Summary

This PR adds comprehensive documentation for an integrated security operations platform that unifies physical access control, visitor management, booking systems, and identity management into a single operational view.

Key Changes

• Client Slide Deck (04-client-slide-deck.md): 15-slide presentation for 20-minute client pitch covering the problem statement, solution architecture, use cases (live occupancy, evacuation lists, leaver detection), delivery plan, investment summary, success metrics, and risk mitigation. Includes presenter notes and appendices with technical architecture and glossary.

• JML Process Flow (02-jml-process-flow.md): End-to-end process documentation for managing identity lifecycle (Joiner/Mover/Leaver) events without live Active Directory access. Defines workflows for planned and immediate leavers, contractor expiry handling, manual notification APIs, SLAs, escalation procedures, and audit requirements.

• AD Extract Specification (01-ad-extract-specification.md): Technical specification for daily Active Directory data exports required by the integration platform. Defines delivery mechanism, required fields (employee_id, email, department, account status, etc.), delta detection logic, and includes a reference PowerShell export script for client IT teams.

• Cost Breakdown (03-cost-breakdown.md): Detailed financial model covering build costs across 5 phases (identity mapping, system integrations, occupancy engine, dashboard/evacuation, alerting/hardening), annual operating costs (infrastructure, licences, support), 3-year TCO analysis, and cost reduction options.

Notable Implementation Details

• Documentation is designed for a contractor-managed platform where the contractor cannot have direct Active Directory access — a common constraint in enterprise environments
• All workflows include specific SLAs, escalation matrices, and compensating controls (e.g., badge expiry policies)
• Cost model uses ranges (low/high complexity) to be adjusted post-discovery workshop
• Presentation materials emphasize integration of existing systems rather than replacement, preserving client investments in ACT, Condecco, and booking platforms
• JML process includes both automated (daily extract) and manual (API-based) notification paths to handle time-critical events like immediate dismissals

https://claude.ai/code/session_01VQ2Vk1qd2nMMQKD4MM5KQs