Phase 0 · Foundation Assessment — BEA-08 Amazon NIS Automation
The permanent base layer (FAD). Establishes success criteria, the decision-maker's real incentives, the constraint envelope, scope, and the assumptions every later phase is built on. Written to be consistent with — and load-bearing for — Phases 1–5 and the Decision Gate (Refine, Architecture A, executability 74).
Problem in one line (from manifest): Auto-populate the 22-file New Item Setup (NIS) package per Amazon launch from PIM/DAM. Category: Production Automation. Build type: backend-automation. Owner: Jaclyn Kreidstein. Proprietary: no.
1. Success criteria (measurable, time-bound)
- [ ] Measure before build (the load-bearing number). Within 30 days of project start, complete a time-and-motion study on ≥3 real Beats NIS launches that fixes three priors to within a stated confidence interval: (a) true coordinator hours per 22-file package, (b) the transcription/formatting fraction of those hours (the only part any of A/B/C automates), and (c) true launch cadence (packages/year). Pass condition: transcription fraction and cadence are measured, not estimated, and the denominator scope (one team vs. many) is resolved. This criterion gates every other one — if transcription is ~35% of effort on a genuinely single-team ~$17K/yr pool, the correct outcome is "do not build," and that is a success of the methodology, not a failure.
- [ ] Cycle-time reduction on the automated slice. For the shipped architecture, reduce coordinator hours per NIS package by ≥40% versus the measured manual baseline within 90 days of go-live, measured over ≥5 launches. (Architecture A's synthetic model claims ~55% of effort is automatable transcription; the 40% threshold leaves margin for review overhead and is falsifiable against the time-and-motion baseline.)
- [ ] Reduce Amazon ingest rejections. Cut the per-package Amazon ingest-rejection rate from the measured manual baseline (synthetic prior: ~18%) to ≤8% within 6 months / ≥10 launches of go-live, attributable to the three named failure modes (missing files, mid-run source drift, cross-file field mismatch). Pass condition: rejection rate trend is tracked per package and the reduction is statistically distinguishable from baseline noise.
- [ ] Forcing-function correctness guardrail (not just speed). Before go-live, the shipped tool must include diff-highlighting of changed-vs-prior values, a per-file sign-off log, and a sampled independent reconciliation of ≥1-in-N shipped packages against PIM ground truth by a second person. Pass condition (ongoing): zero "wrong-but-consistent" values reach a live Beats listing across the first 6 months; any that do trigger a reconciliation-rule update. Without this, faster generation just ships wrong listings faster (Boyd-Quist / Velury).
- [ ] Sustainability / no-rot guarantee. A named, funded maintenance owner for the template set (or slot registry) exists at go-live, with a quarterly revalidation against the current Amazon NIS spec. Pass condition: owner named in the runbook and a revalidation occurs within the first quarter. Pharma analog (Velury): an unowned registry rots in ~9 months regardless of build quality.
2. Decision-maker profile (Three Ledgers)
- Public ledger (what we pitch): "Eliminate the manual, error-prone hand-assembly of the 22-file Amazon NIS package by auto-populating it from data that already lives in PIM/DAM — faster launches, fewer launch-day Amazon rejections, an auditable trail of where every value came from."
- Shadow ledger (what the decision-maker actually optimizes for): Jaclyn owns Beats Amazon launch outcomes, so her real optimization target is no launch-day fire drills and no brand-damaging wrong listing on a Beats ASIN — predictability and reputational safety, not raw hours saved. A secondary shadow goal is headcount/credibility defense: a tool that visibly de-risks her launches strengthens her team's standing; a tool that ships a wrong price/dimension/claim to a live listing is a career-negative event far larger than the ~$17K labor pool. This is why she will tolerate a cheap, human-gated tool (A) over a clever-but-fragile one (B/C) — the downside of automation error dwarfs the upside of speed.
- True ledger (what will actually get built, absent intervention): A script-based mail-merge over a frozen PIM/DAM export (Architecture A) with 22 tokenized templates and a completeness checklist — but only if the time-and-motion study confirms the value pool, and only with the human-review forcing function baked in. The realistic risk is that what actually ships is a thinner A (templates for the high-volume files only, manual review without diff-highlighting), which silently degrades into "rubber-stamp 22 green checkmarks under deadline" — a faster wrong-package generator. The forcing-function success criterion exists precisely to prevent the True ledger from drifting below the Public ledger.
- Owner / sponsor: Jaclyn Kreidstein (manifest owner). Sponsor for funding/headcount sign-off is her management chain; the user is the frontline catalog coordinator (the Boyd-Quist persona), whose disengagement under launch pressure is the single biggest threat to the correctness value.
