## Traceability

| Item | Title | Weight | Passing | Manual cases (last run) | Open defects |
| --- | --- | --- | --- | --- | --- |
| ✅ FEAT-AUTH | Accounts and sign-in | criticality 4 | 37/37 | TC-AUTH-001, TC-AUTH-002, TC-AUTH-003, TC-AUTH-004 (not run) | - |
| ✅ FEAT-CART | Shopping cart | criticality 4 | 42/42 | TC-CART-001, TC-CART-002 (not run) | - |
| ✅ FEAT-CATALOG | Catalog browsing and search | criticality 3 | 25/25 | TC-CAT-001, TC-CAT-002 (not run) | - |
| ✅ FEAT-CHECKOUT | Checkout and payment | criticality 5 | 26/26 | TC-CHK-001, TC-CHK-002, TC-CHK-003 (not run) | DEF-001 |
| ✅ FEAT-COUPON | Coupons | criticality 3 | 21/21 | TC-COUP-001, TC-COUP-002, TC-COUP-003 (not run) | - |
| ✅ FEAT-ORDERS | Order history and cancellation | criticality 4 | 28/28 | TC-ORD-001, TC-ORD-002 (not run) | - |
| ✅ BR-CART-02 | Never more than the stock | critical | 7/7 | TC-CAT-002 (not run) | - |
| ✅ BR-ORD-03 | Customers see only their own orders | critical | 5/5 | - | - |
| ✅ BR-PAY-01 | Card validation | critical | 7/7 | TC-CHK-001, TC-CHK-003 (not run) | - |
| ✅ BR-AUTH-01 | Password policy | high | 9/9 | TC-AUTH-002 (not run) | - |
| ✅ BR-AUTH-02 | Lockout after five failed sign-ins | high | 2/2 | TC-AUTH-003 (not run) | - |
| ✅ BR-CART-01 | 1 to 10 units per cart line | high | 9/9 | TC-CART-001 (not run) | - |
| ✅ BR-COUP-04 | Discount caps | high | 3/3 | - | - |
| ✅ BR-ORD-01 | Only placed orders can be cancelled | high | 11/11 | TC-ORD-001, TC-ORD-002 (not run) | - |
| ✅ BR-ORD-02 | Cancelling restocks the items | high | 3/3 | TC-ORD-001 (not run) | - |
| ✅ BR-SHIP-01 | Free shipping from $50 | high | 7/7 | TC-CHK-002 (not run) | - |
| ✅ BR-COUP-01 | One coupon per cart | medium | 1/1 | - | - |
| ✅ BR-COUP-02 | Coupon minimum subtotal | medium | 4/4 | TC-COUP-001, TC-COUP-002 (not run) | - |
| ✅ BR-COUP-03 | Expired coupons are refused | medium | 4/4 | TC-COUP-003 (not run) | - |

✅ Every business rule is verified.