feat: EVA Data Model v2 -- 31 layers, FastAPI + Cosmos 24x7, ACA deployed

- api/ -- FastAPI server (MemoryStore + CosmosStore, 31 layer routers)
- tests/ -- 42 pytest tests (41/42 pass, T36 pre-existing)
- Dockerfile, requirements.txt -- production container (python:3.12-slim)
- schema/ -- 31 JSON schemas (new: sprint/milestone/risk/decision/component/hook/ts_type/mcp_server/prompt/security_control)
- model/ -- all 31 layer JSON files (4055 objects, Cosmos-seeded)
- scripts/ -- readiness-probe, stamp-tft/dft, seed-cosmos, coverage-gaps, impact-analysis, backfill, wbs-sync scripts
- .github/workflows/validate-model.yml -- CI gate (blocks merge on violations)
- .github/copilot-instructions.md -- v3.2.0 agent guide
- docs/ -- USER-GUIDE v2.5, library (08-EVA-VERITAS-INTEGRATION, ARCHITECTURE)
- evidence/ -- F37-08 governance story evidence files
- .eva/ -- veritas audit artifacts (MTI=100, trust.json, dependency-audit.json)
- README, PLAN, STATUS, ACCEPTANCE, USER-GUIDE -- fully updated to session 16c
- ACA: marco-eva-data-model.livelyflower-7990bc7b.canadacentral.azurecontainerapps.io
- Cosmos: marco-sandbox-cosmos / evamodel / model_objects
- readiness-probe: 9/9 PASS (G09 WARN consumer MTI -- not a data-model defect)

Author: Presta

.env.example

@@ -0,0 +1,27 @@
+# ── Cosmos DB ─────────────────────────────────────────────────────────────────
+# Leave blank to run in in-memory mode (no Cosmos required)
+COSMOS_URL=
+COSMOS_KEY=
+MODEL_DB_NAME=evamodel
+MODEL_CONTAINER_NAME=model_objects
+
+# ── Redis ─────────────────────────────────────────────────────────────────────
+# Leave blank to use in-process memory cache
+REDIS_URL=
+
+# ── Cache ─────────────────────────────────────────────────────────────────────
+CACHE_TTL_SECONDS=60
+
+# ── Security ──────────────────────────────────────────────────────────────────
+# Token for Authorization: Bearer <token> on /model/admin/* routes.
+# REQUIRED in production: set a strong value and NEVER commit it to source control.
+# Startup will FAIL with a clear error if DEV_MODE=false and token is still 'dev-admin'.
+ADMIN_TOKEN=
+
+# ── Mode ──────────────────────────────────────────────────────────────────────
+# dev_mode=true (default): allows ADMIN_TOKEN='dev-admin', verbose startup warnings.
+# dev_mode=false (production): ADMIN_TOKEN must be set to a non-default value or startup fails.
+DEV_MODE=true
+
+# ── Actor ─────────────────────────────────────────────────────────────────────
+DEFAULT_ACTOR=anonymous

.eva/ado.csv

@@ -0,0 +1,11 @@
+Work Item Type,Title,Parent,Description,Acceptance Criteria,Tags,Evidence Sources
+Epic,EVA Data Model,,,,eva,
+Feature,F37-01 Guiding Principle,EVA Data Model,,,eva;feature,
+Feature,F37-02 Layer Build Order,EVA Data Model,,,eva;feature,
+Feature,F37-03 Sprint 1 — Foundation Layers (L0–L2) ✅ DONE,EVA Data Model,,,eva;feature,
+Feature,F37-04 Sprint 2 — Data and API Layers (L3–L5) ✅ DONE,EVA Data Model,,,eva;feature,
+Feature,F37-05 Sprint 3 — UI Layers (L6–L7) ✅ DONE,EVA Data Model,,,eva;feature,
+Feature,F37-06 Sprint 4 — Agent Fleet + Infrastructure Layers (L8–L9) ✅ DONE,EVA Data Model,,,eva;feature,
+Feature,F37-07 Sprint 5 — Requirements Traceability Layer (L10) ✅ DONE,EVA Data Model,,,eva;feature,
+Feature,F37-08 Ongoing — How the Model Grows and Is Maintained,EVA Data Model,,,eva;feature,
+Feature,F37-09 Dependencies,EVA Data Model,,,eva;feature,

.eva/badge.json

@@ -0,0 +1,6 @@
+{
+  "schemaVersion": 1,
+  "label": "MTI",
+  "message": "86",
+  "color": "dfb317"
+}

