{
  "project_id": "AI-11",
  "title": "Shared finance AI foundation",
  "source_model": "finance-hours-v1-2026-10-22/model.json",
  "source_category": "Finance AI infrastructure and governance",
  "scope": "Configure one approved AI product with one identity provider, two access roles, shared source/retrieval services, logging, 30 evaluation cases and incident ownership. Reuse the vendor's hosting and model services. This is one shared foundation; task-specific content, mappings and tests stay in the application rows.",
  "basis": "Existing working judgment estimates; case studies do not calibrate these hour ranges.",
  "work": [
    {
      "title": "Set access rules and ownership",
      "phase": "process",
      "phase_share": 1,
      "hours": [
        24,
        40,
        72
      ],
      "basis": "Agree permitted actions, two role boundaries, escalation and ownership across a few working sessions."
    },
    {
      "title": "Connect identity and shared sources",
      "phase": "data",
      "phase_share": 1,
      "hours": [
        24,
        40,
        80
      ],
      "basis": "Configure identity and shared source-access services; verify role filters and logging inputs."
    },
    {
      "title": "Configure shared retrieval, tracing and evaluation",
      "phase": "build",
      "phase_share": 1,
      "hours": [
        32,
        64,
        128
      ],
      "basis": "Configure vendor features, reusable permission checks, response tracing and an evaluation harness."
    },
    {
      "title": "Test permissions and failure handling",
      "phase": "validation",
      "phase_share": 1,
      "hours": [
        32,
        56,
        112
      ],
      "basis": "Develop and test 30 shared evaluation cases; test restricted access, escalation and failures, then correct and retest."
    },
    {
      "title": "Hand over operations and change control",
      "phase": "rollout",
      "phase_share": 1,
      "hours": [
        16,
        32,
        64
      ],
      "basis": "Assign support/incident owners, document change control and train the initial application owners."
    }
  ],
  "total_hours": [
    128,
    232,
    456
  ],
  "annual_upkeep_hours": [
    24,
    48,
    96
  ],
  "upkeep_basis": "Judgment: 12 monthly administration checks at 1/2/4 hours, plus four shared regression/change reviews at 3/6/12 hours. Project-specific checks are separate.",
  "boundary": "Excluded from each application's local setup estimate. Count once per common deployment when needed. An existing suitable foundation can eliminate the initial foundation work.",
  "organization_assumptions": "Central task-level settings in organization-model.json; reference hours remain unchanged in this file.",
  "difficulty": {
    "label": "Moderate",
    "reasons": [
      "Identity and source permissions must remain consistent across shared services.",
      "Logs must make retrieval, responses and failures traceable.",
      "Shared tests need to cover restricted access and failure cases.",
      "Incident ownership and configuration changes require coordinated approval."
    ]
  }
}