Skip to content
Prototype · fictional data & simulated workflows · not a live crisis service
Covenant House doveCovCareSeen. Heard. Helped.
Youth home ↗

CovCare V6.0 / Enterprise reference

Explore a Personal Next Step Without Leaving Sensitive Information

Public documentation and fictional practice now; separately reviewed connect operational boundary in future.

Proposed design, not organizational approval or operational evidence. Public fictional demonstrations only; no sensitive information, live submissions or authority changes.

Use Case Library

UC-KIOSK-002 · V6.0 · Proposed

Explore a Personal Next Step Without Leaving Sensitive Information

Role tour ↗Module guide ↗Stories & tests ↗Traceability ↗
Version
6.0
Status
Proposed
Priority
High
Role Id
kiosk-visitor
Primary Actor
Community Kiosk Visitor
Module Id
connect
Capability Id
CAP-ENG
Objective Id
OBJ-01
Owner
Youth program owner (proposed)
Boundary
Public documentation and fictional practice now; separately reviewed connect operational boundary in future.
Goal
Explore a Personal Next Step Without Leaving Sensitive Information while maintaining choice, purpose limitation and accountable human review.
Value
No retained personal profile or sensitive text.
Trigger
Choose a public next-step category.
Scope
The stated participant task only; no unrelated records, new authority or automatic operational activation.
Assumptions
  • Covenant House validates program fit, ownership and relevant policies.
  • Required provider, staffing and data-quality evidence is established before operation.
Supporting Actors
  • Youth program owner
  • Young person
  • Governance and safeguarding reviewer
Preconditions
  • Anonymous public discovery; explicit entry for temporary practice. No account creation.
  • Current voluntary consent for the selected goal; private reflections excluded.
  • Required organizational and human approval for operational behavior; absent in this public specification.
  • Operational services, recovery readiness and separately approved testing remain dependencies.
Alternatives
  • Id
    UC-KIOSK-002-ALT-01
    At
    3
    Condition
    The participant chooses a different suitable option.
    Path
    Return to inspect resource and support limitations, check scope and consent again, and document the revised purpose; do not duplicate evidence.
  • Id
    UC-KIOSK-002-ALT-02
    At
    6
    Condition
    An eligible alternative channel or resource is reviewed.
    Path
    Reassess the connect provider and required human approval; continue only with minimum authorized information. Public exploration may continue without an account.
Exceptions
  • Id
    UC-KIOSK-002-EX-01
    Condition
    Authorization denied, expired or revoked.
    Response
    Stop the restricted step and provide no record readback; review access through qualified authority, never public self-selection.
  • Id
    UC-KIOSK-002-EX-02
    Condition
    Missing information, conflicting evidence or unavailable service.
    Response
    Hold the relevant state for human review. Do not fabricate capacity, receipt, attendance, outcomes or successful submission.
  • Id
    UC-KIOSK-002-EX-03
    Condition
    Consent withdrawn or a safeguarding issue raised.
    Response
    Stop optional disclosure; qualified humans apply the reviewed lawful safeguarding policy. The prototype sends no escalation.
Postconditions
Success
No retained personal profile or sensitive text.
Failure
No unauthorized disclosure, authority grant or claimed fulfillment; public practice remains temporary and operational tasks remain blocked.
Rule Ids
Data
  • Field
    Selected goal and approved barrier
    Validation
    Nonempty relevant reference; no unrelated personal history.
    Owner
    Young person
    Sensitivity
    Restricted in future operation; fictional only in public practice.
    Sharing
    Explicit purpose and authorized recipient only; never private reflections.
    Audit
    Future scoped actor, decision, purpose and evidence reference; do not log secrets.
    Retention
    Organizational retention and deletion period not approved.
    Consent
    Current explicit youth consent where selected goal context is involved; otherwise lawful task-specific processing basis requires policy review. No blanket consent assumed.
  • Field
    Decision or verification evidence reference
    Validation
    Provenance, authorized reviewer and current scope; missing evidence remains unverified.
    Owner
    Youth program owner
    Sensitivity
    Restricted operational evidence; none read by the catalog.
    Sharing
    Authorized reviewer only; aggregate public explanation has no personal identifiers.
    Audit
    Future atomic decision and change audit where operational approval is required.
    Retention
    Policy-specific review and appeal requirements unresolved.
    Consent
    Purpose-limited review under approved evidence policy; contributor recognition requires a separate optional choice.
Nfr
  • Id
    NFR-SEC
    Requirement
    Deny unauthorized access server-side; never widen youth owner-only policies.
  • Id
    NFR-PRIV
    Requirement
    Minimize information, separate private reflections and constrain recipient purpose.
  • Id
    NFR-A11Y
    Requirement
    Target WCAG 2.2 AA, labeled keyboard/touch controls; professional review outstanding.
  • Id
    NFR-LOC
    Requirement
    Five youth languages; executive English and machine-assisted translations require review.
  • Id
    NFR-REL
    Requirement
    Failure must not confirm a write or restore expired local content; operational reliability and availability targets unapproved.
  • Id
    NFR-PERF
    Requirement
    Measure agreed task response and availability targets during an approved pilot; no unapproved SLA.
Dependencies
  • Verified CHI ownership and safeguarding/privacy review
  • Data classification, backup and tested recovery evidence
  • Approved connect service and scoped operational test plan
  • Related module: connect; proposed business owner: Youth program owner (proposed)
Milestone Id
MS-04
Assessment
Proposed
All formal operational sequences are proposed, not organizationally approved.
Frontend
Existing public connect views and tours explain the concept only.
Backend
No new operational behavior is verified by this catalog.
Simulated
Fictional local practice and storyboard navigation never confer authority.
Blocked
Account activation, staff coordination, payments and assignments need separate approvals.
Unknown
Positive authenticated lifecycle, provider delivery and cross-account privacy remain unverified.
System Boundary
Public documentation and fictional practice now; separately reviewed connect operational boundary in future.
Strategic Alignment
Objective Id
OBJ-01
Statement
Proposed youth-centered planning and accountable coordination; formal CHI alignment is not established.

