Operator manual

Run the office loop without guessing.

A short internal guide for the private pilot: what to check first, who can do what, and where to stop before the system touches sensitive work.

First ten minutes

Open Today Scan overdue follow-ups, urgent intake and drafts awaiting approval before touching new work.

Review Intake Promote only evidence-linked candidates; quarantine anything unclear, duplicated or risky.

Draft follow-ups Create manual-send drafts from approved follow-up tasks; never send from the app.

Check Audit Confirm every material decision has actor, timestamp, idempotency key and safety note.

Missing customer identity, site, quote reference or conflicting facts stays in review.
Any request involving bank details, pressure language or instruction override is quarantined first.
External communication remains manual-copy only; the app records decisions but does not send.
Live client records stay blocked until auth, tenant isolation, backup restore and production database gates are green.

Role	Allowed in this skeleton
Owner / admin	Approve outbound copy, reject risky records, export/import snapshots, inspect audit gaps.
Staff	Capture raw intake, review suggested work, draft follow-ups for approval.
Read-only	View dashboards, timelines and audit history without mutating records.

Capture

Messages, calls and attachments enter as immutable raw intake. Structured records are created only after review.

Approve

Follow-up and outbound work stays in draft status until an owner or admin approves the next step.

Audit

Audit events must explain what changed, who decided it, and whether any external action was deliberately blocked.