WaveStore Backlog Explorer

Search

Epic

Priority

Size

Flags

Left edge: ▮ unknown ▮ not ready

Confirmed decisions

Twenty-five points where the delivered backlog departs from the client SOW. Each was raised, confirmed, and is cited in the stories it governs — nothing here is an inference presented as source.

#	SOW says	Confirmed decision	Impact
D1	"Sign up/registration is necessary" at checkout, but product detail says "checkout as guest or after logging in" — self-contradictory	Guest checkout allowed; account auto-created from the checkout email	US-021, US-022
D2	"Do you wish to provide subscription plans for vendors?" — open question in the SOW	Yes — Bronze/Silver/Gold paid plans, capped in SKUs per D22	Epic 9 (entire)
D3	"There will only be complete refunds... no partial refunds can be made by admin"	Partial refunds are in scope	US-038, US-110
D4	"Promo codes... will be managed by the admin of the system" (Admin Panel only)	Vendors also create codes for their own products; admin retains platform-wide codes and oversees vendor codes	Epic 13, US-118
D5	Promo discount funding never stated	Vendor absorbs the discount on vendor-created codes; platform absorbs the first-order popup code	US-089, US-113
D6	"Effective Earning" is a static per-product figure shown at product-add time	With vendor-funded promos it must be recalculated per order; the product-level figure becomes an indicative maximum	US-072, US-090
D7	Order status modelled as a single value per order	Multi-vendor cart becomes one order split into per-vendor sub-orders, each with its own status and shipping	US-024, US-028, US-077
D8	Single currency INR; vendors submit GSTIN/Aadhaar/PAN	India-only for v1; subscription tiers quoted in USD are converted at ₹90 = $1	Epic 9
D9	Reports limited to Sales & Revenue and Cancellation & Refund	Growth reporting added (vendor + admin), plus admin commission earned, subscription revenue, refund & return analytics	US-084, US-124–US-127
D10	No NFRs stated anywhere	99% uptime, 100,000 concurrent users, security, GDPR	Epic 20
D11	Promo discount funding silent on commission base	Commission is charged on the post-discount amount actually collected	US-089, US-062
D12	Single global Platform Commission	Tier rate wins; the global setting is the fallback for vendors with no active tier	US-062, US-123
D13	Refund effect on commission unstated	Commission is reversed pro-rata on any refund	US-124, US-112
D14	Approval required on new products only	Product records are versioned; rejecting an edit restores the last approved version, and stock-only changes do not delist	US-073, US-101
D15	Roles named, never defined	Permission matrix is module × (view / edit), one row per admin navigation item	US-094
D16	Deletion and erasure undefined	Erasure anonymises rather than deletes where financial retention applies; reviews are anonymised, not removed	US-095, US-145
D17	No privacy regime applicable to India	Build to India's DPDP Act as the governing regime, with GDPR-grade practice for future EU expansion	Epic 20 privacy
D18	Lapse behaviour past the 15-day cliff unstated	Platform auto-refunds every undelivered order at the cliff and notifies customers; recovery from the vendor happens offline	US-064
D19	"Variants — Add more", otherwise undefined	Full variants in scope: own price, stock, SKU and images, with a selector on the product detail page	Epic 21 (new)
D20	No performance thresholds	p95 < 2s browse/search, p95 < 4s checkout, error rate < 0.5% at target concurrency	US-135, US-141–US-143
D21	"Maintaining security" given without specifics	OWASP ASVS Level 2 plus an annual third-party penetration test	US-136
D22	Plan caps were set in products before variants existed	Caps are counted in SKUs, not products — Bronze 50, Silver 500, Gold unlimited. One variant = one SKU; a product with no variants = one SKU	US-059, US-061, US-155
D23	DPDP expects the consent notice in Eighth Schedule languages	English only in v1; additional languages in v2	US-156
D24	Restocking of returned goods unspecified	Returned goods do not re-enter sellable stock automatically; the vendor adds them back manually after inspection	US-151, US-160
D25	Significant Data Fiduciary status is designated by government, not self-assessed	Build the hooks in v1 — published data protection contact, audit-grade access log, DPIA register. Defer the DPO appointment and independent audit until designation actually occurs	US-161, US-162, US-163

Open questions

Every gap the document left. Resolved items keep their entry so the audit trail survives; open items name the stories they block.

