Dashboard

Team delivery, deferrals and audit health.

Under team: —

Offline local

Priority work

Open work sorted by urgency, due date and blockers.

Document deferral health

Track deferred shipping, regulatory or internal documents until regularized.

Due this week

Tasks and deferrals due within seven days.

Recent audit

Latest field-level changes by users.

Team workload

Open items by owner.

Cluster / Department dashboard

Cluster Heads see only their approved cluster teams. Trade Dept Head can see every team dashboard and access every team workspace.

Scope
Login as Cluster Head or Trade Dept Head to view consolidated dashboards.

Accessible team workspaces

Open a team from the approved scope. Import teams are grouped under Import cluster; Export teams under Export cluster; MIS/Risk/Core Ops are controlled smaller clusters.

Team
Cluster
Open tasks
Done
Overdue
Deferrals
Action

Team control center

Each workspace has its own editable member list, team lead, task ownership and backup responsibility.

Editable team members

Rename members, set lead, add task beside a person, or remove names no longer used by this workspace.

Workspace readiness check

Built-in operating check for ownership, backup cover, deadline visibility, audit discipline and capacity control.

—

Kanban board

Drag cards across columns. Moving a card creates an audit record under your name.

Task management

Tap any task row to edit completely. Add daily task / BAU with owner, backup member, progress, due date and full audit trail.

TaskStatusPriorityOwnerBackup RPDueProgressUpdated

Project management

Create projects with multiple members, one SPOC / lead, milestone dates, progress, status and full audit trail. Tap any project row to edit it.

Project control: each project can have multiple project members and one SPOC / lead. All create, edit, closure and delete actions are retained in Master Audit DB.
ProjectStatusSPOC / LeadMembersTimelineProgressUpdated

Spreadsheet capacity register

High-volume row and column workspace for tasks and document deferrals. Inline changes are audited by user, time and update note.

0 records0 columnsRoom
Page 1
Capacity design: this register renders by page so the interface can handle many records without freezing. For truly unlimited commercial records across many users, connect the sync backend/database; local browser storage still depends on the user device and browser quota.
—
Checking capacity

Capacity is calculated from browser storage estimate when available.

Maximum capacity

Current team workspace

Browser maximum
—
Used storage
—
Remaining
—
Current team size
—
IndexedDB rooms
—
Total records
—
Checking available space and recommendations.

Capacity action guide

What reduces capacity and what cleanup increases capacity.

ActionCapacity impactRecommendation

Safe cleanup tools

Export backup first. These actions reduce local data size inside the active team workspace.

Important: normal task deletion keeps audit evidence and a deleted-record bin. For capacity recovery, use archive/trim tools after exporting a JSON backup.

Security vault

This deployable workspace uses user-name accountability, field-level audit, encrypted backup options and a tamper-evident audit hash chain. It can run on Cloudflare Pages while retaining offline-first local storage.

Build modeProtocol

Security benchmark

Practical offline security score based on identity, audit, encryption, chain verification and backup discipline.

—
—

Run verification to refresh the score.

Encrypted backup

Export a password-protected AES-GCM backup. This protects data when the file is shared, stored or moved between devices.

Important: encryption is only as strong as the password. If the password is lost, the encrypted backup cannot be recovered.

Blockchain-style audit chain

Each audit entry is sealed with the previous entry hash. If anyone edits old records, verification will show a broken chain.

Chain status—
Sealed entries—
Issues—
No sealed hash yet
Run verification after importing backup or receiving synced records.

Team access control

Each team has an owner, optional team password, profile login, and storage-location control.

Access control
Profile and storage status will appear here.

Password change centre

Change the key passwords used in this file without changing existing workflow logic. Every successful or blocked change is audited where a user/team context is available.

Controlled

Change my login PIN

Change delete password

Change owner modification password

Team password and encrypted file unlock

Team password is changed from the Team access control section above. This Cloudflare edition has no outer HTML unlock password; use profile PINs, team controls, owner authorization and encrypted backups.

