Milestone: M7 — Reclaim Protocol | SOW Reference: FR4 (cross-cutting overview) | Requirement Clarity: ⚠️ See M7-01 | Dev Status: ❌ Not started Moved from docs/requirements/tasks/POC/implementation-roadmap-poc-vs-reclaim.md. Predates the SOW — kept for the requirements/scope framing (separating POC completion from Reclaim Protocol scope), not for its original planning figures. Unmodified below.

M7-00 Implementation Roadmap: POC Completion vs Reclaim Protocol Integration¶

REC Verifiable Credentialing Platform¶

Executive Summary¶

This roadmap clearly separates the completion of the current POC (Phase 1) from the future Reclaim Protocol integration (Phase 2), providing distinct timelines, resources, and deliverables for each phase.

Phase 1: POC Completion (Priority: CRITICAL)¶

Timeline: 4-6 weeks | Budget: £10,000-£15,000¶

Current Status: 80% Complete¶

✅ Auth0 authentication implemented
✅ Database schema and entities created
✅ Basic frontend/backend architecture
✅ Manual credential creation workflow
⚠️ BLOCKER: Using mock VNF APIs instead of real integration
⚠️ BLOCKER: No VNF sandbox access for testing

Phase 1 Objectives¶

Primary Goal: Deliver a production-ready POC that demonstrates end-to-end credential issuance using real Velocity Network Foundation APIs.

Week 1-2: VNF Real Integration¶

Dependencies: VNF sandbox account access from customer

Backend Tasks: - [ ] Replace Mock VNF Implementation - Remove MockVCLProvider - Integrate real VNF Node.js SDK - Configure sandbox API credentials - [ ] Real Credential Issuance - Implement actual VNF credential generation - Add proper error handling for API failures - Validate credential schemas against VNF standards - [ ] Organization Registration - Complete real organization registration with VNF - Obtain valid organization DID - Test credential agent connectivity

Frontend Tasks: - [ ] Error Handling Enhancement - Add proper error messages for VNF API failures - Implement retry mechanisms for failed operations - Update loading states for real API calls

Testing: - [ ] End-to-end testing with real VNF sandbox - [ ] Credential validation testing - [ ] Performance testing with API calls

Week 3-4: Enhanced Batch Processing¶

Backend Tasks: - [ ] CSV Upload Optimization - Enhance bulk employee data processing - Add comprehensive data validation - Implement batch processing with real VNF APIs - [ ] Email Integration - Configure production SMTP services - Implement credential offer email templates - Add delivery tracking and analytics - [ ] Status Monitoring - Real-time credential status synchronization - Dashboard updates with actual VNF status - Export functionality for compliance

Frontend Tasks: - [ ] Batch Processing UI - Progress indicators for bulk operations - Error reporting for failed records - Batch status monitoring dashboard - [ ] Enhanced Dashboard - Real-time status updates - Search and filter improvements - Export functionality

Week 5-6: Production Readiness¶

DevOps Tasks: - [ ] Production Environment Setup - Configure production VNF API credentials - Set up monitoring and alerting - Implement backup and recovery procedures - [ ] Security Hardening - SSL certificate configuration - API key security management - Data encryption at rest and in transit - [ ] Performance Optimization - Database query optimization - API response caching - Load testing and scaling

Testing & Documentation: - [ ] User Acceptance Testing - End-to-end workflow testing - Performance validation - Security testing - [ ] Documentation Updates - API documentation - User guides - Deployment procedures

Phase 1 Deliverables¶

✅ Functional POC with real VNF integration
✅ Bulk Employee Processing (CSV upload, validation, batch credential creation)
✅ Email Notification System (templates, delivery tracking)
✅ Admin Dashboard (status monitoring, search, export)
✅ Production Deployment (secure, scalable, monitored)

Phase 1 Success Criteria¶

Process 100+ employee records successfully
Generate valid VNF credentials with 99%+ success rate
Achieve 95%+ email delivery rate
Complete batch processing within 5 minutes
Zero security vulnerabilities
Positive stakeholder feedback