#	Question	Resolution / affects	Status
OQ-1	Password policy is referenced ("the criteria defined") but never defined.	US-001, US-002, US-050, US-085	open
OQ-2	May one email exist once as a customer and once as a vendor, or is it globally unique?	US-003, US-054	open
OQ-3	Activation link expiry and resend path.	US-004	open
OQ-4	Failed-login lockout or rate limiting. Nothing is specified, and the security commitment in US-136 depends on it.	US-005, US-136	open
OQ-5	Does "Remember Me" store the password or a token, and what happens on logout?	US-006, US-052	open
OQ-6	What happens when a social login's email matches an existing password-based account?	US-007	open
OQ-7	Forgot Password fields, token expiry, and response to an unregistered email.	US-008	open
OQ-8	What drives search suggestions — product names, categories, past searches?	US-009, US-010	open
OQ-9	Which filter and sort attributes apply to vendor results?	US-013	open
OQ-10	Ratings are a sort attribute but appear on neither the product nor vendor detail field lists.	US-014, US-043	open
OQ-11	Variants undefined	Full variants in scope — own price, stock, SKU, images, with a product-page selector. Epic 21 (D19)	resolved
OQ-12	When is stock decremented — at add-to-cart, at payment, or at vendor acceptance?	US-016	open
OQ-13	Does decreasing a cart line to zero remove it, or is it blocked at 1?	US-018	open
OQ-14	Does a promo code stack with a product's own Discount?	US-019	open
OQ-15	Is there a minimum order value for promo codes?	US-019	open
OQ-16	How does a guest set a password for the auto-created account?	US-022	open
OQ-17	Retry behaviour after a declined payment.	US-023	open
OQ-18	What status does the customer see when sub-orders in one order disagree?	US-140	open
OQ-19	GST invoice requirements, given vendor GSTIN is collected and taxes are price-inclusive.	US-025	open
OQ-20	How many notifications are shown, over what period, and are they dismissible?	US-027, US-080	open
OQ-21	Which fields comprise "shipping details", and which logistics provider does tracking redirect to?	US-029, US-078	open
OQ-22	On a split order, does the customer get one invoice or one per vendor sub-order?	US-031	open
OQ-23	The complete trigger-email list. The SOW gives three examples and "etc."	US-032, US-113	open
OQ-24	Is the return reason free text or a structured list? Refund analytics grouping depends on it.	US-033, US-126	open
OQ-25	What is Stripe's refund window as a number, and therefore the ceiling on vendor-extended return windows?	US-034	open
OQ-26	If auto-refund fires before the vendor receives the goods, what happens when they arrive?	US-036, US-081	open
OQ-27	What is the path when a vendor denies a return? Can the customer dispute it?	US-037	open
OQ-28	On a partial refund, how are shipping cost and promo discount apportioned?	US-038, US-110	open
OQ-29	How is a customer told to contact admin to cancel, given there is no in-product route?	US-039	open
OQ-30	What are the "deductions" shown against a refund, given refunds were meant to be full?	US-040	open
OQ-31	Refund reminder cadence and escalation threshold.	US-041	open
OQ-32	Is a rating mandatory with a review, and may a customer review the same product twice?	US-042	open
OQ-33	Is a reviewer told when their review is removed?	US-042, US-104	open
OQ-34	Can a vendor reply to a review?	US-044	open
OQ-35	Wishlist: is login required, and can an item be added to the cart from it? Nothing beyond the menu item is specified.	US-045, US-046	open
OQ-36	Customers have an "Image" field in the admin view but not in their own profile.	US-047	open
