Q3 2026 · Platform proof

What we’re proving now.

This quarter is about evidence: proving that SP Foundation can handle growth, contain bad releases, and be operated independently by a product pod.

Q3 platform objective

One objective. Five kinds of proof.

Last updated September 3, 2026.

Objective

Prove SP Foundation is a trusted, scalable, failure-resistant platform that product teams can operate independently.

KR1

Prove capacity

Sustain twice the highest five-minute average production requests per second measured during the previous 90 days for 30 consecutive minutes, while keeping p99 latency at or below three seconds and staying within the agreed availability and error-rate thresholds.

Why it matters: a controlled test shows whether the platform has enough headroom for real growth. The final RPS number comes from production telemetry; the formula remains visible until it is calculated.
KR2

Prevent capacity-related outages

From production go-live through the end of Q3, zero Sev-1 or Sev-2 customer incidents are caused by traffic volume, resource exhaustion, infrastructure capacity, or scaling failure.

Why it matters: KR1 proves capacity in a test; KR2 proves it under real production conditions.
KR3

Prove pod self-service

At least one product pod independently operates one real production service end to end—deployment, dashboard monitoring, alert response, diagnosis, and service restoration or rollback—without Core Platform taking an operational action.

Required demonstration: one pod-led production deployment, a service-owned dashboard, alerts routed to the pod, a production-safe game day, and unaided restoration or rollback.
KR4

Build release immunity

100% of production services hosted on SP Foundation have startup health checks, release-health monitoring, and automatic deployment blocking or rollback configured for every defined bad-release condition.

Qualifying conditions: startup or health-check failure; more than five 5xx responses in a rolling 60-second window; or p99 latency above three seconds for two consecutive minutes after traffic begins.
KR5

Prove automatic remediation

At least 95% of qualifying bad releases are automatically blocked or reverted within five minutes, with 100% success across all three failure scenarios during a production-safe game day.

Success means: the service is restored within five minutes without a Sev-1/Sev-2 customer incident or an availability service-level objective breach.
Plain-language definitions

RPS means requests per second. p99 is the response time experienced by the slowest 1% of requests. Sev-1/Sev-2 are the two highest customer-incident severity levels. An SLO is an agreed service-level objective.

Evidence chain

A test is not enough on its own.

Confidence comes from controlled proof, configured protection, and real operating behavior reinforcing one another.

Capacity evidence

Production baseline, load-test result, latency, availability, and error-rate record.

Release evidence

Service configuration coverage plus detection and restoration timestamps.

Independence evidence

Deployment, dashboard, alert-routing, game-day, and restoration records owned by the pod.

Current delivery work

A concrete example: reliable individual-customer migrations.

The migration work applies the same platform principles—isolated execution, recoverability, observable failure handling, and evidence.

Individual migration job & completion reporting

SPPLT-17956 is one foundation slice in the broader individual-customer migration epic. It adds isolated background processing and downloadable failure reporting. The tracking foundation is complete; this next build slice currently depends on dedicated queue and worker infrastructure.

Jira status as of September 3, 2026: Story Creation · Priority: Medium · Unassigned. Jira remains the operational source of truth.

Tracking foundation
Complete
Dedicated queue + worker
Dependency
Migration job + reporting
Planned next
Connected, separate objective

Compliance work through October 31.

The Q3 platform objective proves SP Foundation. The compliance objective is related, but it has its own scope, evidence, accountability, and sign-off.

Compliance objective

By October 31, 2026, implement, operationalize, and evidence all approved GDPR and internal policy requirements across the agreed scope.

September 30 kickoff milestone

Approve, publish, assign, and launch acknowledgements for all required internal policies and guidance; begin the workforce walkthrough and training program; and establish an owner, due date, and evidence requirement for every identified GDPR gap.

Complete acknowledgements

100% of in-scope employees and contractors acknowledge all assigned requirements with no overdue items.

Complete education

100% of the in-scope workforce completes required privacy, security, data-handling, and policy training.

Close priority gaps

All critical and high-priority gaps are remediated and evidenced; lower-priority items have an owner, date, and risk decision.

Validate operation

Walk through data requests, retention and deletion, privacy incidents, and evidence collection end to end, with every blocking finding resolved.

Obtain sign-off

Legal, executive, or designated privacy leadership confirms that approved requirements in scope are implemented, operating, evidenced, and ready for ongoing monitoring.

Accountability boundary

Policy acknowledgements are an important milestone, not proof of complete GDPR compliance. Engineering supplies controls and evidence; designated organizational leadership provides legal or compliance sign-off.

Next chapterSee how today’s proof changes the road ahead.
Follow the roadmap →