RIEactie 2.0 — Project Map

📋 Governance (AI + Developer Rules)

CLAUDE.md GOV Claude Code working principles: plan-mode, doc sync mandate (13 docs must stay in sync), lessons learned triggers. Read by AI every session.
AGENTS.md GOV Architecture conventions, naming rules, version pointers to all canonical docs. Now a pointer-document: security/access/scoring rules reference FD and SECURITY.md.
DESIGN.md GOV Design tokens: 43 CSS variables, typography, spacing, elevation. Canonical source for all visual values — UI Design and prototype reference this.
README.md GOV Project overview, stack, doc index with versions, key concepts, quality metrics. First thing a new developer reads.
tasks/lessons.md GOV 7 process lessons from documentation mistakes. Pattern → rule format. Includes pre-commit grep checklist and numerical claims discipline.

📘 Canonical Specifications

docs/Functional_Design.md v5.13 Business requirements (~3,800 lines). ISO 29148-conformant SRS with §1 Introduction (8 subsections), §2-§6 Specs, §7 NFRs, §7.7 Verification, Annex A+B. 169 inline [REQ-###] anchors. No implementation code (moved to IG).
docs/UI_Design.md v1.6 UI/UX patterns (2,350 lines). Component library, layout system, stepper, module-scheiding, responsive breakpoints, CSS architecture with prefix conventions.
docs/Implementation_Guide.md v6.2 Technical implementation (~1,970 lines). Laravel models, services, API endpoints, middleware, frontend architecture, testing, deployment. Notification types reference FD §5.13 (not duplicated).
docs/DBML.txt v5.14 Database schema source of truth. 77 tables, 149 FKs, 47 CHECK constraints, 3 generated stored columns. Includes EAV design rationale for free-field columns. Paste into dbdiagram.io for visual ERD.

🔒 Security & Compliance

docs/SECURITY.md v1.2 Security policy (24 sections). Threat model, OWASP Top 10, ISO 27001 compliance matrix, forbidden/required coding patterns, incident response. Canonical source for security rules (AGENTS.md points here).
docs/Risk_Register.md v1.1 32 project risks with scoring (W×I), mitigations and REQ-### linkage. Linked to SECURITY.md and RTM.md. Annual review cadence.
docs/RTM.md v1.7 Requirements Traceability Matrix. 169 requirements across 20 categories: security/compliance (85), functional (49), scalability (6), atomic splits (11), screen/interaction patterns (18). 100% bidirectional with FD.

🎯 User Journeys & Testing

docs/user-journeys.md BDD 90 Gherkin BDD scenarios across 38 Features and 68+ Rules. Covers all 7 user roles + 12 cross-cutting domains (auth, notifications, error handling, soft-delete, etc.). @REQ-### tags for traceability. Direct testbaar met Cucumber/Pest.

🎨 Demo & Visual References

docs/prototype.html LIVE Interactieve UI prototype (~11,900 lines). Canonical visual reference voor alle schermen. Deployed op demo.rieactie.nl. Contains Project Map link in both sidebars.
docs/moodboard.html REF Kleurenreferentie met alle 43 CSS variabelen uit DESIGN.md. Visuele palette-preview.

📐 Diagrams (Mermaid)

docs/diagrams/flowbeschrijving.md REF RI&E workflow flowchart. 4-staps proces: Inventarisatie → PvA → Review → Toetsing.
docs/diagrams/sitemap.md REF Sitemap / navigation tree. Alle pagina's en hun hiërarchie per module.
docs/diagrams/tenant-hierarchie.md REF 5-niveau tenant hiërarchie: Account → Branch → Client → Region → Location.
docs/diagrams/journey-*.md REF 3 Mermaid user journey diagrams (visual). Vervangen door BDD-scenarios in user-journeys.md.

📝 Design Plans (historical decisions)

docs/plans/2026-04-06-attachment-storage-design.md PLAN Attachment opslag: database BLOB met aparte DocumentContent tabel (niet disk). Approved.
docs/plans/2026-04-03-billing-design.md PLAN Abonnementen & billing: benoemde prijslijsten, staffels, pro-rata upgrades, lifecycle. Meest uitgebreide plan (47KB).
docs/plans/2026-04-02-gantt-*-design.md PLAN Gantt-tijdlijn + drag-interactie design: move/resize constraints, snap-to-grid, optimistic updates.
docs/plans/2026-04-02-pva-grid-redesign.md PLAN Plan van Aanpak grid: bevindingen-tabel met uitklapbare maatregelen sub-rijen.
docs/plans/2026-04-01-brf-detail-panel-design.md PLAN BRF detail panel: 3-tab drawer (Algemeen, Oorzaken, Gevolgen).
docs/plans/2026-03-30-batch-actions-design.md PLAN Batch acties: bulk-mode toggle, checkbox selectie, toolbar-transform.
docs/plans/2026-03-28-server-side-pagination*.md PLAN Server-side paginering: API contract, klassieke navigatie, 50 rijen default.

📚 External References

docs/references/*.pdf REF Arbokennisnet RI&E-dossier, RI&E stappenplan flyer, Ministerie SZW brief (2022). Bronnen voor compliance en scoring.
docs/references/screenshots/ REF 6 concurrentie-screenshots (IMA Online interface). Inspiratie voor UI-design.

🛠 Tools & Scripts

tools/ai-poc.py v2.5 AI proof-of-concept: 4 test-scenario's tegen LM Studio / Gemma 4. 3/4 PASS. Geparkeerd als v2.5 nice-to-have.
tools/poc-results-2026-04-06.txt v2.5 Output van AI PoC run met Gemma 4 26B-A4B antwoorden.
docs/sync.sh TOOL Deploy: uploadt docs/ naar demo.rieactie.nl via FTP. Kopieert prototype.html als index.html. Altijd runnen na prototype.html commit.
docs/watch.sh TOOL File watcher: launchd WatchPaths trigger voor automatische sync bij prototype.html wijziging.

🔧 Configuration

.gitignore Ignores: vendor/, node_modules/, .env, .DS_Store. Laravel scaffold wordt bij implementatie-start aangemaakt via composer create-project.