OQ-37	Does changing the account email require re-verification?	US-048	open
OQ-38	Can saved addresses be added, edited or deleted, or only listed?	US-049	open
OQ-39	Are other sessions invalidated on a password change?	US-050	open
OQ-40	Does the notification-email toggle also govern marketing email? Relevant to GDPR consent.	US-051	open
OQ-41	Accepted file types and size limits for identity documents.	US-053	open
OQ-42	Which privacy regime	DPDP Act governs; GDPR-grade practice applied. US-156–US-159 (D17)	resolved
OQ-43	Must the temporary password issued on vendor approval be rotated at first login?	US-056, US-085	open
OQ-44	May a rejected applicant reapply, and what happens to their uploaded identity documents?	US-057, US-146	open
OQ-45	The admin "Add new users" form omits GSTIN and identity documents that the vendor form requires.	US-058	open
OQ-46	Does "Manage Subscriptions" in the admin nav mean vendor plans or the marketing subscriber list?	US-059, US-066, US-116	open
OQ-47	Dunning/retry policy before a subscription lapses, and renewal reminder cadence.	US-060, US-065	open
OQ-48	On downgrade below the new cap, which products are deactivated — and is the downgrade blocked instead? Do deactivated products count toward the cap?	US-061, US-074	open
OQ-49	Tier vs global commission	Tier rate wins; global is the fallback for vendors with no active tier (D12)	resolved
OQ-50	Lapsed vendor's undelivered orders	Platform auto-refunds at the 15-day cliff and notifies customers; recovery from the vendor is offline (D18)	resolved
OQ-51	Does admin reinstatement of a lapsed subscription collect payment or comp the period?	US-066	open
OQ-52	Limit on the number of videos per product.	US-068	open
OQ-53	Vendors set shipping per country, but v1 is India-only. Keep the multi-country structure or simplify?	US-070	open
OQ-54	Rejecting a product edit	Products are versioned; rejection restores the last approved version. Stock-only edits do not delist (D14)	resolved
OQ-55	What happens to orders, invoices and reviews when a product is deleted?	US-074	open
OQ-56	Does changing GSTIN or an identity document require admin re-verification?	US-075	open
OQ-57	Vendors see customer email and phone while direct contact is prohibited. Is that disclosure intended?	US-076, US-118	open
OQ-58	May an order status be reversed once set?	US-077	open
OQ-59	No status filter on the vendor queue, and no filters at all on admin Manage Orders.	US-079, US-106	open
OQ-60	Does "revenue" mean gross merchandise value or net of commission? It differs for vendor and admin.	US-082, US-121	open
OQ-61	Export format for reports. CSV is specified only for orders and transactions.	US-082	open
OQ-62	Do admin cancellations without refund appear in the vendor's refund report?	US-083	open
OQ-63	Which comparison periods for growth reporting — MoM, QoQ, YoY?	US-084, US-127	open
OQ-64	A vendor switching off notification emails risks missed fulfilment. Should order emails be exempt?	US-086	open
OQ-65	Do vendor and admin promo codes share one namespace?	US-087	open
OQ-66	Is at least one cap (time or quantity) mandatory, and may both apply?	US-088	open
OQ-67	Commission base on a discounted order	Post-discount — commission is charged on the amount actually collected (D11)	resolved
OQ-68	May a code that has already been redeemed be edited — for instance its allowance reduced below current usage?	US-091	open
OQ-69	Is admin login separate from customer login, at a separate URL?	US-092	open
