Four portals, one AI conductor, one tenant of truth.

The four portals

Single Next.js app, persona-aware. The same code path powers every audience — what they see is data, not branches.

• Assignee · /my-move

  The person being relocated

  Mobile-first chat with AIRA, document upload with on-the-spot validation, family-member partitioned vault, voice agent for "I have a question" moments, and a status timeline that updates in real time.

  • Multi-family-member partitions — spouse, children, dependents each have their own document set
  • AIRA validates passport expiry, visa coverage, apostille presence on every upload
  • Voice agent understands the case context and turns requests into ops tasks
  • Pre-arrival → in-flight → post-arrival modes auto-derived from case state

• RMC · /rmc

  The relocation management consultant

  Cross-client portfolio cohort, SLA-risk chips, anomaly tiles, auto-drafted Friday digest, account-scoped CRM. Built for coordinators managing 12 corporate clients × 200+ assignees without losing the plot.

  • Per-client cohort table with delta-vs-last-week metrics
  • AIRA flags "Client X CSAT dropped 8 points this week" before you have to ask
  • Auto-drafted Friday digest in the coordinator's voice — review, edit, send
  • Approvals workflow with six-eyes governance on lease/expense/payout writes

• Vendor · /vendor

  External service providers

  Onboard once via the vendor passport — basics, compliance, banking, capacity — and propagate across every RMC on ikan. Big-tap accept/decline, voice-first proof capture, milestone-triggered payouts via Stripe Connect / Razorpay.

  • Single-tap accept/decline tiles — no menu drilldown
  • Voice proof capture: "AIRA, log this delivery — 8 boxes, sealed, signed by Mr. Sharma"
  • OCR-validated compliance docs at upload (docTR + Marker — OSS first)
  • Geo-tagged milestone proof, offline queue for poor-signal field sites

• Ops · /ops

  The 35-60 ikan staff who run the show

  Persona-driven workspace — junior consultant, senior, manager, finance, admin each see a tailored sidebar, default landing, KPI tree, and AIRA scope. The same Next.js route group serves everyone.

  • Persona = data, not code — admin configures sidebar visibility per user
  • DRAFTS-first email — every inbound triggers an AIRA draft, you review and send
  • Field-staff voice mode for /ops/itour property visits with structured-field extraction
  • Manager workload heatmap + AIRA coaching prompts on /ops/oversight

AIRA — not a chatbot, an operating layer

AIRA reads the case, drafts the document, files the form, and only asks the human for the irreducible confirmations. Six pillars hold up the operating model.

• Tool Attention pattern

  Every AIRA invocation scores intent against compact tool summaries via embedding cosine similarity, gates by precondition predicates (RBAC scope, milestone, prior tool output), and lazily loads full schemas only for the gated top-k.

• HITL by policy weight

  High-risk tools (lease drafts, proforma invoices, large expense advances) enqueue a six-eyes review row and pause the agent run until three reviewers approve. Low-risk tools execute autonomously with an audit row.

• Voice-first where stress is highest

  Coqui XTTS v2 (self-hosted, OSS) for synthesis, Whisper via Groq for ASR, LiveKit Agents for the agent layer. The assignee never has to type during landing-day chaos.

• Documents are a pipeline, not OCR

  Extract → validate → cross-reference → propose-next-action. Marker for PDFs, docTR for images, in-process tesseract.js as fallback. Mindee gated as last resort.

• Every mutation is undoable

  24-hour undo on every AIRA-initiated mutation. Schema-validated tool I/O. Postgres CHECK constraints on enums. RLS on every read. Audit log retained 7 years.

• Streaming generative UI

  Vercel AI SDK 5 typed tool parts. Every card has input-streaming → input-available → output-available → output-error states with skeleton, loading, success, and retry components.

Compliance is on rails, not on hope

• EuRA-aligned

  Quality-Seal control mapping with per-control evidence collection on /ops/admin/compliance.

• DPDP-ready

  India's 2027 personal-data law: consent ledger, fiduciary obligations, data-localisation toggles already wired.

• GDPR-ready

  DSAR self-serve at /my-move/dsar; right-to-erasure honoured across audit log, documents, and embeddings.

• SOC 2 readiness

  CC1-CC9 evidence catalog, six-eyes governance on sensitive writes, 7-year audit retention with PII redaction.

One codebase, every surface

• Web (Next.js 15)
• Mac · Windows · Linux (Tauri 2)
• iOS · Android (Capacitor)
• MCP server for any LLM client