# STAFF / SHIFT Personalization Mapping Crosswalk

## Contract

This crosswalk translates reviewed Discover Packet and derived Soul results into a proposed `NAIO-STAFF-MISSION-PROFILE-1`. It is deterministic where possible and human-decided where meaning, role, authority, risk, or identity is involved. It never infers institutional authorization.

Target identity: `staff-nurse-life-practice-mission-control` · lane `staff_nurse_life_practice` · route `/staff-nurses/dashboard` · namespace `snqi_shift.*` · home **My SHIFT Mission Control**.

The source packet provides 20 numbered powers, 18 numbered workflows, and 25 numbered templates without the build-layer machine prefixes used here. `SHIFT-PWR-*`, `SHIFT-WF-*`, `SHIFT-TPL-*`, and `SHIFT-AGT-*` are local implementation IDs and must retain an immutable name/number crosswalk to source.

## Mapping rules

| Rule | Target field | Preferred source | Transformation | Required owner decision | Forbidden inference |
|---|---|---|---|---|---|
| `MAP-STAFF-IDENTITY` | `/display_name` | Discover identity | Direct copy after length and control-character validation | Approve, edit, or keep local label | Legal identity, credential, employer identity |
| `MAP-STAFF-MISSION` | `/mission_statement` | Soul mission candidate, then Discover | Present alternatives; never silently blend | Choose or write in own words | Commitment, fitness, calling, future success |
| `MAP-STAFF-VALUES` | `/core_values` | Soul derived values and Discover values | Union only for preview; preserve provenance | Select and order | Personality, morality, attitude, team fit |
| `MAP-STAFF-PRIORITIES` | `/current_priorities` | Discover priorities | Copy as proposed; cap attention items | Confirm and rank | Urgency, employer priority, clinical importance |
| `MAP-STAFF-GROWTH` | `/strengths_and_growth` | Discover and Soul | Show separately if descriptions differ | Confirm, edit, or reject each | Competence, performance, diagnosis, deficit label |
| `MAP-STAFF-SITUATION` | `/situation_context` | Discover current season plus first run | Translate known situation enums; one active context | Select active workspace and context per mission | Unit, assignment, patient state, protected time |
| `MAP-STAFF-GOALS` | `/goals` | Discover goals then Soul goals | Group by horizon without predicting outcome | Adopt, revise, or remove | Promotion, credential, quality outcome, financial result |
| `MAP-STAFF-PREFERENCES` | `/working_preferences` | Soul derived style and Discover preferences | Direct candidate with conflict notice | Confirm or edit | Cognitive ability, fixed learning style, health need |
| `MAP-STAFF-WORKSPACES` | `/role_workspaces` | Discover candidates | Map only to the five closed workspace types | Choose exactly one Primary; enable none | Employment, scope, charter, authority, data rights |
| `MAP-STAFF-AUTHORITY` | `/authority_context` | First-run owner entry plus external human receipt | Unknown until current human/source verification | Name deployment context and human routes | Scope, policy, QI/research status, approval or permission |
| `MAP-STAFF-RUNTIME-BIND` | `/institutional_runtime_bind_required` | Immutable runtime trust shield | Fixed `true`; the profile remains a non-authoritative candidate and never opens an institutional workspace | Acknowledge; no waiver | Authority, data access, workspace activation, or receipt validity from profile content |
| `MAP-STAFF-BOUNDARIES` | `/practice_quality_boundaries` | Immutable trust shield | Fixed safe minimum; institutional controls may narrow | Acknowledge | Waiver based on preference or convenience |
| `MAP-STAFF-AI` | `/ai_preferences` | Soul boundary preferences | Map only within system ceiling; force P0/off defaults | Approve lower-risk preference | Model/tool availability, competence, safe autonomy |
| `MAP-STAFF-MEMORY` | `/memory_preferences` | First run | Default Off/session-only; category-specific proposal | Separate explicit consent | Consent from general profile approval |
| `MAP-STAFF-GOVERNANCE` | `/governance_preferences` | Soul preference plus deployment controls | Personal preference may narrow, never weaken institutional rules | Choose conservative option | Institutional approval or legal sufficiency |
| `MAP-STAFF-ASSETS` | `/recommended_assets` | Discover goals, context, and source crosswalk | Produce recommendation IDs only | Review recommendation; activation is separate | Enabled power, workflow, agent, tool, memory, connector or action |
| `MAP-STAFF-PRESENTATION` | `/presentation_preferences` | Soul/Discover | Map visual/tone tokens | Confirm | Accessibility need from behavior |
| `MAP-STAFF-ACCESSIBILITY` | `/accessibility_preferences` | Explicit Discover/first-run choice | Direct copy | Confirm and change anytime | Disability, diagnosis, accommodation eligibility |
| `MAP-STAFF-UNCERTAINTIES` | `/uncertainties` | Merge engine | Preserve unresolved conflicts and missing authority | Resolve or leave Unknown | False certainty |

