A KISOP working paper · the product layer

What we want to build

Here the person using the tool defines the challenges they want to solve, the community funds and builds the features, and every feature lands in a public table anyone can read, argue with, and add to. This page lays out that whole machine — the zones the work lives in, the front end that shows you your life, the back end you choose the home for, and how features ride releases until a capability lights up.

A different way to think about products

This is a loop the community turns. The features on this page are requests, in the requester's own words.

"This is a different way to think about products. The person using the tool defines the challenges they want to solve."Product Features notebook

Every feature described below entered the world the same way: somebody living a situation (a mother packing school lunches, a daughter managing a parent's fifteen nurses, a member trying to understand a lab result) wrote down what they needed. In this system, that request becomes a job to be done, named, priced, funded in fractions by the people who want it, built and tested by the community, and released to everyone. The mechanics live on the jobs board and Ways to Work Together. Jobs fund the features, and the features make the jobs worth funding.

you say what you want the community builds + tests it you adopt it + tell them what you think the community improves it built by the community for the community (the model gives traceability)
The loop, in her own blue ink: "As a user, you say what you want, the community builds + tests it. You adopt it + tell them what you think. The community improves it." Her parenthesis matters: the model gives traceability, and every feature can be traced back to who asked for it, who funded it, who built it, who tested it, and what release carried it.

Your voice in this loop is worth money: the system says so out loud. Members are paid to provide input: requirements that flow to the builders, to researchers, to use cases, to disease-specific work. And the data you choose to contribute (patient-generated health data, shared under a consent you can read) is what supports accountable research.

a member characteristics input: requirements to startups to researchers to use cases to disease-specific work get paid to provide input patient-generated health data data to drive research
Redrawn from the notebook. The member is a paid contributor. Requirements and consented, patient-generated data flow out under class C4 consent (defined below), logged, and compensated.
The commitments · from the notebook's "Personal Health System" page

What the whole system promises, before any feature

  • Understand user needs, and build products that meet those needs.
  • Connect the information together. The user should not have to keep many different silos.
  • Separate the front end from the back end: the window you look through and the box your life is stored in are two different things.
  • Protect against exfiltration and ransomware.
  • Personal foundation models — a model that knows you, working for you.
  • The Personal Health Record, including medical records across every institution you've touched.
  • Health-plan benefits, coverage, payments, access to care — in the same place as the care itself.
  • Daily habits, and your own understanding (the American Heart Association pamphlet, kept next to your labs).
  • An economic engine that works, and a way for people to select the data they want to receive.
  • An extensible system — built to be added to by people we haven't met yet.

Zones of work

Her enumeration scheme, "used throughout the site": six zones, A through F, from what you do alone to how the money moves. Every feature carries a zone letter.

Health happens in a handful of real places: alone with a notebook, at the store, among your people, in the exam room, in the hospital, and inside the machinery that pays for all of it. Carmen drew those places as a strip of six zones. That strip is the spine of the whole feature catalog. A feature that helps you log your water lives in Zone A. A feature that gets your records out of a hospital lives in Zone E. A feature that helps a donor fund the next release lives in Zone F.

"used throughout the site" ABCDEF You a human writes it down. You, by yourself. Buy wearable devices + 3P goods + get food, medicine + supply chain Community the people around you Doc your primary care provider + systems used in these settings Emergency hospital + nursing home acute care Funds payor + gov't funding + donors + AI coach + AI agents (drawn at the seam of B and C — bought like a good, working like a neighbor) AND A SECOND AXIS — WHOSE HANDS THE WORK IS IN: 1 · individual 2 · service providers 3 · third parties 4 · core business Zones say where in your life a feature works. Areas say who operates it: you, the people who serve you, the vendors and researchers around you, or the machinery that keeps the lights on.
Zones of work, redrawn from the notebook's first drawing, with the four highlighter-marked areas from the page beside it. Together they form the address system: every feature in the public table below carries a zone letter. Enumeration by zone is what keeps the catalog from becoming a junk drawer.

