Skip to content
Prototype · fictional data & simulated workflows · not a live crisis service
Covenant House doveCovCareSeen. Heard. Helped.
Youth home ↗

CovCare V6.0 / Enterprise reference

Access CovCare Safely from a Shared Device

Public documentation and fictional practice now; separately reviewed connect operational boundary in future.

Proposed design, not organizational approval or operational evidence. Public fictional demonstrations only; no sensitive information, live submissions or authority changes.

Use Case Library

UC-KIOSK-001 · V6.0 · Proposed

Access CovCare Safely from a Shared Device

Role tour ↗Module guide ↗Stories & tests ↗Traceability ↗
Version
6.0
Status
Proposed
Priority
High
Role Id
kiosk-visitor
Primary Actor
Community Kiosk Visitor
Module Id
connect
Capability Id
CAP-ENG
Objective Id
OBJ-01
Owner
Youth program owner (proposed)
Boundary
Public documentation and fictional practice now; separately reviewed connect operational boundary in future.
Goal
Access CovCare Safely from a Shared Device while maintaining choice, purpose limitation and accountable human review.
Value
Restore anonymous discovery and remove temporary input.
Trigger
Start a clean anonymous kiosk visit.
Scope
The stated participant task only; no unrelated records, new authority or automatic operational activation.
Assumptions
  • Covenant House validates program fit, ownership and relevant policies.
  • Required provider, staffing and data-quality evidence is established before operation.
Supporting Actors
  • Youth program owner
  • Young person
  • Governance and safeguarding reviewer
Preconditions
  • Anonymous public discovery; explicit entry for temporary practice. No account creation.
  • Current voluntary consent for the selected goal; private reflections excluded.
  • Required organizational and human approval for operational behavior; absent in this public specification.
  • Operational services, recovery readiness and separately approved testing remain dependencies.
Alternatives
  • Id
    UC-KIOSK-001-ALT-01
    At
    3
    Condition
    The participant chooses a different suitable option.
    Path
    Return to choose an available language, check scope and consent again, and document the revised purpose; do not duplicate evidence.
  • Id
    UC-KIOSK-001-ALT-02
    At
    6
    Condition
    An eligible alternative channel or resource is reviewed.
    Path
    Reassess the connect provider and required human approval; continue only with minimum authorized information. Public exploration may continue without an account.
Exceptions
  • Id
    UC-KIOSK-001-EX-01
    Condition
    Authorization denied, expired or revoked.
    Response
    Stop the restricted step and provide no record readback; review access through qualified authority, never public self-selection.
  • Id
    UC-KIOSK-001-EX-02
    Condition
    Missing information, conflicting evidence or unavailable service.
    Response
    Hold the relevant state for human review. Do not fabricate capacity, receipt, attendance, outcomes or successful submission.
  • Id
    UC-KIOSK-001-EX-03
    Condition
    Consent withdrawn or a safeguarding issue raised.
    Response
    Stop optional disclosure; qualified humans apply the reviewed lawful safeguarding policy. The prototype sends no escalation.
Postconditions
Success
Restore anonymous discovery and remove temporary input.
Failure
No unauthorized disclosure, authority grant or claimed fulfillment; public practice remains temporary and operational tasks remain blocked.
Rule Ids
Data
  • Field
    Selected goal and approved barrier
    Validation
    Nonempty relevant reference; no unrelated personal history.
    Owner
    Young person
    Sensitivity
    Restricted in future operation; fictional only in public practice.
    Sharing
    Explicit purpose and authorized recipient only; never private reflections.
    Audit
    Future scoped actor, decision, purpose and evidence reference; do not log secrets.
    Retention
    Organizational retention and deletion period not approved.
    Consent
    Current explicit youth consent where selected goal context is involved; otherwise lawful task-specific processing basis requires policy review. No blanket consent assumed.
  • Field
    Decision or verification evidence reference
    Validation
    Provenance, authorized reviewer and current scope; missing evidence remains unverified.
    Owner
    Youth program owner
    Sensitivity
    Restricted operational evidence; none read by the catalog.
    Sharing
    Authorized reviewer only; aggregate public explanation has no personal identifiers.
    Audit
    Future atomic decision and change audit where operational approval is required.
    Retention
    Policy-specific review and appeal requirements unresolved.
    Consent
    Purpose-limited review under approved evidence policy; contributor recognition requires a separate optional choice.
Nfr
  • Id
    NFR-SEC
    Requirement
    Deny unauthorized access server-side; never widen youth owner-only policies.
  • Id
    NFR-PRIV
    Requirement
    Minimize information, separate private reflections and constrain recipient purpose.
  • Id
    NFR-A11Y
    Requirement
    Target WCAG 2.2 AA, labeled keyboard/touch controls; professional review outstanding.
  • Id
    NFR-LOC
    Requirement
    Five youth languages; executive English and machine-assisted translations require review.
  • Id
    NFR-REL
    Requirement
    Failure must not confirm a write or restore expired local content; operational reliability and availability targets unapproved.
  • Id
    NFR-PERF
    Requirement
    Measure agreed task response and availability targets during an approved pilot; no unapproved SLA.
Dependencies
  • Verified CHI ownership and safeguarding/privacy review
  • Data classification, backup and tested recovery evidence
  • Approved connect service and scoped operational test plan
  • Related module: connect; proposed business owner: Youth program owner (proposed)
Milestone Id
MS-04
Assessment
Proposed
All formal operational sequences are proposed, not organizationally approved.
Frontend
Existing public connect views and tours explain the concept only.
Backend
No new operational behavior is verified by this catalog.
Simulated
Fictional local practice and storyboard navigation never confer authority.
Blocked
Account activation, staff coordination, payments and assignments need separate approvals.
Unknown
Positive authenticated lifecycle, provider delivery and cross-account privacy remain unverified.
System Boundary
Public documentation and fictional practice now; separately reviewed connect operational boundary in future.
Strategic Alignment
Objective Id
OBJ-01
Statement
Proposed youth-centered planning and accountable coordination; formal CHI alignment is not established.

