Buddy auto-dispatch turns an SOS into a ranked, parallelised, multi-channel responder blast — with Claude in the loop on the ranking and a human dispatcher in the loop on every action. Sub-4s median, audit-trailed end-to-end.
Each step is independently observable in the audit log — and the timing budget for each is enforced by a circuit-breaker that escalates to a human if any single hop exceeds its SLO.
Worker triggers — physical button, wake-word, fall detect, watch crown long-press or panic gesture. Trigger source is logged.
Howie pulls every responder within 1.5km of the worker's last fix, filters by role (first-aid, fire warden, security) and on-shift status, and shortlists up to 8 candidates.
Claude Opus 4.7 re-ranks the 8 with one-line reasoning per candidate — distance, training, last-seen freshness, gradient between worker and responder. Top 3 wired for dispatch.
Push + SMS + WhatsApp + voice all fire concurrently to all 3 responders. Each carries ETA, what3words, severity badge, deep-link to navigate.
Median first-responder acknowledgement is sub-4 seconds end-to-end. The other 2 are auto-stood-down with a courtesy notification. Audit log captures the full chain.
The single biggest failure mode in lone-worker dispatch is a channel that thinks it delivered. Push notifications get killed by aggressive battery savers. SMS gets eaten by anti-spam filters. WhatsApp goes unread for 40 minutes. Voice calls time out when the phone is on silent.
Buddy auto-dispatch fires all four at the same time, to the top three responders simultaneously. The first ack wins. Everyone else is auto-stood-down. You never wait 30 seconds for a push that was never going to land.
Across our last 90 days of live escalations, at least one of the four channels delivered within 4 seconds for 99.4% of SOS events. The remaining 0.6% triggered the human-dispatcher escalation path inside 8s.
First to land for any responder with the worker app open or backgrounded — but silently fails if they backgrounded the app 14 days ago and iOS killed it.
Survives a dead app, a dead data connection, a dead operator network (carrier failover). 99.4% delivery against our 90-day rolling window.
Highest read-receipt rate of any channel — and the only one most off-shift responders glance at out of hours.
Synthesised call that reads the brief and confirms ack via DTMF. Survives a phone that's silenced for everything except calls.
Every alert carries the four things a responder needs in the first three seconds: who needs help, how bad, where exactly(what3words plus what-was-around-them context from Howie), and one tap to navigate.
Crash detect · HR spike · 230m NE of your last fix
Trigger one from the demo tenant — no real responders contacted, full chain visible in the audit log.