IC³ Platform
Intelligent Command, Control & Communication
Water Utility Management System
Project Status  ACTIVE
Report Date  May 2026
Version  v1.0
Team  IC³ Dev
1
Platform Overview — What is IC³?
Scope & Scale
What is IC³?
The IC³ Platform (Intelligent Command, Control & Communication) is a production-grade, edge-deployed water utility management system that provides a single unified command center for monitoring, control, analytics, and compliance across every operational domain of a water utility.
10
Microservices
20
Operational Domains
167
Monitored Systems
5,296
Data Parameters
Core Capabilities
🔴 Real-Time Monitoring
Sub-second WebSocket telemetry from all 167 systems across 20 domains.
📊 Analytics & AI
Anomaly detection, demand forecasting, NRW analysis, hydraulic modelling.
🔐 Security & Compliance
JWT auth, RBAC, IS:10500/WHO compliance, 7-table audit trail.
2
Technology Stack
Frontend + Backend + Infrastructure
Frontend
React 18 TypeScript Vite 5 CSS-in-JS (inline) Google Maps API WebSocket Client SVG Charts (custom)
Backend
Go 1.22+ REST API WebSocket Server JWT (HS256) bcrypt
Database
PostgreSQL SQLite (WAL) Redis (cache)
Infrastructure & Protocols
Nginx (reverse proxy) Systemd (auto-restart) AWS EC2 Ubuntu 22.04 Modbus TCP OPC-UA HART / 4-20mA LoRaWAN / MQTT GeoJSON / OGC WFS
Deployment
Server: 65.1.130.121
App accessible at http://65.1.130.121/ic3
Backend: port 9090 | Frontend: Nginx on port 80
Systemd service: auto-restart on failure
3
Completed Work — Core Platform
✅ Done
Authentication & Security
Login Page
JWT-based auth, remember me, error handling
AuthContext + useAuth hook
Token stored in memory, auto-expiry
Admin Panel — User Management
Create/edit/delete users, bcrypt passwords, role assignment
Backend DB-backed auth
Go backend, PostgreSQL users table, bcrypt
Core Infrastructure
WebSocket Real-Time Feed
useWebSocket hook, auto-reconnect, 500 live readings
REST API Integration
useApi hook, /api/telemetry, /api/alarms, /api/stats
Sidebar Navigation
Full 20-domain menu, alarm badge, responsive
TopBar + StatusBar
WS status, live count, domain tabs, KPI bar
useStats / useAlarms hooks
Polled every 30s, updates live alarm count
Command Center Dashboard
IC³ Integrated Command Center ✅
  • 6 KPI boxes (Criticals, Warnings, Open WOs, Zones, Data Quality, AI Anomalies)
  • SCADA panel — live telemetry table
  • GIS panel — pipeline network, compact + expandable to full view
  • AI panel — anomaly detection, quality analysis
  • Trend Chart — 7-day sparklines
  • Alarms Panel — live alarm list
  • Work Orders Panel
GIS Module
Google Maps + Pipeline Network ✅
  • GeoJSON pipeline rendering, 5/8/11px strokes by diameter
  • Minimal dark map style (no roads/labels)
  • Domain asset zone markers overlaid
  • Pipe click info windows, auto-fitBounds
  • ⤢ EXPAND button — full-screen GIS view
  • Full GIS: All Pipes, Flow, Valves, Assets, DMA, Pressure tabs
4
20 Operational Domain Dashboards — Status
Frontend Implementation
Domain Name Frontend Status Dashboard Type Screens / Features
D01Flow & PressureDoneGenericDomainKPIs, Asset Table, Trends, Alarms
D02Pump StationDonePumpsDomain (Full)7 Screens: Dashboard, Asset List, Pump Detail, Energy, Predictive, Alarms, Maintenance
D03Valve & ActuatorDoneGenericDomainKPIs, Asset Table, Trends, Alarms
D04Reservoir & StorageDoneGenericDomainKPIs, Asset Table, Trends, Alarms
D05Stormwater & FloodDoneGenericDomainKPIs, Asset Table, Trends, Alarms
D06Environmental & MetDoneGenericDomainKPIs, Asset Table, Trends, Alarms
D07Power & EnergyDoneGenericDomainKPIs, Asset Table, Trends, Alarms
D08Groundwater & SourceDoneGenericDomainKPIs, Asset Table, Trends, Alarms
D09Water QualityDoneGenericDomainKPIs, Asset Table, Trends, Alarms + IS:10500/WHO thresholds
D10Smart Meters & AMIDoneGenericDomainKPIs, Asset Table, Trends, Alarms
D11SCADA / PLC / RTUDoneGenericDomainKPIs, Asset Table, Trends, Alarms
