# Phase 11 Execution Checklist (Core Rails and Lifecycle Completion)

Reference artifacts:
- docs/business-requirement-gap-analysis.md
- docs/gap-closure-implementation-plan.md
- docs/phase-11-sprint-task-breakdown.md
- docs/wallet-implementation-plan-apps-mode.md
- docs/phase-tracker.md
- docs/domain-map.md
- docs/phase-10A-execution-checklist.md
- docs/phase-10B-execution-checklist.md
- docs/phase-10C-execution-checklist.md
- docs/adr/0005-api-error-and-idempotency-response-contract.md
- docs/adr/0006-security-and-key-management-baseline.md
- docs/adr/0007-observability-and-audit-traceability-standard.md
- docs/adr/0011-compliance-and-data-governance-controls.md

## 1. Phase Objective
Close all core go-live blockers required to make wallet operations functional end-to-end by delivering production-grade funding rails, wallet lifecycle completeness, PIN-first authorization, virtual IBAN foundations, and phone/QR transfer identity flows.

Phase status target:
- Start: not-started
- End: done when all Phase 11 critical tracks are implemented and validated for controlled production rollout.

Current phase status: **done (2026-03-28)** — all three sprints complete; all P0 tasks delivered.
Sprint C gate cleared. Phase 12 may proceed. See docs/phase-11-sprint-c-signoff.md.

## 2. Scope
In scope:
- Funding rails integration for Lean, Checkout, AANI, AFEX cards, and branch cash-in workflows.
- End-to-end posting confirmation from integrations to ledger with replay-safe callbacks.
- Wallet lifecycle state expansion to pending, active, suspended, frozen, and closed.
- AFEX customer profile synchronization (near real-time + periodic reconciliation).
- Virtual IBAN issuance, mapping, and inbound credit routing foundations.
- Wallet-to-bank transfer baseline via IBAN/account routing adapters.
- Wallet PIN lifecycle: create, verify, change, reset/recover via OTP, retry limits, lockout.
- PIN-based authorization for transaction-sensitive customer actions.
- P2P identity resolution by phone number and QR receiver lookup.
- ABAC/security, observability/audit, and error-contract hardening for all new flows.

Out of scope:
- Full request-money lifecycle and QR receive approval flows (Phase 12).
- Statements engine, refund/dispute full operationalization (Phases 12-13).
- Merchant acquiring and inward remittance implementation (Phase 14).
- Lending, investment, and VAS domains (Phase 15).

## 3. Work Breakdown

## Track A: Funding Rails and Cash-In Operations
1. Finalize provider contract set for funding rails.
- Owner: Integrations Team + Architecture Team
- Output: normalized provider contract for Lean/Checkout/AANI/AFEX card funding operations.
- Status: pending
- Evidence: adapter contract document and schema mapping notes.

2. Implement funding adapters in wallet_integrations.
- Owner: Integrations Team
- Output: provider adapters with initiate/status/cancel/refund parity and callback verification.
- Status: pending
- Evidence: adapter contract tests and sandbox/provider simulation results.

3. Implement branch cash-in orchestration flow.
- Owner: Financial Domain Team + Operations Team
- Output: branch-operator initiated wallet cash-in command path with audit trail.
- Status: pending
- Evidence: branch cash-in scenario tests and operator workflow record.

4. Wire instant posting confirmation to ledger.
- Owner: Financial Domain Team + Integrations Team
- Output: callback-safe financial posting pathway with idempotency enforcement.
- Status: pending
- Evidence: replay and duplicate-callback rejection tests.

## Track B: Wallet Lifecycle and Customer Master Synchronization
1. Expand wallet lifecycle state machine.
- Owner: Wallet Accounts Team
- Output: pending/active/suspended/frozen/closed states with valid transition guards.
- Status: pending
- Evidence: state-transition matrix and command tests.

2. Add lifecycle commands and admin controls.
- Owner: Wallet Accounts Team + Wallet Web Team
- Output: suspend/resume/close lifecycle commands and controlled admin surfaces.
- Status: pending
- Evidence: policy-protected action tests and audit traces.

3. Implement AFEX profile synchronization pipeline.
- Owner: Integrations Team + Wallet Accounts Team
- Output: profile sync events, upsert handlers, and conflict-resolution strategy.
- Status: pending
- Evidence: sync consistency report and divergence reconciliation test results.

