This is a traceability view for an Agile program — and it is deliberately not a waterfall requirements traceability matrix. On MedConnect Mobile, requirements are not a fixed document to be traced against; they are a living Product Backlog of epics and user stories, verified by a shared Definition of Done, delivered sprint by sprint. This view makes that chain explicit — Vision → Epic → Story → Definition of Done → Sprint/Release — and shows every one of the 33 stories tracing cleanly through it.
01 Why the backlog is the traceability vehicle
A waterfall RTM exists because requirements are captured once, up front, in a document that the delivered system is later checked against — the matrix guards against the system drifting from a frozen baseline. Agile has no frozen baseline. Requirements emerge and are re-prioritised every sprint, so a static matrix would be stale the day it was signed. Bolting one onto a Scrum program would not add rigor; it would signal a misunderstanding of how the program actually works.
What Agile has instead is traceability built into the flow of work. Every requirement is a user story with a unique ID; every story rolls up to exactly one epic; every epic serves the product vision; and every story is verified against one shared Definition of Done before it can be called complete. The trace is not a document maintained alongside the work — it is the work, and it is always current because the backlog is the single source of truth the teams pull from each sprint. This view simply makes that living structure legible in one place.
02 Vision → Epic → Story
Every epic traces up to the product vision and down to its user stories. The stories below are the complete backlog: each has a unique ID, a MoSCoW priority, a story-point estimate, and a target sprint, and each belongs to exactly one epic. There are no orphan stories and no empty epics — that closure is the first thing this view verifies.
Patient Identity & Onboarding
| Story | As a… I want… so that… | Priority | Pts | Target |
|---|---|---|---|---|
| MCM-101 | As a new patient, I can create an account with email or phone verification | Must | 5 | Sprint 1 |
| MCM-102 | As a patient, I can log in with biometric (Face/Touch ID) after initial setup | Should | 3 | Sprint 1 |
| MCM-103 | As a patient, I can link my existing ACME Health record via a secure identity match | Must | 8 | Sprint 1 |
| MCM-104 | As a patient, I can set up and manage my profile (contact info, insurance, emergency contact) | Must | 5 | Sprint 1 |
| MCM-105 | As a patient, I can reset my password via a secure self-service flow | Should | 3 | Sprint 2 |
| MCM-106 | As a patient, I receive a guided first-run tutorial on first login | Could | 2 | Sprint 2 |
Appointment Scheduling & Reminders
| Story | As a… I want… so that… | Priority | Pts | Target |
|---|---|---|---|---|
| MCM-110 | As a patient, I can search for an available appointment by provider or specialty | Must | 8 | Sprint 2 |
| MCM-111 | As a patient, I can book, reschedule, or cancel a telehealth appointment | Must | 8 | Sprint 2 |
| MCM-112 | As a patient, I receive a push notification reminder 24 hrs and 15 min before my visit | Must | 5 | Sprint 2 |
| MCM-113 | As a patient, I can add my appointment to my phone's native calendar | Could | 2 | Sprint 3 |
| MCM-114 | As a patient, I can complete a pre-visit intake questionnaire before my appointment | Should | 5 | Sprint 3 |
Video Visit Experience
| Story | As a… I want… so that… | Priority | Pts | Target |
|---|---|---|---|---|
| MCM-120 | As a patient, I can join a video visit with one tap from my appointment card | Must | 8 | Sprint 3 |
| MCM-121 | As a platform, integrate the HIPAA-compliant video SDK with call-quality fallback to audio-only | Must | 13 | Sprint 3 |
| MCM-122 | As a patient, I see a "waiting room" state with estimated wait until my provider joins | Should | 3 | Sprint 4 |
| MCM-123 | As a provider, I can screen-share lab results or images during a video visit | Should | 5 | Sprint 4 |
| MCM-124 | As a platform, log and encrypt session metadata for HIPAA audit requirements | Must | 8 | Sprint 4 |
| MCM-125 | As a patient, if my connection drops, I can rejoin the same visit within a 5-minute grace window | Must | 5 | Sprint 5 |
Provider Console
| Story | As a… I want… so that… | Priority | Pts | Target |
|---|---|---|---|---|
| MCM-130 | As a provider, I can see my full daily schedule across all telehealth appointments in one view | Must | 8 | Sprint 3 |
| MCM-131 | As a provider, I can launch a visit directly from the schedule without switching systems | Must | 5 | Sprint 4 |
