HARLEY'S® 1983 · ONEOPS👑 FINE BAKING⚡ 1-Tap Surprise Spot Audit (`AUD-2`)10-Min Walk-In
Cluster Mgr Jay (CLM-01) tapped “Start Spot Audit” at NAN. Dynamically weighted from NAN's last 14d anomalies + 2 blind random checks:
🤖 Active Auto-Triggered Pulses (`AUD-3`)Coalesced 1/2 Shift Cap
Storm-Breaker Coalescer: Merged 2 real-time triggers (`Top-20 Ghost Stock-Out` + `Chiller #2 +6.4°C`) into a single 5-minute micro-audit for Shift Lead Asha (H-000214).
📅 Scheduled Outlet Audit (`AUD-1`)92% Green · 0 Knock-Outs
Weekly QASA / FSSAI 42-Point Store Audit completed Mon 11:15 IST. Next due: Mon 29 Oct.
Mode 1, 2 & 3 · Unified Omnichannel Audit Command (`AUD-1..3` · Benchmarking SafetyCulture iAuditor, Zenput & Starbucks QASA)
Unifies Scheduled Scored Checklists (`AUD-1`), Dynamic 10-Min Manager Spot Audits (`AUD-2`), and Algorithmic Event-Driven Auto-Triggers (`AUD-3`) over the 22-Table Shared-Object Spine (extended with `T23 audit_templates`, `T24 audit_runs`, `T25 audit_findings_capa`).
| Execution Mode | Trigger & Sampling Logic | Scoring & Knock-Out Rule | Ground-Protection Guardrail (`Principle #1`) |
|---|---|---|---|
| `AUD-1` · Scheduled Outlet Audit Checklists (Daily / Weekly / Monthly / Quarterly) |
Calendar-driven per `outlets.outlet_type` (`Outlet / Central Kitchen / Warehouse`). | Weighted `0–100%` (`Green >=90%`, `Amber 75–89%`, `Red <75%`) + **Critical Knock-Out (`Zero-Tolerance Auto-Fail`)** caps score at `49% RED` if any critical item fails. | Pre-populates facts already known by the spine (`licences`, `medical_status`, `kiosk_heartbeat`) so managers never re-key known data. |
| `AUD-2` · 1-Tap Surprise Spot Audit (Outlet Mgr / Cluster Mgr / City Head / QA) |
Generates **5 anomaly-weighted items** (from last 14d sold-outs, late checks, cash variances, repairs) + **2 cryptographic random items** (`HMAC(run_id, server_secret)`). | Must be completed on-site within `15 minutes` of opening; requires **M3 Independence** (`auditor_id != store_manager_id` for Cluster/QA spot audits). | Capped at `<=8` questions (`<=10 mins`) so a visiting Cluster Manager or City Head can run a high-signal walk-in check between meetings. |
| `AUD-3` · Event-Driven Auto-Triggered Micro-Audits (Zero-Human-Intervention) |
Spawned automatically by real-time spine events across all 8 domains (`AUD-4..11`). | Pass / Fail + Immediate Photo/Blind-Count Proof; failed or ignored auto-triggers escalate via `T-0 -> +15m -> +30m` HOP Nudge ladder. | Trigger-Storm Coalescer (`AUD-13`): Hard cap of **max 2 auto-triggered micro-audits per shift per outlet**; concurrent triggers coalesce into one bundled 5-min card. |
HARLEY'S® 1983 · ONEOPS👑 FINE BAKING🚨 Auto-Trigger: Roster vs Kiosk Variance6 Rostered · 5 Punched
Triggered at 15:10 IST: 6 crew rostered on Shift B (`NAN`), 5 checked in, +1 inter-outlet loan (`H-000319` from `JUB`). Verify physical headcount now:
Step 1 · Blind Headcount EntryLocked: 6 Present
Auditor entered physical headcount on floor: 6 workers.
