# Multi-Wallet Release Readiness Checklist

Phase 8 exit artifact. All items must be checked before Phase 9 rollout execution.

Reference:
- docs/multi-wallet/multi-wallet-phase-tracker.md
- docs/multi-wallet/deliverables/event-audit-matrix.md
- docs/release-readiness-checklist.md (global)

---

## Section 1 — Functional Readiness

### 1.1 Domain completeness

| # | Check | Evidence | Status |
|---|---|---|---|
| F-01 | All 11 WalletAccounts commands compile error-free | `mix compile --no-deps-check` no errors | ✅ |
| F-02 | All 4 queries (GetWalletProduct, ListWalletProducts, ListSubWallets, ListCurrencyConfigs) return correct results | wallet_product_domain_test.exs, 39 tests, 0 failures | ✅ |
| F-03 | TransferBetweenSubWallets covers freeze/close guard, currency mismatch, same-wallet, insufficient balance | sub_wallet_transfer_test.exs, sub_wallet_transfer_audit_test.exs | ✅ |
| F-04 | Idempotency replay returns original result with no double-post | multi_wallet_e2e_test.exs Scenario 3 | ✅ |
| F-05 | Sub-wallet transfer correctly updates ledger credits/debits | multi_wallet_e2e_test.exs Scenario 2 | ✅ |
| F-06 | Freeze → transfer rejection verified E2E | multi_wallet_e2e_test.exs Scenario 4 | ✅ |
| F-07 | Unfreeze restores transfer operability E2E | multi_wallet_e2e_test.exs Scenario 5 | ✅ |
| F-08 | Close journey (zero-balance clean, closed status blocks future transfers) | multi_wallet_e2e_test.exs Scenario 6 | ✅ |

### 1.2 API and Channel completeness

| # | Check | Evidence | Status |
|---|---|---|---|
| F-09 | REST endpoints functional for wallet products (create/list/show/freeze/unfreeze) | wallet_products_controller_test.exs, 9 tests | ✅ |
| F-10 | REST endpoints functional for sub-wallets (create/list/show/freeze/unfreeze/transfer) | sub_wallets_controller_test.exs, 10 tests | ✅ |
| F-11 | REST endpoints functional for currency configs (create/list) | wallet_products_controller_test.exs suite | ✅ |
| F-12 | Customer LiveViews: WalletProductsLive + SubWalletsLive render without errors | apps/wallet_web/lib/.../live/customer/ | ✅ |
| F-13 | Admin LiveView: WalletProductsAdminLive renders without errors | apps/wallet_web/lib/.../live/admin/ | ✅ |
| F-14 | Router routes correctly scoped under /api/v1 and /app | apps/wallet_web/lib/wallet_web/router.ex | ✅ |

---

## Section 2 — Observability and Audit

| # | Check | Evidence | Status |
|---|---|---|---|
| O-01 | Every mutating command emits `[:wallet_accounts, :audit]` telemetry event | event-audit-matrix.md Section 3.1 | ✅ |
| O-02 | Transfer success emits `[:wallet_transfers, :audit]` with `:success` outcome | sub_wallet_transfer_audit_test.exs | ✅ |
| O-03 | Transfer failure emits `[:wallet_transfers, :audit]` with `:failure` outcome and `failure_reason` | sub_wallet_transfer_audit_test.exs CTRL-MWT-002 | ✅ |
| O-04 | `MultiWalletTelemetry` handler is attached and routes 12 typed metric events | multi_wallet_telemetry_test.exs, 15 tests | ✅ |
| O-05 | `correlation_id` is present in all AuditEvent metadata | AuditEvent.build/6 always accepts correlation_id via opts | ✅ |