Phase 2: Reclaim Protocol Integration (Priority: FUTURE)¶

Timeline: 20-30 weeks | Budget: £75,000-£150,000¶

Phase 2A: Architecture & Planning (Weeks 1-6)¶

Research & Design: - [ ] Reclaim Protocol Investigation - API capabilities and limitations assessment - Cost analysis and pricing model - Integration complexity evaluation - [ ] External Data Source Analysis - HMRC API access requirements - Open Banking integration options - Other government data sources - [ ] Architecture Design - Dual workflow system design (B2B + B2C) - Database schema extensions - Security and compliance framework

Stakeholder Alignment: - [ ] Business Case Development - Market analysis and opportunity sizing - Revenue model definition - Competitive analysis - [ ] Legal & Compliance Review - GDPR compliance requirements - Financial services regulations - Government data usage policies

Phase 2B: Core Integration (Weeks 7-18)¶

Backend Development: - [ ] Reclaim Protocol Service - SDK integration and API wrapper - Authentication and session management - Error handling and retry logic - [ ] External Data Source Manager - HMRC API integration - Open Banking API integration - Generic data source adapter pattern - [ ] Data Verification Service - External data validation - Quality assurance mechanisms - Fraud detection capabilities - [ ] Consent Management System - User permission tracking - Data access audit trails - Consent withdrawal mechanisms

Frontend Development: - [ ] Individual User Interface - Self-service credential claiming workflow - External data source selection - Consent management interface - [ ] Data Preview Components - External data visualization - Credential preview before issuance - Data accuracy confirmation - [ ] Dual Workflow Support - Unified navigation for B2B and B2C - Role-based access control - Workflow switching capabilities

Phase 2C: Testing & Deployment (Weeks 19-30)¶

Integration Testing: - [ ] External API Testing - HMRC sandbox integration - Open Banking test environment - End-to-end workflow validation - [ ] Security Testing - Penetration testing - Data privacy compliance - Vulnerability assessment - [ ] Performance Testing - Load testing with external APIs - Scalability validation - Response time optimization

Production Deployment: - [ ] Phased Rollout - Beta testing with limited users - Gradual feature enablement - Performance monitoring - [ ] Support Infrastructure - User support documentation - Troubleshooting guides - Monitoring and alerting

Phase 2 Deliverables¶

✅ Individual User Workflow (self-service credential claiming)
✅ External Data Integration (HMRC, Open Banking, others)
✅ Consent Management System (privacy compliance)
✅ Dual Platform Support (B2B + B2C workflows)
✅ Enhanced Security Framework (multi-jurisdiction compliance)

Phase 2 Success Criteria¶

Successfully integrate with Reclaim Protocol APIs
Retrieve and validate external data from 3+ sources
Achieve 90%+ external data retrieval success rate
Maintain GDPR and financial services compliance
Support 1000+ individual users
Generate positive ROI within 12 months

Resource Requirements¶

Phase 1 Team (4-6 weeks)¶

Core Team (4 people): - 1x Senior Backend Developer (VNF integration, API development) - 1x Senior Frontend Developer (UI/UX, dashboard enhancement) - 1x DevOps Engineer (infrastructure, deployment, monitoring) - 1x QA Engineer (testing, validation, documentation)

Part-time Support: - 0.5x Product Manager (stakeholder coordination, requirements) - 0.5x Security Specialist (security review, compliance)

Estimated Cost: £10,000-£15,000

Phase 2 Team (20-30 weeks)¶

Extended Team (8-10 people): - 2x Senior Backend Developers (external integrations, data services) - 2x Senior Frontend Developers (dual workflow, complex UI) - 1x Integration Specialist (external APIs, data sources) - 1x Security/Compliance Engineer (GDPR, financial regulations) - 1x DevOps Engineer (infrastructure scaling, monitoring) - 1x QA Engineer (comprehensive testing, automation) - 1x Product Manager (feature coordination, stakeholder management) - 0.5x Legal Consultant (compliance, data usage agreements)

