# ========================================================== # SPRINT 3 # ENTERPRISE AUDIT # ========================================================== ## OBJECTIVE Perform a comprehensive enterprise assessment of the ERP. The objective is to identify every weakness, risk, technical debt, business issue, accounting issue, tax issue, architectural issue, security issue, and operational issue. This sprint is ANALYSIS ONLY. Do not modify source code. Do not modify database. Do not redesign the ERP. Generate findings only. ========================================================== LOAD CONTEXT ========================================================== Read workflow_ai/discovery/ workflow_ai/knowledge/ Entire ERP Repository Use the Enterprise Knowledge Base as the primary source of truth. Only access source code when verification is required. ========================================================== PHASE 1 ARCHITECTURE AUDIT ========================================================== Evaluate Application Architecture Module Coupling Layer Separation Code Organization Dependency Management Maintainability Generate reports/ARCHITECTURE_AUDIT.md ========================================================== PHASE 2 SOURCE CODE AUDIT ========================================================== Evaluate Coding Standard Naming Convention Duplicate Code Fat Controllers Fat Models Business Logic Placement Magic Numbers Hardcoded SQL Unused Code Dead Code Generate reports/SOURCE_CODE_AUDIT.md ========================================================== PHASE 3 DATABASE AUDIT ========================================================== Evaluate Normalization Indexes Constraints Foreign Keys Data Integrity Transactions Performance Generate reports/DATABASE_AUDIT.md ========================================================== PHASE 4 BUSINESS PROCESS AUDIT ========================================================== Evaluate Business Rules Workflow Approval Validation Operational Risks Generate reports/BUSINESS_PROCESS_AUDIT.md ========================================================== PHASE 5 ACCOUNTING AUDIT ========================================================== Evaluate Journal Posting Ledger Financial Statements Inventory Accounting Cash Flow COGS Generate reports/ACCOUNTING_AUDIT.md ========================================================== PHASE 6 INDONESIA TAX AUDIT ========================================================== Evaluate PPN PPH eFaktur eBupot Tax Configuration Tax Posting Generate reports/TAX_AUDIT.md ========================================================== PHASE 7 SECURITY AUDIT ========================================================== Evaluate Authentication Authorization SQL Injection XSS CSRF File Upload Session Encryption Generate reports/SECURITY_AUDIT.md ========================================================== PHASE 8 PERFORMANCE AUDIT ========================================================== Evaluate Database Query N+1 Query Caching Memory Response Time Large Files Generate reports/PERFORMANCE_AUDIT.md ========================================================== PHASE 9 TECHNICAL DEBT ========================================================== Merge every finding. Remove duplicates. Generate reports/TECHNICAL_DEBT.md ========================================================== PHASE 10 ENTERPRISE HEALTH SCORE ========================================================== Score Architecture Business Database Accounting Tax Security Performance Maintainability Documentation Generate reports/ENTERPRISE_HEALTH_SCORE.md ========================================================== PHASE 11 EXECUTIVE SUMMARY ========================================================== Generate reports/EXECUTIVE_SUMMARY.md Include Overall ERP Health Critical Risks Quick Wins Long-term Risks Priority Recommendation ========================================================== VALIDATION ========================================================== Verify Every finding references evidence. Every finding has severity. Every finding references affected modules. Every finding references affected files when applicable. ========================================================== STOP Wait for Sprint 4.