Add enterprise connector certification gate

enterprise-connector-certification-gate/README.md

@@ -0,0 +1,31 @@
+# Enterprise Connector Certification Gate
+
+This module adds a focused Enterprise Tooling slice for institutional integration readiness. It evaluates whether a connector for systems such as DSpace, Canvas, ELNs, ORCID, or publication/export targets is safe to enable for an institution.
+
+The gate is designed for pre-production certification, before a connector is exposed to researchers or institutional admins. It checks sandbox smoke evidence, auth scope fit, schema and version compatibility, webhook coverage, data-classification controls, owner/runbook readiness, and export metadata preservation.
+
+## What It Covers
+
+- Admin dashboard risk queue for connector onboarding
+- Secure API and webhook readiness checks
+- Export pipeline readiness for repository, preprint, journal, and funder integrations
+- Evidence bundles suitable for institutional review
+- Signed governance event payloads for downstream audit tooling
+
+## Files
+
+- `index.js` - certification engine and sample policy
+- `test.js` - deterministic tests for certified, conditional, and blocked connectors
+- `demo.js` - local demo that prints an admin-ready certification report
+- `demo-report.json` - captured demo output for quick review
+- `demo.svg` - static dashboard preview for reviewers
+- `requirements-map.md` - mapping back to issue #19
+
+## Run
+
+```bash
+node enterprise-connector-certification-gate/test.js
+node enterprise-connector-certification-gate/demo.js
+```
+
+The demo uses synthetic connectors only. No credentials, external APIs, network access, or live institutional systems are required.

enterprise-connector-certification-gate/demo-report.json

@@ -0,0 +1,48 @@
+{
+  "generatedAt": "2026-05-19T00:00:00.000Z",
+  "module": "enterprise-connector-certification-gate",
+  "summary": {
+    "total": 3,
+    "certified": 1,
+    "conditional": 1,
+    "blocked": 1,
+    "highRisk": [
+      "eln-human-subjects-sync"
+    ]
+  },
+  "certificationQueue": [
+    {
+      "connectorId": "dspace-repository-prod",
+      "name": "DSpace Repository Deposit",
+      "institution": "Northbridge University",
+      "status": "certified",
+      "riskTier": "low",
+      "score": 100,
+      "eventSignature": "d3dc9e6d8e8a3734e5c0653f0bdbf186c8108c82d7a06c705a17fc15436ca0b5"
+    },
+    {
+      "connectorId": "journal-export-beta",
+      "name": "Journal Submission Export",
+      "institution": "Helix Research Institute",
+      "status": "conditional",
+      "riskTier": "medium",
+      "score": 76,
+      "warnings": [
+        "Connector API version deprecates in 57 days.",
+        "Runbook is missing: deadLetter",
+        "Export metadata preservation is incomplete."
+      ],
+      "eventSignature": "e199d1a60c3b85c2db8c7d95fefc497e2532f09644d8ecd7917b9d7a93d6ff6c"
+    },
+    {
+      "connectorId": "eln-human-subjects-sync",
+      "name": "ELN Human Subjects Sync",
+      "institution": "Cedar Clinical Lab",
+      "status": "blocked",
+      "riskTier": "high",
+      "score": 0,
+      "blockerCount": 10,
+      "eventSignature": "17281809e06f175c06b902673d1dc5ae2d3afdf75d11dfece0469133a4eeef7c"
+    }
+  ]
+}

enterprise-connector-certification-gate/demo.js

@@ -0,0 +1,23 @@
+const { DEFAULT_POLICY, SAMPLE_CONNECTORS, evaluateConnector, summarize } = require("./index");
+
+const results = SAMPLE_CONNECTORS.map((connector) => evaluateConnector(connector, DEFAULT_POLICY));
+const report = {
+  generatedAt: DEFAULT_POLICY.referenceDate,
+  module: "enterprise-connector-certification-gate",
+  summary: summarize(results),
+  certificationQueue: results.map((result) => ({
+    connectorId: result.connectorId,
+    name: result.name,
+    institution: result.institution,
+    status: result.status,
+    riskTier: result.riskTier,
+    score: result.score,
+    blockers: result.blockers,
+    warnings: result.warnings,
+    nextActions: result.actions,
+    dashboardFacts: result.dashboardFacts,
+    eventSignature: result.governanceEvent.signature,
+  })),
+};
+
+console.log(JSON.stringify(report, null, 2));