Step 2 · Live WebRTC Selfie + 4-Digit PIN Roll-Call5 / 6 Verified
✅ Asha (H-000214 · Shift Lead) — Live WebRTC frame + PIN verified (`15:12:04`)
✅ Raju (H-000319 · Loaned from JUB) — Live WebRTC frame + PIN verified (`15:12:31`)
❌ Vikram (H-000288 · BOH Pastry) — Not on floor (Punched in at 14:02, left premises!)
Domain 1 (`AUD-4` / `AUD-PEOPLE`) · People Count, Ghost-Attendance & Live Selfie Roll-Call
Eliminates buddy-punching, ghost workers on payroll, and unrecorded early walk-outs by binding `person_membership` (`Membership = Kiosk Roster`) to a live WebRTC camera roll-call.
| Auto-Trigger Condition | Mandatory Verification Protocol | Anti-Fraud & Spine Handshake |
|---|---|---|
| • Kiosk check-in count != published `staff_shift_rosters` headcount at `shift_start + 20m` • Overtime hours `>15%` above 4-week outlet baseline • Cluster Manager opens Kiosk Manager View via `rail='visibility'` (`R2`) • `10%` daily random shift pulse (`O-045`) |
1. **Blind Headcount First:** Auditor enters total bodies on floor before seeing the roster list. 2. **Live Roll-Call:** Each on-shift worker taps their name, enters their **4-digit outlet-scoped PIN**, and captures a **live WebRTC camera selfie** (`capture="user"`, gallery upload blocked) within a 15-minute window. |
• Writes `MARK_ABSENT_AUDIT_GHOST` to `staff_presence_events` if a punched-in worker fails roll-call. • Escalates under `A2` rule to **Outlet Manager / Cluster Manager with automatic visibility to City Head (`city_head`)**. |
HARLEY'S® 1983 · ONEOPS👑 FINE BAKING1. Personal Grooming Live Camera CheckPass (5/5 Crew)
Live wide-angle WebRTC photo of BOH/FOH line: Hairnets/beard-nets on, clean aprons, zero rings/watches/nail polish, fingernails trimmed.
2. FSSAI Form 4 Medical Fitness Gate (`Stop 4`)CRITICAL KNOCK-OUT
spine check (`staff_skill_passports`): Worker Kiran (H-000412) assigned to `PASTRY_FINISH` has medical_fitness_status = 'EXPIRED' (expired Yesterday)!
3. Handwash & Sanitizer Titration Strip200 ppm Quat Verified
Live photo of sanitizer test strip (`200 ppm`) + hot water soap dispenser full.
Domain 2 (`AUD-5` / `AUD-HYGIENE`) · Hygiene, Personal Grooming, Sanitizer Titration & FoSTaC Gate
Benchmarked against **Starbucks QASA** and **FSSAI Schedule 4 Sanitary & Hygienic Requirements**. Joins live physical grooming proof with `Stop 4` (`staff_skill_passports`) Medical Fitness & FoSTaC records.
| Check Item | Evidence Required | Automated Consequence on Failure |
|---|---|---|
| Crew Grooming & Hand Hygiene | Live WebRTC camera frame (`frame_age_sec <= 30s`, perceptual hash checked against prior 30 days). | Spawns immediate `15-min` corrective task; blocks shift opening sign-off until rectified. |
| FSSAI Form 4 Annual Medical & FoSTaC Supervisor Active | Automatic live join to `staff_skill_passports` (`Stop 4`) for every checked-in worker at the outlet. | Critical Knock-Out: Immediately locks the worker out of `FOOD_STATIONS` on the roster and alerts HR (`people_hr`) + Cluster Manager. |
| Food-Contact Surface Sanitizer & Pest Sighting Check | Live photo of Quat/Chlorine ppm test strip + under-counter pest trap inspection. | Any active rodent/cockroach sighting triggers **Critical Auto-Fail (`Score = 49% RED`)** + emergency Pest Vendor ticket in `maintenance_cases`. |
HARLEY'S® 1983 · ONEOPS👑 FINE BAKING🌡️ Auto-Trigger: Display Cake Chiller #1Logged +6.2°C
Core product probe audit required within 30 mins to protect cream patisserie shelf-life.
