06. Product Capabilities: The Functional Matrix

Status: Active / Golden Version: 1.0 (Consolidated Jan 2026)

"The definitive inventory of what the Singular Dream platform does for its users. Organized by the Module Architecture."

1. Governance Module (Digital Democracy)

Package: @sd/com-community Mandate: Shift power to the "Silent Majority" through secure, diverse, and transparent decision-making.

🏛️ For The Owner (The Voter)

[GOV-VOTE-CAST] Digital Ballot: Cast specific votes (Yes/No/Abstain) on proposals from any device.
[GOV-PROXY-ASSIGN] Proxy Delegation: Assign a "proxy" to vote on your behalf for a specific meeting or duration (Revocable at any time).
[GOV-POWER-VIEW] Weighted Power: See exactly how much your vote counts (based on Indiviso ownership %).
[GOV-DASH-VIEW] Transparency Dashboard: View live quorum status and historical voting records.

🛡️ For The Administrator (The Election Monitor)

[GOV-PROP-MANAGE] Proposal Management: Draft, review, and publish legal proposals to the ballot.
[GOV-QUORUM-CALC] Quorum Calculation: Automated real-time calculation of "Present + Proxy" vs "Total Indiviso".
[GOV-MTG-CONTROL] Meeting Control: Open/Close voting windows instantly during an Assembly.
[GOV-VAULT-STORE] Evidence Vault: Securely store meeting minutes and ratified results.

🤖 System Automation

[GOV-AUTO-ELIGIBILITY] Eligibility Engine: Automatically blocks votes from units in "Bad Standing" (Finance Link).
[GOV-AUTO-CERTIFY] Result Certification: Auto-generates a signed JSON artifact of the final vote tally for audit.

🗳️ Elections & Committees

[GOV-ELECTION-CONFIG] Election Management: Configure ballot windows, candidates, and voting rules.
[GOV-COMMITTEE-REG] Committee Registry: Manage member appointments and delegated charters.

2. Property Module (The Registry)

Package: @sd/com-community Mandate: The "Single Source of Truth" for physical assets and legal ownership.

🏠 For The Resident

[PROP-UNIT-VIEW] My Unit Profile: View assigned parking spots, storage lockers, and access codes.
[PROP-GUEST-PASS] Guest Pass: Generate temporary QR codes for visitor access.
[PROP-UNIT-EDIT] Profile Management: Edit unit details and attributes.
[PROP-LEASE-MANAGE] Lease Management: Upload and view active lease agreements.
[PROP-PARK-REG] Parking Registry: Manage vehicle registration and parking assignments.
[PROP-PET-MANAGE] Pet Registry: Manage pet registrations and compliance tracking.
[PROP-VEHICLE-MANAGE] Vehicle Management: Track and manage resident vehicle information.
[PROP-VENDOR-AUTH] Vendor Authorization: Authorize and manage vendor access to property.
[PROP-OCCUPANT-MANAGE] Occupant Management: Track and manage unit occupants and residents.

🛡️ For The Administrator

[PROP-DEED-RECORD] Deed Recorder: Record title transfers and update ownership history.
[PROP-ACCESS-CTRL] Access Control: Manage key fobs and gate codes linked to specific units.
[PROP-OCCUPANCY-TRACK] Occupancy Tracking: Monitor Owner-Occupied vs Rented ratios.

🤖 System Automation

[PROP-AUTO-REVOKE] Access Revocation: Automatically suspends gate codes when a lease expires or a unit is sold.

3. Operations Module (The Machine)

Package: @sd/com-operations Mandate: Convert governance decisions into executed work.

3.A Work Management (The Loop)

From request to resolution.

[OPS-WO-SUBMIT] Maintenance Request: Resident submission with photos/video (e.g., "Leaking pipe").
[OPS-WO-TRACK] Status Tracking: Real-time updates (Submitted -> Dispatched -> Completed).
[OPS-WO-DISPATCH] Dispatch Board: Drag-and-drop interface to assign tickets to Staff or Vendors.
[OPS-WO-RESOLVE] Ticket Resolution: Mark work as completed, capture closing notes, and notify stakeholders.
[OPS-WO-SLA] SLA Watchdog: Auto-escalate tickets that remain "Open" past their deadline.
[OPS-AMENITY-BOOK] Amenity Booking: Reserve shared resources (Clubhouse, Elevators).

3.B Vendor Network (The Marketplace)

Managing the external workforce.