.eva/badge.svg

@@ -0,0 +1,172 @@
+{
+  "meta": {
+    "generated_at": "2026-02-25T20:47:22.662Z",
+    "repo": "C:\\AICOE\\eva-foundation\\37-data-model",
+    "base_url": "https://marco-eva-data-model.livelyflower-7990bc7b.canadacentral.azurecontainerapps.io"
+  },
+  "summary": {
+    "active_features": 5,
+    "ready": 4,
+    "partial": 0,
+    "blocked": 1,
+    "failing_gates": 4,
+    "warning_gates": 0
+  },
+  "features": [
+    {
+      "id": "F37-01",
+      "label": "Guiding Principle",
+      "done": false,
+      "raw_deps": [],
+      "blockers": [],
+      "verdict": "READY",
+      "blocking_gates": [],
+      "warning_gates": [],
+      "relevant_gates": 2
+    },
+    {
+      "id": "F37-02",
+      "label": "Layer Build Order",
+      "done": false,
+      "raw_deps": [],
+      "blockers": [],
+      "verdict": "READY",
+      "blocking_gates": [],
+      "warning_gates": [],
+      "relevant_gates": 2
+    },
+    {
+      "id": "F37-09",
+      "label": "Dependencies",
+      "done": false,
+      "raw_deps": [],
+      "blockers": [],
+      "verdict": "READY",
+      "blocking_gates": [],
+      "warning_gates": [],
+      "relevant_gates": 2
+    },
+    {
+      "id": "F37-10",
+      "label": "Sprint 8-9 -- IFPUG FP Stamping + Sprint Seeds",
+      "done": false,
+      "raw_deps": [],
+      "blockers": [],
+      "verdict": "BLOCKED",
+      "blocking_gates": [
+        "G-FP-ENDPOINT fp/estimate endpoint on ACA",
+        "G-STORYIDS Endpoints have story_ids (MTI 4th component)",
+        "G-SPRINTS L27 sprints seeded (>=8 records)"
+      ],
+      "warning_gates": [],
+      "relevant_gates": 7
+    },
+    {
+      "id": "F37-API",
+      "label": "Core API Endpoints",
+      "done": false,
+      "raw_deps": [],
+      "blockers": [],
+      "verdict": "READY",
+      "blocking_gates": [],
+      "warning_gates": [],
+      "relevant_gates": 2
+    }
+  ],
+  "gates": [
+    {
+      "id": "G-ACA",
+      "label": "ACA reachable + Cosmos-backed",
+      "features": [
+        "ALL"
+      ],
+      "status": "PASS",
+      "detail": "v=1.0.0 store=cosmos"
+    },
+    {
+      "id": "G-VIOLATIONS",
+      "label": "validate-model violations=0",
+      "features": [
+        "ALL"
+      ],
+      "status": "PASS",
+      "detail": "violations=0 exported=4006"
+    },
+    {
+      "id": "G-FP-ENDPOINT",
+      "label": "fp/estimate endpoint on ACA",
+      "features": [
+        "F31-DM-FP1",
+        "F37-10"
+      ],
+      "status": "FAIL",
+      "detail": "GET /model/fp/estimate -> 404 -- ACA image predates DPDCA sprint",
+      "fix": "Redeploy 37-data-model to ACA from current main branch"
+    },
+    {
+      "id": "G-TFT",
+      "label": "Endpoints stamped (transaction_function_type)",
+      "features": [
+        "F31-DM-FP1",
+        "F31-DM-VERITAS1",
+        "F37-10"
+      ],
+      "status": "PASS",
+      "detail": "76/76 stamped"
+    },
+    {
+      "id": "G-STORYIDS",
+      "label": "Endpoints have story_ids (MTI 4th component)",
+      "features": [
+        "F31-DM-VERITAS1",
+        "F37-10"
+      ],
+      "status": "FAIL",
+      "detail": "0/76 have story_ids -- complexity_coverage=0; veritas uses 3-component formula",
+      "fix": "F37-10-001: stamp story_ids alongside transaction_function_type"
+    },
+    {
+      "id": "G-DFT",
+      "label": "Containers stamped (data_function_type)",
+      "features": [
+        "F31-DM-FP1",
+        "F37-10"
+      ],
+      "status": "PASS",
+      "detail": "13/13 stamped"
+    },
+    {
+      "id": "G-SPRINTS",
+      "label": "L27 sprints seeded (>=8 records)",
+      "features": [
+        "F31-DM-PMLIVE1",
+        "F31-PM3",
+        "F37-10"
+      ],
+      "status": "FAIL",
+      "detail": "L27 layer not on ACA -- DPDCA sprint not deployed",
+      "fix": "Redeploy 37-data-model ACA from main branch"
+    },
+    {
+      "id": "G-L28L30",
+      "label": "L28-L30 reachable (milestones/risks/decisions)",
+      "features": [
+        "F31-DM-PMLIVE1"
+      ],
+      "status": "FAIL",
+      "detail": "Not reachable: milestones(L28), risks(L29), decisions(L30) -- DPDCA sprint not deployed",
+      "fix": "Redeploy 37-data-model ACA from main branch"
+    },
+    {
+      "id": "G-GRAPH",
+      "label": "Graph endpoint on ACA (F31-DM-GRAPH1 gate)",
+      "features": [
+        "F31-DM-GRAPH1",
+        "F31-DM-GRAPH2",
+        "F31-DM-EXP1"
+      ],
+      "status": "PASS",
+      "detail": "graph/edge-types reachable"
+    }
+  ]
+}