How a call is designed to flow
The backend steps (6) are built and tested. The conversation steps (1–5) are designed and configured but haven’t run on a live voice platform yet.
- The assistant answers, says it is automated, and says the call is recorded.
- It asks what’s going on and lets the caller explain in their own words.
- It screens for hazards early: gas smell, fire or smoke, fuel or water release, pressure concerns, injuries.
- If there’s a hazard, it stops asking technical questions, tells the caller to get clear and call 911 (and the gas utility for gas), takes a callback number and address, and transfers to the on-call technician.
- Otherwise it collects the site, equipment, fault, backup status, and impact, reads a short summary back for the caller to correct, and either transfers or tells the caller a technician will call back.
- After hang-up, the backend assigns a priority by rule, writes the work order, alerts the on-call phone, and logs the call.
Safety design
- Priority is decided by rules, not by the language model. The model fills in a structured form. Deterministic code in the backend decides P1 safety, P1 emergency, P2 urgent, P3 routine, or P4 non-service. The rules are tested and auditable.
- A second check reads the caller’s own words. If the caller mentions a hazard the model didn’t record, the backend escalates the call and flags it for review. This check can only raise priority, never lower it.
- Hazards have three states: reported, denied, or not asked. The work order never says “no gas smell” when nobody asked.
- A failed transfer is never silent. When the call record shows a transfer that didn’t connect, the backend sends a “call now” alert to the on-call tech and a backup. This is tested on simulated calls and will be verified on live calls.
- No repair advice. The assistant won’t diagnose, give reset instructions, say equipment is safe, or promise arrival times or prices.
- Disclosure at the start of every call that the assistant is automated and the call is recorded. This is designed with California’s all-party recording consent law in mind and will get a compliance review before any live use.
Architecture
The voice platform handles the real-time parts: speech recognition, the model, speech synthesis, the phone line, and the warm transfer. Everything that defines the business logic is in our own code: the conversation instructions, the call schema, the triage rules, the work order, notifications, and records. It’s designed so that moving to a different voice platform means rewriting one adapter file.
What exists today
- Conversation design with the safety branch, a 30-field call schema, and the voice-platform configuration kept in version control.
- A backend with no third-party dependencies, covering adapter, triage, hazard backstop, work order, notifications, and storage.
- Seven simulated calls and 13 automated tests. Every scenario lands on its expected priority.
What comes next
Live test calls through the voice platform, then end-to-end alerts to a phone, then a test phone number with a real warm transfer. Recorded test calls will be added here as they happen.