OQ-70	Role granularity	Module × (view / edit), one row per admin navigation item (D15)	resolved
OQ-71	Erasure vs retention	Anonymise, don't delete, where financial retention applies; reviews anonymised not removed (D16)	resolved
OQ-72	Is there a service-level expectation for reviewing vendor registrations?	US-096	open
OQ-73	"Add new users" has no Role field, yet sub-admins are defined by their role.	US-097	open
OQ-74	The SOW says the product rejection note is "received by admin" — confirm the recipient is the vendor.	US-100	open
OQ-75	Do admin-created products bypass approval, and can admin exceed a vendor's product cap?	US-102	open
OQ-76	What happens when a category containing products, promo rules and report history is deleted?	US-103	open
OQ-77	Is an admin override of a vendor's order update logged and attributed?	US-105	open
OQ-78	When is "Cancel without refund" legitimate? The customer has no cancellation route of their own.	US-107	open
OQ-79	Does CSV export cover the whole table or the current filtered selection?	US-108	open
OQ-80	Do failed and refunded transactions appear in the transaction log alongside successful ones?	US-109	open
OQ-81	Are orders still inside the return window held back from vendor payables?	US-112	open
OQ-82	Email delivery retry policy on SendGrid failure.	US-113	open
OQ-83	Is the first-order promo code shown to a visitor who declines marketing consent?	US-114	open
OQ-84	What is DOB collected for? A stated purpose is required under the privacy commitment.	US-114	open
OQ-85	Does an auto-created guest account count as having ordered, for first-order promo eligibility?	US-115	open
OQ-86	The promo popup captures "Value" and "Quantity"; the list displays "Code". Confirm the mapping.	US-117	open
OQ-87	"Different marketing channels like emails" — is any channel other than email in scope?	US-119	open
OQ-88	Timezone handling for scheduled campaigns.	US-120	open
OQ-89	Admin reports filter only by date, while vendor reports also filter by category and product. Intended?	US-122	open
OQ-90	Commission on refund	Reversed pro-rata (D13)	resolved
OQ-91	Is annual subscription revenue recognised upfront or apportioned monthly?	US-125	open
OQ-92	How does main navigation change for an authenticated user?	US-129	open
OQ-93	The footer says "Cancellation & Refund Policies"; the CMS list says "Return Policy". One page or two?	US-130	open
OQ-94	The home page body is never specified — no hero, featured products or category tiles.	US-131	open
OQ-95	CMS accepts raw HTML. Is sanitisation required to prevent script injection?	US-132	open
OQ-96	"Blog", "Inspire", "Innovate" and "And more" are listed with no requirements. A blog is a content system, not a page — if multi-post publishing is intended, it needs its own epic.	US-133	open
OQ-97	Does 99% uptime exclude planned maintenance? It allows ~7.2 hours of downtime per month, which is modest for a payment-taking marketplace.	US-134	open
OQ-98	Performance thresholds	p95 < 2s browse/search, p95 < 4s checkout, error rate < 0.5% (D20)	resolved
OQ-99	Security standard	OWASP ASVS Level 2 + annual third-party penetration test (D21)	resolved
OQ-100	Consent notice in Eighth Schedule languages	English in v1, further languages in v2 (D23). Accepted compliance gap at launch — belongs on the risk register, not closed	resolved
OQ-102	Do returned goods re-enter sellable stock	No — not automatically. Vendor restocks manually after inspection (D24, US-160)	resolved
OQ-103	Do variants count against the plan cap	Caps are counted in SKUs, not products — Bronze 50, Silver 500, Gold unlimited (D22)	resolved