Estimated Cost: £75,000-£150,000

Risk Assessment & Mitigation¶

Phase 1 Risks (LOW-MEDIUM)¶

Risk	Impact	Probability	Mitigation
VNF sandbox access delay	High	Medium	Continue with enhanced mocks, parallel customer engagement
API integration complexity	Medium	Low	Thorough documentation review, VCL support engagement
Performance issues	Medium	Low	Load testing, optimization, caching strategies
Security vulnerabilities	High	Low	Security review, penetration testing, compliance audit

Phase 2 Risks (HIGH)¶

Risk	Impact	Probability	Mitigation
Reclaim Protocol limitations	High	Medium	Thorough evaluation, alternative solutions research
External API dependencies	High	High	Multiple providers, fallback mechanisms, SLA agreements
Regulatory compliance	High	Medium	Legal consultation, compliance framework, regular audits
Market acceptance	Medium	Medium	User research, beta testing, iterative development
Technical complexity	High	High	Experienced team, phased approach, risk management

Decision Gates¶

Phase 1 Go/No-Go Criteria¶

Proceed to Production if: - [ ] VNF sandbox access obtained within 2 weeks - [ ] Real credential issuance working with 95%+ success rate - [ ] All security requirements met - [ ] Stakeholder approval for production deployment - [ ] Budget and timeline on track

Phase 2 Go/No-Go Criteria¶

Proceed with Reclaim Protocol if: - [ ] Phase 1 successfully completed and deployed - [ ] Positive market validation and user feedback - [ ] Reclaim Protocol technical feasibility confirmed - [ ] Business case approved with adequate budget - [ ] Legal and compliance requirements understood - [ ] Technical team capacity available

Communication & Reporting¶

Phase 1 Reporting¶

Weekly Status Reports: - Development progress against milestones - Blocker identification and resolution - VNF integration status updates - Risk assessment and mitigation actions

Key Stakeholder Updates: - Week 2: VNF integration progress - Week 4: Batch processing and email system demo - Week 6: Production readiness assessment

Phase 2 Reporting¶

Bi-weekly Status Reports: - External integration progress - Compliance and security status - User testing feedback - Budget and timeline tracking

Major Milestone Reviews: - Week 6: Architecture approval and business case sign-off - Week 12: Core integration demo and security review - Week 18: Beta testing results and go-live decision - Week 24: Production deployment and success metrics

Success Metrics & KPIs¶

Phase 1 KPIs¶

Technical Metrics: - Credential issuance success rate: >99% - API response time: <2 seconds - System uptime: >99.9% - Email delivery rate: >95%

Business Metrics: - Stakeholder satisfaction: >8/10 - User acceptance: >90% - Budget adherence: ±10% - Timeline adherence: ±1 week

Phase 2 KPIs¶

Technical Metrics: - External data retrieval success: >90% - System performance with dual workflows: <3 seconds - Security compliance: 100% - Data accuracy: >95%

Business Metrics: - Individual user adoption: >1000 users in 6 months - Revenue generation: Positive ROI within 12 months - Market penetration: 5% of target market - Customer satisfaction: >8/10

Immediate Next Steps¶

This Week (Phase 1 Kickoff)¶

Customer Engagement: Request VNF sandbox account access immediately
Team Assembly: Confirm Phase 1 team availability and start dates
Environment Setup: Prepare development and staging environments
Stakeholder Alignment: Confirm Phase 1 scope and success criteria

Next 2 Weeks¶

VNF Integration: Begin real API integration once sandbox access obtained
Progress Monitoring: Daily standups and weekly stakeholder updates
Risk Management: Monitor blockers and implement mitigation strategies
Phase 2 Planning: Begin preliminary research for future integration

Month 2-3 (Phase 1 Completion)¶

Production Deployment: Complete POC with real VNF integration
User Validation: Conduct user acceptance testing and gather feedback
Phase 2 Decision: Evaluate business case for Reclaim Protocol integration
Success Celebration: Acknowledge team achievements and lessons learned

Document Status: Final v1.0
Last Updated: March 10, 2026
Next Review: March 17, 2026
Approved By: [Pending Stakeholder Review]