Control rule: keep password changes limited to authorized users. Delete and owner-password changes are separately audited and do not erase previous audit evidence.

Blockchain control seal

Permission rules, delete-password control, master audit retention and encrypted backup discipline are summarized as a control-policy hash. This helps detect changed rules after file updates.

Pending
Delete control: task, project, deferral, document, member removal, deleted-bin cleanup and reset actions are protected and recorded in Master Audit DB when executed or blocked.

Permission Matrix

Role-permission matrix for every user type. This screen explains exactly what each role can do without changing existing operating logic.

Current role
Login to see your current role and approved scope.

Blockchain control seal

Role rules, delete controls, row audit and master audit are represented as a tamper-evident control policy hash.

Pending
Security note: this offline HTML app can encrypt backups and hash-seal audit evidence. True hack-proof protection still requires organisation folder permissions, HTTPS/backend login, and server-side database access control.

10/10 improvement roadmap

Items that would move this from strong offline control to enterprise-grade control.

Deferral management

Tap any deferral row to edit completely. Track missing/deferred documents, follow-up commitment, approver, regularization date and full audit history.

Document / ReferenceClient / ProjectStatusOwnerOriginal dueDeferred untilRiskLast update

Calendar

Task due dates and document deferral deadlines.

Docs & notes

Meeting notes, SOPs, decisions or project wiki pages.

Editor

Save creates an audit entry with your name.

Audit trail

Every user update is recorded by field, date, time and update note. This view is read from the master audit database.

Same-field change history

Select any task or deferral in edit view to see all users’ changes for that exact item.

Open an item to view its field history.

Master audit trail database

Separate append-only audit evidence for this team. Task, deferral, member, join, delete and cleanup events remain here even if the original row is deleted or the working audit list is trimmed.

Control rule: this master audit database is locked from app delete and cleanup buttons. Export JSON/encrypted backups regularly. A browser file cannot stop a technical user from editing source code, but normal users cannot remove master audit records through this interface.

User Guide & Operating Manual

Practical instructions for using this team project workspace safely, consistently and with strong audit control.

Purpose: this app is designed for controlled team task management, document deferral follow-up, maker/checker-style accountability, capacity monitoring and evidence retention. Use one selected team at a time and make every update under your own secure profile.

1. Guest Demo

  1. Select Guest Demo beside Signup and Login, or open /tools/project-management/demo/.
  2. No signup, PIN or organisation account is required.
  3. The demo opens a sample Team Lead workspace with tasks, a project and a deferral.
  4. Demo changes stay only in the current browser tab and are cleared when the tab is closed.
  5. Server sync, cloud attachments and server reminders are not included in this release.

2. First-Time Signup

  1. Open the deployed HTTPS site or approved offline copy.
  2. Select an existing team or create a new team when permitted and below the 20-team limit.
  3. Enter your full name, a valid email address, gender, optional mobile number and a four-digit PIN.
  4. Select the correct user type and cluster where applicable.
  5. Your signup team becomes your default team and all future changes carry your profile identity in audit records.

3. Existing User Login

  1. Select Existing User Login.
  2. Choose the relevant user type and team unless logging in as Admin.
  3. Use either full name plus PIN or registered email plus PIN; name and email matching is case-insensitive.
  4. Admin is a separate backup-and-governance profile and does not automatically receive operational team visibility.
  5. Use Change Profile to switch between an approved team role and Admin role.

4. Teams And Join Requests

  1. Work inside one active team at a time and confirm the team name in the header before updating records.
  2. A normal member requesting another team is held in pending status until that team’s Team Lead or Owner approves.
  3. Team Lead and Owner can review pending requests from Team Directory.
  4. Request, approval, rejection, member addition and access removal are audited.

5. Roles, Clusters And Management Matrix

  1. Team Member works within approved teams; Team Lead governs the team; Cluster Head governs approved cluster teams; Trade Dept Head has department-wide scope; Admin handles backup and governance controls.
  2. The local Management Matrix controls view, create, edit, assign, close, delete, team, matrix, automation, restore and notification permissions.
  3. This browser-local Matrix is an operational control, not server authentication.
  4. Blocked actions are recorded for control review.

