Governance framework per Schedule 4 set up; all registers opened; master project plan baselined against Phase 1 scope and roadmap

Risk register, issue log, dependency register, change-control register, decision log, acceptance register, deliverables register, sprint tracker, defect register, action tracker, stakeholder comms log

First weekly written status report covering initiation progress, baseline plan, open risks, dependencies and decisions required from ICPC

First full monthly pack including status, risk register, issue log, budget/time report, acceptance status, quality and data-protection status, developer performance assessment

Second monthly pack covering mid-phase delivery progress, sprint performance, Phase 1 milestone trajectory

Tenant provisioning; geo data load; authentication (JWT/MFA/TLS); roles and permissions; append-only audit log; per-country data-protection compliance; cross-tenant isolation

Voter roll integration and verification infrastructure; M Hub to review architecture decisions, data flow, voter-roll restriction compliance, encryption at rest and security controls

Agent profiles; member registration; gap analysis; mobilisation and GOTV (VMT); pledge-to-vote; canvassing logs; response tracking; targeted SMS/WhatsApp/voice campaigns

Review forum app data capture design, architecture, API integration, data-protection handling and handover artefacts

Agent check-in; vote confirmation; digital tally sheets; photo evidence capture; AI-enhanced low-resolution photo processing; offline queue; call-centre fallback; incident and legal vault

Review architecture, real-time data pipeline, dashboard data integrity, access controls and demo evidence

Review projection tool design drawing on collection data, vote confirmations, social signals, DR submissions and exit poll entries; verify logic documentation

Written accept / conditionally accept / reject recommendations for all Phase 1 deliverables with reasons, test evidence, defects identified, risk rating and remediation recommendations

Confirm Afrisoft has committed all Phase 1 code and artefacts to ICPC-controlled repositories; confirm ICPC admin access to repos, CI/CD and issue trackers

Milestone approval input; risk governance update; stakeholder alignment notes; escalation memoranda if material issues identified

July pack covering Phase 1 closure, Phase 2 initiation, outstanding defects, testing plan status, load-test schedule and security audit readiness

Increase meeting cadence during load testing, security audit, pen-testing and mesh sync stress-testing windows; produce minutes for each session

Review analytics module completion, geographic heatmaps, drill-downs, predictive analytics, filters and export functionality against acceptance criteria

Verify load-test evidence against non-functional targets: 5–10M member records per tenant; 50,000 polling-station submissions in 4-hour window; sync under 2 min; APK under 30 MB

Review security audit findings covering JWT, MFA, TLS, encryption at rest, encrypted local SQLite, client-side encryption of incident photos, cross-tenant isolation; ensure no critical findings carried forward without ICPC written risk acceptance

Review pen-test scope, methodology and findings; escalate any critical or high-risk findings to ICPC immediately; confirm remediation before Phase 3 entry

Verify mesh sync stress-test evidence against the 7-days-offline capacity and under-2-minute sync targets; review offline queue behaviour under concurrent-agent load

Review training mode design and simulation environment; verify that demo environments use real/representative test data and functioning software — not slide decks

Verify evidence supporting 99.5% standard uptime and 99.9% Election Day uptime targets; review backup/recovery evidence and deployment readiness confirmation

Code review evidence, test evidence, security review, data-protection review, performance evidence, backup/recovery evidence, deployment readiness confirmation, handover completeness confirmation

M Hub written recommendation on Phase 3 pilot readiness, outstanding defects, risk rating and conditions precedent; Dr Sibande input on strategic alignment

August pack covering Phase 2 results, testing outcomes, defect status, Phase 3 readiness assessment and recommendations

Where required by ICPC: daily status reports covering pilot issues, defect status, rollout progress, readiness confirmation and escalation items

Increase meeting cadence; convene and minute sessions for go-live, simulation, pilot, production, critical defect and election-day readiness

Pilot and rollout pack covering national rollout status, production environment confirmation, final defect status and post-election analytics readiness

Monitor pilot deployment, capture structured feedback, escalate issues to ICPC, track defect remediation before national rollout

Monitor per-tenant production deployments; verify each tenant provisioning against scope; confirm cross-tenant isolation; escalate any rollout failure immediately

Final QA gate: code review, test evidence, security review, data-protection review, performance evidence, backup/recovery evidence, deployment readiness, handover completeness, 99.9% uptime evidence

Verify all source code committed to ICPC-controlled repositories; confirm ICPC admin access; confirm documentation completeness

Verify signed Flutter APK/IPA builds meet the under-30-MB target; confirm version control and release governance artefacts

Verify demo environment uses functioning software and representative test data per Cl. 6.6; confirm scope coverage

Review training materials and simulation mode against requirements; confirm coverage of all modules and channels

Verify all technical, API and handover documentation is complete, accurate and committed to ICPC-controlled systems

Review post-election analytics deliverable specification and readiness; confirm ICPC receives final analytics package

Final strategic oversight notes; milestone approval input; stakeholder alignment notes; strategic closure memorandum

Technical closure report on web systems; final security and performance evaluation; web QA checklist sign-off; final code-review report

Mobile technical completion report; final mobile performance and security assessment; mobile QA checklist sign-off; final mobile code-review report