Phase 2 Production Hardening Backlog
Date: 2026-04-15
Scope: Security, sync resilience, and production controls for school deployment readiness.
Prioritized Worklist
| Priority | Work Item | Owner | Requirement Mapping | Acceptance Criteria | Depends On |
|---|---|---|---|---|---|
| Critical | Backend password KDF for user create/reset flows | Backend | SRS NFR-007, SCR-001, ADR-0003 | ✅ Implemented — workers/src/modules/auth/password.ts uses PBKDF2 | N/A |
| Critical | Local PII encryption-at-rest strategy and rollout | Frontend + Security | SRS NFR-007, SCR-004, ADR-0004 | ✅ Implemented — encryptionHooks.ts + tests | Auth/session lifecycle hardening |
| High | Auth/session bridge hardening with expiry-safe offline queue behavior | Frontend + Backend | SRS FR-016, FR-017, SR-001, SCR-002 | Offline queue is preserved on expiry, protected submission blocked, and recovery after re-auth validated | Session validation contract |
| High | Automatic sync drain with retry/backoff and reconnect triggers | Frontend | SRS NFR-006, SR-001, SR-005, ADR-0002 | Pending queue drains automatically when online, retries are bounded, and timeout recovery is observable | Sync queue status telemetry |
| High | Conflict resolution UX from sync conflicts metadata | Frontend | SRS SR-002, SR-003, SR-004, SR-005, ADR-0005 | Users see conflict winner/loser policy and actionable state instead of silent failure | Sync response conflict payload |
| High | Global and route-level error boundaries | Frontend | SRS NFR-001, NFR-009 | ✅ Implemented — AppErrorBoundary in main.tsx | None |
| High | Security headers and input sanitization defaults | Backend | SRS NFR-008, SCR-005, ADR-0002 | ✅ Implemented — middleware security-headers.ts active | None |
| Medium | Lean MVP role simplification in UI | Frontend | PRD goals, SRS FR-009 | 🔄 Post-MVP — no forecast | None |
| Medium | Retention policy for synced queue/event records (audit-safe) | Product + Backend | SRS DR-002, SR-004, LGPD baseline | 30-day purge policy documented and excludes audit-critical records | Audit retention rules |
| Medium | Production CI/CD safety gates (no dev auth, mandatory migrations, release checks) | DevOps + Backend | ADR-0008, deployment guidance | Pipeline blocks production deploys without migrations and hardened auth mode | Environment matrix |
Delivery Order
- Backend auth hardening + API security defaults.
- Frontend runtime safety + automatic sync draining.
- Auth/sync bridge validation and conflict visibility UX.
- PII encryption-at-rest rollout.
- Governance controls (retention + CI/CD safety gates).