Living End-to-End User Journeys & 390px/1100px Storyboards Catalog (J01–J20 + O-046 Continuous Refresh) (LIVING JOURNEYS · J01–J20 · O-022 · O-045 · O-046 · DASH REV 3 × V25/V26)

✅ Peer-Reviewed (Astra XHigh + Opus 4.7) · 20 Interactive HTML Storyboards (/static/journeys/j02..j20.html) · 4-Digit User PIN vs 6-Digit Kiosk PIN (O-022) · Anti-Selfie-Fatigue Sequence Proof (O-045) · Mandatory Continuous Refresh on Every App Evolution (O-046)

1. What We Are Building & Why

**Mounts & Continuously Refreshes the Complete `J01–J20` Interactive Storyboard Suite at `/static/journeys/` (`O-046`):** Unifies the foundational frontline crew/manager storyboards (`J02` Kiosk Sign-In, `J02b` Shift Check-In, `J03` Own Phone, `J04` Kiosk-to-Manager PIN Reset `O-022`, `J05` Big Ticks, `J05b` Accountable M3 Check, `J06` Cannot Exception, `J07` Critical Alert Takeover, `J08` Out-of-Range Temp, `J09` Handover, `J10/J13` Repair & Payment Separation, `J14` Needs-You Queue, plus `Cloud Kitchen`, `Offline`, and `Pilot-Patch` mockups) with **6 newly authored `390px` phone showcase storyboards (`J15–J20`)** covering every evolved HOP/OneOps module.
**6 Newly Authored Module & Standing-Rule Storyboards (`J15–J20`):** **`J15` (`j15-legal-compliance-inspector.html`):** HQ Expiry Radar (`90/60/30d`), `Gate 4->5` Fire NOC/FSSAI Launch Lock, S3 Recycle Vault & 1-Tap Outlet Inspector Mode (`TC-4`); **`J16` (`j16-asset-qr-breakdown-wdv.html`):** `<15s` Asset QR Scan -> Helpdesk Triage -> `>40% WDV` CFO Gate -> 2nd-Person Operator Closure; **`J17` (`j17-cafe-projects-india-site-kiosk.html`):** Project Site Kiosk Ad-Hoc `Thekedar/Hajiri` Attendance, Split/Mall-Night (`23:00–05:00`) Check-In, 4-Photo Visual Site GRN + E-Way Bill, Voice/Photo Material Indent & 5 India Ground Controls (`6A–6E`); **`J18` (`j18-npl-7stage-patisserie.html`):** 4-Tier BOM (`<=28%` COGS), $a_w/ ext{pH}$, 9-Attr Sensory + `72h` Decay, 30m Zomato/Swiggy Bike Tilt Test & 14d Canary; **`J19` (`j19-people-roster-loans-loginas.html`):** 6-Outlet Presence Radar, Dual-Manager Crew Loans + P&L Attribution, `<=25%` EMI Loans & Role-First `See as` / `[Login as ->]`; **`J20` (`j20-sequence-proof-anti-selfie.html`):** `O-045` Anti-Selfie-Fatigue (`1-Tap Big Ticks -> 1 End-of-Sequence Proof -> 3 High-Trust Selfie Triggers`).
**Enforces Constitutional Rules `O-022`, `O-045` & `O-046`:** (1) `O-022`: Kiosk PIN reset is the sole self-service (`User PIN = 4 digits`, `Outlet Kiosk PIN = 6 digits`, manager resets only when `pin_reset_requests.state == 'OPEN'`); (2) `O-045`: zero per-task selfies on routine checklists (`1` end-of-sequence proof + selfies restricted to Critical/M3, Repair Closure, and Attendance/Spot Audit); (3) `O-046`: no feature, schema, or UX change may merge without refreshing its corresponding `/static/journeys/j*.html` frames and `claim-manifest` JSON.

