UC-STAFF-001 · V6.0 · Proposed
Record an Authorized Service Interaction
- Version
- 6.0
- Status
- Proposed
- Priority
- High
- Role Id
- site-staff
- Primary Actor
- Site Staff
- Module Id
- sites
- Capability Id
- CAP-COORD
- Objective Id
- OBJ-02
- Owner
- Central program owner (proposed)
- Boundary
- Public documentation and fictional practice now; separately reviewed sites operational boundary in future.
- Goal
- Record an Authorized Service Interaction while maintaining choice, purpose limitation and accountable human review.
- Value
- Do not automatically complete a youth goal.
- Trigger
- Confirm an assigned local service interaction.
- Scope
- The stated participant task only; no unrelated records, new authority or automatic operational activation.
- Assumptions
- Covenant House validates program fit, ownership and relevant policies.
- Required provider, staffing and data-quality evidence is established before operation.
- Supporting Actors
- Central program owner
- Young person
- Governance and safeguarding reviewer
- Preconditions
- Verified provisioned identity, current MFA, organization/site/project and assignment scope.
- Current voluntary consent for the selected goal; private reflections excluded.
- Required organizational and human approval for operational behavior; absent in this public specification.
- Operational services, recovery readiness and separately approved testing remain dependencies.
- Alternatives
- Id
- UC-STAFF-001-ALT-01
- At
- 3
- Condition
- The participant chooses a different suitable option.
- Path
- Return to check communication consent, check scope and consent again, and document the revised purpose; do not duplicate evidence.
- Id
- UC-STAFF-001-ALT-02
- At
- 6
- Condition
- An eligible alternative channel or resource is reviewed.
- Path
- Reassess the sites provider and required human approval; continue only with minimum authorized information. Public exploration may continue without an account.
- Exceptions
- Id
- UC-STAFF-001-EX-01
- Condition
- Authorization denied, expired or revoked.
- Response
- Stop the restricted step and provide no record readback; review access through qualified authority, never public self-selection.
- Id
- UC-STAFF-001-EX-02
- Condition
- Missing information, conflicting evidence or unavailable service.
- Response
- Hold the relevant state for human review. Do not fabricate capacity, receipt, attendance, outcomes or successful submission.
- Id
- UC-STAFF-001-EX-03
- Condition
- Consent withdrawn or a safeguarding issue raised.
- Response
- Stop optional disclosure; qualified humans apply the reviewed lawful safeguarding policy. The prototype sends no escalation.
- Postconditions
- Success
- Do not automatically complete a youth goal.
- Failure
- No unauthorized disclosure, authority grant or claimed fulfillment; public practice remains temporary and operational tasks remain blocked.
- Data
- Field
- Selected goal and approved barrier
- Validation
- Nonempty relevant reference; no unrelated personal history.
- Owner
- Young person
- Sensitivity
- Restricted in future operation; fictional only in public practice.
- Sharing
- Explicit purpose and authorized recipient only; never private reflections.
- Audit
- Future scoped actor, decision, purpose and evidence reference; do not log secrets.
- Retention
- Organizational retention and deletion period not approved.
- Consent
- Current explicit youth consent where selected goal context is involved; otherwise lawful task-specific processing basis requires policy review. No blanket consent assumed.
- Field
- Decision or verification evidence reference
- Validation
- Provenance, authorized reviewer and current scope; missing evidence remains unverified.
- Owner
- Central program owner
- Sensitivity
- Restricted operational evidence; none read by the catalog.
- Sharing
- Authorized reviewer only; aggregate public explanation has no personal identifiers.
- Audit
- Future atomic decision and change audit where operational approval is required.
- Retention
- Policy-specific review and appeal requirements unresolved.
- Consent
- Purpose-limited review under approved evidence policy; contributor recognition requires a separate optional choice.
- Nfr
- Id
- NFR-SEC
- Requirement
- Deny unauthorized access server-side; never widen youth owner-only policies.
- Id
- NFR-PRIV
- Requirement
- Minimize information, separate private reflections and constrain recipient purpose.
- Id
- NFR-A11Y
- Requirement
- Target WCAG 2.2 AA, labeled keyboard/touch controls; professional review outstanding.
- Id
- NFR-LOC
- Requirement
- Five youth languages; executive English and machine-assisted translations require review.
- Id
- NFR-REL
- Requirement
- Failure must not confirm a write or restore expired local content; operational reliability and availability targets unapproved.
- Id
- NFR-PERF
- Requirement
- Measure agreed task response and availability targets during an approved pilot; no unapproved SLA.
- Dependencies
- Verified CHI ownership and safeguarding/privacy review
- Data classification, backup and tested recovery evidence
- Approved sites service and scoped operational test plan
- Related module: sites; proposed business owner: Central program owner (proposed)
- Milestone Id
- MS-06
- Assessment
- Proposed
- All formal operational sequences are proposed, not organizationally approved.
- Frontend
- Existing public sites views and tours explain the concept only.
- Backend
- No new operational behavior is verified by this catalog.