6. Task Management

  1. Create tasks from Dashboard, Task Management, Management Grid, Spreadsheet Register or Team Directory.
  2. Complete owner, backup owner, priority, start date, due date/time, progress, estimated hours and work type.
  3. Use subtasks, dependencies, parent task, milestone, recurrence, approval status, tags, RACI and attachment links as required.
  4. Use Start/Stop Timer for actual time entries.
  5. Closing or deleting work follows Matrix permissions, mandatory remarks and password controls where configured.

7. Projects, Portfolios And Goals

  1. Create projects with lead, members, priority, dates, progress, status and RACI.
  2. Use Timeline for date comparison and dependency awareness.
  3. Use Portfolio Health to review delivery risk across projects.
  4. Use Goals to connect team outcomes with measurable progress.
  5. Project create, change, closure and deletion remain auditable.

8. Deferral Management

  1. Record deferred or missing documents with reference, client/project, owner, risk, original due date, deferred-until date, approver and reason.
  2. On mobile, use Deferrals in the bottom navigation for direct access. The Capacity Meter remains available from the top capacity gauge and the main menu.
  3. Overdue deferrals remain visible until regularized, waived or closed.
  4. Use closure remarks and evidence before final closure.
  5. Every field change and deletion is retained in row audit and Master Audit DB.

9. Management Grid And Spreadsheet

  1. Use Management Grid to combine tasks, projects and deferrals in one command centre.
  2. Filter My Work, overdue, blocked, milestones, owner, status and priority.
  3. Use bulk owner or status changes only within your Matrix authority.
  4. Use Spreadsheet Register for high-volume row work, custom columns and paginated updates.
  5. Inline and bulk changes remain audited.

10. Workload, Capacity And Automation

  1. Set weekly member capacity only when permitted.
  2. Compare estimated work against available capacity and address over-allocation.
  3. Create automation rules for status, priority, owner, tags, reminders and follow-up tasks.
  4. Automation actions run locally and are written to audit history.
  5. Browser reminders and calendar exports are available; closed-app email delivery is not included in this release.

11. Offline Operation

  1. The installed PWA and browser copy continue working without internet.
  2. Changes are stored locally with IndexedDB recovery snapshots and an offline outbox.
  3. Browser or device cleanup can remove local data; export encrypted JSON or Admin CSV backups regularly.
  4. Do not treat offline local storage as a substitute for organisational database retention.

12. Online Sync Status

  1. This consolidated release does not include the former Project Management sync backend.
  2. All workspace records remain in this browser unless you export a backup.
  3. Do not point this tool at the main Trade Finance BD ticket API; it is a different service.
  4. A future reviewed backend must use a separately namespaced API, authenticated server roles and isolated storage before sync controls can be enabled.

13. Members And Attachments

  1. Team members and roles are managed inside the local workspace.
  2. Use approved shared-file references rather than uploading files through this release.
  3. Cloud membership, R2 uploads and server attachment retention are not included.
  4. Keep confidential files in controlled organisational storage and export local workspace backups regularly.

14. Audit And Evidence

  1. Use row Audit for item-level history and Audit Trail for working history.
  2. Master Audit DB retains evidence beyond normal item deletion and cleanup actions.
  3. Verify the local audit hash chain after import, restore or major review.
  4. Local audit records are useful evidence but are not protected server records.
  5. Export audit CSV before review, migration or retention cleanup.

15. Backup And Recovery

  1. Use encrypted current-team or all-room JSON for confidential portable backup.
  2. Admin can export and restore the full restorable CSV package.
  3. Automatic local snapshots are created before important restore actions.
  4. Review the restore preview before replacing current data.
  5. Store backup passwords separately; encrypted backup passwords cannot be recovered from the file.

16. Security And Password Controls

  1. Keep your four-digit PIN private and never update under another person’s profile.
  2. Owner authorization protects sensitive structural changes; delete password protects destructive actions.
  3. This version has no outer HTML unlock password.
  4. Browser-local profiles and passwords are operational controls, not a substitute for server authentication.
  5. A client-side audit is strong evidence but not legally immutable without protected server retention.

