A1 platform operator + A2 analyst + A4 moderator surfaces. Plus ops dashboards (F.X*).
📋 SCENARIOAdmin lead (A1) opens the executive dashboard at the start of shift to scan platform health, current Wedge phase, and any cross-team escalations from A2/A3/A4. They drill into the highest-severity SLO breach or compliance flag and route ownership to the right pod.
19Admin overview (executive dashboard)
A1 · /dashboard (role: admin)
⚡ PHASE 0.α
Wedge F · Quotation→Commerce · v1 launched 2026-05-04 · F-acceptance criteria 4 / 7 met
View service catalog →
Platform overview
Last refreshed 2m ago · Auto-refresh on · Trust + ops triage
SA
A1.sarah_admin
Switch role →
Active providers
2,447
+18 this week
Active patients
14,892
+847 / 7d
Quotations / day
1,247
P95: 1,420
GMV / 30d
$8.4M
↑ 12%
Revenue at risk
$12.4k
1.5% of GMV · 3 open disputes
Provider verification pipeline
Click → verification queue ›
47
Applied
39
Auto-pulled
8
A1 review
31
Approved
7
Pending
2
Critical >7d
Trust primitive (NEW V3 verification scheme) · 2 stalled providers exceeded the 7d SLA.
Patient escalations
P1 → A1 from p43 chat threads
4
Open
2
Awaiting A1
Avg response3.2h
SLAwithin 4h target
🚩 Fraud signals · F.X4 surfaceAuto-detected 14m ago
📋 SCENARIOAdmin reviewer (A1) works the verification grant queue, validating provider credentials, business licenses, and medical-board registration before granting Verified status. SLA 48h; ambiguous credentials escalate to senior A1 with rubric notes attached.
Spot-checked 6 of 47 against local registryall matched
Outcome history sample (18 cases)
Discharge w/in 5 days · readmission < 30d17 / 18 normal
Complaint history (last 24mo)
Filed complaints · resolved2 · both resolved
Decision · A1 rationale required
Every action signs an audit-log entry (F.X2). Phase 0.β: bronze/silver/gold tiers.
📋 SCENARIOA3 support operator searches the user roster to handle a patient or provider help ticket — resetting MFA, reassigning roles, or merging duplicate accounts. Destructive actions (suspend, delete) require dual A1 sign-off and are logged to the immutable audit tail.
📋 SCENARIOA1 leadership reviews GMV, take-rate, subscription MRR, and ad-revenue mix to track Wedge F monetisation health. They flag take-rate compression by archetype to A2 for cohort analysis and brief Finance on weekly run-rate.
📋 SCENARIOAdmin oversight (A1) audits the sponsored-listing auction for collusion, reserve-price violations, and tier-eligibility drift. Anomalous bid patterns trigger a freeze on the affected slot and an escalation to A2 to inspect the auction model.
62Sponsored auction dashboard (A1 oversight)
/dashboard/ads/auction
✓
Wedge I live · Advertisement primitive online · 30% sponsored cap enforced · A4 ad-policy review chain active
📋 SCENARIOA4 moderator works the consolidated content queue — flagged listings, reviews, community posts, and chat reports. They apply policy actions (approve / hide / take-down / strike), and severe violations are forwarded to A1 for account-level enforcement.
Posted by AnonymousUser_42 in thread "Thai herbal medicine" · 3m ago · classifier: medical-accuracy v2.4
96% confidence
Flagged content
"Cancer can be cured by traditional Thai herbs at this clinic. Skip chemotherapy — these herbs work better and have no side effects. DM me for the clinic name."
📋 SCENARIOA4 editorial moderator reviews provider-authored long-form content (procedure guides, doctor bios, case studies) for medical accuracy, tone, and policy compliance. Inaccurate claims are returned with rubric notes; persistent violations escalate to A1 for credential review.
78Editorial queue (A4)
/dashboard/moderation/editorial
Editorial queue
Articles, photos, provider-authored copy + Wedge I ad copy awaiting A4.editorial review.
📌 At Wedge F · A3 Content Producer is inactive
This queue holds V2.5 inherited submissions only. Wedge G+ activates A3.provider, A3.freelance, A3.patient sub-tiers + per-locale review chain via Tolgee.
Article · A3 author: Dr. Anil K. · 18 min read · Cardiology · v2 vs v1 published 2026-03-12
A4.editorial review
Diff view · split-pane
SOURCE · v1 (published)
For coronary artery bypass graft (CABG) procedures abroad, JCI-accredited Asian centers offer outcomes equivalent to top US/EU centers at 30-50% of the cost. Patient selection is critical.
PROPOSED · v2
For coronary artery bypass graft (CABG) procedures abroad, JCI-accredited Asian centers have shown comparable mortality (1.2% vs 1.4% US benchmark) at 30-50% of the cost (peer-reviewed: Singh et al. 2024). Patient selection is critical.
⚡ AI-assist suggestions (Tolgee)
Simplify title (9 words)Clarify dosage in §4Add CTA · Schedule consultation
BNH Hospital · sponsored ad copy "Guaranteed cure for…"
Wedge I · medical-claim flagged by classifier · 99% confidence violation
WEDGE I · ad policy
"Guaranteed cure for chronic back pain at BNH Hospital Bangkok. 100% success rate or your money back."
📋 SCENARIOA4.translation moderator reviews machine-translated medical content in the Tolgee UI, focusing on low-confidence segments and clinically sensitive strings. Approved translations sync to next-intl for production rendering across all 13 locales.
