Client: Evangelia • Date: February 14, 2026

CARE GHL System
Governance Hardening Assessment

Multi-Service Automation Governance Enforcement — Surgical fixes for a sound architecture experiencing scale-related misfires

Executive Summary

Your architecture is sound. The documented workflows show excellent state management design. The issues you're experiencing are enforcement gaps—exactly what governance hardening solves.

Bottom Line: This is surgical enforcement, not a rebuild. Your rules exist—they just need systematic implementation.
35
Workflows Reviewed
5
Critical Gaps
20-25
Need Tag Migration
10
Business Days

Critical Gaps Identified

Five enforcement gaps are causing your system to misfire under scale. Each is systematically solvable.

1
Missing Global Kill-Switch
Problem: Automation Status ≠ Active → STOP guard not implemented across workflows
Impact: No emergency brake for misfiring automation
Critical Priority All 35 Workflows
2
Tag-Based Triggers Still Active
Problem: Workflows using tags for lifecycle instead of custom fields
Impact: Unpredictable firing, scaling issues, staff confusion
Examples: volunteer:active, groc:signup:submitted
Critical Priority 20-25 Workflows
3
Re-Entry Not Locked
Problem: Lifecycle workflows can re-trigger infinitely
Impact: Duplicate sends, stacked timers, infinite loops
High Priority 15-18 Workflows
4
Missing Anti-Duplication Guards
Problem: No "already sent" checks in notification workflows
Impact: Duplicate emails/SMS to clients
Examples: Scheduling Link Sent guard missing in WF-04
High Priority 18-22 Workflows
5
Cross-Service Interference Risk
Problem: Workflows from different service blocks can affect each other
Impact: One service's action triggers another service's workflow
Zones: Multi-service clients, Grocery cycle overlap, Volunteer + Client dual roles
Medium-High Priority All Service Blocks

Implementation Plan

Four phases over 10 business days. Each phase builds on the previous, with concrete deliverables and testing protocols.

Phase 1: Global Foundation
Days 1-2
Goal: Universal safety controls
  • Add Automation Status ≠ Active → EXIT guard to all 35 workflows
  • Document current trigger inventory (tag vs. field)
  • Map field dependencies across workflows
  • Identify cross-service interference points
✓ Deliverable: Kill-switch functional system-wide
Phase 2: Service Block Hardening
Days 3-5
Goal: Lock down each service block independently
  • Client Service: Anti-duplication guards, re-entry locked, service-specific guards
  • Vendor: MOU tracking guards, notification ownership locked
  • Grocery: Cutoff lock enforcement, month-based guards
  • Volunteer: Remove lifecycle tags, orientation one-time guards
✓ Deliverable: Each service block stable in isolation
Phase 3: Tag-to-Field Migration
Days 6-8
Goal: Replace all tag-based triggers with field-driven logic
  • Replace triggers workflow-by-workflow
  • Implement field-based state machines
  • Archive legacy tags (preserve for reporting)
  • Priority: High-frequency → Lifecycle → Administrative workflows
✓ Deliverable: Zero tag-based lifecycle triggers
Phase 4: Full System Validation
Days 9-10
Goal: Verify complete system stability
  • Multi-service client test (Mail + Locker + Bus Pass)
  • Volunteer + Client overlap test
  • Grocery + Services overlap test
  • Edge case stress tests (no-shows, rapid changes, resets)
✓ Deliverable: Complete validation report
Fixed Investment
$2,450

What's Included

Complete governance hardening (all 35 workflows)
Global kill-switch implementation
Tag-to-field migration
Re-entry lock enforcement
Anti-duplication guards
Cross-service interference elimination
Complete testing & validation
Documentation of all changes
Post-implementation validation report
2-week monitoring support
Timeline: 10 business days with daily progress updates

Success Criteria

Project complete when all criteria are met. No ambiguity, no interpretation disputes.

All 35 workflows have kill-switch guard
Zero tag-based lifecycle triggers
All re-entry settings locked per spec
Anti-duplication guards prevent duplicate sends
Multi-service client flows without interference
Mail and Locker lifecycles operate independently
Grocery monthly cycle completes cleanly
Volunteer orientation is one-time only
No-show workflows don't auto-reinvite
Document reupload loop is controlled
Kill-switch instantly halts all automation
All edge cases pass validation

Workflow-Level Analysis

Detailed breakdown of enforcement gaps by workflow. Click any workflow to see specific issues identified.

