Migration center ilifunguliwa kwenye floor ya zamani ya data office ambayo haikuwa na madirisha mengi. Saa nne usiku screens kumi na mbili zilikuwa zimewaka, kila moja ikionyesha queue tofauti: duplicate IDs, consent unclear, active-dose history na account separations.
Leila hakupenda migration projects. Dawa inaweza kushikwa mkononi; data inaweza kuharibiwa bila mtu kusikia kitu kikidondoka.
Privacy officer, Wanjiru, aliweka rule ya kwanza kwenye whiteboard: CLINICAL ID ≠ PHONE ≠ CLINIC ACCOUNT.
Nocturne registry ya zamani ilikuwa imejenga identity nyingi juu ya phone number na membership account. Watu waliobadilisha simu, waliotumia family number au waliokuwa na duplicate clinic accounts waliweza kuonekana kama watu wawili au zaidi.
IT lead, Musa, akaonyesha case ya kwanza. “Same patient, three records. Phone changed twice.”
“Una match kwa nini?” Leila akauliza.
“Name, date of birth, old member number.”
“Name peke yake haitoshi.”
“Tuna verified clinical token kutoka Board intake.”
Wanjiru akaidhinisha merge baada ya human review. Mfumo ukatoa portable clinical ID mpya ambayo haikubeba provider name.
Musa alionyesha record ya mwanamke ambaye phone number yake ilikuwa imetumiwa pia na watoto wawili. Nocturne system ilikuwa imeunganisha notifications zao chini ya account moja. Clinical histories zilikuwa tofauti, lakini communication identity ilikuwa shared.
“Ukifanya automated merge kwa phone, tunatengeneza patient mmoja wa kubuni,” Wanjiru alisema.
Team ikaongeza rule: phone ni contact attribute tu, si identity key. Records hizo zikatenganishwa kwa clinical tokens na verified demographics. Wakati huo Leila alikumbuka bangili ya Elias ambayo system iliweza kuitambua kwa refill lakini ikamkana kwenye registry. Portable identity ilipaswa kufanya contradiction kama hiyo ionekane, si kuificha.
Queue nyingine ilikuwa mbaya zaidi: consent unclear. Records za zamani zilikuwa na checkbox moja iliyochanganya care, analytics na company communications. Wanjiru akasema hazingeweza ku-migrate kama full-sharing consent.
“Tutazipoteza?” Musa akauliza.
“Hapana. Clinical safety minimum inaweza kubaki restricted kwa lawful continuity. Marketing na optional research zibaki off mpaka patient achague.”
Leila akakubali. “Uncertainty isiwe interpreted kama yes.”
Huo uamuzi uliweka records zaidi ya elfu moja kwenye restricted queue. Ulifanya migration iwe polepole, lakini ulizuia mfumo mpya kurithi permission za zamani kama ukweli wa milele.
Saa sita usiku, clinics zilianza ku-sync last-dose history. Southline ilituma batch logs. Westpark ikatuma Nuru record kwa consent aliyochagua. Leila hakuifungua; system ilionyesha tu kwamba record imepita validation.
Musa akamcheka. “Unaweza kuona status bila kuona content.”
“Najifunza.”
Exception log ilijaa. Duplicate dates, misspelled names, old accounts zenye debt flags na clinic IDs ambazo hazikuwa na clear owner. Kila exception ilihitaji disposition: merge, restrict, reject au contact patient.
Zawadi alifika saa saba na kuuliza launch criteria. Musa alitaka waende live mara tu asilimia tisini na tano ya active records imemigrate. Wanjiru akakataa percentage peke yake.
“Five percent inaweza kuwa people with highest risk.”
Leila akapendekeza active-dose records zote lazima ziwe either migrated au explicitly flagged for manual continuity before launch. Hakuna patient mwenye dose ndani ya masaa ishirini na nne angeachwa kwenye unknown queue.
Kwa records kumi na saba, Wanjiru hakuruhusu staff wapige simu kwa namba zote bila kuangalia contact consent. Baadhi ya patients walikuwa wameomba SMS tu; wengine phone calls zilikuwa unsafe kwa sababu family members walishiriki device. Clinics zilitumia channel iliyokubaliwa mwisho. Watu watano walithibitisha identity kabla launch, wengine wakabaki manual continuity list.
Musa akasema, “Hii ndiyo sehemu slow sana.”
“Privacy huwa slow ukijaribu kuifanya baada ya mfumo kujengwa,” Wanjiru akajibu. “Tukiiweka kwenye design, inakuwa route nyingine tu.”
Team ikafanya sweep. Watu kumi na saba walibaki unclear. Clinics zao zilipewa manual alert na phone contact plan.
Kisha walifanya test ya cross-clinic dose alert. Fake patient alipokea simulated Calm-X dose Southline; Westpark ilipojaribu ku-authorize nyingine, system ikatoa red warning. Test ikapita.
“Real data sasa?” Musa akauliza.
Zawadi akasema, “Exception log signoff kwanza.”
Kila lead alisaini sehemu yake. IT kwa integrity, privacy kwa consent treatment, pharmacy kwa dose fields, Board kwa emergency governance. Hakukuwa na single hero button.
Saa nane na dakika kumi na mbili, portable registry ikaenda live.
Musa aliangalia performance metrics na kuona latency kubwa kwenye clinic moja ya mbali. Badala ya kuongeza cache yenye data nyingi zaidi, team ilipunguza payload ya safety query hadi fields chache muhimu: ID status, last dose, protocol alert na critical allergy. Response time ikashuka bila kusafirisha full chart.
Leila akasema, “Minimum necessary pia inaweza kuwa faster.”
Wanjiru akatabasamu. “Sasa unaanza kuuza privacy kwa engineers.”
Zawadi akaomba performance change hiyo iingie deployment log, kwa sababu optimization ambayo inabadilisha fields zinazosafirishwa inaweza baadaye kuwa safety issue. Musa akaandika version, reason na rollback plan. Hakuna modification ya usiku iliyobaki kwenye kichwa cha engineer mmoja tu.
Dakika tano za kwanza hazikuwa na tukio. Leila alihisi karibu kucheka kwa jinsi launch kubwa inaweza kuonekana boring.
Kisha alert ikaingia kutoka clinic ambayo haikuwa kwenye Nocturne network zamani. Patient mmoja alikuwa amefika akisema hajatumia Calm-X usiku huo. Pharmacist ali-scan portable ID na kuona last-dose record kutoka hospitali nyingine dakika arobaini na tano kabla.
System haikuonyesha debt, phone history wala marketing profile. Ilionyesha tu information iliyohitajika kuzuia dosing duplicate.
Pharmacist akasimamisha authorization na kumpigia clinician. Patient alikumbuka akiwa amepata dose wakati wa transfer lakini alikuwa na memory gap ya sehemu ya episode.
Samwel, aliyekuwa kwenye call ya monitoring, alisema, “Hii ndiyo risk Adrian alikuwa sahihi kuiogopa. Lakini answer si lazima iwe account yake milele.”
Leila akakubali.
Nocturne membership ilikuwa imeacha kuwa identity ya lazima kwa care continuity.
Alert ya kwanza ilikuwa imezuia duplicate dose dakika kumi baada ya launch.