D12GIS & NetworkDoneGISPanel (Full)Google Maps, Pipeline Network, All Pipes/Flow/Valves/Assets/DMA/Pressure tabs
D13Security & CCTVDoneSecurityPanelSite security status, CCTV feeds, intrusion alerts
D14IoT & CommsDoneGenericDomainKPIs, Asset Table, Trends, Alarms
D15WTP ProcessDoneGenericDomainKPIs, Asset Table, Trends, Alarms
D16WWTP / STP / SPSDoneGenericDomainKPIs, Asset Table, Trends, Alarms
D17CMMS & MaintenanceDoneCMMSPanelWork orders, PM schedule, asset health
D18CRM & BillingDoneGenericDomainKPIs, Asset Table, Trends, Alarms
D19NRW / Water BalanceDoneNRWDomain (Full)5 Screens: Overview, DMA Zones, IWA Balance, Trends, Leak Detection
D20AI / AnalyticsDoneAIPanel + GenericDomainAnomaly detection, model status, predictions
Done 18 domains with full dashboards • 20 / 20 domains have frontend implementations ✅
5
Flagship Domain Dashboards — Full Multi-Screen Implementations
Purpose-built modules
D02 Pump Station Monitor 7 screens Completed
📊 Dashboard Overview — KPI boxes, live pump status grid, health gauges 📋 Asset List — Searchable/filterable pump inventory 🔧 Pump Detail — Full metrics: RPM, flow, pressure, power, vibration, bearing temp ⚡ Energy Screen — kW consumption, efficiency, specific energy (kWh/m³) 🤖 Predictive Maintenance — Vibration trend, bearing wear, RUL estimation 🔔 Alarms — Pump-specific alarm history and active events 🗓 Maintenance — PM schedule, work orders, last service records SVG Arc Gauge — 270° sweep health indicator per pump
D19 NRW / Water Balance Module 5 screens Completed
📊 Dashboard — System NRW %, NRW volume (m³/d), Revenue loss ($M), Active alerts, Zone NRW Status table, Fleet Status 🗺 DMA Zones — Sortable/filterable zone table with NRW%, MNF, pressure, trend sparklines ⚖ IWA Water Balance — Full IWA standard hierarchy: Authorized Consumption + Water Losses breakdown 📈 Trends — 7-day per-zone charts for NRW%, Input Flow, Min Night Flow 💧 Leak Detection — Burst probability bars, leak location, severity (CRITICAL/HIGH/MED), Assign/Close actions NRW Performance KPIs: ILI, Revenue Water %, Real Loss (L/conn/d), NRW (m³/km/d)
D12 GIS & Network Management 6 tabs Completed
🗺 Google Maps — Dark minimal style, pipeline overlay Pipeline Network — Thick strokes (5/8/11px) by diameter, click info windows Asset Zone Markers — Domain assets overlaid on map Auto-fitBounds — Auto-zoom to pipeline extent ⤢ Expand — Full-screen GIS mode from Command Center Tabs: All Pipes · Flow · Valves · Assets · DMA · Pressure Zones
6
Backend Microservices — Status
Per the IC³ Architecture (10 services)
Port Service Role Status Notes
:9090 Monolithic Backend API Gateway + Store + Streamer + Auth (combined) Done Go single package, PostgreSQL, WebSocket, JWT, bcrypt
:8080 API Gateway Public entry, JWT, RBAC, reverse proxy Pending Currently combined in :9090 monolith
:8081 Ingest Gateway Validation, 23-field check, fan-out Pending Ingest available at /api/telemetry on :9090
:8082 Store SQLite/PG, Redis, 12 tables Partial PostgreSQL store implemented, 5/12 tables complete
:8083 Streamer WebSocket & SSE hub Partial WebSocket hub in :9090, SSE not yet
:8084 Simulator 167-system synthetic data generator Pending Frontend uses hash-based synthetic data as fallback
:8085 Poller Modbus, OPC-UA, HART field polling Pending Real device polling not yet implemented
:8086 Configurator Runtime config, hot-reload Pending Config via env vars today
:8087 Logkeeper 7-table audit trail Pending Basic logging to stdout/PostgreSQL today
:8088 Healthmon 30s polling, UP/DOWN/DEGRADED Partial Health check at /api/stats implemented
:8089 Admin Users, bcrypt, JWT rotation Done Full CRUD user management, bcrypt, roles in :9090
⚠ Current Architecture
Today all backend functions run as a single Go service on port 9090. The full 10-microservice split (as per IC³ architecture spec) is the next major backend milestone. This does not affect the frontend — the API contract is the same.