1. Calibrated Core Probe PhotoVerified +3.8°C
Inserted sanitized needle probe into sacrificial Medovik cream proxy cup: +3.8°C (Defrost cycle ended). Live photo captured.
2. `HRL-LOT-*` Batch Expiry QR Scan (`3 Random Trays`)0 Expired · All Valid
Scanned `HRL-LOT-20261022-MED-04` (Exp: 24 Oct 23:59 IST) & `HRL-LOT-20261022-TRM-02` (Exp: 23 Oct 23:59 IST).
3. Slice Weight & Sensory Gold-Standard (`Stop 3`)142g (Target 140g±5g)
Scale photo: 142g · 8 honey biscuit layers crisp · zero weeping.
Domain 3 (`AUD-6` / `AUD-FOOD`) · Food Safety, Cold-Chain Probe (`<=+5°C`) & `HRL-LOT-*` Shelf-Life Audit
Directly integrates with **Stop 3 (`7-Stage NPL Lifecycle`)** and Central Kitchen crate lot codes (`HRL-LOT-*`) so zero expired or temperature-abused pastry ever reaches a customer.
| Auto-Trigger Condition | Mandatory Verification Protocol | Automated Consequence on Failure |
|---|---|---|
| • Chiller/Reefer logs `>+5.0°C` (`Stop 3` cold-chain rule) • NPL Stage 6 First-72h Canary launch window • Daily wastage `>3%` of outlet sales or customer quality complaint |
1. **Core Probe Reading + Live Photo** of digital thermometer display. 2. **Scan 3 Random `HRL-LOT-*` Crate/Tray QRs** in display case & BOH walk-in (`server checks expiry_ts > NOW()`). 3. **Tare-Verified Slice Weight Photo** on Legal Metrology scale (`Stop 1`). |
• Core temp `>+5.0°C` for `>2h` or any expired `HRL-LOT-*` lot triggers **Critical Knock-Out**, forces immediate batch quarantine/wastage write-off, and opens an urgent chiller breakdown ticket in `maintenance_cases` (`Stop 2`). |
HARLEY'S® 1983 · ONEOPS👑 FINE BAKING🔒 Step 1 · Strict Blind Denomination EntryPOS Figure Withheld
Server withholds Rista POS expected cash (`expected_cash_inr = NULL` on wire) until your physical count is cryptographically committed:
₹500 × 18 = ₹9,000 | ₹200 × 11 = ₹2,200
₹100 × 14 = ₹1,400 | ₹50 × 6 = ₹300
₹20/₹10/Coins = ₹180 | Petty Cash Vouchers = ₹420
Total Physical + Vouchers = ₹13,500
🔓 Step 2 · Server Reveal & Variance LockVariance: -₹340 (SHORT)
Rista POS Frozen Snapshot (`as_of 16:40:12 IST`, 0 open bills): ₹13,840
Committed Blind Count: ₹13,500 → Shortage: -₹340 (` exceeds ±₹200 threshold`).
Domain 4 (`AUD-7` / `AUD-CASH-ACCT`) · Blind Cash Drawer, Safe & Petty-Cash Accounting Audit
Benchmarked against **Square / Toast Blind Till Close** and retail loss-prevention standards. Eliminates “pencil-whipping” (where staff type whatever number POS expects) by **withholding `expected_cash_inr` on the server until the denomination breakdown is committed immutable**.
