USOOSR core
facts · reasoning · order · proof · history · learning · authority
USOOSR · Public Edition 1.4
USOOSR is the governed operating system underneath the SANDR application – connecting a simple conversation to clear work, proof, results, and useful business memory.
This is Public Edition 1.4 of the paper on the management method beneath SANDR. It keeps the 18 chapters of the August 2026 edition and covers the hospitality library, private Frontline conversations, permitted work from a conversation, Night Shift and memory boundaries. The 28 October correction also records the established adapter architecture and reviewed restaurant and hair-salon ontology work, while keeping draft packs separate from public products and measured field results.
The 60-day guided beta is rolling out in stages to the first 100 users across Lithuania, Latvia and Estonia, with onboarding and practical support. Its scope may widen as the programme develops. Wider public availability targets early 2027, without a fixed date promised. Current plan prices and included credits are shown on the pricing page; a separate promotional offer applies only if stated in the invitation. Applying does not start a subscription or charge a card. Read the programme, pricing and help pages for the current terms and available features.
Examples of source systems in the paper describe possible inputs, not a list of active integrations. Bring agreed exports or files when a connection is not available. Illustrations explain the method; they are not measured customer results.
Your management partner · How SANDR works · Practical examples · Guided beta · Pricing · Help centre · For consultants
In brief
Service businesses produce a constant stream of useful facts: demand, staffing gaps, broken handoffs, equipment issues, falling standards, notes, check-ins, tasks, plans, files, reports, and what managers and frontline teams notice. Modern software is good at recording these fragments. The harder questions come after that: what do the facts mean, which underlying problem matters, what should happen next, in what order, what proves the work happened, did it improve the business, and what should the organisation remember?
USOOSR is the governed operating system underneath SANDR. It keeps the missing connection: Facts → Pattern → Problem → Response → Work → Proof → Result → Learning. Blocks and tools turn a response into ordered work inside that lifecycle. Here, “operating system” means the system for business reasoning and memory, not a device operating system.
SANDR is the application and conversational surface people use. She can read the information a person is allowed to use, explain why work exists, and prepare approved changes. USOOSR holds the method, relationships, work order, proof, history, permissions, and learning boundaries underneath that simple experience.
Cafés and hospitality groups are the first deep use case, with multi-site groups offering a strong test of repeated problems and comparable results. Adapter rules and reviewed restaurant and hair-salon ontologies already exercise the shared approach beyond the café. Comparable customer outcomes across industries still need field evidence.
Giving a chatbot company data can make it better informed. It does not tell the chatbot how the business wants problems understood or work carried out.
Slack, Teams, point-of-sale systems, workforce software, dashboards, files, task managers, frontline input and existing knowledge bases can all be useful sources. They can give an AI system broad access to what happened.
Those named systems are examples of possible inputs, not live connections. Today SANDR works from what people tell her, check-ins, the records kept in the app and the files and exports a team chooses to bring: documents, spreadsheets, presentations and images. Connections to other systems will follow in the order customers need them.
The harder questions come next: which observations belong together, what underlying problem best explains them, which response fits, what must happen first, what the team can realistically take on, what proves the work happened, whether the situation improved, and what should be remembered next time.
A general chatbot can produce several plausible plans from the same information. SANDR uses that flexibility for language, clarification, and explanation. USOOSR keeps stable records, clear relationships, repeatable rules, and authority outside the chat.
Industries differ, but businesses that depend on people, timing, and handoffs often share a recognisable pattern.
We do not claim every industry works in exactly the same way. The narrower idea is that many service businesses share a useful lifecycle of facts, patterns, problems, responses, work, proof, results, and learning.
That makes the approach relevant to live service, appointments, field work, site management, and groups with several locations.
USOOSR governs five practical rules; SANDR makes them usable in ordinary conversation.
Across service businesses, familiar patterns include too much demand for available capacity, unclear expectations, poor readiness, unclear roles, broken handoffs, drifting standards, training gaps, weak follow-up, equipment trouble, and lost learning.
SANDR groups repeated problems instead of treating every incident as completely new.
Advice is stronger when the system keeps the facts and relationships that explain why the response exists.
AI is useful for language, explanation, searching, and conversation. Clear product rules handle permissions, identities, confirmation, proof, and approved changes.
The right action can still fail at the wrong time. The plan must fit what the team can take on and what must happen first.
Finishing a task shows that work happened. A result shows what changed. Several strong results can support a future improvement. No single step silently becomes truth.
Keeping each part separate prevents a polished answer from being mistaken for a completed task or a proven result.