Two axes give every feature an address. "Log my water" is A-zone work in individual hands. "Request my records" is D/E-zone work that service providers must answer. "A researcher asks for consented data" is third-party work that reaches the archive through the gate alone. And "publish the feature table" is core-business work: Zone F pays for it. The grid below is the whole catalog seen from above.

ABCDEF 1 · individual 2 · service providers 3 · third parties 4 · core business □ a feature (front end) · ■ a feature (back end) · shaded cell: D×2 — where "request my records" lives the grid is how the catalog is enumerated — every feature gets an address, every empty zone is visible
The catalog seen from above: zones across, areas down, features as squares. An empty cell is information too: it means nobody has asked yet, or nobody has funded it yet.

The front end — windows onto your life

Everything in this section is a way of seeing: views, logs, plans, invitations, events. Your life is stored downstairs, in the home. Windows are chosen, swapped, and discarded.

The commitment from the notebook is architectural: the front end is separated from the back end. Your data has one home: the archive you control. Every screen, summary, chart, and reminder is a window onto that home, opened through a consent gate that logs what was asked and what you allowed. This is what makes agency real: you can change the window without moving house, and you can move house without losing a single window.

THE FRONT END — WINDOWS · DISPOSABLE BY RULE summary view aggregate + per folder trends over time your diet vs. what you need family view simple and understandable … and any KISOP-compatible viewer anyone ever builds — you lose nothing by switching ask answer the door the consent gate every read and write, logged C0 · C1 · C2 · C3 · C4 · C5 consent classes — you set them, per partition THE BACK END — THE HOME · CANONICAL your Personal Neutral Archive plain files, open formats, on storage you control originalssource schemasprovenanceconsentsaccess log encrypted at rest · backed up · protected against exfiltration and ransomware the archive is canonical · every window is disposable
The seam. Windows above, home below, one logged door between them. Anything derived (indexes, summaries, dashboards) can be rebuilt from the archive at any time. Nothing else can rebuild the archive. Rebuilding in only one direction is the operational meaning of ownership.

The viewing features, enumerated

These are the windows the notebooks ask for. Each one is a fundable job, listed with its address in the public table:

Two postures, one systemSome people want to use the app. Some people want to collect their data: an edge device quietly filling their archive. The notebook draws both without ranking them: the consumer posture and the edge posture are the same system worn two ways.
Access is a featureVoice is first-class and the system is natively multimodal: the notebook's example is a person with Down syndrome using voice where a keyboard excludes them. Language support is a feature line of its own. And accessibility + choice sit in the Design column of every release, where they can't be skipped.
Privacy shows up in small placesGroup events can run on a public line — a thousand people doing it with you is encouragement), but participant lists stay hidden to respect privacy, and a person and their loved ones can always elect a private line instead. Some events are just calendar placeholders with good health information attached.

The back end — where your archive lives

The Personal Neutral Archive (PNA) is the home. What's in it is yours; where it lives is your election; and the more secure ways of keeping it are choices you can make.

Underneath every window sits one thing: your Personal Neutral Archive (PNA), your canonical store, raw and processed, with each source's schema and provenance preserved, held as plain files in open formats on storage you control. Neutral in five senses: vendor-neutral, format-neutral, model-neutral, environment-neutral, purpose-neutral. The full specification is open knowledge (links below); what matters here is what it contains and where it can live.

a local personal health repository health summary view (aggregate + per folder) images (mammo, x-ray) medical records from encounters labs, tests bills — summary medicine — summary WHAT INSTITUTIONS HOLD ON YOU patient-gathered data: food · exercise · mental health finances · chats with AI wearables data medical-device data the life between appointments WHAT YOU GATHER watch + phone data is incomplete dental · vision · insurance (commercial, Medicare, Medicaid) COVERAGE
The April 15, 2025 notebook page, redrawn. Her three pens kept: the summary layer that makes it readable, the institutional records you extract copies of, the data you gather yourself (with her margin note: watch and phone data is incomplete), and the coverage that pays for care. One archive, partitioned, holding health, finances, receipts, a parent's care file, andyour own writings too.