79A4 translation review (Tolgee UI integrated)
/dashboard/moderation/translation
A4.translation review · Japanese
"What to expect from a CABG procedure abroad" — auto-translated by Tolgee, awaiting native review · Wedge K full activation · Tolgee bridge alive at F (13-locale deposit confirmation translation)
⛨ A4.TR REVIEWER
⚠ Clinical-accuracy second pass required
Medical content (CABG · cardiology) requires PR4.Health domain review before publish.
SOURCE · ENGLISH
For coronary artery bypass graft (CABG) procedures abroad, JCI-accredited Asian centers offer outcomes equivalent to top US/EU centers at 30-50% of the cost. Patient selection is critical: stable angina patients with no acute coronary syndrome are best candidates for medical-tourism CABG.
Terms consistent across 142 articles · last updated 2026-04-22
Translation memory · 17 segments
12
Exact match
4
Fuzzy
1
New
Multi-locale fan-out
After JA approval · 12 locales fan out via Tolgee
JA · currentKOZHARESPTTH+5 more
Tolgee + locale-specific A4 reviewer required for each locale.
📋 SCENARIOA4 community moderator triages flagged forum posts, comments, and DMs for harassment, medical misinformation, or PHI leakage. They issue warnings, hide content, or escalate to A1 for ban-level enforcement when patterns emerge.
Review on Bumrungrad profile · no corresponding Quotation/Booking · poster recently created · 2h ago
Community guidelinesFull →
No medical claims without evidence
No PHI / patient images without consent
No cross-thread provider promotion
No off-platform booking redirects
Reviews require verified booking
Respectful tone · no harassment
Appeal flow
Banned posters can appeal in 7 days via /appeal form. A1 reviews appeals weekly.
Open appeals3
Appeal SLAavg 2.4d
A4.community team
A4.community.alexon duty
A4.community.mayaon duty
A4.community.kimoff · M
📋 SCENARIOA4.live moderator joins a provider's live clinic tour or doctor Q&A as an observer with mute/cut authority. Real-time deepfake detection runs at 99% confidence; cross-language transcripts flagged for A4.translation review on confidence drop.
81Live Q&A moderation (A4.live)✓ Wedge K live · A4.live moderation active + deepfake detection mature
/dashboard/moderation/live
Live · "Knee replacement AMA with Dr. Anil"
Bangkok Hospital · Aug 9, 19:00 UTC · A4.live moderating · Trust + Conversation primitives
After session ends · full transcript + flagged moments + actions taken archived for 7y · medical content retention · /dashboard/moderation/archives
📋 SCENARIOA2 release engineer ramps a Wedge feature flag by archetype + locale, watches the SLO + error-budget impact, and aborts to 0% if budget burn exceeds threshold. Roll-forward decisions require a paired A1 sign-off and are recorded in the audit tail.
📋 SCENARIOA2 platform engineer watches per-tenant unit-economics (LLM tokens, storage, egress, support minutes) against the cost guardrail. Outliers trigger an autoresponse: throttle, alert tenant owner, and open an incident ticket for an A1 commercial review.
88% of $9,500 monthly cap used · 12 days remaining in cycle · top driver: Bumrungrad ai_match_v2 traffic ↑ 38% wow
Investigate →
Total spend
$24,840
vs $32k budget · ↑ 6% MoM
AI / LLM
$8,420
⚠ 88% of cap
Compute
$6,840
stable
Vendor (Stripe etc.)
$4,180
↑ with GMV
End-of-month forecast$200 over budget
$24,840 spent12d remaining$32,000 budget
Projected total · end May$32,200 (↑ 3% MoM)
Active alerts
LLM cost > 85%FIRING
DB CPU > 80%FIRING
Stripe error rate > 1%ok
Per-tenant attribution
Compute + AI usage allocated to provider tenants
Tenant
Compute
AI / LLM
Total / 30d
% of total
Bumrungrad
TH · Trust+
$420
$1,420
$1,840
7.4%
›
BNH Hospital
TH · Trust+
$240
$680
$920
3.7%
›
Bangkok Hospital Phuket
TH · Free
$180
$460
$640
2.6%
›
MedPark
TH · Free
$120
$240
$360
1.4%
›
2,443 other tenants
avg $8 / mo
$5,880
$5,620
$21,080
84.9%
›
By service
Service
Compute
DB
AI
Total
ai-service
$420
$120
$8,420
$8,960
›
product-core
$3,840
$2,140
—
$5,980
›
platform-services
$1,420
$680
—
$2,100
›
async-workers
$680
$240
—
$920
›
📋 SCENARIOA2 site reliability engineer monitors SLO attainment and error-budget burn for booking, payment, and chat surfaces. Burn-rate alerts page the on-call rotation; sustained breaches freeze feature rollouts until a postmortem and remediation plan land.
84SLO health dashboard (F.P5)
/dashboard/ops/slo
SLO health
F.P5 lock · all Wedge F SLOs · 30d burn-rate · breach history · on-call routing
📋 SCENARIOA2 platform engineer browses the service catalog to map ownership, dependencies, and on-call rotation per service. They use it to plan a Wedge migration or to find the right team to ping when a downstream service degrades.
P1 ↔ provider chat · slated for Chatwoot replacement
PR2.backend
v0.7.2 · 9d ago
99.5%
F→G
›
ai-service · drill-down preview
Click any row above to open · this is the canonical layout.
