
System boundaries
Define which service owns records and how the app reads or updates them. Handle expired sessions and unavailable systems explicitly. List the required outputs before setting the delivery schedule.
Test staff and customer roles using realistic records. Sensitive information should not appear merely because a screen is hidden in navigation. Keep essential access separate from an individual employee's login.
- A written brief
- Named responsibilities
- Agreed review points