Where it lives is an election

Here is the part that is easy to say and rare to mean: the person chooses the home, and can change their mind: easy to say, rare to mean. The ways we have written about so far are the reference build: a home node holding the canonical copy, a replica on your own machine, two encrypted backups. Some people will start with a binder and a folder of PDFs. Some will elect much more secure arrangements than the reference. Every rung is legitimate; every rung keeps the same files, the same gate, the same rights.

SECURITY ELECTIONS INCREASE → a binder + a folder of PDFs where many begin one laptop folder real, and fragile ★ home node canonical replica (your Mac, your phone) 2 encrypted backups the reference build canonical + replica + two backups encrypted at rest — as written so far hardened elections air-gapped · hardware keys · an E2EE cloud you choose same files · same consent gate · same rights: you can move between homes any day
The ladder of homes. The reference build is what the specification describes today; the rungs to its right are elections the specification must never foreclose. The rung on the far left is a person with a legitimate home. Every rung above the binder includes backup by design, so you cannot lose the archive.

Agency and transparency, made mechanical

Agency is the consent classes: you set, per partition of your archive, how far anything may travel. Transparency is the access log: nothing about you is shared by default, and the log records what was asked and what you allowed. Both are properties of the archive itself. Neither depends on trusting an interface.

Consent classes — the default set; the owner can extend it
ClassWhat it means
C0Never leaves the archive. Local only, local models only.
C1A local AI may read; results stay in the archive.
C2A named remote model or agent may read under a specific grant, logged.
C3A named person — Community Helper, physician, caregiver — may read specified partitions, logged.
C4A consented research contribution — de-identified per the grant's terms.
C5Public — the owner has published it.

Back-end features, enumerated

Back-end features are the ones that touch the home itself. They include the sources feeding it. The notebook's "Back end features" page names the pattern: you get your data into your repository, and vendors offer features against the standard. A lab company can offer delivery of results straight into your archive; a device maker can offer its readings the same way. They offer features. They never take custody. That inversion (vendors compete to serve your archive, and no vendor owns a copy of you) is the market this system creates.

The capabilities, A through H

A capability is what a person can actually do once enough features exist. The notebook enumerates eight, lettered in Carmen's own hand, and each card below keeps her numbering.

Features are small on purpose: fundable, buildable, testable one at a time. What people want is to manage their own health record. That ability arrives only when a family of features has landed. These eight capabilities are the system's promises; the numbered items are the features that keep them.

A

User administration

everyone — the front door
  1. Create an account, manage your password
  2. Create a profile per person
  3. Add people to your household
  4. Add a role to a person — client · Community Helper (lead, associate) · provider · third-party administrator
  5. Invite others to join the platform
  6. Set up groups
A household is the real unit of care: one account can hold a mother, her kids, and her parents, each a full person.
B

Manage your Personal Health Record

client + community helper · full CRUD in the owner's hands
  1. List your doctors + facilities
  2. Request records
  3. Receive records
  4. Send records
  5. Data portability — close your account, move records out
  6. Manage your data storage location
  7. Set disease conditions
  8. Upload records — vaccines, labs, imaging
  9. Delete records
Her margin note says it in four letters: CRUD — create, read, update, delete. All four verbs belong to the owner, and a tool gets none of them without her consent.
C

Grant access to your data

client · consent, as a verb
  1. Grant access to your doctor
  2. … to your family
  3. … to your caregiver
  4. … to a Community Helper
  5. … to a researcher (clinical trial)
  6. Grant permission for people to invite you
  7. Join groups
Every grant is scoped to partitions, carries a consent class, is logged, and can be revoked. Even being invited requires your permission first.
D

Work as a Community Helper

the community's trained neighbor
  1. List your services
  2. Manage your credentials
  3. Manage your profile
  4. Send secure communications
  5. Manage payments
  6. Learn — find a class, sign up, complete it, receive a certificate of completion
Certification is visible: a certified host wears a flag, and a background check is required to earn it. Verified professional credentials get a flag of their own.
E

