A5. Deployment Ledger Immutable, append-only record of every deployment event. Each entry records the deployment date, composite version, deploying individual, authorisation evidence, target environment, and feature flag activations. Entries cannot be modified after creation. Auto-populated by the deployment pipeline at each production promotion. Responsible party: CI/CD pipeline auto-populates. AI Governance Lead authorises the initial production deployment. Regulations addressed: Article 12 (record-keeping); Annex VI(b) (traceability link between assessed artefacts and production deployment). Key outputs

• Per-deployment immutable event record
• Feature flag activation audit trail