## Workspace mapping

| Source signal | Candidate workspace | Allowed starting mode | Additional gate |
|---|---|---|---|
| Generic practice learning, abstract screened reflection, speak-up rehearsal | Practice | Private Personal Mode | No live care, patient/event/coworker/rare-combination or reconstructable narrative, documentation, scope or competence decision |
| Systems issue, PDSA, measures, huddle, process map | Quality Improvement | Synthetic Preview | Institutional work requires a separate approved workspace, sponsor/charter, human determination, data steward/privacy owner, change authority, and an exact separately approved aggregate created outside SHIFT; reject row/person/event/narrative data even when called deidentified |
| Learning, credential exploration, portfolio, mentorship, career | Professional Growth | Private Personal Mode | Truthful evidence and current authoritative sources; no submission |
| Schedule, recovery, relationships, high-level finances, capacity | Life / Recovery | Private Personal Mode | Private store only; no institution export; no health/fitness diagnosis |
| Service, committee, shared governance, community or leadership | Community / Leadership | Private exploration or Synthetic Preview | Consent, real authority, appropriate review and separate action approval |

## Asset recommendation rules

- Use only `SHIFT-PWR-01`–`20`, `SHIFT-WF-01`–`18`, `SHIFT-TPL-01`–`25`, `SHIFT-AGT-01`–`10` as build-layer IDs.
- Persist source number, exact source title, source file and source hash beside every build-layer ID.
- Set every power/workflow recommendation to inactive. Set every agent to `PERM-P0 Disabled`; `tool_ids` remains empty.
- A goal-to-asset match is a suggestion, not a claim that the asset exists, is connected, is safe, or is appropriate for institutional use.
- Do not recommend institutional-QI assets as operational unless the mission is already bound to a separately approved quality workspace. Before that point, recommend only synthetic preview.
- Do not award capability evidence for an imported preference, synthetic starter, click, preview, or unreviewed AI artifact.

## Conflict handling

1. Stop automatic merge for identity, authority, risk, privacy, memory, workspace, or external-use conflicts.
2. Show both values, source paths, timestamps, mapping rule, and effect of each choice.
3. Offer **Choose Discover**, **Choose Soul**, **Edit**, **Leave Unknown**, or **Reject both**.
4. Record the owner decision as `resolved_conflict`; do not overwrite source records.
5. Any change to role, employer, deployment mode, active context, data class, audience, destination, project, policy version, or authorization invalidates affected recommendations and returns them to Preview/P0.

## Approval groups

At minimum, first run separately reviews identity/mission, values/priorities, strengths/growth, goals/preferences, workspaces, active context, authority, practice/QI boundaries, AI, memory, governance, recommendations, presentation/accessibility, and uncertainties. A single “Accept all” action must not approve authority, memory, agents, tools, quality workspace binding, or external use.
