Concept of Operations

Writing a Concept of Operations (CONOPS) is the first and most important step in a project and should ideally be prepared before a contract is signed. The CONOPS provides a shared understanding of the project's goals, scope, and operational context. This clarity is essential for creating a contract that accurately reflects stakeholder expectations. It bridges the gap between stakeholders' needs and the technical execution. It includes example workflows of at least the happy paths to demonstrate how the system will function. These workflows should clearly specify who is doing what; in other words, there should be no sentences written in the passive voice. Example workflow for email verification on new customer registration:

1. The customer clicks the "Register" button on the registration form.

2. The browser sends a registration request to the server.

3. The server generates a customer email verification token.

4. The server saves the token to the email_verification_token field in the database.

5. The server sends an email to the customer containing the verification link with the token.

6. The server responds with the page: “Registration successful. We have sent you an email. Open that email and click on the verification link to complete the registration.”

7. The browser displays the "Registration successful" page to the customer.

8. The customer opens the email and clicks the verification link.

9. The browser sends a verification request to the server.

10. The server retrieves the customer from the database using the token included in the request.

   a. If the token cannot be found, the server responds with the login page.

11. The server sets the customer's email_verification_token field to NULL.

12. The server responds with the page: “Registration complete. Link: Login”

13. The browser displays the page to the customer.

14. The customer clicks the login link.

15. The browser sends a login request to the server.

16. The server retrieves the customer's data for the login email.

17. The server verifies the password. If the password is correct, the server checks the email_verification_token field. 

18. If the token is NULL, the server logs in the user and responds with the customer dashboard page.

    a. The browser displays the dashboard to the customer.

19. If the token is not NULL, the server responds with the page: “To continue with the login, click on the verification link in the email we have sent you. Link: Send verification email again.”