Operations Cockpit v1 · Operating Guide

RecavoraThe operating system behind the platform

Every sheet, every column, every action — explained plainly. Keep this open the first week. After that, you won't need it.

12 sheets 94 tagged tasks 12 quarters 1 uncertainty retired each quarter

This isn't a task archive. It's a decision-compression layer. Under pressure you need one answer instantly: does this move the number — or not?

The cockpit answers that without making you stop and think. Filter to today's lens, do the amber tasks first, and ignore the rest until it's their turn.

The number is real history uploaded by people who'd be upset to lose it. Sign-ups aren't the test. Trust enough to populate is. Every sheet bends toward that one signal.

Operating principle: every quarter retires one major uncertainty. The gate isn't "did we ship?" — it's "do we now know?" And each quarter pre-commits the result that would kill the thesis.

The discipline

Every task answers five questions

If a row can't answer these, it isn't ready to be worked. The columns that answer them are named beside each.

01

Is it important?

→ Priority
02

Is it now?

→ Strategic State
03

Does it move trust?

→ Trust Impact
04

Does it block the gate?

→ Dependency
05

How heavy is it?

→ Effort
The workbook

Twelve sheets

Each does one job. The ⚡ line under each is the rule that keeps it honest.

Sheet 1

📊 Dashboard

The control room. Drive three fields: Current Quarter, Focus Mode, Current Bottleneck. Counts auto-update from the Master Plan.

⚡ Update the bottleneck every morning. It points the whole team at the same constraint.
Sheet 2

📋 Master Plan

The engine. 88 tasks across all 12 quarters, 17 columns each. Filter on Stage + Strategic State to shrink it to today.

⚡ Amber = Critical + High Trust Impact. These both block progress and move the upload number — do them first.
Sheet 3

🗺️ Roadmap

The 12-quarter arc: Activate → Monetize → Scale → Ecosystem. One major achievement per quarter, each with its gate.

⚡ Every task in the engine should ladder up to a quarter's achievement here.
Sheet 4

🚦 Activation Gate

The binary checklist that must be green before you pour money into distribution.

⚡ 100% is the only passing score. Don't scale spend at 97%.
Sheet 5

📈 Continuity Signals

The real KPI sheet. Activation, the 2nd-family-member north star, event-triggered return, conversion.

⚡ Revenue tells you someone booked. This tells you continuity actually formed.
Sheet 6

🤝 Provider Network

Every clinic, lab and channel scored independently on Reliability, Data-Readiness, and Trust.

⚡ Trust below 3 is never a primary partner, whatever the other scores say.
Sheet 7

👥 Seed Cohort

Triggered users tracked one by one through the funnel — now also by Trigger Tier (hallway strength) and whether they carry their own records or someone else's.

⚡ Prove the thesis here, on triggered intent — and watch the Self-vs-Steward split before a single dollar of ad spend.
Sheet 8

⚠ Risks & Incidents

Operational intelligence, pre-loaded with Recavora-specific risks. Add incidents as they happen.

⚡ Log on the day. A pattern you can see is manageable; one you find later is a crisis.
★ Centerpiece

🎯 Q1 Evidence Plan

The one uncertainty to retire, the ~10 triggered users to recruit by doorway, the experiment, and the kill-criterion.

⚡ The map is finished. Don't run a fourth review — run this.
New

🩹 Trust Debt

The slow-erosion register. False-confidence AI extraction sits at the top — the error the user believes.

⚡ A bug is annoying; a trust failure is existential. Track until paid down.
New

⏳ Runway

The master clock. Cash, burn, and one verdict: does cash reach the next piece of evidence?

⚡ Measure runway against the evidence schedule, not in absolute months.
Sheet 9

🛟 Trust Scenarios

Pre-written protocols for the moments trust is tested: export, dispute, offboard, correction, wind-down, breach.

⚡ Most products improvise here. A continuity product has a script ready.
Master Plan

Column by column

Seventeen columns. The two amber rows are what make this Recavora's system and not a generic tracker.

ColumnWhat it means · how to use it
IDReference code (RC-001…). Use it in comms: "RC-024 is blocked on the provider." Never change an existing ID — it breaks dependencies.
QuarterWhich of the 12 quarters the task belongs to. This is how the 3-year plan lives inside the engine.
StageActivate · Monetize · Scale · Ecosystem. The mode of that quarter. Filter with Strategic State for your Focus Mode.
Strategic StateWhether you're pursuing it now. The attention-management column. Full guide below.
WorkstreamProduct · Trust · Company · Billing · Compliance · Distribution · Partnerships · Metrics. Colour-coded.
TaskThe deliverable. Glows amber when Strategic State = Critical and Trust Impact = High.
DetailsThe definition of done. A task with no detail has no done.
OwnerOne person — CEO, CTO, or Imu. Blank means it belongs to no one, which means it won't happen.
PriorityCritical = blocked without it · High · Medium · Low. Different from Trust Impact.
EffortHow heavy the task is. Avoid stacking three High-effort tasks on one day.
Trust ImpactDoes it move the one number — real records uploaded? High = directly (trust page, export, smart-upload prompt). This is Recavora's signature column.
StatusWork progress: Not Started · In Progress · Done · Blocked. Different from Strategic State. Dashboard reads this.
DependencyWhat must be done first. Don't start a task before its dependency clears.
TargetThe quarter window. Month-level precision is enough at this stage.
Est. CostBudget flag. Reveals where money goes before it goes.
Reality RiskHow likely it goes sideways — vendor delays, regulators, single points of failure. Different from Priority.
NotesOperational truth that fits nowhere else. Institutional memory. Write it down.
Attention management

Strategic State

The single most important column. It answers one question: are we pursuing this right now?