Wedge F · production
Deploy log · last 7d
14 deploys · 0 rollbacks
Latest: v1.0.8 · A2.eng_lead
Open PRs
12 · 3 awaiting review
2 blocked on tests
Active alerts
4 · 1 critical
LLM cost > 85%
SBOM
247 deps · 0 critical CVE
Last scan 2h ago
📋 SCENARIOA1 compliance reviewer streams the live audit tail to investigate a privileged-action incident — admin role grants, KYC overrides, payout releases. They export the relevant window for the legal hold workflow when the incident touches financial product or PHI.
2026-05-09T14:36:14Z · system audit.integrity_check_passed sequence=4928401 [chain ✓]
✓ Sequence integrity verified
Sequence #4928401 · cryptographic hash chain intact · last anomaly: never · verifier runs every 60s · last run 12s ago
4,928,401 entriesSHA-256 + Merklelast verified 12s ago
Per-actor drill-down
Drill into any actor's privileged action history · audit-logged on filter.
Retention
Hot retention30 days
Archive retention7 years
Compliance basisPDPA + GDPR Art. 30
📋 SCENARIOA2 SRE schedules and runs the quarterly DR drill — region failover, restore-from-backup, and game-day chaos test. Pass/fail outcomes feed the resilience scorecard reported to A1 leadership and the board's risk committee.
Single-region today (Singapore primary). Phase 0.β adds Bangkok hot-standby + cross-region replication; this surface will gain region-by-region drill controls.
Drill history
Date
Scenario
RTO actual
RPO actual
Outcome
Lead
2026-04-18
Primary DB failover · simulated
2h 14m
3min
PASS
A2.platform_eng
›
2026-01-22
Region failover · simulated
3h 52m
2min
PASS
A2.platform_eng
›
2025-10-12
Audit log restore from archive
22m
1min
PASS
A1.sarah_admin
›
2025-07-08
Object storage restore (provider images)
1h 04m
5min
SOFT
A2.platform_eng
›
📋 SCENARIOA1 admin manages their own MFA enrolment, IP allow-list, and session policy on the Zitadel-backed account. Changes to MFA factors require step-up authentication and are written to the audit log immediately.
2026-05-09 · verification.expiry_alert · system · 90d before expiry
Third-party feed augment
JCI accreditation listing✓ active
ISO 9001 database✓ active
Thai MCT registration✓ active
A1 review notes
2025-04 spot-check passed without findings. Hospital expanding cardiac wing · re-verify due 2026-08 may include scoped procedure expansion review.
Bulk re-verification · 23 providers expiring
Distribute workload across A1 team (sarah_admin · marco_g · 2 more) · estimated 6.5 days at 4 reviews / day / reviewer.
⛨ All actions logged immutably
Every grant / revoke / re-verify writes to append-only audit log · cryptographic verification (Merkle tree · SHA-256) · compliance.md L34 · view audit-log live tail →
📋 SCENARIOA4 moderator reviews provider-uploaded before/after photos against signed patient consent records. Missing or expired consent triggers an automatic take-down and a provider warning; repeat offences escalate to A1 for tier downgrade.
3 photos · re-consent email sent to P1 sarah_k · 7d response window · gallery hidden until consent renewed.
Provider-flagged review escalations
Per pr03 footer · provider defamation appeals route to A4.review queue.
⛨ All decisions logged immutably
Approve / reject / hold / escalate writes to append-only audit log · response SLA 24h per spec G L110 acceptance #6 · cross-link provider gallery upload flow →
📋 SCENARIOA1 and A2 jointly monitor Google Business Profile OAuth health, review-import lag, and rating-drift anomalies across providers. Stalled OAuth tokens are surfaced for re-consent; suspicious review surges are flagged to A4 moderation.
32GBP sync admin (A1 + A2)
/dashboard/integrations/gbp
GBP sync admin
A1 + A2 administer Google Business Profile sync infrastructure · 847 providers connected · 412k Google reviews indexed · 12 sync failures in last 24h · API quota: 87% used today · spec L32 capability 5 + L138 risk
847 connected12 failuresquota 87%
Providers connected
847
+12 last 7d
Reviews synced
412k
+1.4k last 24h
Last full reconcile
2h ago
2026-05-09 12:38 UTC
API quota
87%
OAuth-grant pending
14
awaiting provider auth
📌 Sync direction · read-only at G
V3 ← Google · ingest reviews into ArokaGO trust panel. Write-back (V3 → Google) deferred to Phase 2 · review-duplication risk mitigation per spec L120 (open question resolved).
read-only · v1
Provider
OAuth
Last sync
Reviews
Errors
Bumrungrad International
place_id ChIJ-bmrgrd
granted
2h ago
14,287
—
›
Bangkok Dental Hospital
place_id ChIJ-bkkdent
granted
2h ago
3,142
—
›
BNH Hospital
place_id ChIJ-bnh-bkk
expired
14h ago
8,491
OAuth
›
Vejthani Hospital
place_id ChIJ-vejthn
revoked
2d ago
2,184
revoked
›
Phyathai Sriracha
place_id ChIJ-phytsr
granted
2h ago
5,672
—
›
Khon Kaen Ram Hospital
place_id ChIJ-kkr-th
granted
5h ago
11,824
rate-lim
›
Samitivej Sukhumvit
place_id ChIJ-samtsv
granted
2h ago
9,358
—
›
BNH Hospital Bangkok
place_id ChIJ-bnhhsp
granted
2h ago
4,201
—
›
Phuket International
place_id ChIJ-pktintl
expired
9h ago
3,847
OAuth
›
Yanhee Hospital
place_id ChIJ-yanhee
granted
2h ago
2,914
—
›
Mount Elizabeth Novena
place_id ChIJ-mtelizn
granted
2h ago
7,628
—
›
Gleneagles Bangkok
place_id ChIJ-glnbkk
granted
2h ago
5,047
—
›
BNH Hospital · drillOAuth expired 14h ago
Last successful sync: 2026-05-08 22:14 UTC · 8,491 reviews cached
Cached Google reviews continue serving on sync failure · alert sent to PR1 if sync down >48h · spec L138 mitigation.