7
Overall Project Progress
Completion by Area
Frontend (UI / Dashboards)
Command Center Dashboard
100%
Domain Dashboards (20 domains)
100%
GIS / Pipeline Map
90%
Authentication & Admin Panel
100%
Reports & Export
60%
MDM / Meter Data Management
70%
Backend (API / Services)
REST API (core endpoints)
75%
WebSocket Real-Time Feed
80%
Database (Store service)
50%
Microservice Split (10 services)
15%
Device Poller (Modbus/OPC-UA)
0%
Simulator (167-system synthetic)
20%
Audit Logkeeper (7 tables)
20%
Infrastructure
EC2 Deployment
80%
Nginx + Systemd
85%
HTTPS / TLS
0%
CI/CD Pipeline
0%
8
Remaining Work — What Needs to Be Done
Prioritised backlog
🔴 High Priority
1. NRW Dashboard Redesign
Match reference screenshot — Zone NRW Status table, Active Alerts panel, Fleet Status Quick View, sidebar menu (Dashboard/Zone balance/MNF analysis/Water balance/Leak events/Meters/Reports/Settings)
2. Backend Store — Missing Tables
Implement: dma_water_balance, quality_events, telemetry_hourly, gis_features, integration_events (7 of 12 tables remain)
3. Real Data Integration
Replace hash-based synthetic data in all domain dashboards with live telemetry from backend API. Wire /api/telemetry/latest domain filters.
4. Hydraulic Domain Stub
'hydraulic' tab still shows DomainPanel stub — needs GenericDomainDashboard or dedicated panel.
🟡 Medium Priority
5. Backend Simulator Service
Implement the Simulator microservice (:8084) — generates realistic data for all 167 systems, anomaly injection (6 types: spike, drift, dropout, frozen, bad_quality, threshold_alarm).
6. Logkeeper — 7-Table Audit Trail
Implement audit_logs, api_calls, db_ops, redis_ops, alarm_transitions, user_actions, service_events tables.
7. Reports & Export
CSV export endpoint, PDF report generation, scheduled reports, compliance reports (IS:10500/WHO).
🔵 Backend Architecture
8. Microservice Split
Split monolithic :9090 backend into 10 independent Go services (API Gateway :8080, Ingest :8081, Store :8082, Streamer :8083, Simulator :8084, Poller :8085, Configurator :8086, Logkeeper :8087, Healthmon :8088, Admin :8089)
9. Ingest Gateway Validation
Full 23-field envelope validation, clock drift detection (≤5s), payload key registry validation, fan-out with 3-retry exponential backoff.
10. Device Poller
Modbus TCP, OPC-UA, HART, 4-20mA polling for all 167 systems. Configurable scan rates (1s–3600s). Enable/disable per system.
⚙ Infrastructure
11. HTTPS / TLS
Let's Encrypt certificate via Certbot. HTTPS on port 443. HTTP → HTTPS redirect.
12. CI/CD Pipeline
GitLab CI: build → test → deploy. Auto-deploy on main branch push. Health check after deploy.
13. Production Hardening
Change JWT secret, set internal token, restrict CORS, set IC3_SKIP_AUTH=false, bind internal ports to 127.0.0.1, set up DB backups, log rotation.
14. Redis Integration
Enable Redis cache for /api/telemetry/latest. Redis Pub/Sub for multi-instance WebSocket scaling.