📥

Client Service Intake

9 workflows
WF-01 Client Intake 3 issues
Missing Kill-Switch
Tag-Based Trigger
Re-Entry Not Locked

Current State: Form submission triggers workflow, but lacks global automation guard.

Required Fixes:

  • Add Automation Status ≠ Active → EXIT guard at entry
  • Replace tag trigger with form submission event
  • Lock re-entry to prevent duplicate processing
  • Ensure sets Docs Status = Needs Review
WF-03 Document Review Gate 2 issues
Missing Kill-Switch
Field Ownership

Current State: Manual staff action required, but automation may interfere.

Required Fixes:

  • Add global kill-switch guard
  • Verify automation NEVER writes to Docs Status
  • Ensure only Data Entry team can modify this field
WF-04 Scheduling Sender 4 issues
Missing Kill-Switch
Missing Anti-Dup Guard
Re-Entry Not Locked
Cross-Service Risk

Current State: Sends scheduling link when docs verified, but can duplicate send.

Required Fixes:

  • Add If Scheduling Link Sent = Yes → EXIT guard
  • Add If Docs Status ≠ Verified → EXIT guard
  • Add global kill-switch guard
  • Lock re-entry to prevent duplicate sends
  • Set Scheduling Link Sent = Yes after send
WF-08 Mail Inactivity Lifecycle 5 issues
Missing Kill-Switch
Tag-Based Trigger
Re-Entry Not Locked
Field Scope Issue
Cross-Service Risk

Current State: Tracks Mail inactivity but may interfere with Locker service.

Required Fixes:

  • Replace tag trigger with Last Mail Pickup Date field change
  • Add global kill-switch guard
  • Lock re-entry to prevent stacked timers
  • Only read/write Mail Service Status (never Locker fields)
  • Add service-specific guard: If "Mail" NOT IN Requested Services → EXIT
WF-09 Mail Inactive-60 → Terminated 3 issues
Missing Kill-Switch
Re-Entry Not Locked
Field Scope Issue

Current State: Final termination workflow for Mail service.

Required Fixes:

  • Add global kill-switch guard
  • Lock re-entry to prevent duplicate termination
  • Only modify Mail Service Status
WF-08L / WF-09L Locker Inactivity Lifecycle 5 issues
Missing Kill-Switch
Tag-Based Trigger
Re-Entry Not Locked
Field Scope Issue
Cross-Service Risk

Current State: Independent Locker lifecycle but same pattern as Mail.

Required Fixes:

  • Replace tag trigger with Last Locker Access Date field change
  • Add global kill-switch guard
  • Lock re-entry to prevent stacked timers
  • Only read/write Locker Service Status (never Mail fields)
  • Add service-specific guard: If "Locker" NOT IN Requested Services → EXIT
🤝

Vendor Workflows

5-6 workflows
VENDOR-01 Vendor Intake & MOU Tracking 3 issues
Missing Kill-Switch
Missing Anti-Dup Guard
Tag-Based Trigger

Current State: MOU tracking and vendor lifecycle management.

Required Fixes:

  • Add global kill-switch guard
  • Implement MOU duplicate prevention guard
  • Replace tag triggers with field-based state changes
  • Lock notification ownership to specific staff member
VENDOR-02 Compliance Notifications 2 issues
Missing Kill-Switch
Missing Anti-Dup Guard

Current State: Sends compliance reminders to vendors.

Required Fixes:

  • Add global kill-switch guard
  • Add anti-duplication guard to prevent repeated compliance sends
  • Lock re-entry on notification workflows
🛒

Grocery Giveaway

6 workflows
GROC-WF-02 Monthly Outreach 3 issues
Missing Kill-Switch
Missing Anti-Dup Guard
Month Overlap Risk

Current State: Sends monthly grocery signup invitation.

Required Fixes:

  • Add If Grocery Interest ≠ Yes → EXIT guard
  • Add global kill-switch guard
  • Add month-based guard to prevent duplicate sends
  • Lock re-entry to prevent mid-cycle re-sends
GROC-WF-03 Signup Form Submitted 3 issues
Missing Kill-Switch
Tag-Based Trigger
Re-Entry Not Locked

Current State: Processes monthly signup form submission.

