# Milestone 01: Local Backend Foundation

## Implemented in this milestone
- Project identity and documentation for Visione.
- Root `AGENTS.md` for future coding agents.
- Local Docker services for MySQL and MailHog.
- Initial MySQL schema and seed data.
- Drogon backend structure for auth, reports, admin data and stats.
- OTP email delivery through MailHog.
- Focused regression tests for technical endpoints and core validation helpers.
- Local admin seed: `admin@visione.local` / `ChangeMe123!`, with forced password change flag.
- Multipart report media upload endpoint storing files under `uploads/reports/`.
- PBKDF2-HMAC-SHA256 password hashes for credentials. Legacy SHA-256 hashes are intentionally rejected.

## To do next
- Consider Argon2id/bcrypt and password reset flows before production hardening.
- Add real email provider configuration for non-local environments.
- Add CIE/SPID integration design and provider adapters.
- Expand frontend-driven API coverage as Vue screens are implemented.
- Add stronger frontend-driven endpoint coverage as Vue screens are implemented.
- Add notification channels, route optimization and open-data exports.
- Dockerize the backend only for final delivery/deployment.