📋 SCENARIOA4.review moderator screens patient reviews tied to a verified booking — checking for PHI leakage, retaliatory tone, or paid-review patterns. Approved reviews publish to the provider profile; flagged ones trigger a provider right-to-respond workflow.
"Excellent dental work and the staff was incredibly kind. Dr. Anil walked me through every step. Would recommend to anyone considering implants in Bangkok."
"Worst experience of my life. Dr. Somchai was rude and the result is a botched job. They scammed me out of $4,800. AVOID THIS PLACE!!!"
Author history
P1 anon-userX · first review · account 4d old · IP signals match prior bot-cluster (12% confidence) · strike record · 1 prior strike (2026-03 community spam) · escalation level: medium
Provider response (visible)
"We're sorry to hear about your experience. Our records show successful follow-up consultations on April 14 and April 21. Please reach out to our patient relations team."
Provider's defamation-appeal evidence
Pre-op consent signed✓ on file
Post-op review at day 14✓ patient signed off · "satisfied"
Refund / dispute historynone filed
Photo evidence · result match✓ within agreed outcome envelope
3 reviews matched AI fake-review-pattern detector · cluster of 5-star reviews from accounts <48h old.
Strike record persists across ArokaGO surfaces (community + reviews) · escalation tier raises with each strike · trust-and-safety.md L46 · cross-link provider review-flag flow →
📋 SCENARIOA1 ops manager reviews aggregated capacity utilisation — chair-hours, OR slots, doctor availability — across all PR5 multi-clinic groups. They identify under-booked slots and notify ops leads to push promotions or open them to ad-spend boosts.
35PR5 Ops Manager · capacity rollups (PR5 first appearance)
RBAC scope: read across all 4 branches · write capacity-plan + slot-inventory · cannot edit clinical records or pricing. First introduced at Wedge G per spec L62.
Branch rollup · last 30d
Branch
Slots offered
Booked
Util %
Cancel %
Revenue
Top procedure
Bumrungrad Sukhumvit
flagship · 24 practitioners
3,840
3,341
87%
4%
$1.2M
Cardiac surgery
›
Bumrungrad Phyathai (Dental)
14 practitioners · ⚠ saturated
2,016
1,976
98%
2%
$612k
Dental implants
›
Bumrungrad Phuket
resort branch · 6 practitioners
864
691
80%
8%
$284k
Cosmetic
›
Bumrungrad Chiangmai
satellite · 3 practitioners
432
298
69%
5%
$94k
Wellness checkup
›
🚨 Bumrungrad Phyathai dental · 98% utilization next 14d
Spec L119 · open question resolved at G as per-staff (Cal.com native). Per-treatment-room (capacity-based) deferred to Phase 2.
Per-staff (Cal.com native)v1 default
Each practitioner manages own calendar. Cal.com primitive. Active across all 4 branches.
Per-treatment-room (capacity-based)Phase 2
Forward-compat for surgical theaters · constrained by physical room availability rather than practitioner availability.
30d demand forecast
📈 Demand forecast: 47% above current capacity
Driven by Bumrungrad Phyathai dental + Sukhumvit cardiac. Projected 1,832 incoming requests vs 1,247 weekly slots.
✓ 0 multi-branch slot conflicts detected
All 4 branches calendar-synced cleanly · no double-booked practitioners across Sukhumvit / Phyathai / Phuket / Chiangmai · last sync 2m ago.
Refund-window cohort · last 30d
Ties to spec L37 refund-window logic · monitor cancellation patterns relative to commerce refund tiers.
Cancelled · full-refund window
4%
low-friction · expected
Cancelled · 50% window
7%
+2pp vs prior 30d
Cancelled · no-refund window
1%
friction working
Refund-revenue impact
$2.4k
last 30d · -$840 vs prior
Per-practitioner slot configuration
Drill into individual practitioner Cal.com calendars across branches · PR2 self-serves; PR5 has read + bulk-edit RBAC.
📋 SCENARIOA2 ML engineer trains and evaluates the v3.2 lead-scoring model — feature drift, AUC, calibration by archetype, fairness by locale. A successful run gets promoted to a shadow deploy; bias-audit failures block promotion until fixed.
40Lead-scoring model · v3.2 training UI
/admin/models/lead-scoring
Lead-scoring model · v3.2
A2 Platform Analyst · last trained 2026-05-08 02:00 UTC · production · spec H L121-122 (nightly run, dormant reactivation) · V2.5 predictive_models skeleton wired in
Per H risk L144: false-positive scoring degrades coordinator trust. Below = PR3 manual reverses (provider-side score override) in last 7d.