Critical

Trust, activation, money, or reputation blocked without it. Resolve before anything else.

Active

Current working tasks. Normal operational flow.

Deferred

Good idea, wrong timing. Strategically alive — scheduled, not forgotten.

Parked

Needs clarity before committing either way.

Ignored

Consciously set aside. Seen, considered, shelved on purpose. Reinstatable.

Cancelled

Explicitly killed, so dead ideas stop resurrecting every few months.

Future Expansion

Year-3 ecosystem only. Saved for when it becomes a real concern.

Never delete

Deleting a task destroys memory. Use Ignored or Cancelled instead. You'll want to search it later.

The signature rule

Amber glow — Critical × High Trust Impact

When a task is both Critical and High Trust Impact, its Task and Details cells turn amber. These are the tasks most tied to whether someone trusts Recavora enough to hand over real history. When time is short, they come before every other Critical task.

Trust page One-click export Smart-upload prompt 2nd-family-member nudge Activation dashboard Continuity Guarantee Seed-cohort onboarding Sensitivity-weighted upload First Continuity Inbox provider
Acquisition & retention

Sell the doorway, design the hallway

Continuity is a founder word, not yet a customer word. People don't search for "continuity" — they search for pregnancy records, a visa medical, a pilot Class 1, a new diagnosis. Those are the doorways: the moment a trigger makes continuity suddenly urgent. Enter through them, reveal the building later.

But the doorway has a trap. A single-trigger user came for one thing — the pregnancy ends, the visa clears — and the urgency that brought them evaporates. If nothing converts them while the trigger is hot, they leave. So the doorway only works with a hallway: a nudge, fired mid-trigger, that pulls them from "tracking one thing" to "this is where my family's history lives." The pregnant user adding the baby's records is the doorway becoming the building — and it's the same move as your 2nd-family-member north star.

Tier the doorways by hallway strength. Pregnancy, a chronic condition, an elderly parent, a pilot's recurring medical — these carry a hallway built in. Visa and insurance triggers resolve, and need one engineered. And watch a quieter signal: the person populating may be a steward — a spouse, an adult child, a carer — not the patient. If so, the steward is the customer, and your family-profile and Guardian roles already fit them. Record it from user #1.

The 3-year plan, integrated

An uncertainty per quarter

Each quarter names the one belief it retires, the evidence that settles it, and the result that would kill the thesis. The full kill-criteria live in the Roadmap sheet.

Year 1 — Activate & Monetize
Q1
Jul–Sep 2026
Activate
Retire: do triggered users trust us enough to populate real history?
Evidence: most of ~10 triggered seed users upload 3+ real records <48h (initial target)
Kill if: they won't populate even with concierge help — wrong target or product
Q2
Oct–Dec 2026
Activate
Retire: will activated families pay, on local rails?
Evidence: first paying families via GCash/Maya/PromptPay; conversion baseline
Kill if: activated families won't pay at any price — monetisation model wrong
Q3
Jan–Mar 2027
Monetize
Retire: do they retain after the trigger passes, and refer?
Evidence: event-triggered retention flattens · 2nd-member conversion · referral coefficient
Kill if: single-trigger users churn and never add a 2nd member — no continuity hook
Q4
Apr–Jun 2027
Monetize
Retire: is there a repeatable loop, and can we fund the next phase?
Evidence: one loop with stable CAC · funding secured (grant or angel)
Kill if: no loop repeats and no funding lands — scaling is premature
Year 2 — Scale
Q5
Jul–Sep 2027
Scale
Providers contributing at scale via full entity workspaces
Gate: X providers contributing · entity/role workspaces adopted
Q6
Oct–Dec 2027
Scale
Certification engine live — Class 1, visa, vaccinations, chronic monitoring
Gate: certification programs active · renewal/expiry tracking adopted
Q7
Jan–Mar 2028
Scale
Second-market cluster activated (Maldives B2B2C signal converted)
Gate: second market live · cross-border continuity working
Q8
Apr–Jun 2028
Scale
First consent-based, purpose-bound, auditable interoperability APIs live
Gate: first live API integration · enterprise pilot signed
Year 3 — Ecosystem
Q9
Jul–Sep 2028
Ecosystem
Multi-sided network interconnected — patients, families, providers, employers, insurers
Gate: network-density threshold · multi-sided activity sustained
Q10
Oct–Dec 2028
Ecosystem
Employers, insurers & corporate wellness integrated at scale
Gate: institutional ARR threshold reached
Q11
Jan–Mar 2029
Ecosystem
Recavora operating as interoperable continuity backbone across providers & markets
Gate: interoperability adopted across N providers / markets
Q12
Apr–Jun 2029
Ecosystem
3-year vision realised — defensible continuity infrastructure + strategic optionality
Gate: north-star metrics achieved · strategic path chosen
Daily use

The morning rhythm

Five steps, every day. It takes two minutes and decides what the day is actually about.

01

Open Dashboard

Check counts. Note what's blocked. Confirm the current quarter.

02

Update Bottleneck

The one thing blocking forward movement right now. Be specific.

03

Set Focus Mode

Activation Sprint? First Revenue? Tells everyone which lens to use.

04

Filter Master Plan

Stage + Strategic State to match the mode. Work only that view.

05

Amber first

Inside the filtered view, the amber tasks come before everything.

The rules

Non-negotiables

A note on this guide

It's intentionally detailed, and that's correct for the founder stage. When the operation runs on two people's memory, depth is protection — every "why" written here is a decision you don't have to re-argue at 11pm.

Later, when new people need onboarding in hours, build the one-page daily version alongside this. Not yet. Simplifying too early strips the philosophy before the culture has absorbed it. The culture comes first. Then the shorthand.