QA and acceptance checklist — MIS
Application-specific validation
- [ ] Validate role-based server authorization on each private endpoint.
- [ ] Check separate re-verification for sensitive payroll workflows (private environment only).
- [ ] Test personal-data isolation and audit trails with synthetic employees.
- [ ] Verify native macOS build/signing separately from web route tests.
Generic public-release validation
- [ ] README disclaimer includes independent Jelvan R. presentation, NDA/confidentiality limitations and no company endorsement.
- [ ] Status explicitly identifies what is source-documented, tested, unverified or proposed.
- [ ] No real environment values or operational endpoints in Markdown or JSON.
- [ ] GitHub secret scanning / code scanning enabled when available.
- [ ] Device selector does not infer native client availability from a mobile viewport.
- [ ] Public screenshots and media have consent and contain synthetic data.
- [ ] Accessibility checks for focus, color contrast and text resizing.
- [ ] Portfolio integration uses safe fallback if iframe refuses embedding.
- [ ] Browser response CSP and Fetch Metadata behavior tested if using Cloudflare frames.
Acceptance result
Not executed for real applications. This checklist is an implementation plan, not a pass certificate.