Requirement ID,Requirement statement,Source,Priority,Test case IDs,Coverage status,Owner,Notes
REQ-001,User can sign in with email and password,PRD section 2.1,High,TC-101; TC-102; TC-103,Covered,QA,
REQ-002,User can reset password via email link,PRD section 2.2,High,TC-110,Partial,QA,Negative cases not yet written
REQ-003,Locked account after five failed sign-in attempts,Security story SEC-14,High,,Uncovered,QA,No cases mapped
REQ-004,Session expires after 30 minutes of inactivity,PRD section 2.4,Medium,TC-140,Covered,QA,
REQ-005,Sign-in errors do not reveal whether the email exists,Security story SEC-09,High,TC-102,Covered,QA,