Review Deployment Constraints

Determine which documented requirements constrain the proposed work, what the evidence establishes, and which decisions remain unresolved. Keep the review proportional to the proposal. This skill provides a method, not a bundled policy catalog or a certification of compliance.

Establish applicability

Identify the proposed behavior, affected components, customer/system, development or operational use, hosting/authorization boundary, connectivity, data categories, and external destinations. Recover these facts from the task and available evidence before asking targeted questions. Keep unknown attributes explicit.

Separate the internal development workflow from the deployed product. Assess each intended deployment separately: a cloud impact level, disconnected operation, and synthetic test data are different facts. Neither a government customer nor a security label establishes a universal prohibition on hosted services.