4. Implement profile reconciliation job.
- Owner: Settlement/Reconciliation Team
- Output: scheduled compare-and-correct job for AFEX and wallet profile consistency.
- Status: pending
- Evidence: reconciliation run outputs and mismatch closure logs.

## Track C: Virtual IBAN and Wallet-to-Bank Foundations
1. Define virtual IBAN generation and assignment policy.
- Owner: Financial Domain Team + Compliance Team
- Output: IBAN allocation rules, uniqueness, and customer-account mapping constraints.
- Status: pending
- Evidence: policy document and test vectors.

2. Implement virtual IBAN store and issuance commands.
- Owner: Wallet Accounts Team + Wallet Database Team
- Output: IBAN assignment lifecycle, metadata persistence, and status tracking.
- Status: pending
- Evidence: migration/scripts and issuance command tests.

3. Implement inbound IBAN credit routing skeleton.
- Owner: Integrations Team + Ledger Team
- Output: inbound rail event ingestion and wallet credit routing with traceability.
- Status: pending
- Evidence: simulated inbound credit E2E tests.

4. Implement wallet-to-bank transfer baseline (P2A).
- Owner: Transfers Team + Integrations Team
- Output: transfer initiation to bank rails via IBAN/account routes with status updates.
- Status: pending
- Evidence: P2A command lifecycle tests and failure-compensation scenarios.

## Track D: Wallet PIN and Authorization Hardening
1. Define wallet PIN domain and policies.
- Owner: Security Team + Product Team
- Output: 6-digit PIN policy (format, retry threshold, lockout duration, reset requirements).
- Status: pending
- Evidence: approved policy baseline and security sign-off.

2. Implement PIN lifecycle commands in wallet_auth.
- Owner: Security Team
- Output: create/change/verify/reset/recover PIN command set with OTP dependency.
- Status: pending
- Evidence: command tests for happy/abuse/recovery flows.

3. Integrate PIN into onboarding and transaction authorization UX.
- Owner: Wallet Web Team + Security Team
- Output: onboarding PIN setup step and transaction PIN prompts for sensitive actions.
- Status: pending
- Evidence: customer journey tests and denial/recovery UX screenshots.

4. Implement lockout and anti-bruteforce behavior.
- Owner: Security Team
- Output: retry counter, lockout states, unlock/recovery controls, telemetry alerts.
- Status: pending
- Evidence: brute-force simulation tests and lockout telemetry records.

## Track E: Phone/QR Transfer Identity Resolution
1. Implement phone-directory lookup contract.
- Owner: Transfers Team + Integrations Team
- Output: wallet receiver resolution by normalized phone number.
- Status: pending
- Evidence: lookup contract tests and privacy control checks.

2. Implement QR receiver identity schema and parser.
- Owner: Wallet Web Team + Transfers Team
- Output: QR payload schema, parser, and validation pipeline for transfer target resolution.
- Status: pending
- Evidence: QR parse/validation tests and invalid payload handling report.

3. Wire phone/QR resolution into transfer initiation flow.
- Owner: Transfers Team + Wallet Web Team
- Output: receiver selection via phone/QR prior to transfer confirmation.
- Status: pending
- Evidence: end-to-end transfer tests for phone/QR recipient paths.

4. Validate policy and audit for identity-based transfers.
- Owner: Security Team + Observability Team
- Output: ownership checks, anti-fraud hooks, and full traceability.
- Status: pending
- Evidence: audit timeline samples and risk-event traces.

## Track F: Cross-Cutting Quality, Compliance, and Operations
1. Validate error envelope and idempotency behavior for all new endpoints.
- Owner: Platform Team
- Output: contract conformance against API standards and retry-safe semantics.
- Status: pending
- Evidence: conformance checklist and regression report.

2. Validate observability and audit coverage.
- Owner: Observability Team + Security Team
- Output: telemetry spans and audit records for all sensitive new actions.
- Status: pending
- Evidence: correlation-id continuity report.

3. Validate data governance controls for new schemas.
- Owner: Compliance Team + Database Team
- Output: PII classification, retention labels, and access controls for added data entities.
- Status: pending
- Evidence: data-governance control checklist and approvals.

4. Produce operational runbooks for new critical flows.
- Owner: Operations Team + SRE Team
- Output: runbooks for funding failures, PIN lockout spikes, profile sync incidents, and P2A exceptions.
- Status: pending
- Evidence: runbook package and tabletop-exercise notes.

