# Phase 9C Execution Checklist (Back-Office Console MVP) Reference artifacts: - docs/wallet-implementation-plan-apps-mode.md - docs/phase-tracker.md - docs/domain-map.md - docs/phase-9A-execution-checklist.md - docs/phase-9B-execution-checklist.md - docs/adr/0005-api-error-and-idempotency-response-contract.md - docs/adr/0006-security-and-key-management-baseline.md - docs/adr/0011-compliance-and-data-governance-controls.md ## 1. Phase Objective Deliver the back-office web console MVP for operations, support, compliance, and security teams, including user management, transaction inquiry, device control, and service block/unblock operations with auditable admin actions. Phase status target: - Start: not-started - End: done when all core admin console workflows are implemented, policy-protected, and validated for operational readiness. Current phase status: not-started (2026-03-25) - planning draft prepared; implementation not started. ## 2. Scope In scope: - Admin console shell, privileged navigation, and role-aware action visibility. - User search and management by MMID, mobile, and name. - User-level controls for view/edit/block and lifecycle management actions. - Transaction inquiry with advanced filters (date, user, MMID, service, amount, status, device). - Device management console for register, block, and assignment changes. - Service blocking/unblocking controls per user and service. - Tenant configuration panel shell for future branding/rules/limits/workflow controls. - Application version management UI scaffold with manual/auto flow placeholders. - Audit and observability hooks for all privileged actions. Out of scope: - Customer self-service journeys (covered in Phase 9B). - Card/rewards/loan/insurance user experiences (covered in Phases 10A/10B). - Multi-tenant runtime execution of branding and tenant-specific content. - Native mobile back-office app requirements. ## 3. Work Breakdown ## Track A: Admin Access and Console Shell 1. Define admin console IA, role-aware navigation, and section ownership. - Owner: Platform UI Team + Operations Team - Output: approved admin IA and navigation map by role class. - Status: pending - Evidence: console sitemap and role-to-nav matrix. 2. Define privileged route taxonomy and policy checkpoints. - Owner: Security Team + Platform Team - Output: route groups for support, ops, compliance, and super-admin actions. - Status: pending - Evidence: route-policy matrix and denial behavior contract. 3. Define admin error and recovery UX standards. - Owner: UX Team - Output: consistent error handling, action confirmation, and rollback messaging. - Status: pending - Evidence: admin interaction pattern guide. ## Track B: User and Device Management 1. Implement user search and profile drill-down console. - Owner: Wallet Web Team - Output: searchable user directory with MMID/mobile/name filters and detail views. - Status: pending - Evidence: search/filter validation tests and usability walkthrough. 2. Implement admin user lifecycle actions. - Owner: Wallet Web Team + Accounts Team - Output: view/edit/block/unblock flows with reason capture and policy checks. - Status: pending - Evidence: lifecycle action tests and policy enforcement report. 3. Implement device management console workflows. - Owner: Wallet Web Team + Security Team - Output: register, block, reassign, and revoke device actions. - Status: pending - Evidence: device management integration tests and audit traces. 4. Implement session visibility and force-control actions. - Owner: Security Team + Wallet Web Team - Output: session listing and force revoke/logout UX for admin users. - Status: pending - Evidence: session control test scenarios and action audit logs. ## Track C: Transaction Inquiry and Service Control 1. Implement transaction inquiry list with advanced filters. - Owner: Wallet Web Team + Financial Domain Team - Output: high-volume inquiry screen with server-side filtering and pagination. - Status: pending - Evidence: transaction query filter correctness tests. 2. Implement transaction drill-down and investigation view. - Owner: Wallet Web Team - Output: detailed transaction timeline with status and references. - Status: pending - Evidence: investigation flow acceptance scenarios. 3. Implement service block/unblock per-user controls. - Owner: Wallet Web Team + Security Team - Output: block/unblock UI with reason, scope, and optional expiry metadata. - Status: pending - Evidence: service control action tests and policy coverage report. 