Send invitations

how the community moves together
  1. Person to person — a walk, exercise, eating well together, sharing a purchase
  2. Host to client — requires a relationship already added, so a host can never cold-call
Four steps, from the notebook: one sends the invite (email or dashboard) · the other accepts · it lands on both calendars · it can be edited. Invites live in your member area.
F

Manage your health

the daily fabric
  1. Healthy habits — daily routines
  2. Log — weight, food, medicines, exercise, water
  3. Set goals
  4. Review your plan of care — meds in the AM, meds in the PM, supplements, water
Everything logged lands in the archive, which is why a log kept for you in seconds becomes a trend your doctor can trust in a year.
G

Find help for your goals

from a walking partner to a hospice
  1. Find a walk
  2. Find a caregiver — by the hour · live-in · hospice
  3. Research your options (i.e., insurance)
The same verb, "find help," spans a Saturday walk and end-of-life care. That span is deliberate: one system that already knows you, at every weight of need.
H

Track completion of services

did the help actually happen?
  1. Track completion of services
One line in the notebook, drawn with an arrow from capability G, because finding help means little if nobody confirms it arrived. This is also the fraud, waste, and abuse defense: services that must be marked complete are services that can be audited by the family.

How a feature ships — define, design, build, test, deploy

Features ride releases. A release is a named, numbered bundle (features + libraries + tech stack), tested as a unit, priced in the open, deployed in ways that do not cause harm.

AI accelerates every step — people stay at the definitions and the harms DefineDesignBuildTestDeploy HUMAN INPUT requirements understand the needs of the people AI-governance req'ts HIPAA req'ts reduce barriers to innovation democratize access to AI today: wealthy, iPhone-first — the thing to fix user stories accessibility + choice designed in from the start features + libraries + tech stack = release accelerate build + test low code the stack, collapsed AI agents carry work from build to deploy test release # identify harms before anyone else can meet them operations + maintenance release price · revenue share fewer products meet more needs of more people deploy in ways that do not cause harm product 1product 2product 3product 4 HER BOTTOM MARGIN: THE PRODUCTS, LISTED IN A TABLE — THE SEED OF THE PUBLIC TABLE BELOW
The pipeline page, redrawn. Her shorthand elsewhere in the notebook compresses it to D³ (define, design, deploy), wrapped around a build-and-test loop. The definitions stay human; the acceleration is AI; the deploy column carries the two lines that govern everything: fewer products meeting more needs of more people, deployed in ways that do not cause harm.

The proposed release trains cut the catalog into deliverable seasons: each one a fundable bundle with a published feature list and a test release number before it ships. The trains are a plan; the table is the truth. When the community funds jobs in a different order, the trains get re-cut and the table says so.

FEATURES rows of the public table ■ funded · □ proposed RELEASES features + libraries + tech stack, tested as one R0 R1 R2 R3 test release # each release publishes its feature list, its test release #, its price + revenue share CAPABILITIES filling as releases land A B5/9 C D E F G H a feature is funded → it rides a release → a capability fills → a person can do something they couldn't (the meters are illustrative — the live numbers belong to the published table, recomputed every release)
The rollup, in one line: features ride releases; capabilities fill. When capability B reaches nine of nine, you will actually manage your own health record.

The public feature table

Eventually this lives as a published, sortable register: every feature, its address, its layer, its release, its status, its funding. This is the seed, drawn entirely from the notebooks. The numbering inside each capability is Carmen's own; rows beyond her lists continue it.

A public table is the traceability her loop demands. Anyone can see what was asked for, what it costs, what it rides on, and what state it's in. Every shipped feature appears in the table, and every row shows its status. Current statuses: most rows are proposals awaiting funding; a few are specified in the open documents; a handful have already been lived in the v0 archive or prototyped in earlier tools. As the community funds jobs, rows move through funded → building → testing → released, and each release stamps its rows.

