Appendix B: Templates and Tools
The tables below list the platform and security templates and tools in this book's repository by lifecycle stage. Fork them into the organisation's own repositories, where they evolve under the same review as the services they configure. The governance templates, from the risk classification policy and AI inventory schema to the EU AI Act obligation mapping and the maturity model, are listed in AI Governance, Appendix C.
Templates by lifecycle stage
| Stage | Artefact | Where to find it |
|---|---|---|
| Intake | Use-case intake record, production readiness checklist, go/no-go decision record | Chapter 23 |
| Design | AI Decision Record template (Markdown and YAML) | Appendix A, Chapter 5 |
| Design | Model card, datasheet and system card outlines | Chapter 5 |
| Design | Data contract and data product descriptor | Appendix A, Chapter 6 |
| Design | Agent permission manifest and tool allow-list | Appendix A, Chapter 11 |
| Design | Sovereignty requirements profile, capacity plan, placement manifests | Chapter 13 |
| Build | Model promotion pipeline and its evidence manifest | Appendix A, Chapter 7 |
| Build | RAG pipeline configuration | Chapter 10 |
| Build | Golden path template manifest | Chapter 23 |
| Secure | Threat model and guardrail policy | Chapter 16 |
| Secure | Threat model as code, gateway guardrails, agent workload-identity policy, CI security tests | Chapter 17 |
| Secure | Patch-velocity policy, synthetic-media-resistant approval policy | Chapter 18 |
| Secure | Agent containment profiles | Chapter 19 |
| Operate | Evaluation suite definition | Appendix A, Chapter 20 |
| Operate | Drift detection job | Appendix A, Chapter 21 |
| Operate | Alerting rules, drift runbook, AI incident runbook | Chapter 21 |
| Operate | Cost-aware model routing policy | Appendix A, Chapter 22 |
Repository tools
| Tool | Purpose |
|---|---|
scripts/check_mermaid_diagrams.py |
Verifies rendered diagrams against their Mermaid sources |
scripts/audit_references.py |
Audits inline citations against 28_references.md |
scripts/verify_sources.py |
Verifies cited URLs and ISBNs |
scripts/check_doc_numbering.py |
Checks chapter numbering for gaps and duplicates |
scripts/verify_environment.py |
Confirms the toolchain matches BOOK_REQUIREMENTS.md |
tests/ |
Pytest suites for completeness, consistency and references |
Relationship to the other volumes
These templates extend those in Architecture as Code as additional modules. Its control mapping matrix and maturity model have their AI counterparts in AI Governance, Appendices A and B.