[OPS-VEND-ONBOARD] Compliance Onboarding: Verify insurance, tax info, and contracts before activation.
[OPS-VEND-BID] RFP & Bidding: Solicit competitive quotes for projects >$10k.
[OPS-VEND-PORTAL] Vendor Portal: External view for contractors to accept jobs and upload invoices.

3.C Physical Intelligence (The Nervous System)

Telemetry, IoT, and Automated Reflexes.

[OPS-IOT-INGEST] Universal Signal Receiver: Webhook bridge for Shelly, HVAC, and Access Control sensors.
[OPS-IOT-TELEMETRY] Metric Normalization: Time-series standardization (Watts, PSI, Flow Rate).
[OPS-IOT-VISUAL] Digital Twin Widgets: Real-time gauges and sparklines for "Pulse" monitoring.
[OPS-IOT-REFLEX] Automated Reflexes: Triggered server actions based on sensor thresholds (e.g., "High Water" -> "Shutoff Valve").
[OPS-IOT-CONFIG] Registry Management: Configuration layer for measurement points, defining assets, data types, and units.
[OPS-SIGNAL-MANUAL] Manual Injection: Admin tools to simulate signals for safe testing.

3.D Personnel & HR (The Staff)

Managing the internal workforce.

[OPS-HR-ROSTER] Staff Directory: Management of Direct Hires and embedded Contractors.
[OPS-HR-SHIFT] Shift Planner: Definition of rotation schedules and attendance tracking.

4. Finance Module (The Ledger)

Package: @sd/mod-finance Mandate: Transparent, double-entry accounting and revenue assurance.

4.A Accounts Receivable (Inflow)

Collections from Residents.

[FIN-AR-INVOICE] Assessment Run: Bulk-generate monthly invoices for all units.
[FIN-AR-PAY] Auto-Pay & Wallet: Recurring payments and stored payment methods (Bank/Card).
[FIN-AR-DUNNING] Collections Logic: Automated late fees and "Bad Standing" enforcement.
[FIN-AR-LEDGER] Resident Ledger: Historical view of charges, payments, and credits per unit.
[FIN-AR-TRACEABILITY] Impact Analysis: Audit trace of AR mutations.
[COM-ASSESS-LEVY] Assessment Levy: Calculation of unit-based fees (Legacy ID).
[COM-ASSESS-POST] Assessment Posting: Posting levies to ledgers (Legacy ID).

4.B Accounts Payable (Outflow)

Payments to Vendors.

[FIN-AP-INTAKE] Invoice Processing: Vendor invoice upload and OCR extraction.
[FIN-AP-APPROVAL] Approval Workflow: Board review routing based on $ thresholds.
[FIN-AP-DISBURSE] Disbursement: Check printing, ACH batching, and vendor remittance advice.

4.C General Ledger (The Core)

Double-Entry Record.

[FIN-GL-JOURNAL] Journal Entries: Manual and automated debits/credits.
[FIN-GL-CATEGORY] Expense Categorization: Dynamic tagging of line items (e.g., "Plumbing", "Roof") replacing complex Cost Centers.
[FIN-GL-REPORT] Financial Reporting: Real-time Balance Sheet and P&L generation.
[FIN-GL-BUDGET] Budget Control: Variance reporting (Budget vs Actuals) and forecasting.
[FIN-GL-TRACEABILITY] GL Traceability: Audit trace of General Ledger entries.
[FIN-GL-SUBLEDGER] Sub-Ledger: Detailed category breakdowns.

4.D Treasury & Reconciliation (The Truth)

Bank Interfaces and Audit.

[FIN-TREASURY-SYNC] Bank Feed: Plaid/institution connection for daily transaction imports.
[FIN-RECON-MATCH] Reconciliation Workbench: AI-assisted matching of bank txns to ledger entries.
[FIN-AUDIT-TRAIL] Immutable Log: Permanent record of every financial mutation (who, when, why).

4.E Procurement (The Contract)

Vendor Lifecycle Management.

[FIN-PROC-PO] Purchase Orders: Generate and track vendor POs.
[FIN-PROC-CONTRACT] Contract Authoring: Digital creation and signing of service agreements.
[FIN-PROC-INSURE] Insurance Watchdog: Automated validation of vendor liability policies.

5. Unified Core (Shared Capabilities)

Package: @sd/modules/unified/* Mandate: The glue that binds the verticals together.