PR3 reverses last 7d23
Avg score on reversed leads0.81 (high)
Top reverse reason"obvious tire-kicker"
Suggested feature auditengagement signal · 1h-response
Provider-side score breakdown
PR3 sees per-lead score + top 3 contributing features in inbox + lead detail. Read-only with reverse action.
📋 SCENARIOA2 data scientist tunes per-archetype segmentation models (cosmetic, dental, IVF, wellness, etc.), reviews cluster stability over time, and ships updated definitions to the marketing automation pipeline. Stale clusters trigger a retrain queue notification.
41Segmentation models · per archetype
/admin/models/segmentation
Segmentation models · 6 archetypes · 18 active · 4 in training
⛨ Insight H · per-archetype tuning · prevents one-size segmentation
Healthcare patients differ from wellness patients differ from pharmacy patients. A2 tunes feature weights per archetype, then promotes to provider segment library where PR3 selects from curated set.
3 models: Annual-checkup recurrer · Specialty-imaging hunter · Genetic-screening curious. Click any to open feature breakdown + drift heatmap. Drift across all 3 stable (PSI < 0.10).
2 models: Pre-auth-required cohort · Out-of-network shopper. Both promoted to provider library. Insurance archetype is read-heavy on quotation history.
2 models: Repeat-relay coordinator · One-off-introducer. Used for facilitator referral commission tiering.
2 models: Chronic-medication refiller · Travel-medication tourist. Pharmacy archetype is the smallest active provider pool (V3.2).
Promote: Cross-border traveler model → all Healthcare providers
Once promoted, segment appears in PR3 segments library across all 84 active healthcare providers · provider sees model name + member-count preview · cannot edit weights but can subscribe/dismiss per workspace.
Provider segment library (PR3)
PR3 selects from promoted segments + saves cohorts for drip campaigns. Read-only on weights · subscribe/dismiss per workspace.
📋 SCENARIOA4.editorial moderator reviews provider marketing copy, ad creatives, and email/LINE blasts before they enter the queue. They check for medical-claim compliance, regulated-keyword usage, and country-specific disclaimers; rejected drafts return with rubric notes.
Email 1 of 5 · subject + body · auto-flag overlay enabled.
Subject: Your knee will feel new again — a 30-day recovery roadmap from Bumrungrad.
Dear [first_name],
Your total knee replacement was a success. Now we'll guide you to a guaranteed full recovery — Bumrungrad's recovery program has helped 98% of patients return to normal activity within 30 days.
Day 1-7: Gentle range-of-motion exercises. Day 8-14: walking with support. Day 15-30: a complete cure begins.
— Auto-disclosed: this email contains AI-assisted content per H spec L96.
2 banned phrases (red)1 medical-claim flag (amber)AI-disclosed
TH copy · Tolgee auto-translation reviewed · 1 banned phrase flagged · click EN tab for full review pattern.
JA copy · 0 banned phrases · honorific check passed.
ZH locale not yet translated by provider · Tolgee draft auto-generated for review.
KO locale not yet requested.
VI locale not yet requested.
ID locale not yet requested.
FR locale not yet requested.
DE locale not yet requested.
ES locale not yet requested.
TR locale not yet requested.
Reviewer decision · Sarah K. · A4.editorial
Banned-phrase catalogA4 senior tier only
Per-jurisdiction catalog · enforced per H L96 (US/EU/TH/JP/SA medical advertising rules).
"guarantee" + variantsUS · TH · SA
"cure" (claims absolute)all 12
"miracle" + variantsall 12
"99% / 100% success" w/o sourcerequires citation
"FDA approved" false-claimUS · auto-block
"approved by Ministry"TH · cite source
Reviewer throughput · last 7dSLA met 92%
Sarah K.47 reviewed · 4.2h avg · 96% SLA
Aksu Y.38 reviewed · 5.8h avg · 91% SLA
Niran T.32 reviewed · 3.1h avg · 100% SLA
Approval rate68% (33% w/edits)
Provider CSAT (post-edit)4.4 / 5
Provider-side review queue (PR3)
PR3 sees their submissions + diffs from A4.editorial · accept-edits or counter-edit (returns to A4 for re-review).
📋 SCENARIOA2 experimenter launches and monitors A/B tests across surfaces (search ranking, ad slots, email subject lines). They watch significance, sample-ratio mismatch, and guardrail metrics; failing experiments are auto-paused once SRM crosses threshold.
A2 owns A/B engine per H acceptance L118 · V2.5's two coexisting systems (OfferABTest/OfferVariant + platform ABTest*) consolidated to single framework · legacy data migrated 100%.
PR3/PR5 see their own provider-scoped experiments + cohort breakdowns + history.
📋 SCENARIOA1 compliance officer maintains the per-channel × per-country gating matrix — what marketing surfaces (email, LINE, WhatsApp, ads) require which disclosures by jurisdiction. Updates push to the campaign launcher and block non-compliant sends at submission time.
A2 + A4 + legal counsel co-configure · PR2 sees overlay automatically applied at send time · spec H L96 + risk L142 · last reviewed 2026-04-22 by [legal counsel · K. Hanley].
RBAC: A2 + A4 senior + legal counsel edit · PR2/PR3 read-only with auto-block warnings at send time · all edits two-person sign-off · audit-logged.
Country × channel matrix · click any cell to open rule detail
Green = open · Amber = rules apply · Red = channel restricted. 12 countries × 4 channels = 48 cells.