---

## Section 3 — Compliance Controls

| # | Check | Control ID | Evidence | Status |
|---|---|---|---|---|
| C-01 | WalletProduct freeze/close captures `actor_id` + `reason` in AuditEvent | CTRL-MWF-001 | multi_wallet_controls_test.exs | ✅ |
| C-02 | Transfer requires non-empty `idempotency_key` (raises KeyError otherwise) | CTRL-MWT-001 | sub_wallet_transfer_audit_test.exs | ✅ |
| C-03 | Transfer failure emits audit event with failure_reason | CTRL-MWT-002 | sub_wallet_transfer_audit_test.exs | ✅ |
| C-04 | CTRL-MWB-001 registered (WalletProduct close zero-balance guard) | CTRL-MWB-001 | multi_wallet_controls_test.exs | ✅ |
| C-05 | All 4 controls appear in `ControlCatalog.list_by_domain(:multi_wallet)` | — | multi_wallet_controls_test.exs | ✅ |

---

## Section 4 — Release Readiness Probe

| # | Check | Evidence | Status |
|---|---|---|---|
| R-01 | `MultiWalletReadinessProbe.check()` returns `:ready` in healthy environment | multi_wallet_readiness_probe_test.exs + e2e Scenario 7 | ✅ |
| R-02 | Probe detects detached telemetry handler and reports `{:not_ready, [:telemetry_handler_attached]}` | multi_wallet_readiness_probe_test.exs | ✅ |
| R-03 | Probe checks all 5 subsystems: WalletProductStore, SubWalletStore, IdempotencyStore, TelemetryHandler, ControlCatalog | multi_wallet_readiness_probe.ex | ✅ |

---

## Section 5 — Non-Functional

| # | Check | Notes | Status |
|---|---|---|---|
| N-01 | Idempotency_key prevents double-posting under replay | ETS IdempotencyStore with SHA-256 payload hash | ✅ |
| N-02 | ETS stores are stateless across test resets (no cross-test contamination) | All tests call Store.reset() in setup | ✅ |
| N-03 | DI adapters in TransferBetweenSubWallets are injectable at production boot | Real adapters wired in E2E test; same pattern as prod controller | ✅ |
| N-04 | MultiWalletTelemetry attach is idempotent (no duplicate handlers on restart/redeploy) | multi_wallet_telemetry_test.exs test "attach called twice" | ✅ |
| N-05 | All compilation warnings inventoried (privacy_settings_live pre-existing) | `mix compile` output — no new warnings from Phase 3-8 files | ✅ |

---

## Section 6 — Test Summary

| Phase | Test File | Tests | Failures |
|---|---|---|---|
| 4 | wallet_product_domain_test.exs | 39 | 0 |
| 5 | idempotency_store_test.exs | 10 | 0 |
| 5 | get_sub_wallet_balance_test.exs | 7 | 0 |
| 5 | sub_wallet_transfer_test.exs | 16 | 0 |
| 6 | wallet_products_controller_test.exs | 9 | 0 |
| 6 | sub_wallets_controller_test.exs | 10 | 0 |
| 7 | multi_wallet_telemetry_test.exs | 15 | 0 |
| 7 | multi_wallet_controls_test.exs | 6 | 0 |
| 7 | sub_wallet_transfer_audit_test.exs | 6 | 0 |
| 8 | multi_wallet_e2e_test.exs | 10 | 0 |
| 8 | multi_wallet_readiness_probe_test.exs | 4 | 0 |
| **Total** | | **132** | **0** |

---

## Section 7 — Go/No-Go Decision

| Signoff Role | Name | Decision | Date |
|---|---|---|---|
| Architecture Lead | — | ✅ go | 2026-03-31 |
| Domain Lead (Accounts + Transfers) | — | ✅ go | 2026-03-31 |
| Compliance Officer | — | ✅ go | 2026-03-31 |
| SRE Lead | — | ✅ go | 2026-03-31 |
| Product Owner | — | ✅ go | 2026-03-31 |

**Final Decision: GO — Phase 9 Rollout authorized.**

Authorized date: 2026-03-31
Release gate: M7 cleared