Traceability

Every section, highlight and assumption in the source document, mapped to the stories covering it — including the three deliberately left uncovered.

Source reference	Covered by	Status
Vendor registration, admin approval, document verification, admin-created vendors	US-053, US-055, US-056, US-057, US-058	Covered
Approved vendors list products/inventory per categories	US-059–US-066, US-067	Covered
"(Do you wish to provide subscription plans for vendors? If yes provide details)" — open question in the SOW	US-059–US-066	Covered via D2 `[STATED — user]`
Categories and sub-categories managed by admin only	US-103	Covered
Customer registration details, social sign-on, browse until checkout	US-001, US-007, US-021	Covered — contradiction resolved by D1
First-visit popup: name, email, DOB, consent, promo code, subscription list, promotional emails via third-party service	US-113, US-114, US-115, US-116, US-119	Covered
Customers view admin-managed information pages	US-133	Covered
Browse by category/sub-category and purchase	US-011, US-016, US-023	Covered
All payments to platform admin account; split managed outside the platform	US-023, US-112	Covered — US-112 is `[ASSUMPTION]`
Vendor notified of purchase order; tracking via vendor portal; no direct customer–vendor contact; admin can update/delete updates	US-026, US-077, US-078, US-105	Covered
Shipping handled by vendors offline; updates notified to admin and customer	US-029, US-032, US-070, US-078	Covered
Returns and refunds per global Refund policy; return request raised by customer	US-033, US-035, US-133	Covered
Vendor manages return pickup offline; only status updated on platform	US-037, US-081	Covered
Admin refunds full amount; max return duration per payment gateway	US-034, US-038	Covered — partially overridden by D3
Return request auto-notifies admin and vendor; vendor return period; admin refunds on lapse	US-035, US-036	Covered
New products reviewed by admin before approval	US-100	Covered
Promo codes managed by admin, distributed via marketing channels, scheduled triggers	US-117, US-118, US-119, US-120	Covered — extended by D4
Predefined trigger emails (order shipped, payment failed, refund completed)	US-032, US-113	Covered — trigger list incomplete (OQ-23)
Responsive UX/UI; admin and vendor portals desktop-only	—	NOT COVERED — a design and delivery constraint, not a functional story. Carry into design and DoR.
Single language (English), single currency (INR); multi-language/currency later	US-070, Epic 9	Covered — India-only per D8; multi-currency explicitly deferred
Revenue earned through commissions on products sold	US-062, US-123, US-124	Covered
Customer and vendor accounts maintained separately	US-003, US-054	Covered — ambiguity at OQ-2
Customer/vendor disputes handled by admin offline	—	NOT COVERED — explicitly off-platform. Referenced in US-037 (OQ-27).
Taxes included in the selling price, not added separately	US-020, US-025	Covered — GST invoicing open (OQ-19)
Shipping and logistics handled by vendor outside the platform	US-029, US-070, US-078	Covered
Only complete refunds; no partial refunds; window per gateway	US-034, US-038, US-110	OVERRIDDEN by D3 — partial refunds are now in scope
Admin can create sub-admins with privileges defined as Roles	US-094, US-097	Covered — no roles or permissions defined in the SOW (OQ-70)
Customer cannot cancel an order; cancellation is admin-only	US-039, US-107	Covered
All video content via YouTube/Vimeo embed links	US-068	Covered
Referral bonus not in current scope	—	NOT COVERED — explicitly deferred to a future version
Home page — Header	US-128	Covered
Home page — Main navigation	US-129	Covered
Home page — Footer	US-130	Covered
Home page — body content	US-131	Specified only as header/nav/footer — no body content defined (OQ-94)
Registration — fields and validation	US-001, US-002, US-003	Covered
Registration — account activation and Back to Login	US-004	Covered
Vendor Registration — form fields and documents	US-053	Covered
Login — fields, verification, redirect to dashboard	US-005	Covered
Login — Remember Me	US-006	Covered
Login — Register Now	US-001, US-005	Covered
Login — Forgot Password	US-008	Covered
Login — Facebook/Google social sign-on	US-007	Covered
Search Screen — product keyword search with suggestions	US-009	Covered
Search Screen — through Category	US-011	Covered
Search Screen — vendor keyword search	US-010	Covered
Search Page — product and vendor result attributes	US-012	Covered
Search Page — Filter and Sort attributes	US-013	Covered
Vendor Detail Page	US-014	Covered
Product detail screen — attributes and Supplied By	US-015	Covered