Country
Email
WhatsApp
LINE
V3 chat
🇺🇸 United States
⚠ CAN-SPAM
✗ TCPA opt-in
— n/a
✓ open
🇪🇺 European Union
⚠ GDPR
⚠ GDPR opt-in
— n/a
⚠ GDPR
🇬🇧 United Kingdom
⚠ PECR
⚠ ICO opt-in
— n/a
✓ open
🇹🇭 Thailand
⚠ PDPA
✓ opt-out ok
✓ open
✓ open
🇯🇵 Japan
⚠ APPI
— low usage
✓ primary
⚠ APPI
🇸🇦 Saudi Arabia
✗ A4 review
⚠ MoH rules
— n/a
⚠ MoH rules
🇮🇩 Indonesia
⚠ UU PDP
✓ open
— n/a
✓ open
🇮🇳 India
⚠ DPDP 2023
⚠ TRAI DLT
— n/a
✓ open
🇦🇺 Australia
⚠ Spam Act
⚠ Privacy Act
— n/a
✓ open
🇨🇦 Canada
⚠ CASL opt-in
⚠ CASL opt-in
— n/a
✓ open
🇸🇬 Singapore
⚠ PDPA
✓ open
— n/a
✓ open
🇰🇷 South Korea
⚠ PIPA
— low usage
⚠ KCC rules
⚠ PIPA
🇺🇸 United States · Email · CAN-SPAM Act
Applicable: CAN-SPAM 2003 + state laws (CA, FL). Banned: deceptive headers, misleading subject lines, no-reply addresses without unsubscribe. Required disclosures: physical postal address + clear unsubscribe link in every commercial email. Default: opt-out (not opt-in). Enforcement: warn-only at send + auto-block if unsubscribe missing.
🇺🇸 United States · WhatsApp · TCPA opt-in
Applicable: TCPA + FCC. Required: explicit prior express written consent for marketing messages. Default: opt-in only. Enforcement: auto-block if no opt-in record · class-action exposure $500-$1500 per message. PR2 cannot send without verified consent record.
🇺🇸 United States · V3 chat · open
First-party conversation initiated by patient · no extra opt-in beyond V3 ToS. HIPAA applies if PHI exchanged · A4.editorial gates copy with medical claims.
LINE is the dominant chat channel in JP · Official Account terms · APPI overlay applies for any data export.
🇯🇵 Japan · V3 chat · APPI scoped
Patient-initiated · APPI contract basis · sensitive-data handling rules apply for medical context.
🇸🇦 Saudi Arabia · Email · MoH + advertising restrictions
Saudi MoH restricts unsolicited medical advertising. Enforcement: require A4 review for every send · cannot self-serve. AR-language required + Hijri date format preferred.
🇸🇦 Saudi Arabia · WhatsApp · MoH rules
Allowed for opted-in patients only · MoH advertising rules apply · prefer AR · A4.editorial gates medical claims.
Schedule price / quota changes that apply to new subscriptions only · existing grandfathered (per subscription.md:151).
Pro tier · price change scheduledeffective 2026-09-01
Pro tier: $99 → $129 · applies to new subscriptions only · existing 216 subscribers grandfathered. Transition email auto-sent 14 days before to new-prospect waitlist.
3 providers on deprecated wellness_premium tier. Migration applies proration · sends email notification · audit-logged. Preview audit-log entry before commit.
Provider
From → To
Proration
Effective
Banyan Tree Wellness
wellness_premium → premium
+$32 credit
2026-05-15
Chiva-Som
wellness_premium → premium
+$28 credit
2026-05-15
Kamalaya Koh Samui
wellness_premium → premium
+$41 credit
2026-05-15
Disable tier flow
Disabling Pro: 47 active subscribers stay on Pro · new subscriptions blocked · undisable anytime · type-the-name guard (must type "pro" exactly to confirm). Audit-logged · Redis cache invalidation · marketing pages auto-hide tier card.
📋 SCENARIOA1 monetisation admin manages ad inventory — slot definitions, reserve prices, tier eligibility, and pacing caps per surface. Reserve-price changes require an A2 simulation review against historical bids before they go live.
Prevents zero-bid abuse from new providers (per advertisement.md:179).
Keyword
Location
Floor
7d activity
Dental implant
Bangkok
$0.35
2,140 imps
›
Rhinoplasty
Chiang Mai
$0.42
1,820 imps
›
Knee replacement
Phuket
$0.28
980 imps
›
Cosmetic surgery
Seoul
$0.55
3,420 imps
›
Suspicious bid patterns flagged by A2 classifier
View detection rules and ad-fraud monitor.
📋 SCENARIOA4 ad-policy moderator reviews submitted ad creatives against the platform policy — medical claims, before/after consent, regulated-keyword filters, and country overlays. Approved creatives enter the auction; rejected ones return to the provider with a fix-it checklist.
Provider complaints about ad-spend billing · A2 forensic supports investigation.
Bumrungrad disputes $200 ad spend
Claim: bot traffic · A2 forensic in progress · 28% of impressions flagged · partial refund proposed
in progress
Anadolu disputes $80 ad spend
Claim: campaign paused but billing continued · investigating · likely settlement timing
queued
Per-provider invoice history + ad-fraud detection
PR2 invoice surface and A2 fraud rules.
📋 SCENARIOA1 leadership reviews subscription health — trial-to-paid conversion, gross/net churn, MRR by archetype, LTV by tier. Cohort drops trigger a join with A3 support to identify root cause (onboarding, value, pricing) and a save-play assignment.
