Chapter 10 · Prompt Echo

Flight 02 Prompt Sequence

Copy this prompt and paste it into Codex.

Book
Draft 3.0
Prompt
1.0
Destination
Codex
Download plain text
Transform Summit Operations Portal into a fictional employee equipment-checkout application named **Summit Equipment Exchange**. Work only on the current feature branch.

Preserve Python, Django, SQLite, session authentication, CSRF protection, password validation, Django Admin, explicit application permissions, database history, responsive accessibility, and the separation between business roles and `is_staff`.

Map the domain so that work requests become equipment checkouts, employees see only their assigned assets, equipment coordinators see only checkouts for teams they coordinate, and administrators govern identities, roles, teams, equipment, and assignments. Visitors may view available equipment but no private checkout records.

Before changing files, provide:

1. A file-by-file implementation plan.
2. The proposed model and relationship mapping.
3. Data-preserving migration operations and rollback considerations.
4. The exact permission codenames and enforcement locations.
5. A role-and-direct-URL matrix.
6. Misuse cases, including URL identifier changes, cross-team access, unauthorized POST requests, invalid dates, missing assets, and accidental administrator access.
7. Tests proving successful, redirected, forbidden, not-found, cross-user, cross-team, and unchanged-database behavior.
8. Desktop and mobile browser verification.
9. Explicit exclusions and limitations.

Do not implement until I say **“Pilot approves the Summit Equipment Exchange transition.”**

After approval, implement only the approved plan. Generate data-preserving migrations, run Django’s system check, verify there is no unrecorded migration drift, run the complete test suite, migrate the local database, collect static assets, and start the transformed application on the same local port. Test the four roles and direct protected URLs. Show the complete Git diff and report successful paths, denied paths, record counts, migration evidence, browser evidence, and limitations. Do not commit, push, merge, or open a pull request until separately instructed.