Criteria library

Admin-level defaults. Individual POCs can override the scope phase and priority per-criterion. Full text edits (title, outcome, test procedures) land in a later version — use the seed files for now.

Criterion	Defaults
MDM enforcement mdm-enforcement · access	active
TLS termination tls-termination · security	active
SSO sso · access	active
SCIM user provisioning scim-provisioning · access	active
Monitoring AI usage via TLS decryption ai-monitor-tls · security	active
LLM API-based observability and guardrails ai-monitor-ai-gateway · security	active
Shadow IT detection shadow-it-detection · security	active
Clientless access clientless-access · access	active
Access to internet (SWG) access-internet · security	active
Access to internal environments (ZTNA) access-internal · connectivity	active
Hostname-based routing hostname-routing · connectivity	active
Terraform support terraform-support · operations	active
SIEM setup siem-setup · observability	active
Alerts and notifications alerts-notifications · operations	active