Operating System for Municipalities and their Taxpayers to upload photographs to a portal app, that analyzes the image metadata and the image for local building codes and verifies date/time/location of photo for keeping buildings up to code or use for other readings/inputs.
This specification defines the governance requirements for InspectorOS Accessibility Score generation and use. The Accessibility Score is a decision-support metric and must not be used as the sole basis for permit denial, occupancy action, or enforcement.
This spec applies to:
- Accessibility score computation (
accessibility_score, 0-100) - Score components and weighting profiles
- Evidence and explainability requirements
- Human review gating and overrides
- Fairness, drift, and quality monitoring
- Public visibility controls
- Appeals and correction workflow
This spec does not replace local legal requirements; municipalities remain the authority.
The scoring framework must map findings to jurisdictional rules including:
- ADA 2010 Standards (or adopted equivalent)
- IBC/IFC accessibility-relevant sections where locally adopted
- Local municipal accessibility amendments
Each score component must reference at least one citation in active CodePack metadata.
ScoreCard.accessibility_score is an integer from 0 to 100 with:
confidence(0.0-1.0)weighted_componentsexplainability.evidence_refsexplainability.code_citations
Accessibility score is derived from:
- Barrier findings by severity (
high,medium,low) - Positive accessibility features present
- Jurisdiction-selected weighting profile
- Mandatory review conditions
Baseline policy:
- Start from 100
- Subtract severity-weighted barrier penalties
- Add limited positive-feature bonus
- Clamp final score to
[0, 100]
high: direct route/access impairment or critical accessibility hazardmedium: substantial accessibility limitation with workaround possiblelow: minor or partial non-conformance
Severity labels must be deterministic and explainable in finding metadata.
Human review is mandatory when any condition is true:
- Any
highseverity accessibility finding - Any finding confidence below jurisdiction threshold (default
0.72) - Evidence integrity status not
verified - Rule conflict or unresolved
cannot_determinestate
The system must not:
- Automatically deny compliance solely from score value
- Automatically publish enforcement-ready action without human approval
When reviewers override model findings or score interpretation, the system must capture:
- Reviewer identity
- Rationale text
- Timestamp
- Affected finding/score fields
- Linked audit reference
Each accessibility-relevant finding must include:
rule_idcode_citationconfidenceevidence_refs(1+ assets)- Natural-language finding explanation
Each scorecard must include:
- Component counts used in score computation
- Applied profile name and version
- Evidence and citation references used for score impact
Accessibility scoring should require:
- Capture timestamp
- Geolocation metadata (unless explicitly exempted)
- Device identifier
- Hash-based integrity record
Any of the following sets chain_status=needs_review:
- Missing or invalid GPS
- Invalid capture timestamp
- Metadata tamper mismatch (hash mismatch)
Scores may still be computed for triage, but must be marked non-final pending review.
Evaluate score performance at minimum by:
- Building type (residential, commercial, civic, mixed-use)
- Building vintage/age ranges
- Jurisdiction and neighborhood cohort
- Capture device class (high-end, low-end, mixed)
- Environmental conditions (lighting/weather where available)
Run recurring checks for:
- False positive/negative disparity between cohorts
- Confidence calibration drift
- Sudden score distribution shifts by jurisdiction
- Reviewer disagreement rates by cohort
Do not promote new scoring model/profile versions unless:
- Validation metrics meet jurisdiction baseline thresholds
- Fairness checks are within defined deltas
- Rollback artifact is available
- Governance review is approved
Each score and finding must be traceable to:
- Model version
- Rule pack version
- Scoring profile version
- Effective dates
Change types requiring formal approval:
- Weight changes
- New/removed mandatory conditions
- Confidence threshold changes
- Rule-to-severity mapping changes
Accessibility scores may be published only if:
- Property is explicitly opt-in or agency-authorized
- Most recent relevant analysis is human-approved
- Record includes “last updated” date
- Public disclaimer states score is decision support, not a legal determination
The system must support a documented appeals flow:
- Owner/agent submits dispute with evidence
- Case assigned to reviewer
- Re-analysis or manual correction performed
- Updated score generated with version linkage
- Previous score retained for history/audit
Appeal SLA and notification policy are jurisdiction-configurable.
InspectorOS web/mobile interfaces must target WCAG 2.2 AA:
- Screen-reader compatibility
- Keyboard navigation
- Sufficient contrast
- Captions/alt text support for media evidence workflows where applicable
- Plain-language score summaries
Required controls:
- Role-based access for evidence and score records
- Tenant isolation by organization/jurisdiction
- Audit logging for read/write/decision actions
- Data retention and deletion policy by jurisdiction
- PII minimization in exported/public datasets
A jurisdiction deployment is governance-compliant only when:
- Explainability fields are present in 100% of scorecards
- Human review triggers are enforced without bypass
- Version metadata is present in all scored records
- Appeals workflow is enabled and auditable
- Public map publication policy is enforced
- Confidence review threshold:
0.72 - Publish policy: opt-in and human-approved only
- Model authority: decision support only
- Mandatory audit retention: minimum 24 months (unless stricter local policy)