The MN24 Hub:
Secure Operations, Onboarding & Learning Platform
A consolidated status briefing on the Mobile Network 24 internal Hub — covering Phase 1 platform delivery, the Phase 2 Learning Management System (LMS) engine and the now-live Bloodborne Pathogens course (introduction video + decision-first interactive modules), validated quality-assurance results, security posture, and the proposed Phase 3 rollout roadmap.
Executive Summary
Where the MN24 Hub stands today and what this packet covers.
The MN24 Hub is the secure internal operating platform for Mobile Network 24 — unifying personnel management, onboarding & lifecycle management, compliance documentation, partner logistics, and workforce training under a single, access-controlled environment with a full audit trail.
Phase 1 delivered the foundational platform (personnel registry, document library, partner directory, onboarding engine, access governance, audit trail, and an encrypted, role-based architecture). Phase 2 delivered a full, reusable Learning Management System engine — and the first production compliance course, Bloodborne Pathogens & Exposure Response, is now built, published, and assignable end-to-end: an MN24-specific introduction video, five decision-first interactive scenarios, the MN24 Exposure Control process, a 10-question final quiz, and a signed attestation. Initial staff have already been assigned and are receiving automated reminder emails.
Phase 1 — Foundation Platform
Personnel, documents, partners, onboarding, access governance, and the audit layer.
| Capability | What it does | Status |
|---|---|---|
| Hub Shell & Auth | Authenticated internal platform on Base44 standard auth (separate from Microsoft 365), responsive desktop + mobile | Live |
| Personnel Registry | Canonical personnel records distinct from auth User accounts, linked via confirmed admin link | Live |
| Organization Entities | Canonical Department, Location, and JobTitle records for consistent org structure | Live |
| Document Library | Categorized policy/procedure/form library with search, partner-scoped visibility, acknowledgment tracking | Live |
| Partner Directory | Partner organizations, facilities, contacts, and facility-specific access instructions | Live |
| Onboarding & Lifecycle Engine | LifecycleCase engine for onboarding/offboarding with templated task generation | Live |
| Workforce Access Governance | AppAssignment governs who has access to which operational apps, with approval lifecycle | Live |
| Audit Trail | Immutable AuditEvent logging for all sensitive activity (personnel, access, compliance) | Live |
| Compliance Dashboards | Personnel compliance status, document expirations, pending onboarding | Live |
| Weekly Admin Wrap-Up | Automated Friday 5pm ET summary email to administrators | Live |
Phase 2 — Learning Management System
A reusable, course-agnostic LMS engine — and the first production compliance course.
Phase 2 delivered a complete LMS engine designed to support any future compliance, safety, or security course. The framework is fully reusable: a new course is configured, never re-coded.
Engine capabilities
Course structure
Lessons (text, image, video, interactive scenarios, knowledge checkpoints, attestations), versioned courses, and workplace-specific configuration fields for OSHA-style compliance.
Quiz engine
Passing score thresholds, multiple attempts, randomized questions/answers, and immutable, append-only attempt history for full compliance traceability.
Certification
Auto-generated certificates with human-readable IDs, scores, and expiration dates — retained in the employee compliance record, printable.
Multi-scope assignment
Assign by Individual, Role, Department, Location, Group, or All — via custom backend expansion (EmployeeGroup + GroupMember).
Automated renewals
Server-side cycle engine detects expirations and auto-creates the next renewal assignment while preserving all historical records.
Reminder cadence
Reusable 14 / 7 / 1 day-before-due reminders, plus overdue and renewal-stage notifications, through a scheduled workflow.
Manager visibility
Server-authorized getTrainingView function gives managers a scoped view of only their direct reports' compliance.
OSHA workplace config
Exposure Control fields validated server-side before a compliance course can be published — no missing safety contact or exposure plan ships.
First production course — Bloodborne Pathogens & Exposure Response
The Bloodborne Pathogens course is now built, published, and assignable end-to-end. It opens with an MN24-specific introduction video, then leads employees through five decision-first interactive scenarios — the correct response workflow is never revealed until the employee commits to a decision — followed by a PPE selector, the MN24 Exposure Control process, a 10-question final quiz, and a signed attestation. Administrators can assign it by Individual, Role, Department, Location, Group, or the whole organization, and initial staff are already assigned and receiving automated reminder emails.
- 11 lessons — content, interactive scenarios, two MN24 workplace scenarios, knowledge checkpoint, MN24 Exposure Control process, 10-question final quiz, and employee attestation.