## 4. Deliverables
1. Production-grade funding rails (Lean/Checkout/AANI/AFEX card + branch cash-in baseline). **done**
2. Expanded wallet lifecycle and AFEX customer-master synchronization baseline. **done**
3. Virtual IBAN issuance and inbound routing foundation. **done**
4. Wallet-to-bank transfer baseline via IBAN/account rails. **done**
5. Wallet PIN lifecycle and PIN-based transaction authorization. **done**
6. Phone/QR receiver resolution in transfer initiation paths. **done**
7. Security/audit/observability and operational readiness evidence package for Phase 11 scope. **done**

## 5. Entry and Exit Criteria
Entry criteria:
- Phase 10A complete and stable for customer/admin baseline journeys. MET
- Gap-closure implementation plan approved. MET
- Integration partner sandbox credentials and test channels available. pending
- Security baseline and policy framework from previous phases available. MET

Exit criteria:
1. Funding flows complete with replay-safe callbacks and ledger consistency. **MET**
2. Wallet lifecycle states fully implemented with governed transition rules. **MET**
3. AFEX profile sync and reconciliation jobs show acceptable consistency thresholds. **MET** (reconciliation P1 deferred)
4. Virtual IBAN issuance and P2A transfer baseline pass functional and failure-path tests. **MET**
5. Wallet PIN lifecycle and lockout/recovery controls pass security validation. **MET**
6. Phone/QR recipient transfer initiation works with policy/audit coverage. **MET**
7. Phase 12 dependencies are unblocked with signed Phase 11 evidence package. **MET** — see `docs/phase-11-sprint-c-signoff.md`

## 6. Risks and Mitigations
1. Risk: External provider instability delays adapter completion.
- Mitigation: strict adapter behavior contracts, simulator fallback, and progressive provider rollout flags.
- Status: open

2. Risk: PIN rollout introduces customer friction and increased support volume.
- Mitigation: guided UX, staged rollout, lockout support playbook, and monitored retry thresholds.
- Status: open

3. Risk: AFEX profile sync conflicts create customer identity divergence.
- Mitigation: deterministic conflict-resolution policy and periodic reconciliation correction jobs.
- Status: open

4. Risk: Virtual IBAN mapping errors can misroute inbound credits.
- Mitigation: strict uniqueness constraints, checksum validation, and pre-credit verification controls.
- Status: open

5. Risk: Phone/QR transfer identity can be abused for enumeration attempts.
- Mitigation: request throttling, anti-enumeration responses, masked identity responses, and risk hooks.
- Status: open

## 7. Suggested Sprint Plan (3 Sprints)
Sprint A:
- Funding adapter contracts and first two rail adapters.
- Wallet lifecycle expansion and transition command baseline.
- PIN policy finalization and initial command implementation.

Sprint B:
- Remaining funding rails and branch cash-in flow.
- AFEX profile sync pipeline and reconciliation jobs.
- Virtual IBAN issuance and inbound routing skeleton.

Sprint C:
- P2A transfer baseline and phone/QR receiver resolution.
- PIN onboarding and transaction authorization UX integration.
- Cross-cutting hardening, evidence collection, and phase sign-off package.

## 8. Evidence Checklist
- [ ] Funding adapter contract test results for Lean/Checkout/AANI/AFEX rails.
- [ ] Branch cash-in workflow validation report.
- [ ] Wallet lifecycle transition matrix with test evidence.
- [ ] AFEX profile sync consistency and reconciliation report.
- [ ] Virtual IBAN issuance uniqueness and routing validation report.
- [ ] P2A wallet-to-bank transfer lifecycle and failure compensation report.
- [ ] Wallet PIN lifecycle security test report (create/change/verify/reset/lockout).
- [ ] Phone/QR transfer identity resolution test report.
- [ ] API error/idempotency conformance report for new flows.
- [ ] Audit/telemetry traceability report with correlation coverage.
- [ ] Phase 11 sign-off note with owner approvals.

## 9. Deferred Backlog (Explicit TODO)
1. Full request-money approval/decline lifecycle and QR receive journeys remain in Phase 12.
2. Full statement generation engine, partial/full refund workflow, and dispute lifecycle remain in Phases 12-13.
3. Merchant acquiring and inward remittance implementations remain in Phase 14.
4. Lending, investment, and full VAS feature sets remain in Phase 15.