- Simulated
- Fictional local practice and storyboard navigation never confer authority.
- Blocked
- Account activation, staff coordination, payments and assignments need separate approvals.
- Unknown
- Positive authenticated lifecycle, provider delivery and cross-account privacy remain unverified.
- System Boundary
- Public documentation and fictional practice now; separately reviewed sites operational boundary in future.
- Strategic Alignment
- Objective Id
- OBJ-02
- Statement
- Proposed youth-centered planning and accountable coordination; formal CHI alignment is not established.
Main success scenario · proposed
1. Confirm purpose-limited entry for Record an Authorized Service Interaction
- Number
- 1
- Actor
- Site Staff
- Action
- Confirm purpose-limited entry for Record an Authorized Service Interaction
- Response
- Check the task-specific identity, organizational/site/project scope and relevant assigned permission before restricted information is shown. Public storyboard remains read-only.
- Validation
- Verified provisioned identity, current MFA, organization/site/project and assignment scope.
- Information
- Verified scope references only; no restricted record returned by this public catalog.
- State
- UC-STAFF-001-ENTRY: scope review required
- Responsibility
- Site Staff
- Authorization Boundary
- Verified provisioned identity, current MFA, organization/site/project and assignment scope.
- Next State
- UC-STAFF-001-S01: confirm an assigned local service interaction reviewed
2. Confirm an assigned local service interaction.
- Number
- 2
- Actor
- Site Staff
- Action
- Confirm an assigned local service interaction.
- Response
- Restrict the interaction to the staff site and task.
- Validation
- Before 'Confirm an assigned local service interaction.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Information
- Task-specific selected goal and approved barrier for this decision: Confirm an assigned local service interaction. Only necessary context; private reflections and unrelated identities excluded.
- State
- UC-STAFF-001-S01: confirm an assigned local service interaction reviewed
- Responsibility
- Site Staff
- Authorization Boundary
- Before 'Confirm an assigned local service interaction.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Next State
- UC-STAFF-001-S02: check communication consent reviewed
3. Check communication consent.
- Number
- 3
- Actor
- Site Staff
- Action
- Check communication consent.
- Response
- Avoid unapproved contact methods.
- Validation
- Before 'Check communication consent.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Information
- Task-specific selected goal and approved barrier for this decision: Check communication consent. Only necessary context; private reflections and unrelated identities excluded.
- State
- UC-STAFF-001-S02: check communication consent reviewed
- Responsibility
- Site Staff
- Authorization Boundary
- Before 'Check communication consent.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Next State
- UC-STAFF-001-S03: review relevant service details reviewed
4. Review relevant service details.
- Number
- 4
- Actor
- Site Staff
- Action
- Review relevant service details.
- Response
- Exclude private reflections and unrelated cases.
- Validation
- Before 'Review relevant service details.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Information
- Task-specific selected goal and approved barrier for this decision: Review relevant service details. Only necessary context; private reflections and unrelated identities excluded.
- State
- UC-STAFF-001-S03: review relevant service details reviewed
- Responsibility
- Site Staff
- Authorization Boundary
- Before 'Review relevant service details.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Next State
- UC-STAFF-001-S04: validate that the local activity occurred reviewed
5. Validate that the local activity occurred.
- Number
- 5
- Actor
- Site Staff
- Action
- Validate that the local activity occurred.
- Response
- Do not pre-fill successful delivery.
- Validation
- Before 'Validate that the local activity occurred.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Information
- Task-specific selected goal and approved barrier for this decision: Validate that the local activity occurred. Only necessary context; private reflections and unrelated identities excluded.
- State
- UC-STAFF-001-S04: validate that the local activity occurred reviewed
- Responsibility
- Site Staff
- Authorization Boundary
- Before 'Validate that the local activity occurred.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Next State
- UC-STAFF-001-S05: record minimum service evidence reviewed
6. Record minimum service evidence.
- Number
- 6
- Actor
- Site Staff
- Action
- Record minimum service evidence.
- Response
- Apply required fields and evidence standards.
- Validation
- Before 'Record minimum service evidence.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Information
- Task-specific selected goal and approved barrier for this decision: Record minimum service evidence. Only necessary context; private reflections and unrelated identities excluded.
- State
- UC-STAFF-001-S05: record minimum service evidence reviewed
- Responsibility
- Site Staff
- Authorization Boundary
- Before 'Record minimum service evidence.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Next State
- UC-STAFF-001-S06: separate clinical from nonclinical information reviewed
7. Separate clinical from nonclinical information.
- Number
- 7
- Actor
- Site Staff
- Action
- Separate clinical from nonclinical information.
- Response
- Keep restricted clinical detail out of general notes.
- Validation
- Before 'Separate clinical from nonclinical information.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Information
- Task-specific selected goal and approved barrier for this decision: Separate clinical from nonclinical information. Only necessary context; private reflections and unrelated identities excluded.