The chain is:
| Part | What it means |
|---|---|
| Facts | What people observed, what happened, and what the records show. |
| Pattern | A condition supported by one or more facts. |
| Problem | The reusable underlying breakdown that can explain the pattern. |
| Response | The kind of fix that suits the problem, usually represented by an operating block. |
| Work | The chosen response, tools, owners, timing, and actions adjusted to the current situation and placed in the right order. |
| Proof | What shows that the specified work really happened. |
| Result | What changed afterwards, separate from task completion. |
| Learning | What the business can safely reuse from the result. |
A pattern is not the underlying problem. A response is not completed work. Work is not proof. Proof is not the result. One result is not automatic learning.
Keeping those differences clear makes SANDR easier to explain and trust.
In hospitality, the chain is backed by a structured library built from years of kitchen, floor and consulting work. It currently covers 14 areas of the business, 235 warning signals, 129 failure patterns, 60 response patterns, 223 Blocks and 1,056 practical tools.
| Part of the chain | What the library holds |
|---|---|
| Pattern | 235 warning signals: conditions worth noticing, such as waste creeping up or new starters still asking basic questions in week three. |
| Problem | 129 failure patterns: the reusable breakdowns underneath, each able to cause several different symptoms. |
| Response | 60 response patterns and 223 Blocks: the kinds of fix and the practical interventions that carry them. |
| Work | 1,056 tools: checklists, templates, guides, trackers and calculators. |
Every Block is written as a complete operating journey: when it fits, the first move, staged work with owners and time, actions, tools, proof, risks and where to go next. Every tool explains how to prepare it, use it and close it. The library is a structured starting point to review against the business, not a fixed prescription.
SANDR moves through four questions instead of inventing a new way to understand the business every time.
The four questions are:
The current café version follows a repeatable path: organise the facts, identify patterns, compare likely problems, choose suitable responses and tools, apply practical limits, and build an action plan.
The important property is repeatability. SANDR does not ask AI to invent a completely new method every time.
Business facts are often incomplete or conflicting. A manager may report that a standard exists while frontline facts show it is applied inconsistently. One shift may look stable while another repeatedly fails the same handoff.
When the facts conflict, SANDR should become less certain, explain the conflict, or ask for more information. Uncertainty should not disappear because an answer sounds confident.
SANDR can show the facts and relationships behind a suggestion. That does not prove a cause with scientific certainty. The strength of those relationships must be tested against real results.
Management records show one side of the business. Frontline gives staff a private place to talk through what happened at work. That conversation has no access to business files, schedules or anyone else’s conversations, and it is not shared with management.
When a team member wants something to reach management, SANDR drafts a short summary. The person sees the exact wording and decides whether to share it, and a shared summary can still be withdrawn for a limited time. Approved summaries are matched to known warning signals in the library and grouped with similar accounts, so a manager can record a signal or start a check-in from them.
Several accounts can strengthen a pattern, and a single account can still deserve attention. Repetition is a reason to look closer, not proof of the cause. Managers answer in Loops (what we heard, what changed, what we are still watching), so staff can see what happened to what they chose to share.
A better description is not enough. The team needs a response in the right order that fits the capacity it actually has.
This part turns an explanation into reusable work.
A known response can bring practical steps and tools adjusted to the current venue. Unlike a fresh list of generic advice, a reusable Block can explain when it fits, what must happen first, which proof matters, how much effort it needs, and how it connects to other work.
A team cannot enforce a handoff that has never been defined, train a standard managers apply differently, or check a change that has no owner. SANDR treats order as part of the recommendation and prefers a smaller coherent stage over a comprehensive plan the team cannot complete. Capacity outranks idealism.
clarity · ownership · readiness
way of working · standard · tool · training
regular check · verification · ask for help
result · adjustment · retained knowledge
Plans fail in the space between “we know what to do” and “the situation is actually different.”
SANDR keeps plans, tasks, owners, dates, comments, what must happen first, files, check-ins, proof, and results. The important difference is that the work remains connected to the problem and response that created it.
Most work software lets a user mark a task complete. SANDR distinguishes “the task is marked complete” from “the required condition has been checked.”
Where proof matters, it can be required, submitted, reviewed, accepted, rejected, resubmitted, or deliberately waived by an authorised person.
Only accepted proof, or a deliberate waiver, closes the requirement.
This does not mean every task should require proof. It means proof is available when the work genuinely needs to be checked.
That distinction protects future learning. If the system learns from a falsely completed task, it can recommend a fix that was never properly tried.
Proof asks whether the specified work happened. The result asks what changed afterwards.
A new handoff process may be fully introduced and still fail to reduce errors. That is useful learning. SANDR keeps the difference between work completed and business improved.
With the right access, SANDR can do more than describe the next step. She can find records, compare figures, prepare documents and spreadsheets, and create or update tasks, plans and calendar items, working through several steps and reading each result before she decides the next.
Every change SANDR makes passes the same permission checks as the same action taken directly in the app. Destructive changes wait for an explicit confirmation tied to that exact request. Many changes can be undone, unless the record has changed since. Each step, partial result and failure stays visible in the conversation, so the person can see what was done and what was not.
