Proactive accessibility assurance for physical entrances.
OpenWay uses configured, camera-observable Ring evidence to detect physical entrance interruptions, coordinate accountable remediation, and deterministically verify restoration using fresh evidence.
Core Architectural Invariant
“Detected is not resolved. Resolved is not verified until fresh evidence proves the physical condition changed.”
Staff cannot declare restoration. AI cannot assert green without fresh camera proof. Unproven states fail closed to UNKNOWN.
Ring Doorbell Motion
Camera-observable events
Preemptive Dispatch
Staff alerted before visitors arrive
Locked in RECHECKING
Staff claims cannot declare green
9-Point Pure Gate
Fresh evidence proves restored
The Operational Gap
Why physical accessibility fails, and why conventional systems cannot fix it.
Accessibility compliance is not a static building checklist; it is an active physical operational condition. Delivery drivers drop pallets on ramps, automatic door buttons fail, and work orders get prematurely closed. OpenWay solves the systemic flaws in reactive management.
Venues discover access barriers only when a visitor in a wheelchair arrives and cannot enter. By then, dignity is broken and attendance is delayed.
Ring motion events at configured entrances trigger immediate analysis. When delivery packages or debris block a ramp, OpenWay alerts staff minutes before patrons arrive.
Facility tickets are routinely marked “Done” from a breakroom or without inspecting the physical ramp. Incomplete cleanups leave hazards in place.
Staff completion only moves the entrance to RECHECKING. Access is never restored until fresh Ring camera evidence proves the physical impediment is gone.
Generative models guess, smooth over ambiguity, and hallucinate success. In safety contexts, a false green is dangerous.
AI never declares state. A pure, deterministic state machine tests temporal freshness, camera binding, and absence of contradiction. All failure modes fail closed to UNKNOWN.
Traditional video analytics record patron identities, run facial recognition, or profile mobility status, violating visitor dignity.
OpenWay inspects physical ramps and doorways—never people. Zero facial recognition, zero demographic inference, and ephemeral in-memory processing with zero media storage on S3.
The Closed-Loop Assurance Cycle
How OpenWay verifies access, step by deterministic step.
Every state transition in OpenWay is governed by a pure deterministic state machine and an immutable 9-point gatekeeper. Here is how an access barrier moves from initial camera detection to verified restoration.
Event-Driven Detection
Ring Motion & Ding Evidence
- •Hardware event from Ring Doorbell or Spotlight Cam triggers webhook.
- •Webhook verified using HMAC-SHA256 with timing-safe comparison.
- •Entrance-bound camera captures image snapshot in volatile memory.
- •Vision analysis evaluates configured entrance criteria (ramp pathway, obstruction, door clearance).
State transitions to ACTION_REQUIRED. Preemptive alert dispatched before visitors arrive.
Accountable Remediation
Staff Dispatch & Tracking
- •OpenWay generates an accountable remediation task with deterministic ID.
- •Staff receives task details: entrance ID, bound camera component, and physical impediment.
- •Optional Voice-Assisted Remediation mode provides speech readout directly on staff devices.
- •Staff member acknowledges task and proceeds to physical location.
Voice assistance is presentation-only and cannot authorize state transitions or bypass policy.
Remediation Reported
The Safety Barrier (Locked in RECHECKING)
- •Staff physically clears the obstacle and reports completion with timestamp completedAt.
- •Core Invariant Barrier: System refuses to declare restoration.
- •Entrance state locks into RECHECKING.
- •System issues an immediate bounded recheck request for fresh camera evidence.
“Detected ≠ resolved. Resolved ≠ verified.” Staff completion is treated as a claim, not proof.
Deterministic Verification
9-Point Pure Gatekeeper Evaluation
- •Fresh Ring snapshot captured with timestamp capturedAt ≥ completedAt.
- •Gatekeeper verifies camera binding (deviceId, componentId) and venue matching.
- •Evaluates temporal freshness and tests for absence of contradiction.
- •Confirms all configured accessibility requirements are explicitly satisfied.
If all 9 pass: VERIFIED_RESTORED. If missing, stale, or contradicted: fails closed to UNKNOWN.
The 9 Mandatory Verification Conditions
src/policy/restorationGatekeeper.tsEntrance must be currently locked in RECHECKING.
Remediation task exists and has status COMPLETED.
Evidence capture timestamp strictly follows remediation: capturedAt ≥ completedAt.
Evidence belongs to the exact entrance and tenant venue being evaluated.
Hardware device ID and video component match the entrance configuration.
Evidence captured within the configured freshness window (default: 300s).
Configured accessibility rules explicitly satisfied (pathway clear, obstruction free).
No conflicting or contradictory observations exist in the verification window.
Evidence provenance is valid and honest (simulated vs live credentials never conflated).
Single-Screen Assurance Workbench
Interactive Walkthrough: Five phases of the assurance console.
Direct captures from the deployed OpenWay single-screen console showing how the operator workbench presents each phase of the workflow with explicit simulated-local evidence provenance.
Unedited screenshot of single-screen Assurance Workbench (OperatorDashboard.tsx) in production with simulated local evidence.
Baseline Access Available & Configured Requirements Satisfied
The single-screen Assurance Workbench displays the Side Accessible Entrance with verified baseline conditions. The compact service-status strip confirms the deterministic simulator, simulated vision fallback (Bedrock unavailable), and DynamoDB persistence. All configured entrance criteria (clear pathway, absent obstruction, operational power-assist door) are green.
