WATER UTILITY OPERATING SYSTEM

Enterprise Migration Overview

FIREBASE CANDIDATE Member Access
PHASE 1 · READ ONLY

A professional WUOS address—without disturbing production.

This Firebase-hosted shell is a parallel migration candidate. The current Apps Script WUOS remains the production authority.

Open Current Production WUOS ↗
Production WUOS UNCHANGED Apps Script production remains authoritative
Mobile Field App ISOLATED Existing Hosting and sync gateway untouched
Candidate Data Access NONE No customer, registry, or Drive writes
Rollback Requirement ZERO Production never moved in this phase

ENTERPRISE DESTINATION

Future WUOS service map

Governed migration, module by module
▤

Field Operations

MROC, assignments, progress, and field evidence.

Future gateway integration
₱

Business Services

Reading data, billing preparation, and exports.

Future governed API
♙

Identity & Access

Firebase identity mapped to WUOS roles and scope.

Certification required
⬡

Governance

Professor Registry remains the canonical authority.

Never browser-writable
↗

Deployment

Certified runtime and subdivision activation workflow.

Apps Script remains authoritative
⌁

Engineering

Watchdog, backup, restore, and operational assurance.

Parallel observability

TARGET ARCHITECTURE

Firebase becomes the front door—not the authority.

1Firebase HostingProfessional WUOS address and interface
→
2Firebase AuthenticationProves the signed-in identity
→
3Governed API GatewayValidates role, scope, and request
→
4WUOS ServicesExecutes approved business rules
→
5Sheets & DrivePreserves authoritative records and evidence
Architecture rule: Firebase Hosting never writes directly to a customer Sheet, Professor Registry, or Drive evidence folder.

CONTROLLED MIGRATION

Promotion gates

  1. Isolate Firebase HostingSeparate enterprise target; mobile site untouched.
  2. Publish read-only shellNo identity, API, or production data connection.
  3. Mirror authenticated identityMap Firebase UID and email to WUOS RoleChef.
  4. Introduce read-only APIsDashboard and registry health before operational writes.
  5. Certify transactional modulesMROC, readings, evidence, billing, and deployment.
  6. Controlled cutoverCustom domain becomes primary only after acceptance.

PRODUCTION PROTECTION

Current boundary certificate

✓Apps Script deployment

No changes made by this candidate.

✓Mobile Hosting target

Separate and unchanged.

✓Professor Registry

No candidate access.

✓Customer spreadsheets

No candidate access.

✓Drive photographs

No candidate access.

✓Production rollback

Existing URL remains available.

CANDIDATE HELP

This is not the production WUOS.

Use this site to review the Firebase migration structure. Continue using the established Apps Script URL for operational work until certification and controlled cutover.