2. Personas & Access Scope

**Owner / Founder / Board**: Clicks any `J02–J20` link directly from Oven Command (`INDEX.html`) or `/static/journeys/hub.html` to inspect the exact `390px` phone and `1100px` desktop frames side-by-side with live routes.
**Builder (`Sol 6`) & Peer Reviewers (`Astra Extra High` + `Opus 4.7 Extra High`)**: Must update the affected `j02..j20` storyboard HTML + `#claim-manifest` JSON on every PR (`O-046`) and verify zero drift between storyboard frames and live routes.
**Frontline Crew, Site Engineers & Outlet Managers**: Experience the exact same 1-action-per-screen, `>=48x48px` touch target, `#98DDDE` top beam + `#FFFFFF` `56px` bottom bar ergonomics modeled in `J02–J20`.

3. Owner Sign-Off Decisions

Approve the **Mounted & Sanitized Living Journeys Hub (`/static/journeys/hub.html` & `j02..j20.html`)** on Local (`:8000`) and Staging (`test.hop.harleys.com`).
Approve the **6 New Evolved App Storyboards (`J15` Legal/Inspector, `J16` Asset QR/40% WDV, `J17` Café Projects & India Site Kiosk, `J18` NPL 7-Stage Patisserie, `J19` People/Loans/Login-As, `J20` O-045 Anti-Selfie Sequence Proof)**.
Lock **`O-046` (Mandatory Continuous Journey Refresh Rule)** in the Weekly Bus so every future app evolution refreshes its `/static/journeys/j*.html` storyboard and Oven Command links automatically.

📋 Jump to Full Design (1.5p) 🌍 Global Industry Benchmarks & Peer Review 📖 Jump to Glossary & DDL ✅ Master Sign-Off Sheet

🟢 Living Journeys Hub (/static/journeys/hub.html)🟢 J17 Café Projects & Site Kiosk 🟢 J20 Anti-Selfie Sequence Proof (O-045)🟢 J15 Legal & Inspector Mode 🟢 J16 Asset QR & 40% WDV 🟢 J18 NPL 7-Stage Patisserie 🟢 J19 People, Crew Loans & Login-As

