3 Open Questions
Hardik edited this page 2026-06-19 14:06:07 +05:30

Open Questions

Decisions that needed sign-off before the corresponding feature was finalised (from Docs/03-open-questions.md). Some have since been answered by the shipped product — annotated below. Update as they resolve.

# Question Status / shipped answer
1 Should a manager be able to directly edit a PO (bypass the submitter edit cycle)? Effectively yes — managers edit line items inline before approving (MANAGER_LINE_EDIT audit); MANAGER can also create/submit.
2 Dual sign-off for POs above a value threshold? Open — single approver today.
3 Is the vendor registry Admin-only, or can Managers also add/edit? Resolvedmanage_vendors is held by Manager, Accounts, and Admin; submitters can add unverified vendors.
4 Is SSO required, or is internal credential management enough? Resolved — both: Microsoft Entra SSO and a credentials provider; SSO users have nullable passwords.
5 What currency/currencies? Multi-currency with FX in scope? Partlycurrency defaults to INR; multi-currency/FX not implemented.
6 Hard-delete vs permanent archive for rejected POs; retention window? Open.
7 Public document URLs vs always-signed/authenticated downloads? Resolved — downloads are auth-gated/presigned (dev route 404s in prod). See File Storage.
8 Row-level vessel/account restrictions per submitter? Open — any submitter can raise a PO against any cost centre.
9 Expected volume (POs/day, concurrent users) — for pool sizing / pms1 resourcing? Open.
10 Should manager analytics count only CLOSED POs, or all from MGR_APPROVED onwards? Resolved — "Approved this month" counts by approvedAt (all POs approved in the period), not just those currently in MGR_APPROVED. See Changelog.

For the design-era spec context, see Docs/01-design-document.md and Docs/DESIGN.md.