Seed of the public feature table · v1.0 · July 2026 — zones A–F per the strip above; layer: front = window, back = home
IDFeatureZoneLayerReleaseStatus
A · User administration
A-1Create an account, manage your passwordAfrontR1proposed
A-2Create a profile per personAfrontR1proposed
A-3Add people to your householdAfrontR1proposed
A-4Add a role to a person — client · Community Helper (lead / associate) · provider · third-party adminA·CfrontR1proposed
A-5Invite others to join the platformCfrontR2proposed
A-6Set up groupsCfrontR2proposed
A-7Manage contacts — "a wrong phone number can cause delays"A·EfrontR1proposed
B · Manage your Personal Health Record
B-1List your doctors + facilitiesDfrontR1lived in v0
B-2Request records from any institutionD·EbackR0specified
B-3Receive records into your archiveD·EbackR0lived in v0
B-4Send records where you chooseDbackR0specified
B-5Data portability — close your account, move everything outAbackR0specified
B-6Manage your data storage location — the election of homesAbackR0specified
B-7Set disease conditionsAfrontR1proposed
B-8Upload records — vaccines, labs, imagingAbackR0lived in v0
B-9Delete records — the owner's hand onlyAbackR0specified
C · Grant access to your data (consent)
C-1Grant + revoke access — doctor · family · caregiver · Community Helper · researcher (clinical trial); classes C0–C5, loggedA–FbackR0specified
C-2Grant permission for people to invite youCfrontR2proposed
C-3Join groupsCfrontR2proposed
D · Work as a Community Helper
D-1List your servicesCfrontR2proposed
D-2Manage your credentials — background check, certification flag, verified-credential flagCfrontR2proposed
D-3Manage your profileCfrontR2proposed
D-4Send secure communicationsCfrontR2proposed
D-5Manage paymentsFfrontR2proposed
D-6Learn — find a class, sign up, complete, receive a certificateCfrontR2proposed
E · Send invitations & gather
E-1Person-to-person invitations — a walk · exercise · eat well together · share a purchaseCfrontR2proposed
E-2Host-to-client invitations — requires an added relationshipCfrontR2proposed
E-3Events catalog — by type + zip, some free, email with calendar file, forwardable to familyCfrontR2prototyped
E-4Private lines for you + loved ones · hidden participant lists on public eventsCfrontR2proposed
F · Manage your health
F-1Healthy habits — daily routinesAfrontR1proposed
F-2Log — weight · food · medicines · exercise · waterAfrontR1lived in v0
F-3Set goalsAfrontR1proposed
F-4Review your plan of care — meds AM · meds PM · supplements · waterA·EfrontR1lived in v0
F-5Tell your storyAfrontR1proposed
F-6Food answers — what to eat now · what to buy · special occasions · your diet over time vs. recommendedBfrontR3proposed
F-7Scan a grocery receipt → your food data (and, with the grocer, theirs)BbackR3proposed
G · Find help for your goals
G-1Find a walk — with a loved one, with a colleagueCfrontR2proposed
G-2Find a caregiver — by the hour · live-in · hospiceC·FfrontR3proposed
G-3Research your options (i.e., insurance)FfrontR3proposed
G-4Find an accountability buddy — journal the plan the night before, text each night: we did itCfrontR2proposed
H · Track completion of services
H-1Track completion of services — the audit trail the family can readE·FfrontR3proposed
H-2Family updates — simple and understandable, on a regular basisEfrontR3proposed
H-3Produce the medication + allergy list, in one motionEfrontR1lived in v0
The row that keeps the table alive"We want users to be able to recommend features." — the notebook, in the middle of the seniors pages. Recommending a feature is itself a feature, and it is how every other row got here. When the register goes live, the recommend button sits at the top of the table.

Who runs it with you

Features are software; the system is people. Community Helpers carry it into the world, often through local Solution Centers, and a membership ladder funds the ground they stand on.

Community Helpers — a broad role with clearly labeled qualifications

Community Helper is KISOP's umbrella term for people who help one another take practical steps for health. It includes neighbors, family caregivers, volunteers, community health workers, home health aides, nurses, and other professionals. A helper might host a walk or lecture, bring people together to review prevention schedules, organize questions, find services, or help someone understand their own information.