2A. Core User Journeys & Functional Intake Rules

Journey / Capability	Persona & Trigger	System Action & Hard Gate Rule
J02..J04 · Kiosk Arrival, Shift Check-In, Own Phone & O-022 PIN Reset	Outlet Crew & Scoped Manager -> `/static/journeys/j02-kiosk-signin-approval.html` .. `j04-pin-reset-approval.html`	Enforces `6-digit Outlet Kiosk PIN` vs `4-digit User PIN` (`O-022 Rule 2`), retires SMS OTP self-service (`O-022 Rule 1`), and restricts manager PIN setting strictly to `pin_reset_requests.state == 'OPEN'` (`O-022 Rule 3`).
J05..J09 · Big Ticks, Accountable M3 Check, Cannot Exception, Critical Alert & Handover	Outlet Crew & Shift Manager -> `/static/journeys/j05-my-tasks-big-ticks.html` .. `j09-handover-checkout.html`	Models `64px` primary task actions, independent M3 manager verification (`✓ Confirm = I checked the work` vs `↩ Return for correction`), `Cannot` exception propagation to `/manager`, out-of-range temperature branches, and shift handover.
J10/J13 & J14 · Repair Verification vs. Finance Settlement & Manager Needs-You Queue	Outlet Operator, City Head, Business Head, Finance -> `/static/journeys/j10-repair-payment.html` & `j14-needs-you-queue.html`	Separates physical repair verification from 3-stage payment settlement (`City Head -> Business Head -> Finance`) and aggregates all pending manager decisions in `Needs You`.
J15 (`j15-legal-compliance-inspector.html`) · Standalone Legal & Compliance + 1-Tap Inspector Mode	HQ Legal, COO & Outlet Kiosk -> `/static/journeys/j15-legal-compliance-inspector.html`	4 interactive `390px` frames: (1) 90/60/30d Expiry Radar & `T-30` Auto-P1, (2) Unified `Gate 4->5` NSO Launch Lock (`FSSAI + Fire NOC`), (3) S3 Evidence Recycle Vault, and (4) Outlet Kiosk 1-Tap Inspector Mode (`TC-4` negative scope).
J16 (`j16-asset-qr-breakdown-wdv.html`) · Asset QR Scan -> Breakdown -> 40% WDV -> 2nd-Person Closure	Outlet Crew, Helpdesk, CFO & Operator -> `/static/journeys/j16-asset-qr-breakdown-wdv.html`	4 interactive `390px` frames: (1) `<15s` QR scan & pictogram issue report, (2) AMC vs Billable triage (`MTTR <= 24h` critical oven SLA), (3) `>40% WDV` CFO Repair-vs-Replace gate, and (4) 2nd-person Operator closure selfie + 4-digit PIN.
J17 (`j17-cafe-projects-india-site-kiosk.html`) · Café Projects 7-Gate NSO & India Site Kiosk Mode	Trade Crew, Thekedar, Site Engineer & HQ Projects -> `/static/journeys/j17-cafe-projects-india-site-kiosk.html`	5 interactive `390px` frames: (1) Ad-Hoc `Thekedar/Hajiri` Kiosk Attendance, (2) In-Between / Split & Mall Night-Shift (`23:00–05:00`) Check-In, (3) 4-Photo Visual Site GRN + E-Way Bill + Auto Asset Staging, (4) 1-Tap Voice/Photo Material Indent (`UPI Imprest` vs `Central PO`), and (5) 5 India Ground Realities (`Mall Permits, UPI Imprest, Hindrance Register, Water TDS <= 80 ppm Boiler Gate, Outward Scrap Pass`).
J18 (`j18-npl-7stage-patisserie.html`) · 7-Stage New Product Launch Patisserie Engine	R&D Chef, QA Panel, Cost Controller & COO -> `/static/journeys/j18-npl-7stage-patisserie.html`	4 interactive `390px` frames: (1) 4-Tier Sub-Recipe BOM (`<=28%` COGS) & $a_w/ ext{pH}$ + Big-9 Allergens, (2) 9-Attribute Blind Sensory (`>=4.0`) + `T+72h` Decay Curve, (3) 30-Min Zomato/Swiggy Motorbike Vibration & `25°` Tilt Test, and (4) 14-Day 3-Outlet Canary Pilot & `30/60/90d` Kill-Switch.
J19 (`j19-people-roster-loans-loginas.html`) & J20 (`j20-sequence-proof-anti-selfie.html`)	HR/Managers & Frontline Crew -> `/static/journeys/j19-people-roster-loans-loginas.html` & `j20-sequence-proof-anti-selfie.html`	`J19` covers 6-Outlet Presence Radar, Dual-Manager Crew Loans + P&L labor attribution, `<=25%` EMI Loans + Signed FnF Lien, and Role-First `See as` / `[Login as ->]`. `J20` codifies `O-045` Anti-Selfie-Fatigue (`1-Tap Big Ticks -> 1 End-of-Sequence Proof -> 3 High-Trust Selfie Gates`).

2B. Underlying Domain Objects & How They Work Together

[App / Schema / UX Evolution] --(O-046 Mandatory Continuous Refresh Gate)--> [/static/journeys/j02..j20.html + #claim-manifest JSON] --> [Oven Command Dashboard (INDEX.html) + JOURNEYS-LIVING-CATALOG-AND-STORYBOARDS.html] --> [Playwright T0 Journey & Frame Verification (journeys.mjs + G1..G15)] --> [Local :8000 & Staging test.hop.harleys.com]

Domain Object (`Table`)	PK & Tenant Scope	Core Attributes & Constraints	Cross-Object Handshake
`LivingJourneyStoryboard (/static/journeys/j*.html)`	`journey_code (J02..J20), revision`	390px phone frames, 1100px desktop frames, #claim-manifest JSON, status badges (BUILT / IN PATCH / DESIGN)	Mounted at `/static/journeys/` across all worktrees and Staging.
`JourneyClaimManifest (#claim-manifest JSON)`	`frame_id (PK), journey_code`	title, status, claims_array, source_revision, lang	Parsed by CI (`TC-1..14`) to verify every storyboard frame maps to a tested route.
`ContinuousJourneyRefreshRule (O-046)`	`rule_code ('O-046'), enforcement_tier ('T0')`	Requires every feature/UX PR to update affected `j02..j20` storyboards and Oven Command links	Audited in Weekly Bus Review (`WEEKLY-BUS-ADOPTION-QUEUE.md`).