- State
- UC-STAFF-001-S06: separate clinical from nonclinical information reviewed
- Responsibility
- Site Staff
- Authorization Boundary
- Before 'Separate clinical from nonclinical information.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Next State
- UC-STAFF-001-S07: submit the proposed record for authorized review reviewed
8. Submit the proposed record for authorized review.
- Number
- 8
- Actor
- Site Staff
- Action
- Submit the proposed record for authorized review.
- Response
- Retain source attribution and correction history in future design.
- Validation
- Before 'Submit the proposed record for authorized review.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Information
- Task-specific selected goal and approved barrier for this decision: Submit the proposed record for authorized review. Only necessary context; private reflections and unrelated identities excluded.
- State
- UC-STAFF-001-S07: submit the proposed record for authorized review reviewed
- Responsibility
- Site Staff
- Authorization Boundary
- Before 'Submit the proposed record for authorized review.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Next State
- UC-STAFF-001-S08: return a consented nonclinical summary reviewed
9. Return a consented nonclinical summary.
- Number
- 9
- Actor
- Site Staff
- Action
- Return a consented nonclinical summary.
- Response
- Do not automatically complete a youth goal.
- Validation
- Before 'Return a consented nonclinical summary.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Information
- Task-specific selected goal and approved barrier for this decision: Return a consented nonclinical summary. Only necessary context; private reflections and unrelated identities excluded.
- State
- UC-STAFF-001-S08: return a consented nonclinical summary reviewed
- Responsibility
- Site Staff
- Authorization Boundary
- Before 'Return a consented nonclinical summary.', validate the stated task scope, selected goal and approved barrier and the current authorized reviewer and assignment. Missing evidence pauses this step; the public catalog performs no operation.
- Next State
- UC-STAFF-001-REVIEW: outcome remains proposed until approved operational evidence exists
10. Review the final evidence and continuing eligibility for Record an Authorized Service Interaction
- Number
- 10
- Actor
- Central program owner (proposed)
- Action
- Review the final evidence and continuing eligibility for Record an Authorized Service Interaction
- Response
- Separate the proposed outcome from verified delivery; preserve only permitted review evidence and apply policy-approved retention or revocation. No public record mutation.
- Validation
- Qualified independent review where required, current authority and approved evidence/retention policy.
- Information
- Minimum outcome and reviewer reference; no private reflections or public identities.
- State
- UC-STAFF-001-REVIEW: outcome remains proposed until approved operational evidence exists
- Responsibility
- Central program owner (proposed)
- Authorization Boundary
- Qualified independent review where required, current authority and approved evidence/retention policy.
- Next State
- Proposed final review; no operational mutation.
Linked user story and acceptance criteria
- Parent Id
- UC-STAFF-001
- Persona
- Site Staff
- Statement
- As a Site Staff, I want to record an Authorized Service Interaction, so that I can pursue this outcome: do not automatically complete a youth goal.
- Value
- Do not automatically complete a youth goal.
- Priority
- High
- Status
- Proposed
- Criteria
- Kind
- Success
- Given
- Verified provisioned identity, current MFA, organization/site/project and assignment scope. The task is Record an Authorized Service Interaction.
- When
- Review the final evidence and continuing eligibility for Record an Authorized Service Interaction
- Then
- Separate the proposed outcome from verified delivery; preserve only permitted review evidence and apply policy-approved retention or revocation. No public record mutation. No operational success is inferred from documentation.
- Kind
- Denied
- Given
- missing, revoked or unrelated authorization
- When
- the participant attempts the restricted action
- Then
- The action is denied without revealing restricted data or creating a record.
- Kind
- Invalid input
- Given
- The Selected goal and approved barrier needed for Record an Authorized Service Interaction is missing or contradictory.
- When
- Check communication consent.
- Then
- Hold the affected step; require Nonempty relevant reference; no unrelated personal history. before further review. Do not claim a successful outcome.
- Kind
- Privacy
- Given
- private reflections, unrelated youth information or contributor identities outside the approved purpose
- When
- a summary is prepared for site staff
- Then
- Those fields are excluded; only purpose-limited authorized context may be shared.
- Kind
- Exception
- Given
- withdrawn consent, an unavailable provider, conflicting evidence or a safeguarding concern relevant to this task
- When
- the sequence reaches the affected handoff
- Then
- The handoff pauses; an appropriate qualified human reviews the next step and no delivery, payment or approval is falsely confirmed.
Business rules
BR-MIN · Minimum necessary information
Share only the task-relevant approved context. Private reflections never enter public staff demonstrations.
BR-TRUTH · Evidence before claims
A referral is not delivery; documentation and storyboard completion are not verification or approval.
BR-CONSENT · Youth choice and selected sharing
Only an explicitly selected goal projection may be shared; youth control approval and goal completion. Withdrawal stops optional disclosure.
BR-SCOPE · Current scoped authority
Verified identity, permission, organization/site/project and assignment scope are separate. Privileged access requires independent approvals, MFA and launch review; no public self-grant.
BR-HUMAN · Qualified human accountability
Qualified humans decide triage, clinical, safeguarding, assistance and operational approvals; the guide cannot make those decisions.