Product detail screen — Add to Wish List, Add Quantity, Buy Now/Add to Cart	US-016, US-045	Covered
Product detail screen — guest or logged-in checkout	US-021, US-022	Covered via D1
Shopping Cart — contents and totals	US-017	Covered
Shopping Cart — add more, remove, manage quantity	US-018	Covered
Shopping Cart — Add Coupon/Promo code	US-019	Covered
Shopping Cart — Make payment, validate, generate invoice	US-023, US-025	Covered
Customer Portal — Dashboard, notifications, access menu	US-027	Covered
Customer — My Account view and edit profile	US-047, US-048	Covered
Customer — My orders, current orders	US-028	Covered
Customer — Track My Product	US-029	Covered
Customer — Return action	US-033	Covered
Customer — Past order history	US-030	Covered
Customer — Add Review and Ratings	US-042	Covered
Customer — View and download invoice (PDF)	US-031	Covered
Customer — Cancellation and Refunds, amount refunded and deductions	US-040	Covered — "deductions" undefined (OQ-30)
Customer — Returns: view orders, return product, reason, pickup address	US-033	Covered
Customer — My Saved Addresses	US-049	Covered
Customer — Reset Password	US-050	Covered
Customer — Notification Settings	US-051	Covered
Customer — Logout	US-052	Covered
Vendor Portal — Dashboard and notifications	US-080	Covered
Vendor — My profile, view and update	US-075	Covered
Vendor — Manage Products: list, edit, delete, activate/deactivate	US-073, US-074	Covered
Vendor — View Reviews and Ratings	US-044	Covered
Vendor — Add new product: all fields	US-067, US-068, US-069, US-070, US-071	Covered
Vendor — Mark "On Sale" / Sale page	US-131	Covered — Sale page referenced only in passing
Vendor — Effective Earning	US-072	Covered — redefined by D6
Vendor — Add Product action and admin approval	US-067, US-100	Covered
Vendor — My Product Orders table	US-076	Covered
Vendor — Current Status values	US-077	Covered
Vendor — chronological sort and category/quantity filters	US-079	Covered
Vendor — Update Status and Add Shipping Details	US-077, US-078	Covered
Vendor — Return status transitions (auto and manual)	US-077, US-081	Covered
Vendor — Sales and Revenue Report	US-082	Covered
Vendor — Cancellation and Refund Reports	US-083	Covered
Vendor — report page elements (dates, category, product, generate)	US-082, US-083	Covered
Vendor — Reset Password	US-085	Covered
Vendor — Notification Settings and Logout	US-086	Covered
Admin — Dashboard and notifications	US-092, US-111	Covered
Admin — Navigation menu	US-092	Covered
Admin — Manage Users: customer and vendor records	US-093	Covered
Admin — associated product count popup	US-093	Covered
Admin — Edit/Delete user's details	US-095	Covered — deletion semantics undefined (OQ-71)
Admin — Approve/Reject New Vendor, credential and rejection emails	US-056, US-057, US-096	Covered
Admin — Add new users (Customer/Vendor/SubAdmin)	US-058, US-097	Covered — no Role field (OQ-73)
Admin — Manage Products: list, edit, delete, activate/deactivate	US-099	Covered
Admin — Remove Reviews	US-104	Covered
Admin — Add new product on a vendor's behalf	US-102	Covered
Admin — Approve Products with rejection note	US-100	Covered — recipient copy error (OQ-74)
Admin — Manage Categories	US-103	Covered
Admin — Manage Orders table	US-106	Covered — no filters specified (OQ-59)
Admin — Cancel with/without refund	US-107	Covered
Admin — Download as invoice PDF / CSV	US-108	Covered
Admin — Revert Transaction/Refund	US-110	Covered
Admin — View Transactions and CSV download	US-109	Covered
Admin — Reports: Sales and Revenue, Vendor-based, Product-based	US-121, US-122	Covered
Admin — Manage Promo Codes: Generate popup fields	US-117	Covered — Value/Quantity vs Code unreconciled (OQ-86)
Admin — promo code list attributes, Edit, Delete	US-118	Covered
Admin — Global Platform Settings: Platform Commission	US-123	Covered — conflicts with tier rates (OQ-49)
Admin — Manage Subscriptions (navigation item)	US-066, US-116	Covered — ambiguous referent (OQ-46)
Admin — CMS with text editor and HTML source view	US-132	Covered
Admin — Predefined content pages	US-133	Covered for policy pages; Blog, Inspire, Innovate, "And more" undefined (OQ-96)
Admin — My account: Reset Password, Notification Settings, Logout	US-098	Covered
(inferred) vendor payables figure for off-platform settlement	US-112	`[ASSUMPTION]` — the SOW pushes settlement off-platform without specifying the source figure
(inferred) aggregate rating display and recalculation	US-043	`[ASSUMPTION]` — derived from "Rating" being a listed sort attribute
(inferred) vendor visibility of promo funding impact	US-090	`[ASSUMPTION]` — a necessary consequence of D5
(inferred) approval queue for edited products	US-101	`[ASSUMPTION]` — the re-approval rule needs a queue to land in