[Vlad G (vladpm)]

Summary

Adds the initial Digital Permit Platform solution accelerator: a configuration-driven reference implementation for digitising local-authority licences and permits on Microsoft Azure.

The repository uses synthetic Contoso data and is explicitly positioned as an accelerator rather than a production-accredited government service.

Implementation

• Adds resident, officer, manager, and administrator experiences in a Next.js application.
• Adds configuration-driven forms, evidence requirements, fees, workflows, SLAs, audit records, and generated licences.
• Adds Microsoft Entra External ID for applicants and workforce Entra ID app roles for staff, plus an idempotent npm run setup:identity bootstrap workflow.
• Adds an in-app Statement of Licensing Policy library with PDF, DOCX, Markdown, and text import; deterministic parsing; draft preview; activation; rollback; and source retention.
• Adds optional policy-grounded Azure OpenAI assistance with responsible-AI guidance and explicit human oversight.
• Adds complete azd and modular Bicep deployment for Azure Container Apps, ACR, private PostgreSQL, Azure Managed Redis, Blob Storage, Key Vault, monitoring, managed identities, and optional Azure OpenAI.
• Adds MIT licensing, contribution/security/support guidance, issue and PR templates, Dependabot, CI, CodeQL, release hygiene checks, operations documentation, and synthetic seed data.

The import branch is based on the bot-created Azure-Samples main commit and replaces its generic Visual Studio .gitignore with the accelerator stack-specific version. No force push or direct change to main was made.

Validation

• npm ci
• npm run db:generate
• npm run lint
• npm run typecheck
• npm test - 34 tests passed across 10 suites
• npm run build - production build completed successfully
• npm audit --audit-level=low - 0 vulnerabilities
• npm run docs:check - 18 Markdown files validated
• npm run validate:release
• Generated DOCX archive integrity verified with unzip -t
• Bicep modules restored and infra/main.bicep compiled
• azd show --no-prompt
• Import commit tree verified byte-for-byte against the validated release tree
• Web and worker container workflows passed on the reviewed source feature branches; this PR reruns both builds in Azure-Samples

Review checklist

• The change follows the repository public solution-accelerator boundary.
• Tests cover changed behavior and failure paths.
• Documentation and configuration contracts are included.
• No credentials, Azure identifiers, customer data, personal data, generated output, or private POC assets are included.
• Security, privacy, accessibility, responsible AI, cost, migration, and operational considerations are documented.
• Database changes include ordered Prisma migrations and deployment/recovery guidance.

Notes for reviewers

The application defaults to demo authentication and synthetic data for evaluation. Production-intent adopters must use the included Entra paths and complete the security, privacy, accessibility, networking, policy, payment, notification, antivirus, and operational controls documented in docs/security.md.

[Vlad G (vladpm)]

@microsoft-github-policy-service agree [company="Microsoft"]

[Vlad G (vladpm)]

@microsoft-github-policy-service agree company="Microsoft"