{
  "schema": "kye.change_calendar.v1",
  "version": "1.0",
  "as_of": "2026-05-20",
  "policy": {
    "min_notice_days_breaking": 90,
    "min_notice_days_subprocessor": 30,
    "min_notice_days_maintenance": 7
  },
  "entries": [
    {
      "id": "cc-2026-05-20-pilot-onboarding-window",
      "kind": "feature-launch",
      "title": "Pilot 1 onboarding window opens (tier-1 banks)",
      "summary": "Audit Pilot™ engagements open for tier-1 global bank pilots. Pilot scope is shadow-mode AI-agent governance against a published baseline; outputs are 30-day evidence packs.",
      "announced_at": "2026-05-20",
      "effective_at": "2026-06-15",
      "status": "scheduled",
      "surfaces": ["public/site/pilot-apply.html", "public/site/trust.html"],
      "scope": "tier-1-pilots",
      "customer_action_required": false,
      "links": ["/pilot-apply.html", "/trust.html"]
    },
    {
      "id": "cc-2026-05-20-eu-residency-rollout",
      "kind": "feature-launch",
      "title": "EU data-residency router operational verification (per-tenant)",
      "summary": "Gateway data-residency middleware (internal) shipped — operational per-tenant verification rolls out to EU tenants. Default-deny if region tag missing.",
      "announced_at": "2026-05-20",
      "effective_at": "2026-07-01",
      "status": "scheduled",
      "surfaces": ["constitution.kyeprotocol.com", "gateway.kyeprotocol.com"],
      "scope": "eu-tenants",
      "customer_action_required": false,
      "links": ["/frameworks/eu-ai-act.html", "/trust.html"]
    },
    {
      "id": "cc-2026-05-20-hsm-production-provisioning",
      "kind": "feature-launch",
      "title": "Production HSM provisioning for BYOK signing keys",
      "summary": "Production HSM-backed signing keys (@kye/byok) provisioned by operator. Replay-Proof™ envelopes verifiable from operator-rooted public keys alone.",
      "announced_at": "2026-05-20",
      "effective_at": "2026-09-30",
      "status": "scheduled",
      "surfaces": ["internal"],
      "scope": "all-tenants",
      "customer_action_required": false,
      "links": ["/trust.html"]
    },
    {
      "id": "cc-2026-05-20-soc2-audit-engagement",
      "kind": "policy-revision",
      "title": "SOC 2 Type II auditor engagement (SSAE 18)",
      "summary": "SSAE 18 auditor engagement begins for SOC 2 Type II attestation. Control mapping shipped at internal Expected report delivery 3-6 months from engagement start.",
      "announced_at": "2026-05-20",
      "effective_at": "2026-11-30",
      "status": "scheduled",
      "surfaces": ["public/site/trust.html", "public/site/trust.json"],
      "scope": "all-tenants",
      "customer_action_required": false,
      "links": ["/trust.html"]
    },
    {
      "id": "cc-2026-05-20-iso-27001-audit-engagement",
      "kind": "policy-revision",
      "title": "ISO/IEC 27001 external audit engagement",
      "summary": "External audit engagement for ISO/IEC 27001 certification. SoA (Statement of Applicability) shipped at internal Expected certification 2-4 months from engagement start.",
      "announced_at": "2026-05-20",
      "effective_at": "2026-09-30",
      "status": "scheduled",
      "surfaces": ["public/site/trust.html", "public/site/trust.json"],
      "scope": "all-tenants",
      "customer_action_required": false,
      "links": ["/trust.html"]
    },
    {
      "id": "cc-2026-05-20-pentest-q3",
      "kind": "policy-revision",
      "title": "External penetration test (Q2/Q3 2026)",
      "summary": "Threat-led penetration test engagement, ~2-4 weeks. Report becomes available to tier-1 pilot customers under NDA + published Trust Centre status update.",
      "announced_at": "2026-05-20",
      "effective_at": "2026-08-15",
      "status": "scheduled",
      "surfaces": ["public/site/trust.json"],
      "scope": "all-tenants",
      "customer_action_required": false,
      "links": ["/trust.html"]
    },
    {
      "id": "cc-2026-05-20-v1-1-profile-preview",
      "kind": "feature-launch",
      "title": "v1.1 profile preview (additive only — no breaking changes to v1.0)",
      "summary": "v1.1 introduces additional rule-pack + sector-pack additions on top of the 10 canonical profiles locked in v1.0. v1.0 conformance fixtures remain bit-for-bit stable.",
      "announced_at": "2026-05-20",
      "effective_at": "2026-09-15",
      "status": "scheduled",
      "surfaces": ["public/site/changelog.html"],
      "scope": "all-tenants",
      "customer_action_required": false,
      "links": ["/changelog.html"]
    }
  ]
}