M2 — Design and Develop the Platform and Client Admin¶
SOW Deliverable(s): D2a (Functional/Technical Design), D3a (Developed Solution & Integration Components), D4a (Test Evidence) Acceptance basis: Design pack / review note; Demo + test results + defect log; Test summary/logs (Appendix 3) Requirement source: SOW Appendix 1 — FR5 (Organisation Onboarding), FR6 (User Management), FR7 (Authentication & Authorisation); INT3, INT8
Status legend¶
See ../M1/README.md for the legend key.
Tasks¶
Each task below has its own detailed task file in this folder — where a detailed implementation breakdown already existed in the repo, it was moved here rather than rewritten (noted below).
| ID | Task | SOW Ref | Requirement Clarity | Dev Status | Task File |
|---|---|---|---|---|---|
| M2-00 | (overview) Organisation onboarding — cross-cutting implementation overview | FR5, FR6, FR7 | ✅ | 🟢 | M2-00-organization-onboarding-overview.md — moved from existing doc |
| M2-01 | Organisation KYB onboarding flow | FR5 | 🟡 MVP-vs-Beta phasing note — see task file | 🟢 | M2-01-organisation-kyb-onboarding-flow.md — moved from existing doc |
| M2-02 | Velocity Network Registrar API integration (create/manage organisations) | FR5, INT3 | ✅ | 🟢 | M2-02-velocity-registrar-api-integration.md — moved from existing doc |
| M2-03 | Company admin page — Ts&Cs / Privacy Policy configuration | FR5 | ✅ | 🟢 | M2-03-tcs-privacy-policy-config.md |
| M2-04 | Company admin page — issuing/disclosure landing page & email branding (colours, images, video) | FR5 | ✅ | 🟢 (image upload gap) | M2-04-branding-config.md — moved from existing doc |
| M2-05 | User management — admin add/modify/delete authorised users | FR6 | ✅ | 🟢 | M2-05-user-management-admin-crud.md |
| M2-06 | User self-service — profile update, password reset, manage linked accounts | FR6 | ✅ | 🟡 | M2-06-user-self-service-profile-password.md |
| M2-07 | Identity provider integration & MFA enforcement for admin accounts | FR7, INT8 | 🟡 Confirm which IdP(s) required at MVP | 🟡 | M2-07-idp-integration-mfa-enforcement.md |
| M2-08 | Passkey support | — (not in SOW) | 🟡 Dropped from SOW — confirm still wanted | ❌ | M2-08-passkey-support.md |
| M2-09 | Role-based access control — Staffing Company Admin vs. Staffing Company User | FR7 | ✅ | 🟢 | M2-09-role-based-access-control.md — moved from existing doc |
| M2-10 | Account expiration/lockout policy & session management | FR7 | ✅ | 🟡 | M2-10-account-expiry-session-management.md — moved from existing doc |
| M2-11 | User documentation / help system | FR6 | 🟡 SOW doesn't name a tool; original doc specified Zendesk — confirm | ❌ | M2-11-user-documentation-help-system.md |
| M2-12 | Zero-trust / multi-tenant platform foundations | NFR1, NFR3 | ✅ | 🟡 | M2-12-zero-trust-multi-tenant-foundations.md |
| M2-13 | Functional/Technical Design Document | D2a | ✅ | ❌ Not started | M2-13-functional-technical-design-document.md |
| M2-14 | Test Evidence | D4a | ✅ | ❌ Not started | M2-14-test-evidence.md |
Notes¶
This is one of the largest design/build milestones alongside M3. Most items here already have a working prototype from the POC (organisation onboarding and admin were among the best-covered areas in the earlier code review) — the main task is hardening and closing the two flagged gaps (image upload for branding, MFA/help-desk tooling decisions) rather than building from scratch.