Main success scenario · proposed

  1. 1. Confirm purpose-limited entry for Access CovCare Safely from a Shared Device

    Number
    1
    Actor
    Community Kiosk Visitor
    Action
    Confirm purpose-limited entry for Access CovCare Safely from a Shared Device
    Response
    Check the task-specific identity, organizational/site/project scope and relevant assigned permission before restricted information is shown. Public storyboard remains read-only.
    Validation
    Anonymous public discovery; explicit entry for temporary practice. No account creation.
    Information
    Verified scope references only; no restricted record returned by this public catalog.
    State
    UC-KIOSK-001-ENTRY: scope review required
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Anonymous public discovery; explicit entry for temporary practice. No account creation.
    Next State
    UC-KIOSK-001-S01: start a clean anonymous kiosk visit reviewed

  2. 2. Start a clean anonymous kiosk visit.

    Number
    2
    Actor
    Community Kiosk Visitor
    Action
    Start a clean anonymous kiosk visit.
    Response
    Never inherit a previous visitor’s identity.
    Validation
    Before 'Start a clean anonymous kiosk visit.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Start a clean anonymous kiosk visit. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-001-S01: start a clean anonymous kiosk visit reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Start a clean anonymous kiosk visit.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-001-S02: choose an available language reviewed

  3. 3. Choose an available language.

    Number
    3
    Actor
    Community Kiosk Visitor
    Action
    Choose an available language.
    Response
    Disclose machine-assisted translations.
    Validation
    Before 'Choose an available language.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Choose an available language. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-001-S02: choose an available language reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Choose an available language.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-001-S03: adjust accessibility preferences reviewed

  4. 4. Adjust accessibility preferences.

    Number
    4
    Actor
    Community Kiosk Visitor
    Action
    Adjust accessibility preferences.
    Response
    Do not claim professional certification.
    Validation
    Before 'Adjust accessibility preferences.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Adjust accessibility preferences. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-001-S03: adjust accessibility preferences reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Adjust accessibility preferences.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-001-S04: browse a fictional resource category reviewed

  5. 5. Browse a fictional resource category.

    Number
    5
    Actor
    Community Kiosk Visitor
    Action
    Browse a fictional resource category.
    Response
    No account or personal data required.
    Validation
    Before 'Browse a fictional resource category.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Browse a fictional resource category. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-001-S04: browse a fictional resource category reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Browse a fictional resource category.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-001-S05: inspect simulated support limitations reviewed

  6. 6. Inspect simulated support limitations.

    Number
    6
    Actor
    Community Kiosk Visitor
    Action
    Inspect simulated support limitations.
    Response
    No real responder or kiosk fleet is implied.
    Validation
    Before 'Inspect simulated support limitations.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Inspect simulated support limitations. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-001-S05: inspect simulated support limitations reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Inspect simulated support limitations.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-001-S06: enter optional fictional practice reviewed

  7. 7. Enter optional fictional practice.

