A district runs on judgments that vanish the moment they're made — the route cleared, the bin emptied, the lighting checked, the round done. Key points across the district carry a passive chip. As staff and wardens do their work, they tap it with the phone in hand and answer one quick thing. Over time the district accrues a tamper-evident record of how it was operated — governed so it can never become surveillance.
No app. No login. Five seconds. The phone in the pocket is all it takes.
Each domain has its own rhythm — and surges on event days. Find your domain, find your round.
| Domain | Daily | Weekly | Event days |
|---|---|---|---|
| Events & Operations | — | — | ● |
| Public Facilities | ● | ● | ● |
| Heritage & Streetscape | — | ● | ● |
| Community Safety | ● | ● | ● |
Illustrative cadence — replace domains and intervals per district.
Each domain has its own chips. Open yours, then scan a QR with another phone or hit “Try” to feel the exact tap before your shift.
It logs the round, the place and the time — attributed to a role, never the people in it. The record is of the work, not the public.
Every tap feeds one record the authority reads — across every domain, over time:
This panel updates each shift — over time it shows what each domain taught us.
The chips log events, never people. No login, no name, no tracking of who tapped what — and no surveillance of residents. Community-safety chips attest that a round happened and a place was checked, attributed to a role; they never record the people observed. Crowd flow is counted as anonymous totals by zone, never as individuals.
Governance is constitutional: the system cannot be turned into citizen monitoring, cross-referenced against people, or sold — by design, and it can't be changed. This is a reference template, filled per district; not a record of any specific place.