Feasible through the Workflow Engine's rolling drain, but real preparation is needed: dual-version discipline, better tests, or schema care before at-will release is sensible. Legacy runtime: the rolling drain works (stealth releases prove it) but relies on fix-forward risk rather than dual-version safety. Shares sqlserver:ContactCentre: schema changes move in convoy.

• sqlserver:ContactCentre schema convoy

• 2 system(s) depend on this repo; during a rolling deploy they will talk to old and new versions at once, so responses must stay compatible
• Consumes WCF contract packages: never take a breaking client bump mid-feature, and treat obsolete warnings as migration debt
• Shares sqlserver:ContactCentre with 8 system(s): destructive schema change is prohibited in a single release; expand and contract only
• Feature flags come from phenix-feature-service (WCF-only): flag reads themselves are a legacy dependency to watch

1. Adopt the four-stage discipline from the ZDD engineering standard: pre-deployment compatibility, deployment, feature activation behind a flag, post-release cleanup.
2. Make every change dual-version safe: backwards-compatible APIs (new major version for breaking wire changes), expand and contract for any schema change, and consumers tolerant of unknown fields.
3. Audit serialized data: anything in Redis, queues or shared caches must deserialize cleanly across adjacent versions.
4. Wrap behaviour changes in feature flags so code deploys dark and release becomes a business decision, not a deployment event.
5. Route deployments through the Workflow Engine's automated drain, deploy, health-check, return cycle (the path proven by the first automated production run in mid-2026).
6. Verify with area-scoped regression rather than the whole-platform cycle, and watch error rates after rollout with automated rollback on alert.

sqlserver:ContactCentre, sqlserver:DataWarehouse are shared, so this system cannot change engine on its own: every sharer moves in convoy. The stage 4 work (named owner, declarative schema, owned API) has to land first; after that, the steps below apply to whatever slice this system ends up owning.

• sqlserver:ContactCentre is shared with 8 other system(s) and is a core database
• sqlserver:DataWarehouse is shared with 3 other system(s)

1. Inventory the schema and query surface of sqlserver:ContactCentre, sqlserver:DataWarehouse: tables, stored procedures, triggers, cross-database joins and anything else engine-specific.
2. Confirm the target: PostgreSQL (relational model; keep transactions and joins, swap the engine).
3. Replatform to modern .NET first (see the recommended actions): current PostgreSQL and MongoDB drivers and EF Core providers target modern .NET, and doing one risky change at a time is cheaper than doing two.
4. The repo already uses Entity Framework: swap the provider (Npgsql for PostgreSQL) behind the existing model, then burn down the provider-specific differences the test suite finds.
5. Stand up the target alongside SQL Server, backfill with an ETL pass (pgloader or an export/import job), then dual-write or replicate until parity is proven.
6. Move reads to the target, watch correctness and latency, then cut writes over and keep SQL Server read-only until confidence is earned.
7. Decommission the SQL Server database and remove the connection strings and firewall paths that pointed at it.

Appropriate, but the .NET Framework runtime has to go first; container work rides along with the replatform rather than preceding it.

• .NET Framework only runs on Windows; practical (Linux) containers need modern .NET

1. Replatform to modern .NET first (see the recommended actions). Containerising then becomes routine.
2. Add a Dockerfile and make the app read all configuration from environment variables and the secrets manager, never from machine-local files.
3. Log to stdout and expose a health check endpoint so ECS can supervise it.
4. Adopt the shared ci.yml pipeline template with the container parameters (awsRegion, containerAfterBuild, ecsTerraformRepo), which is exactly how the estate's existing AWS services deploy.
5. Define the service in the Terraform repo, deploy to a non-production environment, then shift traffic and disarm the deployment-group release pipeline.