Release verification · 24 September 2026
What was checked. What still needs field testing.
The automated checks use isolated records and simulated external services. They exercise successful workflows, denied actions, simultaneous requests and recovery from failures. They do not prove every possible situation or certify a commercial launch.
| Area | Scenarios checked |
|---|---|
| Vehicle onboarding, job bids and fleet listings | Required files before submission, capacity capture, document-to-vehicle links, pending approval controls, owner-driver activation, scoped driver bids, quote acceptance, provider dispatch, fleet availability and payer/provider invoice privacy. |
| Document, vehicle and account approvals | Missing evidence, returns with feedback, immutable document replacements, applicant corrections, resubmission, expired files, concurrent decisions, role protection, immediate session revocation and paginated record access. |
| Dashboard refresh and database compatibility | Partial refresh preserves successful sections and identifies failed counts. Shared-load queries stay within hosted column limits; settlement migration preserves legacy and current statement values. |
| Production access and resilience | Removed role-preview routes, sample reports and simulated actions. Checked private cache headers, cross-site mutation rejection, bounded requests, escaped account names and bilingual approval steps. |
| Account data exports | Eight categories scoped to the requester, no administrator-wide export, private response headers, Arabic CSV, Oman date filters, large-result errors, download throttling and suspended-account privacy access. |
| Email sign-in | One-use codes, expiry and guess limits, account linking, revoked sessions, failed delivery and role protection. Email delivery is simulated in automated tests; real inbox delivery requires separate acceptance checks. |
| Accounts & permissions | Signed-out, pending, suspended and revoked-admin access; company protection and duplicate application submission. |
| Booking & bidding | Invalid dates, expired quotes, simultaneous accept/reject, duplicate quotes, stale booking updates and rematching. |
| Driver & vehicle eligibility | Driver licence, company relationship, registration, operating card and competing commitments across equipment, shared trips and fleets. |
| Delivery & files | Proof before completion, exactly one draft invoice, authorized downloads, Arabic filenames, file-type checks, review decisions and failed-upload cleanup. |
| Shared truck space | Outgoing and return capacity, route fit, cargo compatibility, quote changes, sharing consent, concurrent acceptance and cancellation conflicts. |
| Temporary fleets | Primary and standby capacity, driver assignment, departure revalidation, replacement rollback, maintenance holds and release on completion. |
| Privacy & location | Withdrawal and explicit reconsent, active-job location boundaries, request visibility, suspended-user requests and conflicting review decisions. |
| Payments & refunds | Test-mode isolation, signed callbacks, forged/replayed events, amount changes, uncertain provider responses and refund balance conservation. Provider responses are simulated. |
| Disputes & settlement | Receipt and payment prerequisites, open disputes, corrected costs, final statement lock and prevention of duplicate credit. |
| Reports & communication | Role-scoped reports, Oman date boundaries, Arabic CSV, spreadsheet formula escaping, large-result limits and shared-load message permissions and retry safety. |
| AI assistance | Consent, ownership, minimized data, structured response validation and no automatic booking or message actions. Model responses are simulated. |
| English & Arabic screens | Rendered role navigation, visible branding, report controls, delivery-document steps, right-to-left layout and language preference when storage is blocked. |
Required before commercial launch
- Commission an independent security review and resolve its findings. The developer checks listed here are not an independent penetration test or certification.
- Interactive browser and physical-device checks: mobile navigation, repeated Arabic/English switching, permissions, interrupted networks, downloads and printed PDFs. The supervised preview service was unavailable during this run.
- Activate and validate the merchant account, payment/refund provider, optional AI provider and external messaging with their real credentials. Carrier payouts still require an operational process.
- iOS and Android store builds, signing, store review and background GPS are separate work. This release is an installable web app.
- Validate real cross-border paperwork, vehicle eligibility, pricing/tax rules, insurance, support response, load testing, backups and recovery with the responsible operators and advisers.
A simple pilot test
- Create separate customer, vendor and driver accounts. Upload application evidence; an administrator reviews each requested role and the linked vehicle.
- Create one equipment booking. Submit and accept a quote. Assign the approved driver and vehicle; check that a second booking cannot claim either resource.
- Start the job, share consented location, upload delivery proof and complete it. Review the draft invoice and download the authorized documents and reports.
- Follow the role guide for a shared outgoing load, empty return, dispute and standby replacement. Repeat on a small phone in both languages.