Main success scenario · proposed

  1. 1. Confirm purpose-limited entry for Explore a Personal Next Step Without Leaving Sensitive Information

    Number
    1
    Actor
    Community Kiosk Visitor
    Action
    Confirm purpose-limited entry for Explore a Personal Next Step Without Leaving Sensitive Information
    Response
    Check the task-specific identity, organizational/site/project scope and relevant assigned permission before restricted information is shown. Public storyboard remains read-only.
    Validation
    Anonymous public discovery; explicit entry for temporary practice. No account creation.
    Information
    Verified scope references only; no restricted record returned by this public catalog.
    State
    UC-KIOSK-002-ENTRY: scope review required
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Anonymous public discovery; explicit entry for temporary practice. No account creation.
    Next State
    UC-KIOSK-002-S01: choose a public next-step category reviewed

  2. 2. Choose a public next-step category.

    Number
    2
    Actor
    Community Kiosk Visitor
    Action
    Choose a public next-step category.
    Response
    Avoid identity or private narrative.
    Validation
    Before 'Choose a public next-step category.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Choose a public next-step category. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-002-S01: choose a public next-step category reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Choose a public next-step category.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-002-S02: inspect resource and support limitations reviewed

  3. 3. Inspect resource and support limitations.

    Number
    3
    Actor
    Community Kiosk Visitor
    Action
    Inspect resource and support limitations.
    Response
    No verified availability is promised.
    Validation
    Before 'Inspect resource and support limitations.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Inspect resource and support limitations. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-002-S02: inspect resource and support limitations reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Inspect resource and support limitations.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-002-S03: decline account creation reviewed

  4. 4. Decline account creation.

    Number
    4
    Actor
    Community Kiosk Visitor
    Action
    Decline account creation.
    Response
    Keep anonymous exploration available.
    Validation
    Before 'Decline account creation.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Decline account creation. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-002-S03: decline account creation reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Decline account creation.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-002-S04: try a fictional optional goal reviewed

  5. 5. Try a fictional optional goal.

    Number
    5
    Actor
    Community Kiosk Visitor
    Action
    Try a fictional optional goal.
    Response
    Use explicit memory-only practice.
    Validation
    Before 'Try a fictional optional goal.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Try a fictional optional goal. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-002-S04: try a fictional optional goal reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Try a fictional optional goal.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-002-S05: preview any selected sharing context reviewed

  6. 6. Preview any selected sharing context.

    Number
    6
    Actor
    Community Kiosk Visitor
    Action
    Preview any selected sharing context.
    Response
    Exclude private reflections and previous visitor data.
    Validation
    Before 'Preview any selected sharing context.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Preview any selected sharing context. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-002-S05: preview any selected sharing context reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Preview any selected sharing context.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-002-S06: choose to continue or withdraw reviewed

  7. 7. Choose to continue or withdraw.

    Number
    7
    Actor
    Community Kiosk Visitor
    Action
    Choose to continue or withdraw.
    Response
    No youth contact or referral is sent.
    Validation
    Before 'Choose to continue or withdraw.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Choose to continue or withdraw. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-002-S06: choose to continue or withdraw reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Choose to continue or withdraw.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-002-S07: end the practice session reviewed

  8. 8. End the practice session.

