ការសម្រេចចិត្ត (DEC និង ADR)

រាល់ការសម្រេចចិត្តសំខាន់ៗ ត្រូវបានសរសេរទុក ជាមួយហេតុផល ជម្រើសដែលបានពិចារណា និងផលវិបាក។ អត្ថបទពេញជាភាសាអង់គ្លេស។ របៀបអាន និងរបៀបស្នើការសម្រេចចិត្តថ្មី៖ GOVERNANCE.md។ [km-review]

DEC — ការសម្រេចចិត្តរបស់គម្រោង (20)

ID	Decision	Date	Status
DEC-001	Eligibility computation moves to M4	2026-07-31	—
DEC-002	Request-alert push moves to M4, token registration to M3	2026-07-31	—
DEC-003	Metrics event capture is a per-milestone requirement	2026-07-31	—
DEC-004	Scope cut to a buildable core	2026-08-07	—
DEC-005	All 14 districts are seeded; two codes ship provisional	2026-08-18	—
DEC-006	iOS build target added, capped at device/simulator build	2026-08-27	—
DEC-007	M7 internal-testing backend reached via tunnel, not a hosted deploy	2026-08-29	—
DEC-008	New M8 (ungraded): a demo-script for explaining the app to a first-time viewer	2026-08-29	—
DEC-009	The portal's request board is public; sign-in gates staff actions only	2026-09-06	accepted
DEC-010	Portal staff sign in with a username and password, not Google	2026-09-06	accepted
DEC-011	A skippable three-slide intro before sign-in	2026-09-22	accepted
DEC-012	The demo is the deliverable; the Play Store release comes after it, if at all	2026-09-23	accepted
DEC-013	Portal passwords come from the environment; nothing seeds one	2026-09-23	accepted
DEC-014	v1 has no hospital staff: the portal is admin-only	2026-09-26	accepted
DEC-015	An admin approves every request before any donor is alerted	2026-09-26	accepted
DEC-016	Account deletion: personal data goes, anonymous counts stay	2026-09-26	accepted
DEC-017	Admins may sign in to the portal with Google	2026-09-28	accepted
DEC-018	No card on the project: the functions run in the portal, Firebase stays on Spark	2026-09-29	accepted
DEC-019	Guidance follows Cambodian practice; the cooldown waits for the NBTC	2026-09-29	accepted
DEC-020	Code under Apache-2.0, docs and images under CC BY 4.0	2026-09-30	accepted

ADR — ការសម្រេចចិត្តផ្នែកស្ថាបត្យកម្ម (10)

ID	Decision	Status
ADR 0001	Stack & architecture	accepted
ADR 0002	Authentication via Google Sign-In, not phone OTP	accepted
ADR 0003	Donor location precision — how much of a donor's location we store	accepted
ADR 0004	ABO/Rh compatibility lives in a database lookup table	accepted
ADR 0005	Security verification targets OWASP ASVS Level 1	accepted
ADR 0006	Flutter app follows the course architecture — layered features, Riverpod 2.x with code generation	accepted
ADR 0007	Session JWT lives one hour; expiry is repaired by silent re-authentication, not a refresh token	accepted
ADR 0008	A request notifies at most 25 donors, and only notified donors get a match row	accepted
ADR 0009	Firebase (Firestore + Cloud Functions) replaces Spring Boot and PostgreSQL	accepted — on branch feat/firebase-backend; main unchanged until the branch runs the golden path
ADR 0010	The portal's server runs the functions; Cloud Functions and the Blaze plan go	accepted