Skip to content

Ops & Knowledge Overview

This document describes the operational capabilities and knowledge management required to sustainably operate the HarvestPlus Nutrition platform.

1. Operational Capabilities by Use Case

Domain Capability Use Case Priority
User Ops Role-Based Onboarding (RBAC) SEC-301 P0
User Ops PII Data Privacy & DPDP Compliance SEC-302 P0
Content Ops Curriculum & CMS Management ADM-101 P1
Content Ops Video-Based Learning Delivery STU-002 P0
Content Ops Push Notifications & Alerts STU-005 P1
Data Ops Meal Distribution & Inventory Tracking ADM-104 P1
Data Ops Wellness Score Aggregation ADM-106 P1
Data Ops Video Metric Ingest & Completion ING-502 P1
Reporting Ops Performance Monitoring & KPI Dashboard ADM-102 P1
Reporting Ops Impact Reporting (PDF/Excel) ADM-103 P1
Reporting Ops Student Progress & Enrollment View ADM-105 P1
Field Ops GPS-Validated Bulk Screening Audit FCM-201 P1
System Ops Multi-Region Availability & DR PLT-401 P1
System Ops Automated CI/CD Pipeline PLT-402 P1

2. Knowledge Management

Technical Documentation

  • Architecture Decision Records (ADRs): Documents the rationale behind technology choices — ADR Index.
  • API Specifications: RESTful endpoint definitions maintained alongside each use case spec.
  • Requirements Traceability Matrix: Maps every requirement to its use case and DPDP obligation — RTM.

User Knowledge Base

  • Field Guide: Handbook for on-site coordinators — offline mode, screening protocol, GPS validation.
  • Admin Manual: Reference for publishing curriculum, reviewing impact reports, and managing school access.
  • Student Onboarding: In-app first-run guide covering health logging, video library, and daily goals.

3. Standard Operating Procedures (SOPs)

Incident Response (Security)

  1. Detection: Anomaly detection via cloud platform logs and automated alerts.
  2. Containment: Dynamic token revocation (SEC-301).
  3. Remediation: Key rotation in the event of suspected credential compromise (SEC-302).
  4. Notification: DPDP-mandated breach notification within 72 hours — see RTM — DPDP Summary.

Data Migration & Updates

  1. Staging: Schema migrations validated in an isolated environment before production.
  2. Deployment: Automated CI/CD pipeline (PLT-402).
  3. Verification: Smoke tests against ingestion endpoints (ING-501).