Per wedge spec risk row 6 · ensures entitlement flags match tier definitions.
Audits run (90d)12
Issues found1 resolved
Last incidentpeer-benchmarks accidentally enabled on Free for 3 days
Resolutionrolled back · A1 governance update
Provider-side subscription view + auction surface
PR1 sees own tier · A1 sees aggregate.
📋 SCENARIOAdmin reviewer (A1) edits the per-archetype verification rubric — what credentials, certificates, and licences are required for cosmetic vs dental vs IVF vs wellness providers. Rubric changes are versioned; existing approved providers re-run when the rubric tightens.
License expired · Schedule auth missing · authenticity feed not active · pharmacist roster gap
Audit log · last 8 verification decisions · Compliance chain
Every A1 decision is logged immutably to the Compliance audit chain · per-archetype event-namespacing · feeds ./admin.html#a48 overlays.
Timestamp
Archetype
Provider
Decision
A1 operator
Audit hash
2026-05-09 14:22
Healthcare
Bumrungrad
verify
A1.sarah_k
0x8a4f…91e2
›
2026-05-09 11:08
Diagnostic
BHL Labs
req-info
A1.alex_p
0x2c11…7f80
›
2026-05-09 09:34
Insurance
Pacific Cross Health
verify
A1.sarah_k
0xb8d3…04a1
›
2026-05-08 16:50
Pharmacy
Watson Pharmacy TH
escalate
A1.alex_p
0xff19…b22d
›
2026-05-08 13:15
Facilitator
MedJourney Asia
req-info
A1.sarah_k
0x66ac…7e91
›
2026-05-08 10:01
Wellness
Banyan Tree Wellness
verify
A1.alex_p
0x44f7…2918
›
Onboarding handoff · per-archetype provider flows
Once verified, A1 hand-off lands the provider in the per-archetype onboarding screens.
📋 SCENARIOA2 analyst monitors platform-wide KPIs broken down by archetype — CAC, conversion rate, take rate, retention, ad ROAS. Archetype-level anomalies feed the weekly product council and inform the next Wedge feature prioritisation.
Per J-archetype-expansion.md:92 · every event prefixed with archetype namespace (e.g., diagnostic.test_result_delivered, pharmacy.refill_shipped).
Timestamp
Event
Provider
Archetype
2026-05-09 14:22
diagnostic.test_result_delivered
BHL Labs
Diagnostic
›
2026-05-09 14:18
pharmacy.refill_shipped
Watson Pharmacy TH
Pharmacy
›
2026-05-09 14:12
insurance.claim_paid
Pacific Cross Health
Insurance
›
2026-05-09 14:05
facilitator.bundle_completed
MedJourney Asia
Facilitator
›
2026-05-09 13:58
healthcare.procedure_completed
Bumrungrad
Healthcare
›
2026-05-09 13:45
wellness.session_completed
Banyan Tree Wellness
Wellness
›
Provider-side per-archetype KPIs
A2 sees platform-wide aggregated · provider sees own. Cross-archetype attribution on both sides reconciles via split-rule audit.
📋 SCENARIOA4 policy lead authors per-archetype content rules — what claims are allowed for cosmetic, dental, IVF, oncology, etc. Rule changes deploy to the auto-classifier and refresh the human-review queue's policy hint cards.
📋 SCENARIOA1 regulatory officer maintains the per-archetype regulatory overlay — country-specific rules layered on top of the base policy (e.g. Singapore HSA, Thai FDA, EU MDR). Overlay updates re-validate active campaigns, listings, and onboarding flows in the affected country.
Australian Consumer Law applies margin-transparency; Facilitator providers must disclose margin to patient. Consumer-protection rules surfaced via ACCC reference + complaint history feed.
Margin-transparency
required
Consumer-protection ref
ACCC
Complaint feed
Better Bus.
Audit log · last 6 overlay changes · Compliance chain
Overlay changes propagate to per-archetype provider Compliance views.
📋 SCENARIOA1 financial-product underwriter reviews a working-capital loan application from a verified provider — bookings cashflow, GMV trend, repayment ratio, and KYC bundle. They approve, decline, or counter; approved loans disburse to the provider's settlement account and accrue against future bookings.
Repayment late by 14 days · provider unresponsive to first outreach · A1 escalation queued
Lending decision-support cross-links
Audit chain · WHO / WHAT / WHEN per advance · escalations · sanctions screening · risk score
📋 SCENARIOA2 federated-learning engineer orchestrates a training round across N≥10 consenting providers, with secure aggregation and differential-privacy budget tracking. Round outputs are evaluated against held-out evals before the global model is promoted to production.
89A2 federated learning · model training across N≥10 providers✓ Wedge K · K-spec capability #17
/dashboard/data/federated
Federated learning · model training
Trains across N≥10 providers · per-provider contribution caps · model-update validation · demonstrable improvement vs centralized baseline
A2 federated engineerK-spec line 106
Active models
4
Participating providers
14
Last training round
2h ago
Avg improvement
+4.7%
M-match-2026-q2 · Matching modelDeployed · v3.2
Federated training across 14 providers · last round 2h ago · contribution cap 15% per provider · K-spec acceptance criteria #6 (≥10 participants) ✓
Participants
14 / ≥10 ✓
Contribution cap
15% max / provider
vs centralized baseline
+5.2% accuracy
Demonstrable improvement chart
Federated: ▁▂▃▄▅▆▇█ · accuracy 0.847
Centralized: ▁▁▂▃▃▄▄▅ · accuracy 0.795
Δ +5.2% over 12 rounds
K-spec acceptance: must demonstrate improvement vs centralized baseline before shipping.