    Number
    7
    Actor
    Community Kiosk Visitor
    Action
    Enter optional fictional practice.
    Response
    Require explicit entry.
    Validation
    Before 'Enter optional fictional practice.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Enter optional fictional practice. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-001-S06: enter optional fictional practice reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Enter optional fictional practice.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-001-S07: allow sixty-second kiosk inactivity expiry reviewed

  8. 8. Allow sixty-second kiosk inactivity expiry.

    Number
    8
    Actor
    Community Kiosk Visitor
    Action
    Allow sixty-second kiosk inactivity expiry.
    Response
    Fully clear temporary personal content without extend.
    Validation
    Before 'Allow sixty-second kiosk inactivity expiry.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Allow sixty-second kiosk inactivity expiry. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-001-S07: allow sixty-second kiosk inactivity expiry reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Allow sixty-second kiosk inactivity expiry.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-001-S08: exit for the next visitor reviewed

  9. 9. Exit for the next visitor.

    Number
    9
    Actor
    Community Kiosk Visitor
    Action
    Exit for the next visitor.
    Response
    Restore anonymous discovery and remove temporary input.
    Validation
    Before 'Exit for the next visitor.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Exit for the next visitor. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-001-S08: exit for the next visitor reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Exit for the next visitor.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-001-REVIEW: outcome remains proposed until approved operational evidence exists

  10. 10. Review the final evidence and continuing eligibility for Access CovCare Safely from a Shared Device

    Number
    10
    Actor
    Youth program owner (proposed)
    Action
    Review the final evidence and continuing eligibility for Access CovCare Safely from a Shared Device
    Response
    Separate the proposed outcome from verified delivery; preserve only permitted review evidence and apply policy-approved retention or revocation. No public record mutation.
    Validation
    Qualified independent review where required, current authority and approved evidence/retention policy.
    Information
    Minimum outcome and reviewer reference; no private reflections or public identities.
    State
    UC-KIOSK-001-REVIEW: outcome remains proposed until approved operational evidence exists
    Responsibility
    Youth program owner (proposed)
    Authorization Boundary
    Qualified independent review where required, current authority and approved evidence/retention policy.
    Next State
    Proposed final review; no operational mutation.

Linked user story and acceptance criteria

Parent Id
UC-KIOSK-001
Persona
Community Kiosk Visitor
Statement
As a Community Kiosk Visitor, I want to access CovCare Safely from a Shared Device, so that I can pursue this outcome: restore anonymous discovery and remove temporary input.
Value
Restore anonymous discovery and remove temporary input.
Priority
High
Status
Proposed
Criteria
  • Kind
    Success
    Given
    Anonymous public discovery; explicit entry for temporary practice. No account creation. The task is Access CovCare Safely from a Shared Device.
    When
    Review the final evidence and continuing eligibility for Access CovCare Safely from a Shared Device
    Then
    Separate the proposed outcome from verified delivery; preserve only permitted review evidence and apply policy-approved retention or revocation. No public record mutation. No operational success is inferred from documentation.
  • Kind
    Denied
    Given
    a request for unavailable operational functionality
    When
    the participant attempts the restricted action
    Then
    The action is denied without revealing restricted data or creating a record.
  • Kind
    Invalid input
    Given
    The Selected goal and approved barrier needed for Access CovCare Safely from a Shared Device is missing or contradictory.
    When
    Choose an available language.
    Then
    Hold the affected step; require Nonempty relevant reference; no unrelated personal history. before further review. Do not claim a successful outcome.
  • Kind
    Privacy
    Given
    private reflections, unrelated youth information or contributor identities outside the approved purpose
    When
    a summary is prepared for community kiosk visitor
    Then
    Those fields are excluded; only purpose-limited authorized context may be shared.
  • Kind
    Exception
    Given
    withdrawn consent, an unavailable provider, conflicting evidence or a safeguarding concern relevant to this task
    When
    the sequence reaches the affected handoff
    Then
    The handoff pauses; an appropriate qualified human reviews the next step and no delivery, payment or approval is falsely confirmed.
Test Ids

Business rules

BR-MIN · Minimum necessary information

Share only the task-relevant approved context. Private reflections never enter public staff demonstrations.

BR-TRUTH · Evidence before claims

A referral is not delivery; documentation and storyboard completion are not verification or approval.

BR-CONSENT · Youth choice and selected sharing

Only an explicitly selected goal projection may be shared; youth control approval and goal completion. Withdrawal stops optional disclosure.

BR-KIOSK · Shared-device clearing

Sixty seconds of kiosk inactivity fully clears temporary personal content without an extension. Exit and refresh clear practice.

Explore the CovCare Vision

Discover how CovCare could connect young people, Covenant House teams, supporters, and community partners through one coordinated network of support.

Product roadmapFeature statusGlossaryFAQs