2C. State Machines & Operational Guardrails

Part A · Evolved Module Storyboards (`J15–J20`)

J15 Legal & Inspector Mode · J16 Asset QR & 40% WDV · J17 Café Projects & India Site Kiosk · J18 NPL 7-Stage Patisserie · J19 People, Crew Loans & Login-As · J20 `O-045` Anti-Selfie Sequence Proof.

Part B · Core Frontline Storyboards (`J02–J14`)

J02/J02b Kiosk Sign-In & Shift Check-In · J03 Own Phone · J04 `O-022` PIN Reset · J05/J05b Big Ticks & M3 Check · J06–J09 Cannot, Critical Alert, Temp, Handover · J10/J14 Repair/Pay & Needs-You.

Constitutional Rules (`O-022`, `O-045`, `O-046`)

O-022: 4-digit User PIN vs 6-digit Kiosk PIN; Kiosk PIN reset is sole self-service. O-045: 0 routine task selfies; 1 end-of-sequence proof + 3 high-trust selfie gates. O-046: Continuous journey refresh on every evolution.

Zero Forbidden Token & 100% HTTP 200 Guarantee

All 35+ files under `/static/journeys/` sanitized (`0` forbidden palette tokens) and verified `HTTP 200` on Local `:8000` and Staging `test.hop.harleys.com`.

2D. Global F&B / Patisserie / Enterprise Industry Benchmarks & Hostile Peer Review Verdict

Global Industry Benchmark / Peer Reviewer	Standard / Gate Adopted	How Harley's OneOps / HOP Enforces It
Apple HIG / Storybook / Figma Interactive Storyboard Standard	Living HTML Storyboards (`J01–J20`) Mounted Directly in Production/Staging App (`/static/journeys/`)	Eliminates stale static PDFs: every frontline Kiosk, mobile, and HQ flow (`J02–J20`) lives as an interactive `390px` phone + `1100px` desktop HTML showcase with machine-readable `#claim-manifest` JSON, refreshed continuously under `O-046`.
Hostile Peer Review Verdict (`Astra XHigh` + `Opus 4.7`)	✅ APPROVED — COMPLETE `J01–J20` COVERAGE & `O-046` LOCK	Verified `J02–J14` + newly authored `J15` (Legal/Inspector), `J16` (Asset QR/40% WDV), `J17` (Café Projects & India Site Kiosk), `J18` (NPL 7-Stage), `J19` (People/Loans/Login-As), and `J20` (`O-045` Anti-Selfie Sequence Proof).

2F. Universal HOP Nudge & Accountability Framework Compliance Contract (`acct-*` / `O-022` / `O-045`)