Update validated against held-out test set · anomalous loss curve · likely poisoning attempt · audit-logged · provider notified · K-spec line 179 · contribution cap protected aggregate
Provider participation matrix
Provider
Opt-in
Contribution
Updates last 7d
Revenue share
Bumrungrad Bangkok
opted in
14% / 15% cap
7 of 7
$1,840
›
Bangkok Hospital Phuket
opted in
12% / 15% cap
7 of 7
$1,520
›
Asian Heart Institute
opted in
9% / 15% cap
6 of 7
$1,210
›
HealthCity Manila (PR-7821)
suspended
— rejected
0 of 7
$0
›
M-rank-2026-q2 · Ranking modelDeployed · v2.4
14 participants · contribution cap 15% · vs centralized: +3.1% NDCG@10 · last round 2h ago
📋 SCENARIOA2 AI governance engineer runs the eval harness on candidate model updates — accuracy, hallucination rate, jailbreak resistance, locale-fairness, and cost per query. Failing evals block deployment; cost regressions trigger the guardrail throttle.
90A2 AI eval harness · governance + cost guardrails✓ Wedge K · K-spec capability #18
/dashboard/data/eval
AI eval harness · governance
Clinical accuracy + bias audit per matching/ranking model · cost guardrails block overspend · A2 + external clinical advisor sign-off · K-spec line 154 + 172
A2+ external clinical advisor
Models in production
6
Last nightly run
04:00 UTC
Regression detected
1
Cost YTD
$14.2k
Bias flags
2
⚠ M-rank-2026-q2 · 3.2% accuracy drop overnightAuto-rollback queued
Likely cause: training data drift · A2 + external clinical advisor paged · A1 sign-off chain triggered (K-spec line 172) · auto-rollback to v2.3 queued pending advisor review
M-match-2026-q2 · MatchingHealthy
Clinical accuracy 0.847 · bias disparity max 4.2% · cost / decision $0.0012 · drift 0.08 · last regression none in 30d
📋 SCENARIOA2 engineer monitors the composite procedure × provider × patient risk score, opens the calibration view, and updates federated-learning model weights when bias-audit drift exceeds threshold. High-risk bookings auto-route to A1 for clinical-safety pre-clearance.
Per-cohort fairness: max disparity 7.8% (age 75+ × bariatric) · within tolerance · no auto-flag · re-audit on next retrain
Retrain risk modelLast retrain 7d ago · cadence weekly
📋 SCENARIOA1 financial-product compliance officer reviews provider screening results against OFAC + UN sanctions lists. Flags trigger a 48h hold on payment settlement until cleared or rejected; confirmed matches escalate to legal and freeze the provider account.
92A1 sanctions / AML screening · OFAC + UN list reconciliation✓ Wedge K · K-spec line 125
/dashboard/compliance/sanctions
Sanctions / AML screening
Provider screening · OFAC + UN list reconciliation · settlement-hold workflow · K.2 Insurance + K.3 Capital prerequisite · trust-and-safety.md line 49
Hit detail: beneficial owner Mohammed K. matches UN sanctions list (added 2024-08-12 · sanctions order #UN-2024-1428) · OFAC SDN list secondary match
Settlement hold
$48k pending
SLA window
48h · A1 review
A1 resolution log
3 entries
Re-screening cadence configuration
Auto re-screen every30 days
Trigger re-screen on payment >$10,000
Trigger re-screen on advance applicationenabled
Settlement hold workflow SLA48h
Patient AML
Patients screened only at high-value bookings (cumulative > $25k) per K-spec · 12 patients screened YTD · 0 flagged · K.4 governance
Provider integration · Refinitiv vs ComplyAdvantage vs native — current Refinitiv · A1 evaluating · K-spec line 168
📋 SCENARIOA1 research-product admin manages provider and patient enrollment in the de-identified clinical research data product, oversees IRB approvals, and configures the revenue-share split. Enrollment closes automatically once consent thresholds or jurisdiction caps are hit.
93A1 clinical research data product · enrollment + revenue-share admin✓ Wedge K · K-spec capability #16
📋 SCENARIOAdmin reviewer (A1) audits tier-promotion submissions — providers climbing from Verified to Trusted+ submit additional credentials, on-site evidence, and quality outcomes. Approvals unlock new placement weights; denials return with a remediation rubric and a re-apply window.
Per-procedure verification: provider verified for IVF / not verified for cardiac · admin-tunable per-procedure · prevents tier inflation across unverified specialties
Bumrungrad Bangkok
cardiac ✓onco ✓ortho ?
IVF Kuala Lumpur
IVF ✓cardiac ✗
Bangkok Hospital Phuket
cardiac ✓onco ✓ortho ✓
Auto-demotion criteria
Tier auto-demotion if booking dispute rate > 5% · A1 reviews before demotion · provider notified · audit-logged
Patient-facing impact
Promotion updates tier badge across patient passport · search filters · doctor portal
📋 SCENARIOA4 moderator reviews individual doctor personal-brand portals — bio, credentials, photos, video introductions — for accuracy and policy compliance separate from the parent provider profile. Conflicts (e.g. doctor claims credential the provider didn't verify) escalate to A1.