# CRM change list: <instance label>, <CRM>

- Baseline: <CRM>, <instance label>, <production | sandbox>, read <YYYY-MM-DD HH:MM UTC>
- Audit report: <path or link>
- Prepared by: <agent run or person>. Applied by: <role>. Verified by: <role>. Approver for irreversible items: <role>
- Status: draft, not applied. Nothing in this list has been changed in the CRM.

## Summary, in release order

- Stop harm (consent writers, exposure, destructive automation, privileged access): <CR numbers>
- Stop conflicting writers and duplicate creation: <CR numbers>
- Restore reporting correctness: <CR numbers>
- Structural redesign: <CR numbers>
- Hygiene, separate release: <CR numbers>
- Numbers that will move after release: <metric, direction, rough size, who has been told>
- WARN gates given an owner and date here (copy to the inventory's gate_owners): <RULE-ID, owner, date>

## CR-<n> <short title> (<RULE-ID> <FAIL | WARN>)

- Entity: <type> "<internal name>" [<ID>], object <object>
- Current setting (quoted from the baseline): <setting and value>
- Change: <exact edit, setting by setting>
- Why: <the defect in one or two sentences, with the audit evidence ID>
- Could break: <what depends on the current setting, or "nothing that is correct today">
- Depends on: <other CR numbers, or "none">
- Test: <steps on flagged test records or in a sandbox, and the expected result for each>
- Test approval and data: <who approved, which test records, which systems they reach, who deletes them afterwards>
- Restore: <values to restore, from which history, inside which window>
- Rollback: <how, and its window>
- Rollback does not undo: <messages sent, notifications, values synced to other systems, enrolments, reports shared, anything else>
- Numbers that will move: <metric and direction, who was told>
- Owner: <role>. Verifier: <role>. Approver: <role, required for merges, deletes, consent changes and permission removals>

## Not changed, needs a decision

- <finding>: <the question, and the owner role who decides>

## Release evidence for each item

- Did the configuration change as written? <capture or export after the change>
- Did behaviour match on test records? <cases and observed results>
- Does the destination record or report show the expected result? <record history, reconciliation>
- A yes to the first question does not stand in for the other two.