Back to About
Feature Matrix
Complete inventory of shipped capabilities across all platform modules.
69 shipped 2 partial
Transaction Processing
10 features
- Cash depositLive
- Cash withdrawalLive
- Cheque depositLive
- Transaction reversalLive
- Foreign currency exchange (over-counter)Live
- Internal FX exchangeLive
- Own-account IBAN transferLive
- Third-party IBAN transferLive
- Utility bill paymentLive
- OPA cash-limit enforcement per entity / currencyLive
Drawer Management
8 features
- Open drawer with denomination countsLive
- Real-time balance tracking by currencyLive
- Denomination-level balance trackingLive
- Cash transfer to vault (dual-control)Live
- Cash transfer from vault (dual-control)Live
- Teller-to-teller cash exchangeLive
- Close drawer — blocked if any balance ≠0Live
- Supervisor view of all open drawersLive
Vault Management
7 features
- Open vault with denomination countsLive
- Close vaultLive
- Cash in from drawersLive
- Cash out to drawersLive
- Dual-control: Supervisor ↔ BranchManagerLive
- Step-up re-auth required at approval timeLive
- Full denomination-level balance trackingLive
Branch Operations
7 features
- Branch open (BranchManager only)Live
- Branch closeLive
- Business session openLive
- Business session closeLive
- Business day registrationLive
- Emergency force-close with mandatory audit reasonLive
- Visual lifecycle panel (Branch→Session→Vault→Drawers)Live
Dual-Control Approvals
7 features
- Pending approval queue per branchLive
- Approve operationLive
- Reject operation with reasonLive
- Role-complement enforcementLive
- Self-approval block at service layerLive
- Full approval history (not just pending)Live
- Initiator role recorded at creation timeLive
Identity & Access
8 features
- PKCE authorization code flowLive
- Keycloak realm: mithaq-bankLive
- Six-tier role hierarchy enforcementLive
- Custom JWT claims (bank_entity, bank_branch_id)Live
- Step-up re-auth for vault approvalsLive
- User creation via Admin PortalLive
- User edit and password resetLive
- User deletionLive
OPA Policy Engine
7 features
- Cash limit enforcement per entity / currencyLive
- Supervisor override token (5-min TTL)Live
- Hard-deny when OPA unreachable (fail-closed)Live
- ABAC: role + entity + branch + currencyLive
- Cash limits auto-sync on startupLive
- Cash limits auto-sync on every admin saveLive
- Live Rego policy editor in Admin PortalLive
Admin Portal
7 features
- Teller roster management by dateLive
- Business day registrationLive
- Cash limit configurationLive
- Denomination set managementLive
- Keycloak user CRUDLive
- OPA data viewerLive
- China-Wall scoping for managersLive
Audit & Observability
4 features
- Immutable audit logs (entity-scoped)Live
- OpenTelemetry tracing (web + API + Keycloak)Live
- SigNoz integrationLive
- Structured syslog from all containersLive
Multi-Entity
4 features
- China-Wall row-level entity isolationLive
- Entity switcher in UILive
- Per-entity DB connection string overrideLive
- Entity-scoped OPA cash limitsLive
ESB Integration
2 features
- CBS adapter layer for all money-movement opsPartial
- .NET 9 mock ESB simulating CBS responsesPartial