17. PWA Installation And Updates

  1. Open the HTTPS Cloudflare site and choose Install App when offered.
  2. The PWA supports desktop and mobile use and keeps core files cached for offline opening.
  3. When an update banner appears, complete important work, export a backup, then reload.
  4. If installation is unavailable, verify HTTPS, manifest, service worker scope and browser support.

18. Daily Operating Routine

  1. Morning: review overdue work, deferrals, workload, approvals and access requests.
  2. During the day: update progress, time, ownership and evidence under your own profile.
  3. Before close: review exceptions, confirm reminders and export important reports.
  4. Weekly: review Matrix access, capacity, automation, audit verification and backup health.

Daily operating checklist

Recommended routine for team leads and team members.

MorningCheck overdue red tasks, deferral due items and pending access requests.
During the dayUpdate task progress with clear note and correct owner/backup RP.
Before closeReview audit exceptions, export important CSV reports and back up if major changes occurred.

Control rules

Use these rules to preserve data quality and audit reliability.

  • Use your own profile only; do not update under another person’s name.
  • Keep four-digit PIN private.
  • Do not delete a task to hide history. Master Audit DB retains the evidence.
  • Keep existing controls when updating the app. Add new rules only unless a change specifically asks to remove or replace a condition.
  • Owner modification password: adminship transfer, admin restore, team rename, team security settings, backup import and team reset are protected by the current file owner authorization password. Use Security Vault to change it when needed.
  • Assign work within your approved team, cluster or department scope; blocked cross-scope attempts are written to the Master Audit DB.
  • If a user forgets the four-digit PIN, Admin can unlock any profile; Cluster Head and Trade Dept Head can unlock the sole Admin; Team Lead/Owner can unlock teammate profiles only.
  • Delete password control: task, project, deferral, document, member removal, deleted-bin clearing and team reset actions require the current delete password. Failed attempts are audited. Use Security Vault to change it when needed.
  • Public demo: keep the static demo route public only when approved and never enter confidential information in demo mode.
  • Desktop/private copies can be used for individual local work; export encrypted JSON or Admin CSV backups to approved controlled storage.
  • This release has no Project Management server database or server authentication. Do not use its local profiles as a substitute for organisational access control.
Important: browser-based files cannot provide the same physical access control as a server database. A future multi-user service requires a separately reviewed authenticated backend, server-side permissions and scheduled backups.

Workspace settings

Configure local team members and workspace details.

Team ID is controlled by the team selector and governed rename controls.
The main Trade Finance BD API is not a Project Management sync service.

Data controls

Local backup design with team-wise restore, all-room export and Admin CSV restore.

Admin restorable CSV backup

Login as Admin to export the full file data as a restorable CSV. After app update, open the new file, login as Admin and import this CSV to restore teams, tasks, projects, deferrals, members and audit records.

Backup reminder

Admin backup status will appear here after login.

Profile data control

Email is mandatory and must be a valid email address. Gender is required during signup only. Mobile number is optional unless Trade Dept Head makes it mandatory.

Mobile number policy will appear here.
Sole Admin profile control

Only one person can hold Admin access. The same person may also keep a separate team-member profile and log in under that team for operational work.

Admin team-name control

Admin can rename a team label for maintenance without opening team task/project/deferral data.

Team ID is retained; only the displayed team name changes. Unknown old CSV fields remain ignored during restore.
Profile PIN unlock / reset

Admin can unlock/reset any profile PIN. Team Lead/Owner can unlock only approved teammates in the current team. The reset is audited in Master Audit DB where a team context is available.

Local backup status

The app keeps a browser backup and a larger IndexedDB room backup where supported. Export JSON or Admin CSV before major clean-up, browser reset or device change.

Future multi-user deployment

No Project Management Functions, D1 schema, Access integration, notification worker or R2 upload service is included in this release. Those capabilities require a separate reviewed backend and isolated storage before any online control is enabled.