4. Implement exception handling handoff hooks. - Owner: Operations Team + Compliance Team - Output: linkage from transaction inquiry to exception/compliance workflows. - Status: pending - Evidence: handoff integration walkthrough and traceability checks. ## Track D: Governance, Tenant Shell, and Readiness 1. Implement tenant configuration panel shell (deferred execution). - Owner: Platform Team - Output: non-operational panel structure for future tenant controls. - Status: pending - Evidence: panel shell UX and field inventory mapped to TODO backlog. 2. Implement application version management scaffold. - Owner: Platform Team + Operations Team - Output: manual/auto deployment action placeholders and policy guard points. - Status: pending - Evidence: version management UX flow and guard policy checklist. 3. Verify privileged action audit and observability coverage. - Owner: Observability Team + Security Team - Output: end-to-end audit for admin actions with actor/resource/outcome/correlation. - Status: pending - Evidence: sampled trace and audit event report. 4. Validate accessibility and responsive behavior for admin critical paths. - Owner: QA + UX Team - Output: baseline compliance across admin inquiry and management views. - Status: pending - Evidence: admin-path accessibility and responsive test report. ## 4. Deliverables 1. Policy-protected admin console shell and navigation by role. pending 2. User search/management and device management operational workflows. pending 3. Transaction inquiry and investigation workflows with advanced filters. pending 4. User-level service block/unblock controls with auditability. pending 5. Tenant configuration and version-management UI scaffolds for future phases. pending 6. Privileged action observability and audit baseline evidence. pending ## 5. Entry and Exit Criteria Entry criteria: - Phase 9A foundation and ABAC policy baseline approved. MET (dependency planning gate) - Security/auth route controls available via wallet_auth. MET - Core domain query/command interfaces for accounts/transfers/compliance available. MET Exit criteria: 1. Admin console workflows complete for search/manage/inquiry/device/service actions. pending 2. All privileged actions are policy-protected and denial paths verified. pending 3. Admin transaction inquiry is operational with approved filter semantics. pending 4. Audit and observability coverage validated for privileged operations. pending 5. Phase 10A/10B/10C dependencies are unblocked from admin side. pending ## 6. Risks and Mitigations 1. Risk: Privileged action misuse due to unclear policy boundaries. - Mitigation: strict policy matrix, deny-by-default, and explicit confirmation steps. - Status: open 2. Risk: High-volume search/inquiry pages degrade under operational load. - Mitigation: pagination defaults, indexed filters, and query guardrails. - Status: open 3. Risk: Device/service controls cause unintended user impact. - Mitigation: reason capture, scoped controls, optional expiry, and rollback workflows. - Status: open 4. Risk: Incomplete audit trails for sensitive admin operations. - Mitigation: mandatory action logging contract with correlation-id propagation tests. - Status: open 5. Risk: Tenant shell is mistaken for active multi-tenant support. - Mitigation: explicit non-operational labeling and deferred backlog references. - Status: open ## 7. Suggested Sprint Plan (3 Sprints) Sprint A: - Admin IA, route taxonomy, and role-aware navigation. - User search and management baseline. - Transaction inquiry list baseline. Sprint B: - Device management and session control actions. - Service block/unblock workflows. - Investigation detail and exception handoff hooks. Sprint C: - Tenant config/version management scaffolds. - Audit/observability validation for privileged actions. - Accessibility/responsive validation and sign-off package. ## 8. Evidence Checklist - [ ] Admin IA and role-to-navigation matrix approval notes. - [ ] User search/manage workflow test reports. - [ ] Device/session management action validation. - [ ] Transaction inquiry filter and investigation scenario results. - [ ] Service block/unblock policy and action audit evidence. - [ ] Tenant-config and version-management scaffold review notes. - [ ] Privileged action observability/audit traceability report. - [ ] Admin path accessibility/responsive baseline report. - [ ] Phase 9C sign-off note with owner approvals. ## 9. Deferred Backlog (Explicit TODO) 1. Multi-tenant branding/runtime configuration activation remains deferred. 2. Native mobile back-office experiences remain deferred. 3. Advanced multi-level approval workflows for privileged actions remain deferred unless promoted by governance.