| MCM-132 | As a provider, I can view a patient's intake questionnaire before the visit starts | Should | 5 | Sprint 4 |
| MCM-133 | As a provider, my visit notes push directly into the ACME EHR without re-entry | Must | 13 | Sprint 6 |
| MCM-134 | As a provider, I can flag a patient case for follow-up or referral from the console | Could | 3 | Sprint 6 |
Patient Data Migration & Legacy Decommission
| Story | As a… I want… so that… | Priority | Pts | Target |
|---|---|---|---|---|
| MCM-140 | As a platform, build the migration pipeline and field-mapping from CareLink Classic's schema | Must | 13 | Sprint 1 |
| MCM-141 | As a platform, migrate active-patient records with automated validation and a spot-check report | Must | 13 | Sprint 4 |
| MCM-142 | As compliance, I can review a pre-cutover data-integrity validation report before go-live | Must | 5 | Sprint 4 |
| MCM-143 | As a platform, migrate full historical records (inactive patients, visit history archive) | Must | 13 | Sprint 7 |
| MCM-144 | As IT operations, decommission CareLink Classic infrastructure after cutover verification | Must | 8 | Sprint 8 |
| MCM-145 | As compliance, retain a read-only archival export of CareLink Classic per records-retention policy | Must | 5 | Sprint 8 |
Messaging & Prescription Refills
| Story | As a… I want… so that… | Priority | Pts | Target |
|---|---|---|---|---|
| MCM-150 | As a patient, I can send a secure message to my care team from the app | Must | 8 | Sprint 6 |
| MCM-151 | As a provider, I can respond to patient messages from the console with a templated-reply option | Should | 5 | Sprint 6 |
| MCM-152 | As a patient, I can request a prescription refill from my medication list | Must | 8 | Sprint 7 |
| MCM-153 | As a provider, I receive refill requests routed into my existing e-prescribing workflow | Must | 8 | Sprint 7 |
| MCM-154 | As a patient, I get push notification status updates on my refill request | Could | 2 | Sprint 7 |
03 Story → Definition of Done (the acceptance gate)
In a waterfall RTM, each requirement traces to its own verification method. In Agile, every story traces to the same gate — the Definition of Done — and that is a strength, not a gap. A single, shared, enforced definition means a completed story means the same thing regardless of which squad delivered it, which sprint it landed in, or how large it was. Uniform verification is what lets two squads (Falcon and Anchor) work in parallel and still produce one coherent product.
A story is not "done" when a developer says so; it is done when it satisfies every item of the DoD:
- Acceptance criteria (defined when the story was Ready) all met and demonstrated
- Code reviewed by at least one other engineer and merged
- Unit and integration tests written and passing
- No open defects above the agreed severity threshold
- Deployed and verified in the staging environment
- Documentation updated where the story changed behaviour
04 Story → Sprint → Release
The final link is delivery. Each story carries a target sprint, and sprints roll up into the two releases on the roadmap. This is where Agile traceability terminates — not in a one-time acceptance signature, but in a working increment demonstrated at the Sprint Review and, at release boundaries, shipped. Because the target sprint travels with the story in the backlog, the trace from a requirement to the increment that delivered it is always one lookup away, and it updates itself as re-planning moves stories between sprints.
05 What this view does and does not guarantee
Honesty about the limits of the trace is part of the discipline. What this view guarantees: every story has a unique ID, belongs to exactly one epic, carries a priority and estimate, has a target sprint, and is subject to the same Definition of Done. What it deliberately does not do:
- It does not freeze scope. The backlog is re-prioritised every sprint; this view is a snapshot of a living structure, not a baseline to hold the teams to. That is by design — a frozen Agile backlog is a contradiction.
- It does not trace per-story acceptance criteria line by line. Acceptance criteria live on each story in the backlog and are verified at story level against the DoD; enumerating them here would duplicate the backlog and go stale faster than it.
- It does not assign a separate verification method per requirement. In Agile that is a feature: the shared DoD is the verification method, uniformly, and dividing it per story would fragment the single quality bar that lets the squads stay coherent.