Feature Package PK-09 — Resident Services & Access
Status: Package Specification
Domain: Resident Experience / Access / Concierge
Maps to: Playbook (resident services lifecycle)
External integration: Access control, Keycloak (identity), Synapse (resident comms)
1. What This Package Does
Gives the concierge and security team one system for resident and visitor management — issuing access rights, visitor passes, key cards, and managing resident communications — replacing paper visitor logs, uncoordinated key-card issuance, and fragmented resident messaging.
2. Features & Functionality
| Feature | What it does | Who uses it | What stands behind it |
|---|---|---|---|
| Resident access rights | Access granted per unit (lobby, lifts, own floor, amenities) based on ownership/tenancy | Concierge, security | truth_edge:access (person→unit→access); PK-02/PK-05 edges |
| Key card / credential | Physical or digital credential issued; linked to access edge; revocable | Concierge, resident | integration_entity (system: "access-control"); card number |
| Visitor management | Visitor pre-approved by resident; visitor pass issued with time limit; entry logged | Resident, security, concierge | Visitor claim linked to host unit; time-bounded access edge |
| Service-provider access | Contractor, cleaner, delivery person issued scoped access for specific dates/areas | Security, facilities | Scoped truth_edge:access with valid-from/to; contractor record |
| Resident directory | Verified resident directory (opt-in) for community contact | Residents, concierge | cns://truth/node/person; consent flag on claim |
| Announcements & alerts | Development-wide or per-block notices (maintenance, emergencies) sent via resident channels | Property manager, HOA | Synapse discussion rooms; NATS stream |
| Emergency access | Break-glass access for emergencies (fire, medical) with auto-audit | Security, emergency services | fn::security::elevate_trust; PoCE record of elevation |
3. Workflow (Visitor Pass)
- Resident pre-approves visitor (name, ID, date/time, host unit) → visitor claim
- Security verifies resident is owner/tenant of host unit (PK-02/PK-05 edge check)
- Visitor pass issued → time-bounded access edge (lobby + host floor, specific window)
- Visitor checks in at security → pass activated; entry logged
- Pass expires automatically at end of window; access edge released
- PoCE receipt records approval, issue, entry, expiry
4. Guard Rails
- No access right without verified ownership/tenancy edge
- No visitor pass without host sponsorship
- Access edges are time-bounded and auto-expire
- No anonymous or unverified access grants
- Emergency access elevated with PoCE audit trail
- If access control is unavailable → fail closed; no fake credentials
5. Evidence & Audit
- Access edges, visitor claims, credential records (access-control mirror), entry logs, emergency-access elevations, PoCE receipts