| Auto-Trigger Condition | Two-Phase Commit Protocol (`Blind -> Reveal`) | Variance & `A2` Escalation Rule |
|---|---|---|
| • Void / Refund / Complimentary / Manual Discount bills `>2.0%` of daily orders • Prior shift cash variance `> ±₹100` • Petty-cash / UPI imprest spend `> ₹2,500` in 48h • Unannounced Cluster/Finance spot audit |
Phase 1 (Blind Commit): Server snapshots Rista POS settled cash + in-flight open tables at `snapshot_ts`, but returns `expected_cash_inr: null`. Auditor enters note/coin denominations + live photo of drawer & signed petty-cash vouchers. Phase 2 (Reveal): `POST /api/v2/audits/:id/commit-blind` seals the count (`blind_committed_at`) and reveals the frozen POS expectation & exact variance. (Max 1 recount allowed, preserving original blind row in audit log). |
• Variance within `±₹50`: Auto-Green. • Variance `₹51–₹200`: Requires Outlet Manager explanation note. • Variance `> ±₹200`: Auto-spawns Finance investigation + requires **Outlet Manager / Cluster Manager sign-off with automatic visibility to City Head (`A2`) & CFO (`cfo@harleys.com`)**. |
HARLEY'S® 1983 · ONEOPS👑 FINE BAKING🚨 Auto-Trigger: Top-20 Ghost Stock-Out!Marked Out · Book Has Stock
Classic Medovik Slice (`SKU-MED-01`, Outlet Rank #1) was marked Sold Out on Rista at 16:05 IST, while Odoo/CK Book Stock shows `> 5` units remaining!
🔒 Step 1 · Blind Physical Stock CountBook Qty Hidden
Display Case: 0 slices · Walk-In Chiller: 9 slices (1 un-cut tray!) · Damaged/Wastage: 0 slices.
Total Physical Count Committed: 9 slices.
🔓 Step 2 · Book Reveal & Auto-RestockBook: 9 · Variance: 0
False stock-out caused by un-staged walk-in tray! System prompted immediate restock & cleared false aggregator `Sold Out` in 4 mins.
Domain 5 (`AUD-8` / `AUD-INV-STOCK`) · Inventory, Stock & Top-20 Blind Cycle-Count Audit
Connects **Outlet Summary Top 20 (`OS-2`)**, **Rista 15m Sold-Out Feed (`RI-1`)**, and **Odoo/CK Dispatch Ledger** to catch both **Ghost Stock-Outs** (product sitting in BOH chiller while marked Sold Out on Swiggy/Zomato) and **Unrecorded Shrinkage/Pilferage**.
| Auto-Trigger Condition | Blind Count & Reconciliation Protocol | Automated Consequence |
|---|---|---|
| • **Ghost Stock-Out Trigger:** Any Outlet/City Top-20 (`top_items`) or Watch item (`sold_out.watch`) marked `Sold Out` while `book_qty = (opening + ck_grn - rista_pos_sold - approved_wastage) >= 5` • **ABC Velocity Cycle Count:** Daily 3 Class-A SKUs, Weekly 5 Class-B SKUs, Monthly Class-C SKUs |
1. Server freezes `book_qty_snapshot` (subtracting in-flight POS bills since last sync) and hides it. 2. Staff/Manager counts **Display Case + BOH Walk-In + Ambient Store**. 3. Server reveals `book_qty_snapshot` and classifies gap into: **(a) Un-staged BOH Stock** (1-tap Restock nudge), **(b) Unlogged Wastage** (requires wastage photo), or **(c) Unexplained Shrinkage/Pilferage**. |
• If `physical_qty > 0` on a `Sold Out` Top-20 item: immediately nudges Shift Lead to restock counter & re-enable Rista/aggregators. • If `shrinkage_inr > ₹500`: spawns SCM/Finance variance ticket + notifies Cluster Manager & City Head (`A2`). |
HARLEY'S® 1983 · ONEOPS👑 FINE BAKING1. Physical `HRL-AST-*` QR Scan (`AUD-9`)3 / 3 Verified
Scanned physical laser-etched QR on Simonelli Aurelia II (`HRL-AST-00412`) + 5s live pressure-gauge video (`9.0 bar`, `93°C`) after yesterday's `Stop 2` repair closure.
2. Legal Metrology Weighing Scale Stamp (`Stop 1`)Seal Intact · Exp Dec 26
Live photo of lead seal + 200g calibration test weight reading `200.0g`.
