Skip to content

Traceability

Each workflow has a source of truth in code, a page that documents it, and a test that exercises it. This matrix keeps the three in step.

Workflow Source Documentation Test evidence
Auth and RBAC truload-backend/Authorization/*, Models/Identity/ApplicationRole.cs Auth & access · Security RBAC guard tests; login verification
Weighing capture truload-backend/Controllers/WeighingController.cs, TruConnect/src/ Weighing · Architecture Compliance end-to-end (14-step)
Case and prosecution Controllers/CaseRegisterController.cs, Controllers/CourtHearingController.cs Cases & prosecution Compliance end-to-end (case auto-create + prosecution)
Financial / Pesaflow Controllers/Financial/PaymentCallbackController.cs, Services/Implementations/Financial/ECitizenService.cs Financial & reports · Integrations (M-PESA) pesaflow_api_test.py, pesaflow_invoice_e2e.py, pesaflow_callback_reconciliation_e2e.py
Reporting Controllers/ReportController.cs, SupersetController.cs Financial & reports Daily summary + reconciliation exports
API contract Controllers/*, Swagger generator Swagger · OpenAPI · Live Swagger Contract diff on every release
Deployment devops-k8s/apps/truload-*, charts/app Deployment ArgoCD app health, kubectl get ingress
Security Authorization/*, Middleware/*, docs/AUDIT_SUMMARY_REPORT.md Security Internal audit report, all P0 findings resolved
Backup and DR docs/BACKUP_STORAGE.md, truload-backups PVC Backup, DR & troubleshooting Monthly restore drill record

Screenshot coverage

Screenshots live under docs/media/ and are embedded inline in the user guide and operations chapters that reference them. Folders: auth, weighing, caseregister, casemanagement, prosecution, reports, setup, truconnect, user-rbac-shift, security, integrations, special-release, dashboard.