Building Quality Runtime in public

Quality Runtime starts from a simple observation: organizations that must demonstrate conformity mostly do it with documents. The information exists, but it is not a system — nothing can answer which requirements has nobody taken up without a person going and looking.

We are building the system, in the open, under the Apache-2.0 license.

Where we are starting

The first day laid the foundation: a PostgreSQL schema for the whole loop — standards, requirements, controls, mappings, evidence and attestation — with tenant isolation enforced by row-level security rather than by application code that has to remember.

What it is not, yet

Quality Runtime is in early development and is not ready for production use. There is no user interface and no deployment artifact. We will say so plainly for as long as it is true.