after vpc, 2M DNS Service :dns, after vpc, 2M API Gateway :apigw, after lb, 3M section Messaging Message Queue :mq, after k8s, 2M Event Streaming :kafka, after k8s, 3M section Observability Monitoring (Prometheus) :mon, after k8s, 2M Logging (Loki) :log, after obj, 2M Tracing (Jaeger) :trace, after k8s, 2M

flowchart TB subgraph Developer["👨‍💻 DEVELOPER"] DEV[Local Development] COMMIT[Git Commit] end subgraph GitLab["📦 SHARED GITLAB (EU-hosted)"] MR[Merge Request] REVIEW["Code Review
(2 approvers from
different jurisdictions)"] MERGE[Merge to Main] TAG[Release Tag] end subgraph Pipeline["🔄 CI/CD PIPELINE"] subgraph Build["BUILD STAGE"] TF_BUILD[OpenTofu Validate] HELM_BUILD[Helm Lint/Package] CONTAINER[Container Build] end subgraph Test["TEST STAGE"] UNIT[Unit Tests] INTEGRATION[Integration Tests] PERF[Performance Tests] end subgraph Security["SECURITY STAGE"] SAST[SAST Scan] SCA[Dependency Scan] SECRETS[Secrets Scan] TFSEC[OpenTofu Scan] end end subgraph Staging["🧪 STAGING (All 4 Jurisdictions)"] UK_STG["🇬🇧 UK Staging"] EU_STG["🇪🇺 EU Staging"] CA_STG["🇨🇦 CA Staging"] AU_STG["🇦🇺 AU Staging"] end subgraph Approval["✅ APPROVAL GATE"] WG_APPROVE["Working Group
Technical Sign-off"] SEC_APPROVE["Security Council
Security Sign-off"] JURIS_APPROVE["Jurisdiction Leads
(All 4 must approve)"] SC_APPROVE["Steering Committee
Production Go-Live"] end subgraph Production["🚀 PRODUCTION (Independent)"] UK_PROD["🇬🇧 UK Production"] EU_PROD["🇪🇺 EU Production"] CA_PROD["🇨🇦 CA Production"] AU_PROD["🇦🇺 AU Production"] end DEV --> COMMIT --> MR MR --> REVIEW --> MERGE MERGE --> Build --> Test --> Security Security -->|Pass| UK_STG & EU_STG & CA_STG & AU_STG Security -->|Fail| MR UK_STG & EU_STG & CA_STG & AU_STG --> WG_APPROVE WG_APPROVE --> SEC_APPROVE --> JURIS_APPROVE --> SC_APPROVE MERGE --> TAG TAG --> SC_APPROVE SC_APPROVE --> UK_PROD & EU_PROD & CA_PROD & AU_PROD style DEV fill:#e3f2fd style MR fill:#fff3e0 style REVIEW fill:#fff3e0 style Security fill:#ffebee style SAST fill:#ffcdd2 style SCA fill:#ffcdd2 style SECRETS fill:#ffcdd2 style TFSEC fill:#ffcdd2 style SC_APPROVE fill:#00703c,color:#fff style UK_PROD fill:#012169,color:#fff style EU_PROD fill:#003399,color:#fff style CA_PROD fill:#ff0000,color:#fff style AU_PROD fill:#00008B,color:#fff

flowchart LR subgraph Gates["🛡️ MANDATORY SECURITY GATES"] G1["SAST
(Semgrep)
Block: HIGH/CRITICAL"] G2["Dependency Scan
(Trivy)
Block: CRITICAL CVE"] G3["Secrets Scan
(Gitleaks)
Block: Any Secret"] G4["OpenTofu Scan
(tfsec)
Block: HIGH/CRITICAL"] G5["Container Scan
(Trivy)
Block: CRITICAL CVE"] G6["DAST
(OWASP ZAP)
Block: HIGH Risk"] end CODE[Code] --> G1 --> G2 --> G3 --> G4 --> G5 --> STAGING STAGING[Staging] --> G6 --> PROD[Production] G1 -->|FAIL| BLOCK1[❌ Pipeline Blocked] G2 -->|FAIL| BLOCK2[❌ Pipeline Blocked] G3 -->|FAIL| BLOCK3[❌ Pipeline Blocked + Alert] G4 -->|FAIL| BLOCK4[❌ Pipeline Blocked] G5 -->|FAIL| BLOCK5[❌ Pipeline Blocked] G6 -->|FAIL| BLOCK6[❌ Production Blocked] style G1 fill:#ffcdd2 style G2 fill:#ffcdd2 style G3 fill:#ffcdd2 style G4 fill:#ffcdd2 style G5 fill:#ffcdd2 style G6 fill:#ffcdd2 style BLOCK1 fill:#d4351c,color:#fff style BLOCK2 fill:#d4351c,color:#fff style BLOCK3 fill:#d4351c,color:#fff style BLOCK4 fill:#d4351c,color:#fff style BLOCK5 fill:#d4351c,color:#fff style BLOCK6 fill:#d4351c,color:#fff style PROD fill:#00703c,color:#fff