How far a single answer may go is a setting: Quick answers without tools, Context can read and make safe changes, Deep can take on larger work, and Auto chooses the lightest level that can finish the request. Spoken requests go through the same core, with the same permissions, as written ones.
Night Shift is an overnight review across live venues. It looks for signs such as a weakening venue trend, stalled work close to its due date, early signals from the team and paperwork about to expire. It raises at most three heads-ups and one question a night, and a quiet night is allowed. A morning briefing then sets out what changed and what needs a decision.
Each call is graded afterwards, automatically or with one tap from the manager, so Night Shift keeps a running record of how often it was right.
SANDR should build useful memory without letting one weak result rewrite future recommendations.
Learning creates an important question: what may influence future advice, and how much evidence is enough? SANDR keeps that path explicit:
A possible lesson stays connected to its facts, proof, result, and contradictory evidence. One lesson does not change the product by itself; stronger support and human review are required before future recommendations change.
Suppose SANDR identifies a recurring handoff problem, the selected work is completed, and the manager later says it helped. That statement is useful, but it is not the whole result. If later check-ins show the same problem continuing, the system should not turn the positive answer into a trusted lesson.
This distinction matters: learning should describe reviewed evidence, not hope. Over time, facts remain tied to work and results so similar situations can be compared and future changes proposed without pretending the AI “magically gets smarter.”
Today, possible lessons are held for human review: an authorised person can publish them or roll them back, and memories SANDR suggests keeping wait for approval before they are used. Published lessons appear in review and governance views. They do not yet change recommendations automatically.
A representative hospitality example shows how the method should connect a real observation to work and a result the team can test.
The owner personally approves supplier payments, holds several key relationships, and resolves important staff decisions. During an unexpected absence, the manager cannot find the emergency contacts or confirm who may make urgent financial decisions.
Decisions repeatedly stop or return to the owner whenever the normal routine breaks.
The venue depends on one person for knowledge and authority that the business needs to keep operating.
B207 · Succession Planning. Reduce owner-dependency, make emergency authority explicit, document critical knowledge, and prepare another person to carry responsibility.
Complete the owner-dependency audit, create the Emergency Operations Guide, confirm emergency financial access, and name the first responsibility to delegate.
Document and trial the processes still held by the owner, identify a successor candidate, and create the succession plan with ownership and milestones.
Test longer owner absences, review the successor’s readiness, and keep the plan alive through scheduled reviews.
The guide exists and is accessible; emergency access has been tested; delegated processes have named owners; absence trials and review decisions are recorded.
The manager can run a planned two-week owner absence without blocked supplier, staffing, or financial decisions. Any failure remains attached to the work that was tried.
Only repeated, reviewed results should increase confidence that the response travels. If failures continue, the plan is revised instead of being remembered as successful.
The system stays consistent while SANDR’s language, examples, tools, and practical knowledge change by industry.
Each industry pack contains its own vocabulary, job titles, thresholds, examples, templates, proof expectations, resources, practical knowledge, and tests.
An industry pack can change the language and examples. It cannot take control of core users, permissions, proof, or approved learning.
The adapter architecture is already defined, implemented and tested. The café pack is published; restaurant and hair-salon ontology work includes reviewed signals, negative cases, proof and safety checks. Those additional packs remain drafts, rather than publicly available or field-certified industry products. Adapter checks reject a pack that would weaken proof review or give the AI the right to publish, approve or waive proof.
facts · reasoning · order · proof · history · learning · authority
café (published) · restaurant and hair-salon packs (reviewed drafts) · familiar measures · blocks and tools · proof patterns
conversation · clarification · explanation · navigation · approved actions
The shared-core and industry-package separation has already been exercised in software and reviewed ontology work across these industries. That foundation supports more adapters. Each complete pack still needs its own field calibration and release checks before public availability.
A trustworthy explanation comes from keeping the facts, choices, and changes behind a recommendation.
USOOSR preserves the relevant facts, patterns, selected response, tools, order, proof requirements, conflicts, confidence, and related events. SANDR can then explain why the system recommended something.
Important records move through clear stages instead of loose labels. Product rules prevent impossible or unsafe jumps.
Important changes can record who made them, where, why, and which decision they came from. This separates the current record from the history of how it changed.
USOOSR distinguishes proposals from approved information. SANDR can prepare and explain a change, but AI suggestions and possible lessons do not become trusted truth merely because they were generated.
SANDR keeps running summaries of conversations and can recall earlier conversations and files by topic or by time. Recall stays inside the workspace. What a conversation can draw on depends on its venue, the sources switched on and the person’s access, and every lookup goes through the same permission checks.
These controls are not a security certification. They are practical safeguards that can be tested and strengthened as the product grows.