The umbrella does not erase important differences. A community health worker is a recognized occupation and may need state certification. A certified home health aide is a separate role with different training and permitted tasks. Clinicians have their own licenses. Informal caregivers and neighbors bring lived experience but no implied professional authority. The system must show these distinctions:

Solution Centers — the assisted-AI access point

A Solution Center is a physical place where a community gets its hands on all of this, because agency that requires an iPhone and a comfortable income only reaches a demographic. The notebook's design, dated April 2025:

Membership — who pays for the ground

Six plans, drawn April 13, 2025: two for individuals, two for communities, and two for builders, all under a single membership spanning medical devices + AI. Each tier includes its member sites and the tiers below it. The numbers remain notebook drafts:

Payment plans + member sites — as drawn, April 13, 2025 · draft numbers
PlanForDraft priceMember sites unlocked
1 · BasicindividualsfreeBasic
2 · Premiumindividuals$5Basic · Premium
3 · Community Helperscommunities$10Basic · Premium · Community Helpers
4 · Solution Center Leaderscommunities$20Basic · Premium · Community Helpers · SCL
5 · Developersbuilders$35Basic · Premium · Community Helpers · SCL · Developers
6 · AI Buildersbuilders$100All of the above, plus clinical, legal, medical device + AI: access to everything

Her note on the $100 tier: "the cost of a conference — but you get value year round." A core team maintains the private intranet behind it all; as a member, you can express interest in using the tools, or in becoming a Community Helper yourself. Membership money is one stream; the funded jobs and ventures are the others.

Worked examples — the features in a life

Three threads from the notebooks, kept concrete: a senior after the hospital, food from receipt to doctor's visit, and children learning health at the kitchen counter.

A senior who needs advanced care

"When a senior declines after a hospitalization, the care at home needs to be different. The senior needs help transferring from the bed to a commode. The senior needs care with feeding, support brushing their teeth, help eating, help with laundry. They are more prone to be subjected to fraud, waste and abuse. They need protection. Adult children need to get updates on a regular basis. The family needs extra support."Product Features notebook — the seniors pages

The notebook then names the operational reality. Nursing staff change every shift (fifteen or sixteen different nurses in a week), so the medical providers and the family both end up with partial information, and the family becomes the advocate carrying updates across shifts. The services must be frictionless, combinations of products, and they must not exist independent of the tools the family, caregivers, and social workers already use. Each sentence maps to rows in the table:

Food, from the receipt to the doctor's visit

The food thread runs through the whole notebook because food is where health decisions actually happen: at the shelf, at the stove, on Sunday afternoon. The challenges, in her words: What food should I eat right now — for breakfast, for lunch, for dinner? When I'm grocery shopping, what should I buy? What about special occasions? How can I see what is happening over time with my diet? Then the features: scan your grocery receipt and the calories in the food become your data model (F-7), and work with the grocer so the same receipt improves their picture too. The trends view answers the over-time question (F-6). And the plan drawing ties it to the architecture:

KISOP data structure v1.3 + your Google Sheet — or wherever you keep it an AI agent reads these + your personal foundation model a recommendation, for you you review it with your doctor "( your data — anywhere you want to keep it )"
The Food Plan page, redrawn. Notice what the drawing shows: the recommendation engine reads your structure and your sheet, wherever you keep it, and the last arrow in the flow points to your doctor.

Kids, moms, and the ways people actually move

The gentlest pages in the notebook are checklists: invite your child to do healthy meal prep for the week, on Sundays, for the lunches. Invite your child to learn about food. As a Community Helper, invite other moms to do meal prep together. Help your person exercise on a regular basis. Then the invitation kinds spill out: walk with a loved one, walk with a colleague, move with a loved one, listen to a live lecture, listen to a recorded one, sustain a professional network the way the women's groups at a big company do. And a page titled Intersections (culture, gender, LGBTQ, how we grew up, age) with two clouds in the corners: walk + listen, move + listen. Features are small so they can combine along the lines people actually live on: a recorded lecture in Spanish, walked to, with your mother.

Provenance

Where every piece of this page comes from, so the traceability we promise starts with the page itself.