    Number
    8
    Actor
    Community Kiosk Visitor
    Action
    End the practice session.
    Response
    Clear goal and conversation state.
    Validation
    Before 'End the practice session.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: End the practice session. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-002-S07: end the practice session reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'End the practice session.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-002-S08: confirm the next visitor’s clean start reviewed

  9. 9. Confirm the next visitor’s clean start.

    Number
    9
    Actor
    Community Kiosk Visitor
    Action
    Confirm the next visitor’s clean start.
    Response
    No retained personal profile or sensitive text.
    Validation
    Before 'Confirm the next visitor’s clean start.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Information
    Task-specific selected goal and approved barrier for this decision: Confirm the next visitor’s clean start. Only necessary context; private reflections and unrelated identities excluded.
    State
    UC-KIOSK-002-S08: confirm the next visitor’s clean start reviewed
    Responsibility
    Community Kiosk Visitor
    Authorization Boundary
    Before 'Confirm the next visitor’s clean start.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
    Next State
    UC-KIOSK-002-REVIEW: outcome remains proposed until approved operational evidence exists

  10. 10. Review the final evidence and continuing eligibility for Explore a Personal Next Step Without Leaving Sensitive Information

    Number
    10
    Actor
    Youth program owner (proposed)
    Action
    Review the final evidence and continuing eligibility for Explore a Personal Next Step Without Leaving Sensitive Information
    Response
    Separate the proposed outcome from verified delivery; preserve only permitted review evidence and apply policy-approved retention or revocation. No public record mutation.
    Validation
    Qualified independent review where required, current authority and approved evidence/retention policy.
    Information
    Minimum outcome and reviewer reference; no private reflections or public identities.
    State
    UC-KIOSK-002-REVIEW: outcome remains proposed until approved operational evidence exists
    Responsibility
    Youth program owner (proposed)
    Authorization Boundary
    Qualified independent review where required, current authority and approved evidence/retention policy.
    Next State
    Proposed final review; no operational mutation.

Linked user story and acceptance criteria

Parent Id
UC-KIOSK-002
Persona
Community Kiosk Visitor
Statement
As a Community Kiosk Visitor, I want to explore a Personal Next Step Without Leaving Sensitive Information, so that I can pursue this outcome: no retained personal profile or sensitive text.
Value
No retained personal profile or sensitive text.
Priority
High
Status
Proposed
Criteria
  • Kind
    Success
    Given
    Anonymous public discovery; explicit entry for temporary practice. No account creation. The task is Explore a Personal Next Step Without Leaving Sensitive Information.
    When
    Review the final evidence and continuing eligibility for Explore a Personal Next Step Without Leaving Sensitive Information
    Then
    Separate the proposed outcome from verified delivery; preserve only permitted review evidence and apply policy-approved retention or revocation. No public record mutation. No operational success is inferred from documentation.
  • Kind
    Denied
    Given
    a request for unavailable operational functionality
    When
    the participant attempts the restricted action
    Then
    The action is denied without revealing restricted data or creating a record.
  • Kind
    Invalid input
    Given
    The Selected goal and approved barrier needed for Explore a Personal Next Step Without Leaving Sensitive Information is missing or contradictory.
    When
    Inspect resource and support limitations.
    Then
    Hold the affected step; require Nonempty relevant reference; no unrelated personal history. before further review. Do not claim a successful outcome.
  • Kind
    Privacy
    Given
    private reflections, unrelated youth information or contributor identities outside the approved purpose
    When
    a summary is prepared for community kiosk visitor
    Then
    Those fields are excluded; only purpose-limited authorized context may be shared.
  • Kind
    Exception
    Given
    withdrawn consent, an unavailable provider, conflicting evidence or a safeguarding concern relevant to this task
    When
    the sequence reaches the affected handoff
    Then
    The handoff pauses; an appropriate qualified human reviews the next step and no delivery, payment or approval is falsely confirmed.
Test Ids

Business rules

BR-MIN · Minimum necessary information

Share only the task-relevant approved context. Private reflections never enter public staff demonstrations.

BR-TRUTH · Evidence before claims

A referral is not delivery; documentation and storyboard completion are not verification or approval.

BR-CONSENT · Youth choice and selected sharing

Only an explicitly selected goal projection may be shared; youth control approval and goal completion. Withdrawal stops optional disclosure.

BR-KIOSK · Shared-device clearing

Sixty seconds of kiosk inactivity fully clears temporary personal content without an extension. Exit and refresh clear practice.

Explore the CovCare Vision

Discover how CovCare could connect young people, Covenant House teams, supporters, and community partners through one coordinated network of support.

Product roadmapFeature statusGlossaryFAQs