Vantis AI · elderly-parent module · 23 features

Appa is 78, lives alone in Chennai, and his daughter is nine and a half hours behind him.

Every capability in the elderly-parent module, one at a time — what each one actually does in his house, the technology underneath it, and what happens when it fails. Five are life-critical. Three secure the house itself. Six are not software at all: neighbours, verified helpers, escorts, doctors, and the assisted-living conversation.

Life-critical features

4.1s

SOS to a ringing phone

Day baseline before any trend

Seconds of audio kept

Tier 0 · life-critical

Five features where a failure means harm. Everything else is secondary to these.

Three protect his body, two protect his money. They are the only features that run at the edge, keep working with the internet down, and carry a measured latency budget. Everything else in the product is allowed to be slow, quiet, or briefly wrong. These five are not.

All twenty-three, one by one

Pick a feature. See it run, read how it operates, and what technology it runs on.

Each panel is a working demonstration, not a screenshot — sensors fire, classifiers score, valves close, ladders climb. Every rule ID shown is evaluated at runtime against the real config in /packages/rules-config/alert-rules.json.

Feature demonstration — —

—

How it operates

Technology

Engineering spec

Severity ladder

Every feature ends in the same five-step decision about how loudly to speak.

Severity is not a label on a feature — it is the output of a rule match on a specific signal. The same sensor produces a silent log at one threshold and an ambulance at another. This is the table that governs how loud the system is allowed to be.

Severity

Who hears it

Channels

Respects sleep?

Example rule

What the architecture refuses to do

NFR-2 · retention

Nothing listens longer than it has to

Voice check-in audio and scam-shield call audio are processed in-pass and destroyed. Only derived scores persist. This is a data-flow property, not a policy promise — there is no code path that writes the audio anywhere.

FR-404 · soft blocks

A flagged transfer is held, never refused

The system can insist on a pause and a phone call from family. It cannot overrule a 78-year-old about his own money. There is no configuration that turns the transaction guard into a hard block.

consent-scopes.json

No cameras inside the house

camera.interior_continuous and camera.interior_stills are both on the never list. Ambient sensing is radar and motion — chosen so the sensor is physically incapable of producing an image of someone undressed.

FR-104 · consent

He grants it, not his daughter

Monitoring does not start until the protected person consents himself, by voice or large-UI confirmation, and one spoken instruction revokes it. The account that pays for the service is not the account that authorises it.

FR-204 · framing

A trend line, never a diagnosis

Cognitive screening outputs a direction and a confidence against his own baseline. It will not produce a label. Ambiguous cases resolve to no alert — a false negative costs less than a false positive that ends the family's trust in the feature.

AR-602 · bounded scope

The helper's afternoon is nobody's business

Lakshmi consents for herself, to a declared 09:00–13:00 window. A location signal at 13:47 matches a rule whose action is discard_unrecorded and is dropped at the ingest adapter. Not filtered from a screen — never written, so there is no row to subpoena.

NFR-3 · degradation

Tier 0 works with the internet down

The edge hub evaluates fall and SOS rules locally and carries its own GSM radio. Core safety never assumes good connectivity, because the households that need it most rarely have it.