One work item, from intent to release.
Tell Foreman what needs to get done. Foreman defines the work, assigns the right capabilities, coordinates execution, proves the result, and brings it to a human release decision.
Add enterprise SSO with role mapping and audit logging
Define
01Intent
A business outcome enters Foreman — in plain language, no engineered prompt.
- Request
- “Add enterprise SSO with role mapping and audit logging.”
- Source
- Product request
- Format
- Plain language
- Authority
- Release requires a human decision
- 02
Shape
Foreman shapes the intent into requirements, acceptance criteria, constraints, and evidence requirements. A person confirms the scope.
- Requirements
- SAML + SCIM · role mapping · audit events
- Constraint
- No changes to existing session model
- Open decision
- Enforce SSO for existing admins? · human
- Risk
- Identity · security-sensitive
- Work items
- 6 scoped, with acceptance criteria
- Evidence required
- Unit · SIT · regression · security · UAT
Assign
03Assign
Foreman determines the required capability, evaluates eligible resources against policy, and selects one.
- Capability
- Backend implementation
- Policy
- Provider cleared for this repository
- Availability
- Connected · capacity available
- Eligible
- 3 providers
- Selected
- Claude Code · strongest auth history
Execute
04Execute
The selected capability produces a candidate.
- Provider
- Claude Code
- Active task
- Implement SAML assertion handling
- Branch
- feat/enterprise-sso
- State
- In progress
Prove
05Validate
Deterministic checks run against the exact candidate.
- Candidate
- a52819de
- Tests
- 143 / 143 passed
- Build
- Passed
- Lint
- Passed
- Required checks
- All green
- 06
Independent review
A separate eligible reviewer evaluates the candidate. The author cannot certify itself.
- Ineligible
- Claude Code · authored candidate
- Reviewer
- OpenAI Codex · independent
- Findings
- 2 raised · 1 medium · 1 low
- Remediation
- 2 tasks · linked to candidate
- Retest
- 143 / 143 passed
- 07
Verify
Your own testing, security, and CI systems independently verify the exact candidate. Foreman collects the results as evidence.
- Integration / SIT
- Passed · IdP sandbox
- Regression
- Passed
- Security review
- Passed · auth scope
- UAT
- Passed · product owner sign-off
- Smoke
- Passed · staging
- Candidate
- a52819de
Release
08Evidence
Results are attached to the delivery record and converge into one decision surface.
- Candidate
- a52819de
- Validation
- Passed
- Independent AI review
- Passed · 0 open findings
- Independent verification
- Passed
- Evidence
- Complete
- Policy
- Required evidence attached
- Authority
- Human decision required
- 09
Human release authority
Validation passed, independent review and verification are clear, and the full evidence trail is attached. Foreman presents one decision — and waits. The release only happens when a person approves it.
The work determines the evidence.
Foreman determines what proof the work requires, coordinates the appropriate execution and review capabilities, and keeps that evidence attached to the delivery record.
- Unit testing
- Deterministic validation
- Integration testing
- SIT
- Regression testing
- Smoke testing
- Security review
- Independent review
- UAT preparation
- UAT execution
- Release verification
See this path on your own work.
We'll run a walkthrough using a work item that resembles yours — from intent all the way to the release gate.