# Feature Progress

| Module | Status | Implemented evidence | Remaining condition |
|---|---|---|---|
| Authentication | Complete in application | Login, reset, verification, password policy, session auth, rate limiting | Production mail and forced HTTPS |
| Users and RBAC | Complete in application | Super Admin-managed lifecycle, three least-privilege roles, active-account limits, suspension, sole-admin guard, quote ownership enforcement | Periodic access review process |
| CRM | Complete for Phase 1 | Customers, search/status, contacts, primary contact, sites/branches | Optional lead/opportunity pipeline |
| Catalog and pricing | Complete for Phase 1 | Categories, products, tax/rate data, quantity/customer overrides | Inventory is a later roadmap phase |
| Bill of materials | Complete | Structured sections/items, live totals, VAT, ownership, private files, approval, PDF/Excel, duplication, exact-value quote conversion | Site measurement integrations are optional |
| Quotes | Complete for core workflow | Draft, pricing, submit, immutable version, independent approval/rejection, send/accept markers, PDF, conversion | Actual email/WhatsApp delivery provider |
| Proformas | Complete for core workflow | Create/edit, approval workflow, PDF, invoice conversion | Actual delivery provider |
| Invoices | Operational | Source conversion, line items, status controls, PDF/watermark, eTIMS state, payment display | KRA-compliant credit/debit note workflow |
| eTIMS OSCU | Code complete for invoice submission | Official-host validation, credential checks, idempotency, redaction, queued submission, response persistence, bounded retries | KRA production credentials and acceptance testing |
| Payments | Complete for manual channels | Cash/bank/cheque/manual M-Pesa, idempotency, partial/full allocation, reversal | Automated Daraja STK/callback/reconciliation onboarding |
| Receipts | Complete | Automatic issue, PDF, signed QR verification, invalidation after reversal | Production public HTTPS URL |
| Completion certificates | Complete | Workflow, PDF/watermark, signed QR, cryptographic sealing/integrity detection | Production public HTTPS URL |
| Costs | Complete for requested scope | Categories, entry, approval, payment, references, dashboard/report integration | Procurement/AP is a later domain |
| HR and attendance | Complete for requested scope | Employee identity/statutory fields, daily/monthly rates, attendance states, overtime | Leave accrual and rostering were not specified |
| Payroll | Complete for requested scope | Attendance-derived calculations, monthly/daily basis, approval, payslip payment | Statutory filing/payment integrations |
| Reports | Operational | Dashboard charts, sales, VAT, aging, customer statements, CSV exports | BI warehouse and scheduled distribution are optional |
| Audit and security | Operational | Security event UI/export, request IDs, mutation/auth evidence, RBAC, OWASP controls | SIEM forwarding and retention policy |

“Complete” in this table means the locally intended application workflow is implemented. It does not mean provider onboarding, infrastructure, or legal acceptance has occurred.