3. 60-Second Inspector Mode Drill (`AUD-10`)Opened in 14s
Verified FSSAI Central Licence displayed at FOH + Fire Extinguisher #1/#2 pressure gauge in green zone.
Domains 6 & 7 (`AUD-9` Asset QR Verification & `AUD-10` Statutory Inspector Readiness)
Closes the loop with **Stop 1 (`compliance_licences`)** and **Stop 2 (`fixed_assets` `1,982` QRs + `maintenance_cases`)** so assets cannot disappear between stores and outlets are perpetually ready for unannounced FSSAI / Fire / Labour inspections.
| Domain | Auto-Trigger Condition | Verification & Fail-Closed Rule |
|---|---|---|
| `AUD-9` · Fixed Asset & QR Tag Audit | • `48h` after a `maintenance_cases` repair is marked closed (`Stop 2`) • Inter-outlet asset transfer arrival • Quarterly Fixed Asset Register (FAR) cycle |
Requires scanning the physical `HRL-AST-*` QR code via live camera (rejecting typed asset codes unless QR is damaged, which spawns a replacement tag task) + live operational photo. Missing high-value assets escalate immediately to CFO (`cfo@harleys.com`). |
| `AUD-10` · Statutory & Mystery Inspector Readiness | • `30 days` before any licence expiry (`DF-4`) • Post-renewal certificate upload (`CM-1`) • Monthly mystery inspector drill |
Verifies `/compliance/inspector-mode` opens in `<60s`, physical FSSAI & Trade certificates are framed at FOH, Fire Extinguisher gauges are in green, and Pest Control logbook is signed. |
HARLEY'S® 1983 · ONEOPS👑 FINE BAKING✅ Audit Summary: `AUD-RUN-9040` (`NAN`)88% AMBER · 2 CAPAs
Auditor: Jay (`CLM-01 · Cluster Mgr`) · M3 Independence: Verified (`auditor_id != store_mgr_id`).
Auto-Spawned CAPA #1 (`AUD-CASH-ACCT`)Due Today 20:00 IST
Cash drawer shortage `-₹340` → Assigned to Outlet Mgr Rohit (`MGR-01`). Approved/Reviewed by Cluster Mgr with automatic visibility & feed notification to City Head (`city_head`, `A2` Rule).
Auto-Spawned CAPA #2 (`AUD-HYGIENE`)Station Blocked
Worker `H-000412` Medical Form 4 renewal booked; blocked from `FOOD_STATIONS` until HR uploads verified certificate.
Domain 8 (`AUD-11` Brand/FOH) & Closed-Loop CAPA Engine (`AUD-12..14` + `A2/A3` Governance)
Every failed audit item or variance automatically spawns a **Corrective & Preventive Action (`audit_findings_capa`)** row linked into `accountability_tasks_checks` (`Needs you` right rail) or `maintenance_cases`, governed by the Owner's locked `A2` and `A3` rules.
| Governance Rule | Enforcement in `T23..T25` (`audit_templates`, `audit_runs`, `audit_findings_capa`) |
|---|---|
| `A2` Approval & City Head Visibility Rule | Every audit exception sign-off, cash/stock variance waiver, or CAPA extension is approved by **Outlet Manager OR Cluster Manager (`approved_by_role IN ('outlet_manager', 'cluster_manager')`)** with **automatic visibility & audit-trail feed notification (`city_head_notified_at`) to the City Head (`city_head`)**. |
| `A3` Aggregate Team Follow-Through (No Shaming Ranking) | Above Outlet Manager (`Cluster Manager, City Head, HOD`), audit dashboards show **outlet/cluster pass rates, open CAPA counts, and follow-through %**, with **zero individual worker stack-ranking leaderboards** (`Principle #3`). |
| M3 2nd-Person Independence & Anti-Pencil-Whipping | `CHECK (auditor_id <> store_manager_id OR audit_mode = 'SELF_SHIFT_PULSE')`; perceptual image hash (`phash_64`) rejects duplicate photos across runs; blind counts seal `blind_committed_at` before server returns expected POS/book values. |