# Phase 5: Admissions

## Completed

- Institution-specific applicant registration and Applicant role assignment.
- Admission-cycle administration with open and close windows.
- Applicant profiles, programme choices, education history, ministry data, and referees.
- Private document uploads with allowlisted types, size limits, hashes, and authorized downloads.
- Submission completeness and application-fee verification gates.
- Explicit, append-only application status transitions.
- Tenant-scoped officer queues, reviews, corrections, waitlisting, and rejection.
- Interview scheduling and outcome records.
- Full and conditional offers with expiry and applicant acceptance or decline.
- Printable submission acknowledgements and admission letters.
- Ten realistic development applicant records and applications.

## Lifecycle

Applications begin as drafts and may be submitted only when required profile fields,
education, referee, passport photograph, academic credential, and any required
verified fee are present. Officers can move submitted applications through review,
correction, waitlist, rejection, or offer. Applicants alone accept or decline a valid,
unexpired offer. Every state change adds an immutable history row.

## Security and tenancy

Policies verify both tenant ownership and granular admissions permissions. Applicant
access is restricted to applications owned by their profile. Documents are stored on
Laravel's private local disk in development and downloaded only after policy checks.
Production should use private S3-compatible storage plus malware scanning.

## Honest limitations

- Payment collection is intentionally deferred to Phase 11. A non-zero application
  fee blocks submission until a trusted finance workflow marks it paid.
- Printable records are HTML print views, not cryptographically signed PDFs.
- Applicant-to-student conversion, matriculation numbers, onboarding, and student
  records belong to Phase 6.
- Email/SMS delivery, malware scanning, signed object-storage URLs, retention jobs,
  and consolidated admissions audit reporting remain future work.

## Phase boundary

Phase 5 ends at accepted admission. Student and staff profiles, conversion, identity
documents, institutional IDs, and status histories belong to Phase 6.