Joseph Doherty dee56a6846 Mark corrections-doc B1 (data-path ACLs) and C5 (consumer cutover scope) as RESOLVED. B1: OtOpcUa team has designed and committed the OPC UA client data-path authorization model in lmxopcua/docs/v2/acl-design.md (decisions #129–132) covering NodePermissions bitmask flags for Browse/Read/Subscribe/HistoryRead/WriteOperate/WriteTune/WriteConfigure/AlarmRead/AlarmAck/AlarmConfirm/AlarmShelve/MethodCall plus common bundles, 6-level scope hierarchy with default-deny + additive grants, NodeAcl table generation-versioned alongside the rest of the content, cluster-create workflow seeding the v1 LDAP-role-to-permission map for v1 → v2 consumer migration parity, Admin UI ACL tab with bulk grant + permission simulator, denied-only audit logging; the "must work from day one of Tier 1 cutover" timing constraint is satisfied because Phase 1 (Configuration + Admin scaffold) completes before any driver phase. C5: consumer cutover (ScadaBridge / Ignition / System Platform IO) is OUT of v2 scope per lmxopcua decision #136 — OtOpcUa team's scope ends at Phase 5 (all drivers built, all stability protections in place, full Admin UI shipped including ACL editor); cutover sequencing per site, validation methodology, rollback procedures, and Aveva-pattern validation for tier 3 are deliverables of a separate integration / operations team that has yet to be named. Plan should explicitly assign ownership of the cutover plan to that team and link to their forthcoming doc.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-17 11:59:01 -04:00
2026-04-17 11:59:01 -04:00

3-Year Plan: Shopfloor IT/OT Transformation

A 3-year plan for transforming and enhancing shopfloor IT/OT interfaces and data collection — bridging IT and OT layers, improving operator interfaces, and upgrading data collection pipelines.

Vision

A stable, single point of integration between shopfloor OT and enterprise IT.

Three Pillars (binary at end of plan)

  1. Unification — 100% of sites on the standardized stack (OtOpcUa + ScadaBridge + Redpanda + SnowBridge + Snowflake/dbt).
  2. Analytics / AI Enablement — machine data in Snowflake with a ≤15-minute analytics SLO; at least one "not possible before" use case in production.
  3. Legacy Retirement — zero remaining bespoke IT/OT integration paths outside ScadaBridge.

Key Architecture

Layer 1  Equipment (PLCs, controllers, instruments)
Layer 2  OtOpcUa (unified site-level OPC UA — single session per equipment, two namespaces)
Layer 3  SCADA (Aveva System Platform + Ignition)
Layer 4  ScadaBridge (sole IT/OT crossing point)
         ─── IT/OT Boundary ───
         Enterprise IT (Camstar, Delmia, Snowflake, Power BI, SnowBridge)

The plan also declares a Unified Namespace (UNS) composed of OtOpcUa + Redpanda + canonical model in schemas repo + dbt curated layer, with a 5-level naming hierarchy standard (Enterprise → Site → Area → Line → Equipment).

Plan Documents

File Purpose
current-state.md Snapshot of today's systems, integrations, and pain points
goal-state.md Target end-state: architecture, components, success criteria, UNS, canonical model
roadmap.md 7 workstreams x 3 years migration grid
STATUS.md Working-session bookmark — where we left off, pending items

Component Detail Files

File Purpose
current-state/legacy-integrations.md Pillar 3 denominator: 3 legacy IT/OT integrations to retire
current-state/equipment-protocol-survey.md Removed — protocol survey no longer needed; OtOpcUa v2 team committed driver list directly
goal-state/digital-twin-management-brief.md Digital twin management conversation brief (completed)

Output Generation

File Purpose
outputs/README.md How to regenerate PPTX + PDF from plan source
outputs/presentation-spec.md 18-slide mixed-stakeholder deck structure
outputs/longform-spec.md Faithful-typeset PDF structure

Trigger: regenerate outputs, regenerate presentation, or regenerate longform in a Claude Code session.

Conventions

  • Everything in markdown — no proprietary formats.
  • _TBD_ marks gaps that still need filling.
  • Decisions are captured inline with rationale; don't re-open without new information.

Working with Claude Code

This repo includes a CLAUDE.md file that orients Claude Code sessions to the plan's structure and conventions. Resume work with:

claude --resume <session-id>

or start a new session in this directory — CLAUDE.md and STATUS.md provide enough context to pick up where the last session left off.

Description
No description provided
Readme 2.1 MiB
Languages
Mermaid 100%