9
Frontend Component Inventory
All React components built
Core Layout Components
ComponentStatusDescription
App.tsxDoneRoot router, tab state, WS orchestration
Login.tsxDoneJWT login form with error handling
Sidebar.tsxDone20-domain navigation, alarm badge
TopBar.tsxDoneActive tab header, WS status, stats
StatusBar.tsxDoneBottom bar: WS, live count, time
KPICards.tsxDoneTop KPI row for non-dashboard tabs
Domain Dashboards
ComponentStatusDomains
CommandCenter.tsxDoneMain IC³ dashboard
PumpsDomain.tsxDoneD02 — 7 screens
NRWDomain.tsxDoneD19 — 5 screens
GenericDomainDashboard.tsxDoneD01,D03-D11,D13-D16,D18-D20
GISPanel.tsxDoneD12 — Google Maps
SecurityPanel.tsxDoneD13
CMMSPanel.tsxDoneD17
DomainPanel.tsxDoneStub for remaining tabs
Operations Panels
ComponentStatusDescription
ScadaPanel.tsxDoneLive telemetry table, alarm states
AIPanel.tsxDoneAnomaly detection, AI analysis
TrendChart.tsxDoneSVG time-series sparklines
AlarmsPanel.tsxDoneLive alarm list, severity badges
WorkOrdersPanel.tsxDoneOpen work orders list
ReportsPanel.tsxPartialSummary reports, export
MDMPanel.tsxPartialMeter data management
AdminPanel.tsxDoneUser CRUD, roles, system health
Hooks & Context
Hook / ContextStatusDescription
AuthContext.tsxDoneJWT token, login/logout, persist
useApi.tsDoneFetch wrapper with auth header
useWebSocket.tsDoneWS connect, reconnect, message cb
useStats.tsDonePlatform stats polling every 30s
useAlarms.tsDoneActive alarms, 30s refresh
10
Development Roadmap — Next Steps
Phased delivery plan
✅ PHASE 1 — DONE
Command Center Dashboard
All 20 Domain Dashboards
GIS Pipeline Network
Pump Station Module (D02)
NRW Module (D19)
JWT Auth + Admin Panel
EC2 Deployment Setup
WebSocket Real-Time Feed
🔄 PHASE 2 — IN PROGRESS
NRW Dashboard UI Redesign
Match reference screenshot
Backend Store — Full 12 Tables
Real Data Integration
Replace synthetic with live API
Ingest Gateway (23-field validation)
Alarm History + Water Balance tabs
Reports & CSV Export
HTTPS / Let's Encrypt
📋 PHASE 3 — PLANNED
Microservice Split (10 services)
Device Poller (Modbus / OPC-UA)
Simulator Service (167 systems)
Logkeeper — 7-Table Audit Trail
Configurator (hot-reload config)
Redis Cache + Pub/Sub
CI/CD GitLab Pipeline
Mobile Responsive Optimization
Prometheus Metrics / Monitoring
🎯 Key Milestone: Full Platform Demo
Target: Phase 2 completion enables a fully functional demo with real backend data, live telemetry from the simulator, all 20 domain dashboards populated with meaningful data, and HTTPS-secured deployment at https://65.1.130.121/ic3
11
Executive Summary
Where we stand today
✅ What's Done (Completed)
  • Complete React/TypeScript frontend application
  • IC³ Command Center Dashboard with 6 KPIs
  • All 20 Operational Domain Dashboards implemented
  • 2 flagship modules: PumpsDomain (7 screens) + NRWDomain (5 screens)
  • GIS pipeline map with Google Maps + expand mode
  • Real-time WebSocket telemetry feed
  • JWT authentication + DB-backed user management (bcrypt)
  • Admin panel with full user CRUD
  • EC2 deployment at 65.1.130.121
  • Nginx reverse proxy + Systemd service
  • SCADA, AI, Alarms, Trends, Work Orders panels
  • Dark theme UI with professional design
🔄 What's Remaining (Pending)
  • NRW dashboard redesign to match reference UI
  • Backend Store — 7 of 12 tables not yet implemented
  • Real data replacing hash-based synthetic fallbacks
  • Hydraulic domain dedicated dashboard
  • Backend Simulator service (167 systems, anomaly injection)
  • Device Poller (Modbus/OPC-UA/HART)
  • Logkeeper 7-table audit trail
  • Full 10-microservice architecture split
  • HTTPS/TLS certificate
  • CI/CD pipeline
  • Production security hardening
  • Redis cache integration
20/20
Domain Dashboards Done
~85%
Frontend Complete
~45%
Backend Complete
~65%
Overall Project
12
All Dashboard Screenshots
28 screens — Playwright-captured from running application, May 2026
OPERATIONS
Command Center
Live Telemetry
PROCESS CTRL
Pump Station (D02)
Flow & Pressure (D01)
Valve & Actuator (D03)
Reservoir (D04)
WTP Process (D15)
WWTP / STP (D16)
WATER QUALITY
Water Quality (D09)
Groundwater (D08)
Environmental (D06)
Stormwater (D05)
NETWORK & GIS
GIS Network Map (D12)
Smart Meters (D10)
ANALYTICS & AI
NRW / Water Balance (D19)
AI Analytics
Trend Charts
POWER & COMMS
Power & Energy (D07)
IoT & Comms (D14)
SCADA / PLC (D11)
ALARMS
Active Alarms
MAINTENANCE
CMMS (D17)
Work Orders
ENTERPRISE
CRM & Billing (D18)
Security & CCTV (D13)
REPORTS
Compliance Reports
ADMIN
User Management
MDM / Config