From d95741385a0410c30fcca9a16d8771d06d7312f1 Mon Sep 17 00:00:00 2001 From: Niek Otten Date: Fri, 24 Jul 2026 10:37:41 +0200 Subject: [PATCH] docs(backlog): split S-15 into S-15a/b/c; mark S-16c done (refs #130) --- BACKLOG.md | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/BACKLOG.md b/BACKLOG.md index 627a2ef..a5b2c89 100644 --- a/BACKLOG.md +++ b/BACKLOG.md @@ -249,10 +249,16 @@ Split (issue #11 closed) into two independently-demoable slices per §13 — the ## Iteration 3 — Maintenance portal and observability *(milestone: `Iteration 3 — Beheer & Observability`)* -### S-15 · Beheer-portal — catalogus & default-fill rules +### S-15 · Beheer-portal — catalogus & default-fill rules *(split — #16 closed)* **Outcome:** Beheer portal lets an admin view ZTC catalogi (read-only first), and manage the ACL's default-fill configuration via a CRUD UI. MFA on the medewerker realm enforced. +Split into independently deployable sub-slices (CLAUDE.md §13): + +- **S-15a** (#130) · Beheer portal skeleton + read-only catalogi viewer — new beheer Angular app (medewerker-realm login) showing ZTC catalogi/zaaktypen read-only, via a BFF `/beheer/*` read endpoint proxying a read-only ACL Catalogi endpoint (§8.1, reuses the ADR-0021 Catalogi client). +- **S-15b** (#131) · ACL default-fill configuration CRUD — the `Acl__Defaults__*` config (ADR-0003) becomes a managed store with CRUD via the BFF + a portal UI. Depends on S-15a. +- **S-15c** (#132) · Enforce MFA (OTP) on the Keycloak medewerker realm. + ### S-16 · OpenTelemetry traces + Grafana dashboard *(split — #17 closed)* **Outcome:** Traces span portal → BFF → Domain → ACL → OpenZaak and portal → BFF → Domain → Flowable. Grafana dashboards pre-built for golden signals. @@ -261,7 +267,7 @@ Split into independently deployable sub-slices (CLAUDE.md §13): - **S-16a** (#122) · Observability backplane — Grafana Tempo + Prometheus + Grafana in compose, datasources auto-provisioned (ADR-0023). No collector; config baked into built images. - **S-16b** (#123) · Distributed traces across the five .NET services (OTLP → Tempo; traceparent propagates via the typed HttpClients). Depends on S-16a. ✅ -- **S-16c** (#124) · Prometheus metrics + golden-signal Grafana dashboards. Depends on S-16a. +- **S-16c** (#124) · Prometheus metrics + golden-signal Grafana dashboards. Depends on S-16a. ✅ ### S-17 · Quartz.NET scheduler — herregistratie reminder sweep ✅