3. Constraint inventory
| Constraint | Type (hard / soft / assumed) | Notes |
|---|---|---|
| Small absolute value pool — synthetic ~$17K/yr labor+rejection for one Beats account team | hard (economic) | Caps justifiable build+maintenance spend at roughly <$10K to stay net-positive. Kills B (~$40K build) and C (~$78K build) at single-team volume; the entire ROI hinges on whether the denominator is one team or many (Beltrán). |
| PIM/DAM live read access requires Apple infosec / data-governance review | hard (org/security) | A standing service holding credentials against the product master is reviewed in months, not weeks, and may come back "export-only, no live API" (Raghunathan). This is the make-or-break for B; A sidesteps it by using a manual frozen export. |
| Apple AI-model / LLM-on-brand-data policy | assumed (policy) | Architecture C's LLM extraction path from unstructured PIM copy/DAM metadata, and any auto-modification of bindings on a live brand-facing channel, must clear Apple governance/legal. Assumed restrictive; treated as a reason C is shelved, not a thing to be designed around. |
| Amazon is an opaque, moving external dependency | hard (external) | Amazon controls the NIS file count/format and its rejection-feedback richness; no architecture controls it. Template/registry rot and the existence (or not) of parseable rejection codes are entirely Amazon's to change. |
| Privacy / data classification of PIM/DAM contents | soft | Product master, copy, imagery, and pre-launch pricing/claims are commercially sensitive pre-announcement Apple data; any export or service must respect pre-launch confidentiality and data-handling rules. Bounds where exports may be stored and who may review the queue. |
| Headcount / team type — this is a Beats account team, not a platform/engineering team | hard (org) | No standing platform team to own a registry, connectors, prompts, or trust policy long-term. Drives the "funded maintenance owner" success criterion and the bias toward the lowest-maintenance architecture (A). |
| "Consistency is not correctness" | hard (logical) | Cross-document checksums (B) and dual-derivation diffs (C) only prove internal agreement; a uniformly-wrong value (bad arbitration / bad PIM source) passes every check and ships consistently wrong. Forces the sampled reconciliation-against-ground-truth requirement regardless of architecture. |
| Launch cadence is bursty and modest (synthetic P50 ~14/yr, bursty around product seasons) | assumed | If real cadence is low, heavy architectures never amortize; if it fans out into many color/region SKU variants, A's linear-review model breaks (10× scenario) and B becomes correct. Must be measured. |
4. Scope boundary
- In scope:
- Auto-populating the 22-file Amazon NIS package for a Beats product launch from existing PIM (master/copy/attributes) and DAM (imagery/assets) data.
- Transcription, per-file template formatting, and cross-file consistency-checking — the labor the manual process spends today.
- A completeness gate on source data before assembly, and a human-review forcing function (diff-highlighting, sign-off log, sampled reconciliation) on the output.
- Producing a frozen, versioned snapshot of the source data at assembly time so all 22 files derive from one truth.
- Out of scope:
- Fixing upstream PIM/DAM data quality at its source — the tool surfaces/attributes incompleteness but does not own remediation of the master records (the upstream-steward incentive problem is named, not solved).
- Amazon-side listing management (pricing strategy, advertising, browse-node taxonomy decisions) — the tool fills NIS fields; it does not decide categorization strategy or run the listing.
- The closed-loop / self-learning assembler (Architecture C) and any LLM-based extraction or auto-modification of bindings — shelved until a real parseable, timely, slot-attributable Amazon rejection payload is demonstrated at training volume (Khoury kill condition).
- Live PIM/DAM service integration (Architecture B) as a near-term commitment — gated on confirmed securable access AND a volume/denominator finding that flips its NPV positive.
- Other Apple/Beats teams' catalog tooling, unless the denominator-scope finding proves the problem is replicable (then a separate scope expansion, not silent scope creep).
- Recursion budget acknowledged: max 3 recursions per phase. (Consistent with the Decision Gate's "Refine = a narrow, measurement-led pass, not a redesign" — the recursion here is into Phase 4 re-scoring with measured inputs, not back into Phase 3 architecture.)
5. Assumption log
| # | Assumption | Confidence (0–1) | Validated? |
|---|---|---|---|
| 1 | Transcription/formatting is a meaningful fraction (≥~50%) of per-launch coordinator effort — i.e. the cost worth automating actually lives in the part A/B touch. | 0.45 | No — explicitly unmeasured; the #1 decision-flipping prior. Maréchal: "transcription is maybe a third." Time-and-motion study required. |
| 2 | The ~$17K/yr value pool is for one Beats account team (denominator scope). | 0.50 | No — Beltrán flags this as ambiguous and decision-flipping; if many teams, B's case strengthens materially. Must be resolved in Phase 6. |
| 3 | PIM and DAM can be manually exported in a stable, parseable shape per launch. | 0.70 | Partially — assumed feasible (and the basis of Architecture A); export shape stability is unproven (pre-mortem A3). Not yet contractually validated. |
| 4 | Stable, queryable live PIM/DAM read access is not readily available without a months-long infosec review (so A's manual export is the realistic primary, not a fallback). | 0.75 | Partially — Raghunathan strongly corroborates; not yet confirmed by an actual Apple infosec engagement. |
| 5 | Amazon's 22-file NIS format changes slowly enough that a versioned template set stays valid for months between revalidations. | 0.55 | No — assumed; template rot (A2/A9) is a named risk. No subscription to Amazon change notices yet. |
| 6 | Amazon does not reliably return machine-parseable, slot-attributable, timely rejection feedback (so Architecture C has no usable learning signal). | 0.70 | No — never inspected against real Amazon error payloads; this is C's unmitigatable-fatal-flaw candidate (C1) and must be spike-tested before C is ever reconsidered. |
| 7 | The frontline coordinator will not sustain genuine review of all 22 files under launch-day pressure without a forcing function (so review-everything silently becomes rubber-stamping). | 0.80 | Partially — strongly asserted by the user-persona validator (Boyd-Quist) and the pre-mortem (A1); this is why the forcing function is promoted to a build requirement. |
| 8 | A single, funded maintenance owner for templates/registry can and will be assigned and sustained on a Beats account team (not a platform team). | 0.40 | No — organizational dependency flagged across A8/B2 and by Velury; currently no named, funded owner. Low confidence. |
Gate: success criteria defined, constraints mapped, decision-maker identified → set phaseGates.0-foundation = passed in manifest.json.