Backlog técnico por épicas¶
Épica E0 — Discovery y diseño¶
- [x] Arquitectura + Mermaid
- [x] Prerrequisitos Azure
- [x] Inventario recursos + naming
- [x] Modelo de datos
- [x] Estructura repo
- [x] Confirmar Subscription/Tenant/Región con el equipo
- [x] Validar cuotas OpenAI + Foundry GA/preview en región (gpt-5-mini en eastus2)
Épica E1 — Plataforma base (local-first) — CLOSED I1¶
- [x] Contratos OpenAPI compartidos
- [x] Finance API skeleton + health
- [x] HR API skeleton + health
- [x] Rule Engine (FIN-001…005) + tests
- [x] Audit writers (InvoiceExecution timeline)
- [x] Docker Compose: SQL (+ Azurite opcional)
Épica E2 — Finance vertical (demo A)¶
- [x] Upload PDF → Blob (o filesystem local) — US 48 Closed
- [x] Invoice processor (mock DI → real DI) — US 52 Closed
- [x] Tools REST: get_purchase_order, validate_amount, check_duplicate — US 56
- [x] MCP suppliers: validate_supplier — US 61 (
services/mcp-suppliers-server) - [x] HITL API approve/reject/return — US 65
- [x] Seed data SQL + sample PDFs — US 69 (PDFs en data/sample/finance)
I2 cloud foundation: Closed — Finance API en ACA (rg-eai-dev-mxc), pipelines Terraform + deploy, smoke E2E OK (US 141).
Épica E3 — HR vertical (demo B)¶
- [ ] Documentos HR en Blob
- [ ] Indexación AI Search
- [ ] MCP HR Server real (search_hr_policy, get_policy, …)
- [ ] HR chat API + citas de fuente
Épica E4 — Agentes Foundry¶
- [x] Finance Agent + tool registration (agent v2 en Foundry; MCP opcional)
- [ ] HR Agent + MCP binding
- [ ] Prompt management mínimo
- [ ] Fallback function-calling si Agent Service no GA
- [x] Import IaC Foundry (
ais-eai-foundry-dev) + env chat en ACA (TF state + RBAC MI; chat tool-loop smoke PASS)
Épica E5 — Gateway, identidad, front¶
- [x] App Registrations + grupos Entra — US 101 Closed (2026-09-10)
- [x] APIM products/APIs/policies (JWT, rate limit, correlation, HITL Reviewer claim) — US 105 Closed
- [x] Finance Web (bandeja HITL, detalle, timeline, chat) — US 109 Closed · Reviewer-only HITL Done
- [ ] HR Web (home, chat, sources)
Épica E6 — IaC + observabilidad + demo¶
- [x] Terraform modules + env dev (plan only hasta aprobación) — I2
- [ ] OpenTelemetry → App Insights — kickoff API (
docs/platform-next.md) - [ ] FinOps token logging — kickoff
tokenUsageen chat (docs/platform-next.md) - [x] demo-script.md + smoke tests — guion Azure E2 + chat Foundry (
smoke-finance-azure.ps1+ E2+chat PASS 2026-09-09); borde AFDsmoke-afd-edge.ps1 - [x] CI validate/build/test (sin apply auto a prod)
- [x] DevSecOps pipelines (Bandit, pip-audit, Trivy, Checkov, OWASP ZAP) — US 133 (artefacto
security-reports*) - [ ] SonarQube quality hardening (Finance API + Web) — US 146 (tasks 147–154)
Fuera de alcance MVP (backlog futuro)¶
- VNET / Private Endpoints
- Multi-región / DR
- Power BI
- AKS
- Más dominios (Legal, Compras, …)