SANDR overlaps with familiar software categories; USOOSR connects the pieces that normally remain separate.
| Category | What it usually does well | What USOOSR + SANDR add |
|---|---|---|
| Task management | Ownership, dates, status, collaboration | Why the work exists, what must happen first, proof, and the result. |
| Automation | Repeatable triggers and actions | Understanding messy business facts and choosing a suitable response. |
| Dashboards | Visibility, metrics, trends | Carrying those facts into a clear response and ordered work. |
| Knowledge management | Storing SOPs and documents | Selecting the right practical knowledge for the current problem and putting it to work. |
| Process tools | Modelling stable processes | Dealing with instability, exceptions, evidence, and corrective work. |
| Generic AI assistants | Language, summaries, broad reasoning, tool use | A stable problem map, persistent records, permissions, order, proof, decision history, and reviewed learning. |
USOOSR provides the stable way to understand problems, reusable responses, realistic work order, proof, results, and governed learning. SANDR makes that system accessible through a conversation that remains inside clear permissions.
The product matters only if it improves decisions and results.
Can SANDR identify relevant patterns, find plausible underlying problems, show conflicting facts, and avoid sounding certain when the facts are weak?
Are the selected steps and tools relevant? Does the plan remember what must happen first? Can the business realistically complete it?
Do ownership, scheduling, proof, and review improve follow-through? Can SANDR distinguish “marked done” from “checked”?
Does the chosen work measurably improve the original situation? Which changes last and which slip back?
Do possible lessons remain linked to their original facts? Do proposed adjustments travel well to similar situations? Does human review stop weak facts from shaping future recommendations?
Can comparable problems be recognised consistently across venues while local circumstances still produce suitable responses? Does a group view reduce repeated rediscovery of the same problem?
Do staff choose to share, and do approved Frontline summaries point managers to problems they had not seen? Are Night Shift’s heads-ups right often enough to be worth reading, and does its graded record improve?
A failed idea is useful. The product should improve through facts, not through pressure to make every market fit the original idea.
USOOSR and SANDR should be described honestly and precisely.
What the product can support today:
What we should not claim as proven today:
The rule is simple: confidence should grow only as the supporting facts grow stronger.
The next phase is less about adding more concepts and more about testing what already exists.
Hospitality is a rich first environment for measuring understanding, work order, follow-through, and results. Multi-site groups provide an especially useful test of repetition, consistency, and local context. Expansion should then move into service businesses that share the same coordination problem while being different enough to test the method honestly.
The first structured test is the 60-day guided beta, rolling out in stages to the first 100 users across Lithuania, Latvia and Estonia. Each participating team brings a recurring problem, names a responsible person, uses SANDR on that problem at least weekly and gives two short feedback reviews. This provides the first real usage evidence to read against the questions in chapter 14.
Wider public availability targets early 2027. This is a target, not a fixed launch date; the beta’s scope may widen as the programme develops.
For each new industry, the questions should be explicit:
The long-term opportunity is a USOOSR core that can preserve useful business knowledge across several service industries without pretending that changing a few words is enough.
A public method paper should make clear who stands behind it, which product surfaces support it, and where the evidence boundary sits.
Published by SANDR and authored by Matas Paulinas, founder and CEO, from the hospitality method and product work that shaped the current SANDR application and USOOSR system. Questions and review requests can be sent to gm@sandr-ai.com.
This is a public product and research paper about the USOOSR system underneath SANDR. It describes the current product method and the questions being tested. It is not peer-reviewed research, a patent opinion, security certification, investment recommendation, legal representation, or proof that the approach works everywhere.
The central idea behind USOOSR is simple to say and difficult to build well.
USOOSR has grown from an early hospitality problem-review engine into a broader working system with explicit order, proof, decision history, permissions, industry adapters, and learning limits. The hosted SANDR application shows that the idea is not confined to a whiteboard: problem reviews, plans, persistent work, and conversations exist as working software.
Since August, SANDR can also carry out permitted work from a conversation, review venues overnight and bring staff-approved accounts from the floor into the same chain, each inside the same permissions and records.
At the same time, the strongest long-term claims remain open to testing. USOOSR has not yet proven equal performance across industries, automatic long-term learning, or guaranteed causal correctness. Those are research and scale questions.
What we can say today is narrower:
SANDR is the application and conversational operating surface. USOOSR is the governed system underneath. The user should be able to describe what happened, review what SANDR understood, approve the response, and continue running the business. SANDR handles language, clarification, explanation, and navigation. USOOSR holds the structure, order, records, proof, permissions, and learning boundaries. People retain the truth and authority.
Most business software remembers activity. USOOSR aims to help a business remember what happened, what it believed the underlying problem was, what it changed, whether the change was actually made, whether it worked, and what the next manager should know.
SANDR is the simple conversation. USOOSR is the organised business memory underneath it.