Xprojects Tech
Advanced Engineering & System Hardening
| Ref | Deliverable / Task | Severity | Effort | Total (LE) |
|---|---|---|---|---|
| CR-01 | Server-authoritative discount / loyalty / cashier (exploit blocked) | 🔴 Critical | 7.0 hrs | 2,100 LE |
| CR-02 | Legacy sale — block expired stock + reject shortfall | 🔴 Critical | 2.0 hrs | 600 LE |
| CR-05 | Login session required on full-DB /api/state | 🟠 High | 1.5 hrs | 450 LE |
| CR-06 | Admin endpoints bound to an admin session (×5) | 🟠 High | 2.0 hrs | 600 LE |
| CR-04 | Secret-safe logging (fingerprints, no keys/token) | 🟠 High | 1.5 hrs | 450 LE |
| CR-03 | Server-side permission enforcement (supplier/purchase) | 🟠 High | 4.0 hrs | 1,200 LE |
| CR-07 | Atomic, verify-before-commit backups | 🟠 High | 3.0 hrs | 900 LE |
| CR-10 | Mandatory-table backup verification | 🟡 Medium | 2.0 hrs | 600 LE |
| CR-11 | Full invoice-import column mapping + correct counts | 🟡 Medium | 2.0 hrs | 600 LE |
| H-1 | PIN hardening — 600k PBKDF2 + constant-time compare | 🟡 Medium | 2.0 hrs | 600 LE |
| H-2 | Deployment integration — CORS / proxy-IP / remote-wipe | 🟠 High | 3.0 hrs | 900 LE |
| QA | Full regression (493 assertions) + live exploit proof + deploy | ⚪ Standard | 5.0 hrs | 1,500 LE |
Total Scope Effort:
35.0 Hours
Subtotal (300 LE/hr):
10,500 LE
Referral Discount (Eng. Abanoub):
- 3,500 LE
Net Total:
7,000 LE