Reports
Next: Work through the open calls in c123's intents-pr5-review.md, then port to qdash.
The Reports page was a placeholder. C-level people, auditors and IT need what the dashboard shows without access to the controls, and the pages disagree about what time they cover.
In progress. One shared time window, a Reports catalog and a fully drawn Posture report are live in the lab. Deployment status and Inventory have their outlines. None of it is in qdash yet.
Documents
With file names, on their own page →What changed
The three changes that matter most, in plain words. Open any one to see it.
- 1
A picker with rolling, calendar and custom periods, a comparison, and the data's edges in view.
One time window for the whole product · came from Mark Parsonopen →
- 2
Three reports in two categories, under one sentence that sums up the period.
A Reports catalog with the Board report folded in · came from Mark Peterson and Mark Parsonopen →
- 3
Score over time, what lowers it, at-risk harnesses, findings against their targets, data protection, egress, policies and framework evidence.
The Posture report, drawn in full · came from Mark Peterson and Mark Parsonopen →
- The evidence export panel came off the Compliance page, in the lab and in qdash. In words
How we got here
Each change, traced back to the conversation it came from. A solid mark means the record names the source; a dashed one was matched by the draft and waits for review.
From the record: no recorded conversation behind this one.
c128-D5 The window is shared with the operator pages' when: pill, not separate. — Mark Parson
A picker with rolling, calendar and custom periods, a comparison, and the data's edges in view.
“current state score... it is good to know in sort of time series form. So, like, know what is my trend?... that 67 is is definitely not gonna be static.”
market-analyst /calls/2100ac03… (local)“machine readable, human readable. So for the human readable for the auditor, machine readable for your GRC platform like Vanta.”
market-analyst /calls/2100ac03… (local)c128-Q3 c78's Board report folds into the catalog, if there is anything useful in it. Its summary sentence, highlights and trend in words came across; its composite score did not. — Mark Parson
Three reports in two categories, under one sentence that sums up the period.
“current state score... it is good to know in sort of time series form. So, like, know what is my trend?... that 67 is is definitely not gonna be static.”
market-analyst /calls/2100ac03… (local)“machine readable, human readable. So for the human readable for the auditor, machine readable for your GRC platform like Vanta.”
market-analyst /calls/2100ac03… (local)c128-Q1 "Non-operator" isn't a role. It means C-level and other people who see the data but get no access to the controls. — Mark Parson
c128-Q2 Findings and SLA are a section of Posture, not their own report. — Mark Parson
Score over time, what lowers it, at-risk harnesses, findings against their targets, data protection, egress, policies and framework evidence.
Thanks to
People outside Qpoint first. Every thank-you points at something they said or made.
Asked for posture over time and named the reports
On the Aug 20 product review he asked for the score as a trend rather than a static number, and named the reports a security team hands out, including an inventory report, for people and for tools. c128 builds on that list through c78.
“machine readable, human readable. So for the human readable for the auditor, machine readable for your GRC platform like Vanta.” first-hand
Set the shape and ruled the decisions
Framed Reports as data without controls, in two categories with every report time-windowed. Made the window shared with the operator pages, set 30 days as the default everywhere, and moved downloads here.
All images
Every picture from this cycle. Click any one to step through them all.
The pairs
Everything captured · 0
The full record 10 decisions · 14 key-change entries · 2,285 words · 0 captures
The record stays as written, for agents and for audit: Key Changes, every decision, the artifacts and the visual record.
Open the record for c128 →