Platform Evolution
Assessment run-2026-07-27-1 · 213 of 213 repos assessed
Repos / backoffice-pure360-marketing-service-api

backoffice-pure360-marketing-service-api

WCF service wrapping the Pure360 email-marketing platform (PAINT SOAP API) for campaign sending, subscription/opt-in handling and campaign reporting for back-office marketing.

32 · redhighkernelOn-premZDD: a long roadapisecrets in source

Health score

32

0 to 100 across seven weighted factors; nothing is hidden. Green is 75 and above, amber 50 to 74, red below 50. How scoring works.


Runtime currency / 25
0
.NET Framework, out of mainstream support
Legacy transport / 15
2
Hosts WCF or SOAP endpoints with no successor on modern .NET
Test posture / 15
8
Some tests, coverage is thin
Security hygiene / 15
0
Credentials or keys committed to source
Dangerous coupling / 15
8
shares a core database (sqlserver:EventLog)
Activity / 10
10
Actively maintained
Deployment hygiene / 5
5
CI in place
Health over time
2026-07-24 (run-2026-07-24-1): 322026-07-27 (run-2026-07-27-1): 32
No change since 2026-07-24 (32 to 32).

Facts

Languagescsharp
FrameworksWCF, ASP.NET Web Application, log4net
Runtimes.NET Framework 4.6.2
Tests / CIsome / CI in place
Last commit2026-01-30
OwnerOwner unknown (mapping to be curated)
DomainCustomer communications (system generated; curate in repo-owners.json to override)
Product areaPhenix
HostedOn-prem Deployed to our own machines
  • Release "\marketing\pure360\backoffice-pure360-marketing-service-api": QA: deployment-group phase (agents on our own machines)
  • Release "\marketing\pure360\backoffice-pure360-marketing-service-api": Staging: deployment-group phase (agents on our own machines)
  • Release "\marketing\pure360\backoffice-pure360-marketing-service-api": Production: deployment-group phase (agents on our own machines)
  • Release "\marketing\pure360\backoffice-pure360-marketing-service-api": Stealth Production: deployment-group phase (agents on our own machines)
  • Release "\marketing\pure360\backoffice-pure360-marketing-service-api": Training: deployment-group phase (agents on our own machines)
Releases1 release pipeline(s): \marketing\pure360\backoffice-pure360-marketing-service-api
Integrationwcf, soap
SourceOpen in Azure DevOps

Risk flags

Each flag links to its glossary definition.

Dependencies in context

Laying out the graph…
greenamberreddata store (square, dashed link)Node size follows fan-in. Click any node to open it.

Entanglement

kernel Bound into the core by 2 mechanism(s).

Detaches when its WCF surface gains a modern interface or its WCF calls move to one; and when the shared database group it belongs to gains an owned API or completes schema separation (sqlserver:EventLog).

Migration playbooks

Generated from this repo's assessment data: what is feasible, what blocks it, and the steps in order. Ratings: green means actionable now, amber means sequence other work first, red means blocked, grey means not applicable.

ZDD adoption

A long road

Technically eligible one day, but the blockers are structural: hosted WCF or SOAP contracts that cannot run two versions at once, or heavy legacy coupling. Sequence the modernisation work first. Hosts WCF or SOAP endpoints: strict serialization contracts cannot safely run two versions at once (the shared-enum trap). End-of-life runtime compounds the work. Shares sqlserver:EventLog: schema changes move in convoy.

Blockers
Dependencies and gotchas
  • 3 system(s) depend on this repo; during a rolling deploy they will talk to old and new versions at once, so responses must stay compatible
  • Shares sqlserver:EventLog with 13 system(s): destructive schema change is prohibited in a single release; expand and contract only
Steps
  1. Adopt the four-stage discipline from the ZDD engineering standard: pre-deployment compatibility, deployment, feature activation behind a flag, post-release cleanup.
  2. Raise automated test coverage first: ZDD trades the end-of-sprint manual gate for continuous automated confidence, so the tests are the entry ticket.
  3. Make every change dual-version safe: backwards-compatible APIs (new major version for breaking wire changes), expand and contract for any schema change, and consumers tolerant of unknown fields.
  4. Audit serialized data: anything in Redis, queues or shared caches must deserialize cleanly across adjacent versions.
  5. Wrap behaviour changes in feature flags so code deploys dark and release becomes a business decision, not a deployment event.
  6. Route deployments through the Workflow Engine's automated drain, deploy, health-check, return cycle (the path proven by the first automated production run in mid-2026).
  7. Verify with area-scoped regression rather than the whole-platform cycle, and watch error rates after rollout with automated rollback on alert.

SQL Server exit

Blocked by a shared core database

sqlserver:ContactApi1, sqlserver:EventLog are shared, so this system cannot change engine on its own: every sharer moves in convoy. The stage 4 work (named owner, declarative schema, owned API) has to land first; after that, the steps below apply to whatever slice this system ends up owning.