Under the Hood: Deterministic Enforcement
Left Evidence Panel: Camera snapshot captured, freshness FRESH, bound to Front Ramp Camera (SIMULATED_LOCAL).
Baseline Verified: Pathway Clear, Obstruction Absent, Door Ready confirmed by deterministic gatekeeper.
Maintains continuous, verified physical entrance accessibility before any patron in a wheelchair arrives.
System Blueprint
Engineered for trust: Five layers of defense and verification.
OpenWay is not a wrapper around an LLM. It is an event-driven, production-grade assurance system built with AWS infrastructure, cryptographic Ring event verification, and pure deterministic state guarantees.
Ring Webhook & Event Telemetry
RING INTEGRATIONCaptures motion and doorbell ding events directly from bound Ring hardware components.
- ▸HMAC-SHA256 signature validation with crypto.timingSafeEqual against timing attacks.
- ▸Webhook idempotency ledger rejects duplicate or replayed delivery attempts.
- ▸Cryptographic SHA-256 evidence hashing for verifiable provenance.
Amazon Bedrock (Nova Lite) & Ephemeral Buffers
AWS BEDROCKInspects physical accessibility requirements (pathway clearance, ramps, automated doors).
- ▸Ephemeral in-memory buffers: raw frames discarded immediately after inference; zero S3 storage.
- ▸Strict Privacy Charter: model schema structurally excludes facial recognition or identity tracking.
- ▸Transient pedestrians trigger UNKNOWN for obscured views—never false obstruction.
Pure Deterministic Policy & Finite State Machine
DETERMINISTIC COREEnforces the core product invariant across all state transitions and remediation cycles.
- ▸9-point restoration gatekeeper evaluates temporal ordering (capturedAt ≥ completedAt).
- ▸Camera component binding check ensures evidence matches the configured entrance.
- ▸Fail-Closed: all ambiguity, timeout, or model unavailability defaults to UNKNOWN.
Amazon DynamoDB (Single-Table Design)
AWS DYNAMODBHigh-throughput serverless persistence for entrance states, evidence logs, and audit records.
- ▸Multi-tenant isolation using partitioned keys (VENUE#<venueId>).
- ▸Optimistic concurrency control via ConditionExpression on version attributes.
- ▸Complete append-only audit trail for operational accountability.
Next.js 14 & Client Web Speech API
AMPLIFY SSRInteractive operator console with real-time state cards and accessible speech synthesis.
- ▸Voice assistance is presentation-only and strictly executed on the client browser.
- ▸Speech cannot authorize state changes, complete tickets, or bypass policy checks.
- ▸Responsive accessibility compliance adhering to WCAG 2.1 AA standards.
Passing Automated Tests
Across 38 test suites (verified October 2026)Gatekeeper Checkpoints
Pure deterministic logicS3 Media Storage
Ephemeral in-memory buffersFail-Closed Invariant
Unverified defaults to UNKNOWNIntegrity & Disclosure
Privacy by construction, and honest platform transparency.
We believe assurance systems must be held to higher standards of honesty than ordinary software. OpenWay enforces a strict privacy charter and openly discloses the exact verified status of every runtime component.
“OpenWay analyzes the physical environment, not people’s identities.”
Accessibility assurance requires observing configured physical conditions—such as wheelchair ramps, automatic entrance push buttons, and curb pathways. It never requires identifying, profiling, or tracking individuals.
System code contains no face detection, facial landmarks, or biometric extraction.
Evaluates entrance geometry only. Never categorizes medical or mobility traits of people.
Image bytes processed strictly in server RAM and discarded immediately. Zero S3 media storage.
Vision JSON schema structurally restricts outputs to physical entrance properties.
Event-driven Ring motion captures only. No 24/7 video streams or background recording.
A passing pedestrian obscuring a ramp causes safe UNKNOWN—never an obstruction alert.
Truthful Runtime Component Status (AWS Account 241638332840)
Per strict hackathon rules, we do not fabricate live inference results or claim untested capabilities.
Deployed console runs the full detect → remediate → recheck → verify workflow using simulated Ring events and simulated vision observations.
Production /api/health reports storage provider dynamo, status CONNECTED.
A real image request through the deployed /api/vision/analyze path (amazon.nova-lite-v1:0, us-east-1) returned “Error 002: Access to Bedrock models is not allowed for this account”. OpenWay failed closed to UNKNOWN, using simulated vision in demo.
UNKNOWN. The deterministic gatekeeper refuses to mark the entrance green, proving the system defends against unverified AI inputs.OpenWay has verified authenticated integration with the official Ring Developer Playground, including device discovery, status, capabilities, event history and WebRTC live-video playback. Its accessibility-restoration demonstration uses separately labelled simulated visual evidence.
OpenWay verifies explicitly configured, camera-observable entrance conditions (such as unobstructed ramp pathways, clear door swings, and operational automatic buttons). OpenWay does not certify general building-code compliance or full legal Americans with Disabilities Act (ADA) architectural compliance.
Test the Assurance Workbench in real time.
The deployed OpenWay console features a deterministic scenario runner. You can step through the entire assurance lifecycle or attempt adversarial bypasses with one click.