Full Platform Inventory: 9 Apps, 28 Modules, 84 Features (186 Routes)
Scanned directly from hop-local codebase · 4-Tier Segregation (App → Module → Feature → Scope)
APP 1: Daily Store Ops & Kiosk
M1.1 Auth & PIN Unlock4 Routes
M1.2 Shift Check-In & Selfie6 Routes
M1.3 Checklist & Cold-Chain8 Routes
M1.4 Handover & Day Record5 Routes
APP 2: People, Roster & Loans
M2.1 Staff Directory Lifecycle5 Routes
M2.2 Roster & Cluster Balancing3 Routes
M2.3 Live Presence Radar2 Routes
M2.4 Emergency Staff Loans4 Routes
APP 3: Legal & Statutory Licences
M3.1 Statutory Licence Vault4 Routes
M3.2 1-Tap Inspector Mode QR2 Routes
M3.3 IP & Trademark Registry2 Routes
M3.4 Lease & Legal Notices4 Routes
APP 4: Enterprise Audits & QC
M4.1 Manager Spot Visits3 Routes
M4.2 Cold-Chain Blind Audits3 Routes
M4.3 External Mystery Shopper2 Routes
M4.4 Auto-CAPA Ticket Engine4 Routes
APP 5: Assets & Café Projects
M5.1 Asset WDV & QR Tracking4 Routes
M5.2 Breakdown Helpdesk Ticketing5 Routes
M5.3 NSO 7-Phase Fitout Checklist6 Routes
M5.4 Site Ops Feasibility3 Routes
APP 6: 7-Stage NPL Patisserie
M6.1 Concept Ideation & Trials4 Routes
M6.2 Taste Sign-Off Gate6 Routes
M6.3 Central Production Delivery4 Routes
M6.4 Store Display Verification9 Routes
APP 7: Global SCM & China Imports
M7.1 Global Sourcing PO Engine4 Routes
M7.2 Customs Bill of Entry OCR3 Routes
M7.3 Landed Cost & FX Hedging3 Routes
M7.4 Central Kitchen Batching5 Routes
APP 8: Finance Recon & Petty Cash
M8.1 Daily Store Imprest Cash3 Routes
M8.2 Receipt OCR Extraction2 Routes
M8.3 Staff Expense Approvals3 Routes
M8.4 POS vs Bank Reconciliation4 Routes
APP 9: CXO Governance Suite
M9.1 Departmental EA Console6 Routes
M9.2 Directory & Master Holders8 Routes
M9.3 Feature Switches & Safety5 Routes
M9.4 Constitutional Super Admin4 Routes
Departmental Config & EA Delegation Console
Operational Proxy for Department Head · Scoped Writes + Sensitive Field Masking + Dual-Attribution Audit
Active Delegation Proxy
Srinivas K. (EA Delegate)
Acting for: Vikram M. (VP Operations)
🛡️ Sensitive Field Redaction Shield
The following fields are strictly masked from this console:
- Staff CTC & Salary:
*** REDACTED *** - Bank Account / IFSC:
*** REDACTED *** - Store Lease Rent & Deposits:
*** REDACTED *** - Mystery Shopper Schedule:
HIDDEN_UNTIL_EXEC
Departmental Nudge Config
Chiller Reading Grace: 15 mins
Escalate to VP Ops: +30 mins
Auto-WhatsApp Nudge: ENABLED
Rock-Tight Dual-Attribution Audit Trail
Cryptographic SHA-256 Hash Chain (actor_person_id + delegated_principal_id + HMAC)
| Timestamp | Actor (EA) | Principal (Dept Head) | Action & Target | Tamper-Evident SHA-256 Chain |
|---|---|---|---|---|
| 23:41:02 IST | H-000155 (EA) | H-000157 (VP Ops) | Reassigned Milk Chiller Probe → Ravi K. | sha256:7f8e3a...4b12 |
| 23:38:15 IST | H-000155 (EA) | H-000157 (VP Ops) | Shifted Nudge Grace Window: 10m → 15m | sha256:a19c4d...8e90 |
| 23:25:40 IST | H-000155 (EA) | H-000157 (VP Ops) | Approved Morning Opening Checklist Template | sha256:0d5c63...c5a0 |
The 3-Pillar Governance Hierarchy & Least-Privilege Boundaries
Config Delegate vs Directory Admin vs Constitutional Super Admin
| Governance Pillar | Primary Persona & Intent | Permitted Capabilities (Least-Privilege) | Hard Forbidden Boundaries |
|---|---|---|---|
| 1. CONFIG DELEGATE (EA) | Departmental Executive Assistant / Operational Specialist |
• Task/Checklist generation on behalf of Dept Head • Nudge rules, SLA timers, WhatsApp schedules • Master template authoring (audits, recipes) • Overdue CAPA follow-up & MIS roll-up |
✕ Zero cross-department writes ✕ Zero PII / Salary / CTC view ✕ Zero store lease rent view ✕ Zero feature kill-switches |
| 2. SYSTEM ADMIN | IT Directory & Cluster Operations Administrator |
• User onboarding/offboarding • Role assignment ( access.for)• Cluster-to-outlet mappings • Stage 1 & 2 feature rollout registry |
✕ Cannot exceed Super Admin Cap = 3 ✕ Cannot modify reserved founding codes ✕ Cannot alter/disable audit trail ✕ Cannot approve own elevation (M3) |
| 3. SUPER ADMIN | Constitutional Guardians (cfo, srinivas, vm) |
• Emergency Kill-Switches (bot_chat_live, pause)• Break-glass impersonation (audited & watermarked) • Database & schema policy enforcement • Final Oven Command sign-off gates |
✕ Strictly capped at 3 principals ✕ Cannot execute un-watermarked actions ✕ Subject to immutable append-only logs |
Zero-Latency O(1) Compiled Permission Bitmask Architecture
Single Bitwise Register Check vs 6-8 SQL Multi-Joins · Fulfilling Owner Zero-Latency Mandate
Traditional SQL Multi-Join RBAC
38.40 ms
Runs 6–8 database joins on every HTTP request across user_roles × permissions × features × outlets × depts. Exhausts connection pool under kitchen kiosk polling load.
DB Queries / Request: 6 – 8 Queries
Throughput: ~420 req / sec
★ Harley's CompiledAccessEnvelope (O-1)
0.04 ms (40 µs)
Pre-compiles permissions into a 128-bit unsigned vector + in-memory frozenset. Evaluates via single bitwise AND instruction in CPU register. Zero SQL queries on request load!
DB Queries / Request: 0 (Pure In-Memory)
Throughput: 78,000+ req / sec
Memory Footprint: < 320 bytes / user
Live Register Bitwise AND Simulation
User Feature Mask:
0x000000000000003F
&
Feature Bit: 0x0000000000000008 (COLD_CHAIN_PROBE)
=
0x08 ≠ 0 → GRANTED (0.000012 ms)