Blockers
Steps
  1. Inventory the schema and query surface of sqlserver:Pure360MarketingCampaigns, sqlserver:ContactApi1, sqlserver:EventLog: tables, stored procedures, triggers, cross-database joins and anything else engine-specific.
  2. Confirm the target: PostgreSQL (relational model; keep transactions and joins, swap the engine).
  3. Replatform to modern .NET first (see the recommended actions): current PostgreSQL and MongoDB drivers and EF Core providers target modern .NET, and doing one risky change at a time is cheaper than doing two.
  4. Data access is not through an ORM, so port the SQL by hand: translate T-SQL constructs, replace stored procedures with application code or target-native equivalents, and add integration tests around the queries that matter first.
  5. Stand up the target alongside SQL Server, backfill with an ETL pass (pgloader or an export/import job), then dual-write or replicate until parity is proven.
  6. Move reads to the target, watch correctness and latency, then cut writes over and keep SQL Server read-only until confidence is earned.
  7. Decommission the SQL Server database and remove the connection strings and firewall paths that pointed at it.

Containerisation

Feasible after replatforming

Appropriate eventually, but not from here: the legacy runtime and the hosted WCF surface both have to go first, and that work is already in this repo's recommended actions.

Blockers
Steps
  1. Replatform to modern .NET first (see the recommended actions), replacing the hosted WCF/SOAP surface with REST, gRPC or messaging so consumers can follow. Containerising then becomes routine.
  2. Add a Dockerfile and make the app read all configuration from environment variables and the secrets manager, never from machine-local files.
  3. Log to stdout and expose a health check endpoint so ECS can supervise it.
  4. Adopt the shared ci.yml pipeline template with the container parameters (awsRegion, containerAfterBuild, ecsTerraformRepo), which is exactly how the estate's existing AWS services deploy.
  5. Define the service in the Terraform repo, deploy to a non-production environment, then shift traffic and disarm the deployment-group release pipeline.

Recommended actions

Rotate the credentials committed to backoffice-pure360-marketing-service-api

Risk flags indicate credentials or keys in source (hardcoded-secrets). Rotate now and enable secret scanning in CI; this is independent of all other work.

Impact: Closes a live security exposure at near-zero cost

proposed

Replatform backoffice-pure360-marketing-service-api to modern .NET

Runs on .NET Framework 4.6.2, out of mainstream support. No pinning dependency blocks it; sequence by fan-in (providers before consumers). Shares sqlserver:EventLog, so batch it with its database group (stage 4).

Impact: Unblocks 3 dependent system(s)

proposed

Assessment notes

backoffice-pure360-marketing-service-api

Purpose

IIS-hosted WCF service (Pure360.svc implementing IPure360Service, plus CampaignReporting.svc) that fronts the Pure360 email-marketing platform for the back office: sending campaigns, managing opt-ins/lists and producing campaign reporting.

Tech stack

  • .NET Framework 4.6.2 WCF web application (packages.config style), with TC.Pure360.Client implementing a SOAP interceptor for Pure360's PAINT API, plus DAL, Domain, Reporting and Shared projects.
  • Uses Polly for resilience, log4net for logging (writing to the EventLog database), YamlDotNet, and TC.Phenix.ApplicationFramework.
  • Connection strings resolved via TC.ConnectionBroker; per-environment Web.*.config transforms (OpsDev, TestQA, DataFixQa, LiveProviderQa, PreProduction, Production).

Deployment

Prod application with 1 release. Build pipelines "backoffice-pure360-marketing-service-api" and its develop variant; release pipeline under \marketing\pure360\. No YAML pipeline in the repo, so builds are classic Azure DevOps definitions.

Dependencies

  • Internal: tc-connectionbroker (TC.ConnectionBroker/Sql packages); calls the legacy contact-centre SOAP service (/services/contactcentre/ContactCentre.asmx via TC.ContactCentre.ServiceClient), which maps to phenix-contact-centre-wcf.
  • External: Pure360 email platform — PAINT SOAP endpoint (paint.pure360.com/_bus/request.soap) and the Pure360 opt-in list website (email.travelcounsellors.co.uk/interface/list.php).

Data stores

  • SQL Server Pure360MarketingCampaigns (campaign data) and ContactApi1 (contact data) via connection broker.
  • SQL Server EventLog database used as the log4net logging sink.

Integration points

  • Inbound: WCF/SOAP endpoints (Pure360.svc, CampaignReporting.svc) consumed by back-office marketing tooling.
  • Outbound: Pure360 PAINT SOAP API and the contact-centre ASMX SOAP service.

Code health

  • Unit tests exist (TC.Pure360.MarketingService.Tests: client, DAL, CSV, notification-processor tests) — coverage appears moderate.
  • README is untouched boilerplate. Config transforms contain hard-coded SQL credentials for QA environments.
  • Recently touched (last commit 2026-01-30) but the codebase style is legacy.

Modernisation risks

  • .NET Framework 4.6.2 + WCF: WCF is not supported on modern .NET, so any migration means re-platforming to REST/gRPC or CoreWCF.
  • Tight coupling to Pure360's SOAP API and to the legacy contact-centre ASMX service; hard-coded credentials in source control.