graph TB subgraph UK["🇬🇧 UNITED KINGDOM"] UK_GOV["UK Government
Digital Service"] UK_LEAD["UK Technical Lead"] UK_SEC["UK Security Lead
(NCSC aligned)"] UK_SUP["~15 UK Suppliers
(~75 people)"] UK_GOV --> UK_LEAD UK_LEAD --> UK_SEC UK_LEAD --> UK_SUP UK_CAP["UK-Led Capabilities:
• Object Storage (MinIO)
• IAM (Keycloak)
• KMS (OpenBao)
• Security Hardening"] end subgraph EU["🇪🇺 EUROPEAN UNION"] EU_GOV["EU Digital
Commission"] EU_LEAD["EU Technical Lead
(DE/FR rotation)"] EU_SEC["EU Security Lead
(ENISA aligned)"] EU_SUP["~96 EU Suppliers
(~480 people)"] EU_GOV --> EU_LEAD EU_LEAD --> EU_SEC EU_LEAD --> EU_SUP EU_CAP["EU-Led Capabilities:
• CloudStack Core
• Kubernetes Service
• PostgreSQL Operator
• VPC/Networking
• FaaS Platform"] end subgraph CA["🇨🇦 CANADA"] CA_GOV["Treasury Board
Secretariat"] CA_LEAD["CA Technical Lead"] CA_SEC["CA Security Lead
(CSE aligned)"] CA_SUP["~9 CA Suppliers
(~45 people)"] CA_GOV --> CA_LEAD CA_LEAD --> CA_SEC CA_LEAD --> CA_SUP CA_CAP["CA-Led Capabilities:
• Message Queues
• Event Streaming
• Bilingual Support
• Edge Computing"] end subgraph AU["🇦🇺 AUSTRALIA"] AU_GOV["Digital
Transformation Agency"] AU_LEAD["AU Technical Lead"] AU_SEC["AU Security Lead
(ASD aligned)"] AU_SUP["~6 AU Suppliers
(~30 people)"] AU_GOV --> AU_LEAD AU_LEAD --> AU_SEC AU_LEAD --> AU_SUP AU_CAP["AU-Led Capabilities:
• Monitoring Stack
• Logging Platform
• DR Patterns
• PSPF Compliance"] end UK_LEAD <-.->|"Bi-weekly sync"| EU_LEAD EU_LEAD <-.->|"Bi-weekly sync"| CA_LEAD CA_LEAD <-.->|"Bi-weekly sync"| AU_LEAD AU_LEAD <-.->|"Bi-weekly sync"| UK_LEAD style UK fill:#f0f4ff style EU fill:#f0f4ff style CA fill:#fff0f0 style AU fill:#f0f4ff style UK_GOV fill:#012169,color:#fff style EU_GOV fill:#003399,color:#fff style CA_GOV fill:#ff0000,color:#fff style AU_GOV fill:#00008B,color:#fff

pie showData title Supplier Distribution by Jurisdiction "EU (96 suppliers)" : 96 "UK (15 suppliers)" : 15 "Canada (9 suppliers)" : 9 "Australia (6 suppliers)" : 6

pie showData title Capability Ownership Distribution "EU-Led (18 capabilities)" : 18 "UK-Led (9 capabilities)" : 9 "Canada-Led (5 capabilities)" : 5 "Australia-Led (4 capabilities)" : 4