Skip to main content

Population Health Service — Service Readiness

Status: populated Owner: TBD Last updated: 2026-04-18 Companion: Service Template · Definition of Done

1. Readiness Gate Checklist​

Documentation​

  • All 17 docs complete (no stubs remaining)
  • API contracts reviewed by tech lead
  • SECURITY_MODEL reviewed by security team
  • MIGRATION_PLAN reviewed and approved by data team

Code Quality​

  • TypeScript strict mode, zero errors
  • ESLint import-restriction passes (no domain → infrastructure imports)
  • Coverage ≥ 80% overall; ≥ 90% domain layer
  • No critical/high Sonar findings

Mandatory Integration Tests​

  • tenant-isolation.integration.spec.ts passing
  • outbox.integration.spec.ts passing
  • inbox.integration.spec.ts passing
  • rls-enforcement.integration.spec.ts passing
  • consent-enforcement.integration.spec.ts passing

FHIR / Contract Tests​

  • OpenAPI diff gate — no breaking changes
  • Pact consumer tests green against Pact broker
  • Event schema conformance tests green against schema registry
  • DHIS2 adapter contract tests green

Security​

  • DHIS2 credentials stored in KMS (never in DB or env files)
  • De-identification pipeline independently reviewed (k≥5, ε≤1.0 enforced)
  • PHI redaction in logs verified
  • Penetration test or threat model review completed for export endpoints

Observability​

  • OpenTelemetry traces visible in Grafana Tempo (staging)
  • All SLOs declared in alerting system
  • Alert runbooks created and linked
  • Dashboard panels showing green in staging load

HMIS / MoPH Integration​

  • DHIS2 indicator mapping reviewed and approved by MoPH representative
  • At least one successful end-to-end DHIS2 push in staging
  • Scheduled export cron expressions confirmed with MoPH operations team
  • Retry and failure alerting tested

Deployment​

  • Canary deploy completed (5% / 30 min) in staging
  • Rollback procedure verified
  • Resource limits tuned for production population scale (100k+ patients)
  • On-call rotation assigned

Sign-off​

  • Tech lead sign-off
  • SRE sign-off
  • MoPH data governance contact notified (for HMIS and research export features)