Fictional product and launch case · Document 08
Product Scope and Requirements
The team converts the approved product boundary into requirements and acceptance criteria for the first AegisShield Firewall version.
AegisShield Web Application Firewall · Weeks 2–3
AegisShield, BookEasy, the people, findings and decisions are fictional and created for portfolio demonstration.
First-release requirements
| ID | Requirement | Acceptance evidence |
|---|---|---|
| REQ-01 | Register one protected web application | Application appears with owner, environment and status |
| REQ-02 | Configure a limited set of protection rules | Approved rules can be enabled, disabled and reviewed |
| REQ-03 | Show request and rule-match events | Reviewer can explain why a request matched a rule |
| REQ-04 | Create a controlled exception | Approved legitimate booking passes and the exception is audited |
| REQ-05 | Protect administrator access and tenant boundaries | Role and authorization tests pass |
Scope boundary
The first version does not promise complete threat coverage, automatic rule changes, production rollout to all customers or a proprietary detection engine.