SilverGuard Family goes first because it carries the least risk. SilverGuard Senior ships as a thin consent and SOS app. The SGOS device agent waits until the named security owner and tested failsafe exist.
These are wireframe previews rendered in the browser, not store builds. They set the interaction bar for the Flutter implementation.
Caregiver facing. Alerts, case status, Trusted Circle, one tap to a human advocate.
Good morning, Margaret.
You are protected.
We are watching for scam calls and texts. You do not need to do anything.
One tap reaches a real person. No device lock, no automatic actions.
Large type, plain language, phone support fallback. No background monitoring in the pilot.
Auth and onboarding
Invite code entry tied to the web closed beta, then biometric unlock.
Alert inbox
Native push with reason codes and next steps, tap through to case detail.
Trusted Circle
Up to five members, per member notification preferences.
Case status
Read only advocate review state, same source as the web app.
Quick contact
One tap to the assigned advocate or to the senior.
Android SGOS agent
Device Admin enrollment, remote lock, remote access app kill list.
iOS SGOS agent
MDM profile or Guided Access fallback, App Review risk validated first.
BLE pendant
Core Bluetooth pairing and background presence.
Signed rules
Client refuses unsigned rule distribution, no exceptions.
Gate, not a date. Phase 2 starts when the named security owner and tested life safety failsafe exist, because a compromised signing key must never lock every enrolled device.
Phase 1 review
Android: Standard consumer review, no Device Admin requested
iOS: Standard consumer review
Phase 2 review
Android: Additional Play policy review for Device Admin, confirm current policy
iOS: High scrutiny, likely enterprise distribution track
Privacy disclosure
Android: Data safety form matches real telemetry
iOS: App Privacy label matches real SDK behavior
Beta channel
Android: Play internal or closed testing, cohort matched
iOS: TestFlight, same cohort mapping
Security owner
Named owner and tested failsafe, the same blocker as the Draper pilot.
Apple path
MDM or enterprise distribution validated before Phase 2 iOS is scoped.
iOS signing
Confirm whether Replit covers signing end to end or needs a bridge service.