- 7 MN24 workplace-specific configuration fields populated (safety contact, exposure reporting method, Exposure Control Plan link, PPE/spill-kit locations, authorized cleanup personnel, post-exposure medical provider, knowledgeable-person training contact).
- Annual renewal (12 months, 7-day grace) with reusable reminder cadence.
Sample completion certificate
Training Visibility — Manager & Org-Wide
Server-authorized, scoped to direct reports — plus an organization-wide readiness view for administrators.
The My Team Training dashboard gives every manager a live, secure view of their direct reports' training status — without exposing any other employee's data. Access is verified server-side via the getTrainingView function, which enforces the manager hierarchy before returning data. Administrators additionally get an LMS Compliance Dashboard for organization-wide readiness, and an LMS Admin console where the Bloodborne Pathogens course is published and fully configured (7/7 MN24 workplace fields populated).
Quality-Assurance Validation
Full end-to-end test of the LMS lifecycle, executed and verified this session.
| Test | Result | Note |
|---|---|---|
| Course publish (with workplace-config validation) | Passed | Status → Published |
| Individual assignment | Passed | Assignment record created |
| Group-scope assignment | Passed | Group expanded to individual records |
| Quiz fail → pass (attempt integrity) | Passed | Both attempts retained, immutable |
| Completion + certificate | Passed | Cert ID generated, expiry 2027-08-11 |
| LMS reminder — assigned stage | Passed | 1 reminder sent by schedule |
| Manager training view (getTrainingView) | Passed | Returns scoped direct-report data |
| Renewal cycle auto-creation | Passed | Fresh Overdue cycle 2 created on expiry |
Security & Compliance Architecture
Defense in depth — every data domain is access-controlled by design.
Row-Level Security (RLS)
Every entity enforces who can read, create, update, or delete — by role and by record ownership. No data is accessible by default.
Service-role privileged ops
Sensitive workflows (completion, certificate generation, renewal creation, manager views) run with elevated service-role authorization, never as the requesting user.
Immutable compliance history
Quiz attempts, certificates, and audit events can never be edited or deleted — full traceability for audits and litigation defensibility.
Partner-scoped visibility
Partner users see only their own partner's documents and instructions; internal staff see internal content; admins see everything.Self-service within limits
Employees update only their own tasks/assignments (via assignee_user_id), but never other employees' — enforced server-side.
Manager hierarchy verification
Hierarchy validated before any manager-scoped data is returned — no horizontal privilege escalation.
Workplace config enforcement
OSHA-style compliance courses cannot be published until all MN24 workplace-specific fields are populated.
Audit trail
Every sensitive action — personnel edits, access grants/revocations, policy publish, evidence export — is logged immutably with actor, reason, and timestamp.
Appendix — Platform Inventory
The data domains and backend services that power the Hub.
Data domains (30 entities)
| Domain | Entities |
|---|---|
| Personnel & Org | Personnel, Department, Location, JobTitle |
| Documents | Document, DocumentVersion, PolicyAcknowledgment |
| Partners | PartnerOrganization, PartnerFacility, PartnerContact, FacilityInstruction |
| Onboarding & Lifecycle | LifecycleCase, PersonnelOnboarding, PersonnelOffboarding, OnboardingTemplate, OnboardingTaskTemplate, OffboardingTemplate, PersonnelTask |
| Access Governance | AppAssignment, AuditEvent |
| LMS | Course, CourseLesson, CourseAssignment, Quiz, QuizQuestion, QuizAttempt, CompletionRecord, Certificate, EmployeeGroup, GroupMember |
Backend functions in production
| Function | Purpose |
|---|---|
| publishCourse | Publish a course (validates workplace config first) |
| assignCourse | Multi-scope assignment (Individual → All, incl. Group expansion) |
| submitQuiz | Grade a quiz attempt, record immutable history |
| completeCourse | Finalize completion, attestation, certificate |
| refreshTrainingStatuses | Overdue detection + automatic renewal-cycle creation |
| getTrainingView | Server-authorized, manager-scoped training visibility |
| processLmsReminders | Reusable 14/7/1 + overdue + renewal reminder cadence |
| validateManagerHierarchy | Confirms a manager's authority over a target employee |
| weeklyAdminWrapup | Friday 5pm ET admin summary email |
This packet is a structural and status summary. No live personal data is included. For detailed metrics, audit exports, or a live walkthrough, contact the Platform Team.
Generated August 12, 2026 · Prepared for the Executive Board