Proposal §5.3 has not been written for TNSU yet. Its current content is leftover template text from another project, so ignore it. No numeric targets (availability, performance, retention) exist for TNSU yet.
Stated in the proposal (TNSU sections)
Area
Requirement
Source
Access control
Role-based permissions scoped by unit (campus / school), education level and role
§1.1, §4.1, §4.9
Audit
Record usage history
§3.3 (8), §4.1 TNSU-11
Traceability
Requests and documents have status tracking and are auditable after the fact
§2.1
Finance auditability
Financial and scholarship transactions can be checked retroactively
§8.1
AI permissions
The AI Bot answers within the user's permissions
§2.1, §3.3
Responsive and accessible UI
§4.10
Extensibility
Add modules and integrations without disrupting the core
Signed hash snapshots of approved grade sets and submissions; WORM before/after for data fixes
W-01, W-35, W-137
Health data
Separate hlt_vault; access only through a care relationship; 2-person approval (lead physician + DPO) otherwise; every read logged
W-14, W-39
Safeguarding cases
Restricted to the assigned team; alleged persons and their line managers excluded; every read audited
W-22
PDPA
Consent per purpose and version with expiry and revocation; data-subject requests via ThaID; no PII in notification payloads; bulk-export approval
W-128, W-21, W-36, W-138
Minors
Guardian co-sign by DMN age rule; minor mode UI; guardian is called before message for injuries; urgent auto-alert if no answer within 15 min
W-03, W-39, M01
Registration load
Virtual waiting room, synchronous transaction with idempotency key, reloadable result page, no double-submit
W-49
Timeliness
Admission clearing job every 5 min, waitlist call within 15 min, offers only 07:00–20:00; safeguarding intake within 24 h
W-74, W-22
Change control
Change freeze and capacity check around registration; term rollover dry run
W-122
Records management
Document destruction / archive transfer; retention adjusted on status change
W-40, W-133
Domain-specific sensitivities [inferred]
Minors (sports-school students, ม.1–ม.6, and university applicants under 20): health, dorm entry/exit, custody and guardian data are highly sensitive (PDPA §26 for health).
Financial data: keep card data with the payment provider. Do not store card data.
Peak loads: registration windows and admission clearing across ~18k learners and 30 units.
Open
Availability, performance, data-retention periods, backup/DR and hosting are [unknown] and must be agreed with TNSU.