Required Fixes:

  • Replace tag trigger with form submission event
  • Add global kill-switch guard
  • Set Grocery Signup Status = Signed Up
  • Lock re-entry to prevent duplicate processing
GROC-WF-04 Signup Cutoff & Lock 4 issues
Missing Kill-Switch
Cutoff Enforcement Gap
Tag-Based State
Timestamp Validation

Current State: Critical cutoff workflow that locks signup list.

Required Fixes:

  • Add global kill-switch guard
  • Enforce Signup Timestamp ≤ Cutoff Time guard
  • Replace groc:locked:this-month tag with field state
  • Verify only contacts with Grocery Signup Status = Signed Up proceed
  • Prevent late signups from bypassing lock
GROC-WF-06 Closeout / Fulfillment 4 issues
Missing Kill-Switch
Tag Cleanup Required
Reset Logic
Month Overlap Prevention

Current State: Completes monthly cycle and resets for next month.

Required Fixes:

  • Add global kill-switch guard
  • Verify removes ALL grocery cycle tags properly
  • Ensure Grocery Signup Status = Not Signed Up reset
  • Keep Grocery Interest = Yes for next month
  • Verify clean state for next cycle eligibility
🙋

Volunteer Automation

5 workflows
WF-VOL-01 Volunteer Interest Submitted 3 issues
Missing Kill-Switch
Tag-Based Lifecycle
Re-Entry Not Locked

Current State: Initial volunteer interest form submission.

Required Fixes:

  • Add global kill-switch guard
  • Remove lifecycle tags: volunteer:needs-screening, volunteer:submitted
  • Replace with field: Volunteer Status = Interest Submitted
  • Lock re-entry to prevent duplicate processing
WF-VOL-02 Orientation Invite 5 issues
Missing Kill-Switch
Missing Anti-Dup Guard
Wrong Trigger Type
Re-Entry Not Locked
Tag-Based Logic

Current State: Sends orientation invitation but can duplicate.

Required Fixes:

  • Replace trigger: use Volunteer Status = Orientation Needed instead of tags/pipeline
  • Add If Orientation Attendance ≠ Not Invited → EXIT guard
  • Add global kill-switch guard
  • Lock re-entry OFF to prevent duplicate invites
  • Set Orientation Attendance = Invited after send
WF-VOL-03 Orientation Reminders 3 issues
Missing Kill-Switch
Missing Completion Guard
Re-Entry Not Locked

Current State: Sends orientation reminders but may continue after completion.

Required Fixes:

  • Add If Volunteer Status = Orientation Completed → EXIT guard
  • Add If Orientation Attendance ≠ Invited → EXIT guard
  • Add global kill-switch guard
  • Lock re-entry to prevent duplicate reminder sequences
WF-VOL-04 Orientation No-Show 3 issues
Missing Kill-Switch
Auto-Reinvite Risk
Re-Entry Not Locked

Current State: Handles no-show scenario but must NOT auto-reinvite.

Required Fixes:

  • Add global kill-switch guard
  • Verify does NOT trigger WF-VOL-02 (no auto-reinvite)
  • Lock re-entry to prevent duplicate no-show processing
  • Manual reset required: staff sets Volunteer Status = Orientation Needed
WF-VOL-05 Mark Volunteer Active 3 issues
Missing Kill-Switch
Tag-Based Lifecycle
Wrong Trigger

Current State: Marks volunteer as active after orientation completion.

Required Fixes:

  • Remove instruction for staff to add volunteer:active tag
  • Replace trigger with Orientation Attendance = Completed
  • Add global kill-switch guard
  • Set Volunteer Status = Active Volunteer
  • Send welcome email with QR codes and waiver link

Why This Works

I've Hardened Similar Systems Before

The issues you're experiencing are textbook symptoms of scale without enforcement:

All systematically solvable.

Your Architecture is Already Good

The documented workflows show clear state management design, properly defined human gates, planned field-driven logic, and considered service isolation.

The rules exist. They just need enforcement.

Ready to Stabilize Your System?

Let's eliminate the misfires and lock down your governance layer. Your architecture is sound—now let's make it bulletproof.