Case 03 · Offline operations

Offline Family Photo Library

A durable daily interface that stays useful without accounts, subscriptions, cloud services, or AI availability.

Privacy-safe family photo browser
25,932cataloged media items
22,259/22,259latest AI staging run completed
317/317folder decisions recorded
3readable source locations

Delivery Loop trail

Four gates connect the problem to public proof.

Each gate records the evidence that justified moving forward.

Understand

  • Real drives and a non-technical user

Design

  • Offline and account-free contract

Deliver

  • Portable read-only daily interface

Verify

  • Integrity, backups, and drive checks

01 · Operational problem

A family archive is not useful if daily access needs an administrator.

Media lived across removable drives, duplicate locations, uncertain dates, and inconsistent folders while the daily user needed one simple browser.

02 · Product hypothesis

Separate administration from calm daily browsing.

A portable interface could stay account-free and independent of AI while administrative tools handled catalog repair, review, and backups separately.

03 · Technical path

Offline databases and removable-drive markers became the operating boundary.

Catalog data, user decisions, AI staging, backups, and portable runtime were kept distinct so recovery did not require rebuilding everything.

04 · AI delivery

AI prepared suggestions; the daily interface never depended on them.

A staged pipeline completed 22,259 of 22,259 requested items while accepted and rejected decisions remained explicit user data.

05 · Real constraints

The target user, hardware, and data could not be treated as test fixtures.

Real removable drives, touchpad behavior, missing paths, backup safety, and a non-technical operator shaped the product more than a generic feature list.

06 · Verification

Database integrity passed; filesystem alignment still has a declared gap.

The release records 25,932 media items and six user-data backups, while 93 catalog paths remain missing and filesystem alignment is not claimed as complete.

Privacy-safe folder review
Aggregate-only evidence; no family media or private paths are shown.

07 · Reusable capability

A portable offline handoff pattern survived the project.

Marker files, integrity checks, backups, read-only evidence, and a simple daily UI form a reusable pattern for private collections.

08 · Limits and public boundary

The case publishes aggregates and privacy-safe derivatives only.

Family photos, videos, names, original paths, databases, thumbnails, device identifiers, and private repositories remain excluded.

Related work

See the method move across domains.

The technology changes; the discipline around constraints and evidence remains.

Reusable lesson

The most advanced system is the one a real person can safely keep using.

Offline continuity and human simplicity were product requirements, not deployment details.

A similar operational constraint?

Have a workflow with similar constraints?

了解 90 天企业 AI 试点