5.A Identity & Access (The Keys)

Packages: identity, directory

[ID-AUTH-LOGIN] Authentication: Session management, secure login, and MFA.
[ID-RBAC-GUARD] Permission Guard: Role-based access control (RBAC) enforcement on routes/actions.
[ID-RBAC-CHECK] Permission Check: Runtime verification of user roles.
[ID-PROFILE-VIEW] Unified Profile: Consolidated User/Unit profile management.
[ID-PROFILE-EDIT] Profile Management: Update contact info, roles, and preferences.
[ID-DIR-SEARCH] Directory Exploration: Search and filter the Unified Directory graph.
[ID-CONTEXT-SWITCH] Context Switcher: Toggle between "My Unit" and "Board Dashboard" instantly.
[ID-ONBOARD-VAL] Identity Onboarding Validation: AI-assisted unit number validation and multi-step identity document capture.
[ID-AUTH-DOMAIN] Domain Membership Verification: Live Google Workspace directory check for @singulardream.org staff credentials.
[ID-LIFECYCLE-ASCENT] Identity Lifecycle Ascent: Manage identity creation and activation workflows.
[ID-LIFECYCLE-DESCENT] Identity Lifecycle Descent: Manage identity deactivation and archival workflows.
[ID-FORENSIC-VAULT] Forensic Vault: Secure storage and retrieval of identity audit trails.
[UNI-GRAPH-VIEW] Graph Visualization: Visual exploration of the unified directory graph.

5.B Communications (The Megaphone)

Packages: communications, notification

[COMMS-CHAN-EMAIL] Email Provider: Transactional and Broadcast email (SendGrid/SMTP).
[COMMS-CHAN-SMS] SMS Provider: Urgent alerts and OTPs (Twilio).
[COMMS-TPL-RENDER] Template Engine: Dynamic content rendering (React-Email / Liquid).
[COMMS-NOTIFY-CTR] Notification Center: In-app feed and preference management.

5.C Intelligence (The Brain)

Packages: knowledge, search

[KNOW-VEC-STORE] Vector Search: Semantic search infrastructure (Pinecone/Chroma).
[KNOW-RAG-QUERY] Smart Answers: LLM-driven Q&A ("How do I...?").
[KNOW-DOC-INGEST] Document Pipeline: PDF parsing, chunking, and embedding.
[KNOW-LIB-INDEX] Content Indexing: Automated categorization and metadata tagging for library topics.
[KNOW-LIB-SEARCH] Semantic Discovery: Natural language exploration across all library volumes.
[KNOW-VAULT-UPLOAD] Evidence Intake: Secure archival pipeline for legal and financial documents.

5.D Platform Engines (The Plumbing)

Packages: signals, workflow, audit

[UNI-SIG-BUS] Signal Bus: Pub/Sub event infrastructure for cross-module communication.
[UNI-FLOW-ENG] Workflow Engine: Long-running process orchestration (State Machines).
[UNI-AUDIT-LOG] Universal Audit: Centralized security logging (Who did what, when).

6. The Evolution Strategy: "Capability-Driven Development"

This document is designed to evolve from a static list into a Functional Ontology. Each item above will eventually expand into a rigorous "Capability Definition" that drives the entire SDLC.

A. The "Living Capability" Schema

In the future, every Capability (e.g., "Submit Work Order") will be defined by this structure, serving as the spec for QA, UX, and Code.

Field	Description	Downstream Usage
ID	`OPS-WO-SUBMIT`	Tracing. Used in code comments (`@cap OPS-WO-SUBMIT`) and Test names.
Persona	"Resident" (Context: Unit)	RBAC. Defines the `allowedRoles` in the Server Action.
Trigger	"Plumbing Leak"	UX. Defines the entry point (Dashboard Button vs Background Job).
Input Data	Photo, Description, Category	Zod Schema. Defines the Payload Validation rules.
Success State	Ticket Created, Staff Notified	Verification. Defines the `expect()` assertions in Playwright.
Failure Mode	Network Fail, Bad File Type	Error Handling. Defines the `try/catch` and UI Toasts.

B. The Lifecycle Process

Inception (Draft): A new capability is added to this Matrix with a DRAFT status.
Definition (Spec): The Schema above is filled out. (This replaces "User Stories").
Implementation (Code): Developer builds the Server Action, referencing the ID.
Verification (Green): QA writes a Playwright test explicitly targeting the Success State.
Publication (Live): The Capability is marked LIVE and becomes available for User Manual generation.

C. The "Golden" Rule

"If it's not in the Matrix, it doesn't exist." We audit the system by verifying that every live route maps back to a Capability ID in this book.

7. Industry Alignment & Methodology

This approach is not re-inventing the wheel; it is a Synthesis of Best Practices tailored for the AI Era.

