The first four are the idea. What should it do, and for whom, reflected back so the
first guess has something to be wrong about. Who will use it and how they get in,
which decides how hard it must defend itself and the support load, and where holding
passwords can be avoided. What it has to live alongside: the spreadsheets, the
software already paid for and its data, and the rules the business already works
under, which decide what is inherited, what must keep working meanwhile, and who else
gets a say. And whether anyone has tried to build this before and what happened to
it, because whatever stopped the last one is usually still there, and can be designed
around once it is named.
The second four are care, and they changed shape twice on the day this was written.
They began as James's domains from the first message, health and money, with personal
information and where the people are, on the principle that these add care, not
impossibility. By mid-morning James had seen that health and money were one question
asked narrowly, and had the group recentred on it so that the set works for any
industry: does yours, or this idea, have a regulator, where you are or anywhere it
will be used? Only the general law; a code nobody inspects; a regulator who can ask
for records, inspect or fine; a licence before it can be used at all. The slot the
merge freed asks the thing the two domains were really measuring: if it got something
wrong, what is the worst that happens to someone, from an inconvenience, through their
money or a lot of their time, to their job, home, rights or health, to their safety.
Then the kinds of personal data, which decide the privacy work, a job that recurs
rather than a feature that ships, and the country, which decides which law applies
and where the data may live. The brief sums these as a care tier from nought to
three, defined by what each adds to the build: nothing beyond good practice; a
privacy notice, retention and deletion on time; an audit trail and a record of who
looked; a formal assessment and a regulator who can ask for it.
The third four are the conditions it runs in. The busiest day and whether it must
feel instant, because above a few thousand people, or instant, the machines are
always on and designed in from the start, and below that the simple build is the
right build; "it could go viral" makes the first month slower and the tests harder.
What breaks if it is down for a day, and who would notice first and who they would
ring, which decides the uptime tier and names who is on call today whether they know
it or not. Where people will use it, since an app in a store adds a review cycle to
every change and poor signal means working offline. And what it must talk to, because
each connection is a risk and a running cost: the other side changes without asking,
and somebody has to notice.
The fourth four are the shape. Whether a model does part of the work inside it, to
draft or to judge, and whether a person must check its output before it counts; that
is Abrar's point in disguise, because if a person must check the lot, the screen
where they do it is the product. The models change under you, and what was tested in
March is not what runs in June. How often it will change after launch, with the note
that set and forget still changes, because what it depends on moves. What must never
happen, the worst one, which is the first guard built and the first thing checked
again once it is live. And what they are comfortable paying each month, machines and
people together, because the machines are usually the cheap part; the attention is
what costs, and the question is whose.
The last four are owning it. Twelve months after launch, how will you know it was
worth it, which decides what is measured from day one and whether this is a thing
that gets finished or a thing that gets kept. What you can spend to get the first
version live, and when you need it, because the first version is the smallest thing
that starts to prove the twelve-month answer, and the money and the date say how
small. Who signs it off and whose name is next to it once it is live: not who built
it, but who says it is done, who gets the call when it stops, and who decides when it
changes. Nobody is the commonest answer, and the most expensive. And who in the
business could, today, restore a backup, read an error message, renew a certificate
or tell a supplier what has gone wrong, which decides what the running needs from
outside.