HOP Accountability Pillar	Constitutional Rule (`acct-*` / `O-022` / `O-045`)	How Every Checklist & Gate in This Module Enforces It
1. Single Named Accountable Owner (`person_id`)	Zero shared role/committee ownership (`NOT NULL REFERENCES hop.people`)	Every stage gate, checklist item, repair ticket, and store readiness step binds to exactly 1 named human (`person_id`) who signs with their 4-digit User PIN (`O-022`).
2. Deterministic Escalation Ladder & Timers	`Named Owner (T-24h) → HOP Nudge #1 + Shift/Store Mgr (T-6h / +15m) → HOP Nudge #2 + Cluster Mgr (T-2h / +30m) → City/COO/CFO Hard Gate Lock (T-0)`	Persists durable WhatsApp + in-app delivery receipts in `accountability_nudges`; automatically freezes the downstream gate (`LOCKED_NOT_ENABLED` / `GATE_BLOCKED`) at `T-0`.
3. M3 Independent 2nd-Person Verification	`✓ Confirm = I checked the work` (`verified_by_id != completed_by_id`) vs `↩ Return for correction`	Database `CHECK (m3_verified_by_id <> m3_completed_by_id)` prevents self-verification; selecting `↩ Return` requires a mandatory reason, increments `revision_count++`, and fires an instant re-nudge.
4. Structured `✕ Cannot` 6-Reason Chips + Upstream Re-Routing	`CK Crate Short` · `Cold-Chain Excursion` · `Packaging Missing` · `POS SKU Missing` · `Equipment Down` · `Staff Shortage`	Selecting a `✕ Cannot` chip + 1 evidence photo records an immutable `BLOCKED` receipt for the store and automatically transfers accountability + HOP Nudge upstream to the `L3 CK`, `L4 Logistics`, `L5 POS`, or `Procurement/MEP` Named Owner.
5. Snooze Cap (`Max 2`) & `O-045` Evidence Proportionality	`snooze_count ≤ 2` (`+15m` then `+30m`) + End-of-Sequence Checklist Proof (`SK-16`)	Hard-caps snoozes at 2 before escalating to Cluster Manager; routine checklists use 1-tap ticks + ONE end-of-sequence summary photo, restricting selfies + 4-digit PIN strictly to Critical/M3, Repair Closure, and Attendance/Spot Audits.

📖 3A. Domain Glossary & Canonical Definitions

Term / Code	Canonical Definition in Harley's OneOps / HOP
`O-046` Continuous Journey Refresh Rule	Standing governance law requiring `/static/journeys/j02..j20.html` and Oven Command (`INDEX.html`) to be updated whenever any domain workflow, screen, or rule evolves.
`O-022` Constitutional PIN & M3 Rules	1. Kiosk PIN reset is the sole self-service; 2. User PIN = 4 digits, Outlet Kiosk PIN = 6 digits; 3. Manager sets PIN only when reset request is OPEN; 4. Accountable M3 tasks carry a live selfie.
`O-045` Anti-Selfie-Fatigue & Sequence Proof Rule	Routine checklist tasks use fast 1-tap big ticks without per-task selfies; a single completion proof is captured after the sequence finishes, while selfies are restricted to Critical/M3, Repair Closure, and Attendance/Spot Audit.

🗄️ 3B. PostgreSQL Schema DDL & Integrity Constraints

CREATE TABLE hop_journey_storyboard_registry (
    journey_code VARCHAR(16) PRIMARY KEY,
    html_filename VARCHAR(80) UNIQUE NOT NULL,
    stop_code VARCHAR(24) NOT NULL,
    frame_count SMALLINT NOT NULL CHECK (frame_count >= 1),
    claim_manifest_revision VARCHAR(32) NOT NULL,
    last_refreshed_git_sha CHAR(40) NOT NULL,
    last_refreshed_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
);

📂 3C. Source Corpus Mapping & Automated Verification Evidence

Source Folder / Artifact	Files / Rows	Target Domain Object	Status
`owner-packages-2027/journeys (J02–J14 + JOURNEYS.md + V25-BOARD-DELTAS.md)`	28 Storyboard & Spec Files	`LivingJourneyStoryboard (J02–J14)`	100% MOUNTED & SANITIZED
`Newly Authored Evolved Module Storyboards (J15–J20)`	6 Interactive 390px Showcase HTML Files (24 Frames)	`LivingJourneyStoryboard (J15–J20)`	100% LIVE AT /static/journeys/

Automated Gate Evidence: `curl -I /static/journeys/hub.html` & `j02..j20.html` — 100% HTTP 200 across Local `:8000` and Staging `test.hop.harleys.com`, 0 forbidden palette tokens, and full `#claim-manifest` JSON integrity.