Our Term	Industry Standard	The Convergence
Capability ID	Requirements Tracing (IEEE)	We skip the heavy Jira tickets and bake usage directly into code comments (`@cap`) for permanent visibility.
"Success State"	BDD (Gherkin)	Maps perfectly to `Given/When/Then`. Our "Spec" is the Test Plan.
"Persona Context"	DDD (Bounded Contexts)	We enforce strict Domain Boundaries (`@sd/mod-knowledge`) preventing "God Object" spaghetti.
The Matrix	Living Documentation	Instead of a stale Wiki, this file is the Source of Truth, strictly enforced by CI/CD audits.

Why this wins: Traditional Enterprise software separates "Product" (Jira), "Code" (GitHub), and "Docs" (Confluence). Our Monorepo Strategy unifies all three into a single, version-controlled Truth.

8. Automated Enforcement (The Guardrails)

Trust is good; CI is better. We enforce this matrix with the "Capability Auditor" (scripts/audit-capabilities.ts), part of our Testing Ring.

A. The `@cap` Annotation Standard

Developers must link code back to this matrix using the @cap tag in JSDoc.

// src/actions/operations.ts

/**
 * Creates a new work order.
 * @cap OPS-WO-SUBMIT
 * @access Resident
 */
export async function submitWorkOrder(...) { ... }

B. The Audit Rules

The audit script runs on every PR (audit:capabilities) and enforces:

Integrity Check: Does every ID in this Markdown file follow the schema?
Code Coverage: Does every "LIVE" Capability ID appear in at least one src/ file?
- Failure: "Capability marked LIVE but no code found."
Test Coverage: Does every "LIVE" Capability ID appear in at least one e2e/ file?
- Failure: "Capability marked LIVE but no tests found."
Zombie Check: Does the code reference a @cap ID that is not in this file?
- Failure: "Code implements unregistered capability."

9. Verification & Testing Capabilities

Package: scripts/verify-*.ts Mandate: Automated logic certification and community graph integrity.

🧪 Logic Verification Suite

The "Proof of Truth" for complex domain flows.

[TEST-FIN-AP] Finance AP Verification: Validates vendor onboarding, invoice intake, and disbursement approval flows.
[TEST-PROP-REG] Property Registry Verification: Validates title recordings, unit profile management, and lease integrity.
[TEST-GOV-PROXY] Governance Proxy Verification: Validates secure digital proxy assignment and revocation.
[TEST-IOT-SIGNAL] IoT Signal Verification: Validates sensor ingestion, metric normalization, and automated reflexes.
[TEST-ID-DIR] Identity Directory Verification: Validates relationship connectivity and persona-based security resolver logic.
[TEST-MASS-SEED] Mass Community Graph Seeding: Industrial-scale data hydration (100+ nodes) for relationship stress testing.
[TEST-AI-ANALYSIS] AI Assistant Verification: Validates semantic search accuracy and RAG-based query results.
[TEST-KNOW-VAULT] Knowledge Vault Verification: Validates the secure archival pipeline and evidence intake.
[TEST-AUTO-DRIVE] Autopilot Verification: Validates long-running workflow engine and automated system responses.

06. Product Capabilities: The Functional Matrix

1. Governance Module (Digital Democracy)

🏛️ For The Owner (The Voter)

🛡️ For The Administrator (The Election Monitor)

🤖 System Automation

🗳️ Elections & Committees

2. Property Module (The Registry)

🏠 For The Resident

🛡️ For The Administrator

🤖 System Automation

3. Operations Module (The Machine)

3.A Work Management (The Loop)

3.B Vendor Network (The Marketplace)

3.C Physical Intelligence (The Nervous System)

3.D Personnel & HR (The Staff)

4. Finance Module (The Ledger)

4.A Accounts Receivable (Inflow)

4.B Accounts Payable (Outflow)

4.C General Ledger (The Core)

4.D Treasury & Reconciliation (The Truth)

4.E Procurement (The Contract)

5. Unified Core (Shared Capabilities)

5.A Identity & Access (The Keys)

5.B Communications (The Megaphone)

5.C Intelligence (The Brain)

5.D Platform Engines (The Plumbing)

6. The Evolution Strategy: "Capability-Driven Development"

A. The "Living Capability" Schema

B. The Lifecycle Process

C. The "Golden" Rule

7. Industry Alignment & Methodology

8. Automated Enforcement (The Guardrails)

A. The @cap Annotation Standard

B. The Audit Rules

9. Verification & Testing Capabilities

🧪 Logic Verification Suite

A. The `@cap` Annotation Standard