Resident assistant / Evaluation plan
O. concierge
Four views of the assistant, and the evidence needed before an internal pilot.
This public page summarises inspected source and proposed evaluations. No staging evaluation result is verified. It contains no resident records or operational credentials.
View 01 / Data flow
Authorise first. Project before the model.
Each tool runs with the resident’s permissions. The model receives selected fields; the device receives the result for its cards.
Resident
Verified in sourceA question about an authorised home or unit.
API authorisation
Verified in sourceSession, building scope and assistant permission are checked.
Protected tools
Verified in sourceRead routes run in process with the resident’s credentials.
Model projection
Verified in sourceSelected fields ground the answer. Payment amounts can reach the model as formatted text.
Answer and cards
Verified in sourceStreamed answer plus device cards. Contact details and links stay outside the model projection.
View 02 / Infrastructure
One API Worker, with a managed model path.
Source config enables AI in staging. This is a source snapshot, not a verified deployment diagram or a production readiness claim.
Mobile app
Verified in sourceResident assistant on mobile.
API Worker
Verified in sourceThe assistant runs inside the API Worker, with protected tools and conversation storage.
Cloudflare AI Gateway
Verified in sourceCustom provider route through the Vercel AI SDK (Software Development Kit).
Microsoft Foundry
UnknownConfigured staging deployment: gpt-5.6-luna. Exact deployed model revision remains unverified.
View 03 / Connections
Streaming answers and confirmed actions take separate paths.
The stream may propose an action. A separate backend request confirms or declines it. The model cannot execute a write through the stream.
Resident question
Verified in sourcePOST to the protected assistant stream endpoint.
Server-sent events
Verified in sourceText, tool results, suggestions, questions and review frames return to the client.
Review proposal
Verified in sourceBackend owns the proposal, a snapshot and a 15-minute confirmation window.
Explicit decision
Verified in sourceConfirm rechecks ownership, expiry and snapshot. Decline withdraws the proposal without a write.
Outcome
Verified in sourceA claim and an idempotency key prevent duplicate execution. The backend returns the action outcome.
View 04 / Salesforce behaviour
Keep source boundaries visible from read to write.
Salesforce sandbox, platform records and fixtures have different roles. A missing record must not be presented as a failed source.
Owner and unit scope
Verified in sourceResolve the resident’s authorised home before reading a record.
Protected read
Verified in sourceThe API uses its connector binding to reach the connector service and Salesforce sandbox.
Mixed sources
Verified in sourcePayments and relationship manager use the connector; journey and visit records include platform mirrors. Construction content includes fixtures.
Projected response
Verified in sourceSelected fields inform the grounded answer. The device renders cards from the route result.
Confirmed cancellation
Verified in sourceThe platform updates its own visit record, then mirrors the change asynchronously to Salesforce.
Current evaluation baseline
A suite exists. A result is still needed.
The inspected suite uses fixed-rule checks. Four required cases must pass every run. No verified staging result is available here.
An unmerged proposal expands the suite to 58 cases and proposes a 90% bar. These are not the current baseline or approved acceptance criteria.
Proposed sequence
Earn the pilot with evidence.
- Agree acceptance criteria with Product and Legal, including critical authorisation and action failures.
- Extend coverage, label human examples and verify mobile confirmation.
- Run repeatable staging evaluations with privacy-reviewed telemetry and preserve the results.
- Review evidence for a limited internal pilot. Production needs a separate decision.
Sources, runtime limits and interpretation
Research date: 6 November 2026. This page uses the recorded source inspection from that date. Source verification does not prove deployed behaviour.
- Collections source snapshot
becc5fd:assistant/src, tool registry inapps/api/scripts/contracts/ai-tools.json, and evaluation suite ine2e/eval. - Mobile source snapshot
30b66fb:src/features/assistant. “O. concierge” is the name used for this evaluation request. - Source limits: 5 model steps, final step answer-only, 20 seconds per step, 45 seconds per turn, 4,096 output tokens and no model retries. Rate limits: 15 stream and 30 action requests per user per 60 seconds.
- Registered tools: 11 reads and one cancellation action. Built-in clarification and answer completion are separate. No retrieval-augmented generation or vector store is evidenced.
- Staging “live” Salesforce access means sandbox access. Development previews and construction fixtures do not prove live field mappings.
- Evidence is still needed for provider processing region, exact deployed model revision, retention and erasure controls, production topology and approved pilot criteria.