★ Executive Gameplan · FY 2026–2027

The Force for Health® Network

The shared operating document for Coach Lucy and Dr. Rob — what we have, how we're managing it, and what we're doing next. Built to be handed to an investor or a key partner without editing. Every asset named below links to the live module.

Coach Lucy Howell — CEO
Dr. Rob Gillio — CMO
Issued July 11, 2026
Platform: theforce.health

🚨 Before anything else — one item is still open and it is live

The profiles table is world-readable in production. Policy profiles_select_policy is USING (true) for role public. Anyone holding the anon key — which sits in the source of every page — can read the full user table: 36 columns including email, first name, last name, avatar. That is a reportable PII exposure, and it has been open since the audit on July 9.

Here is the part that matters: the work is already done. The fix SQL is written. The code repoints are already shipped. Nobody has run the SQL.

  • ✅ DONE — Fix SQL written, including the safe public_profiles and public_leaderboard views → Security Audit/3-FIX-profiles-SAFE-PUBLIC.sql
  • ✅ DONE — vip-leagues already repointed to public_leaderboard (verified in source, line ~1258)
  • ✅ DONE — The duplicate group-directory that leaked emails was retired on 7/9
  • ✅ DONE — PHIT scorecards + group-directory confirmed own-row reads; ~77 of 87 call-sites need zero changes
  • ⬜ OPEN — Lucy: run 3-FIX-profiles-SAFE-PUBLIC.sql on a Supabase branch, verify, promote to production
  • ⬜ OPEN — Lucy: run 4-FIX-membership-tables.sql — organization_members, group_members, group_settings are also USING (true) (leaks org + group rosters)
  • ⬜ OPEN — Eng: confirm engagement-command-center is behind the super-admin gate (it does a full-table read incl. email — correct for admins, wrong for anyone else)
  • ⬜ OPEN — Lucy: incognito leak test from Part 4b of the SQL → expect []

Decision required (Option A vs B). profiles is queried by 85 pages, some of which legitimately show other members. Option A (recommended): keep names/avatars public via the safe view, lock everything else — closes the email leak, social features keep working. Option B: fully private, route everything server-side — more secure, more rework. The team already recommended A and built for A. It just needs Lucy to pull the trigger.

Where We Stand

The Force for Health Network is building America's first integrated community health citizenship and workforce development platform. We monetize the daily practice of health through three interlocking workforce legs, delivered on one platform, replicated region by region through Chambers of Health. Tucson is the inaugural region and the template for everything after it.

LegDelivered throughTucson anchorStatus
1 · HealthcareThe Healthcare Pre-Apprentice Pathway — work-based learning from exposure to employment, with the Certified Patient credential (FHIR → Epic / Oracle Health) as the exit ramp. Detailed below.Banner — University Family Care; AZHCAN; Pipeline ConnectsREADY
2 · Engineering & MfgMarstronaut STEM — applied engineering, aerospace, advanced manufacturingRaytheon (RTX)PIPELINE
3 · Business, Innovation & MediaSTEAM TEAMS + the Force Marketplace — real revenue, real customers, real bylinesEdgar Soto / PCFSTAMARKETPLACE NOT SHIPPED

The number that should anchor every investor conversation

452 modules built. 389 shipped. 152 original songs. 1,032 brand assets. Two working AI coaches. Four white-label reference customers. Our problem has never been production. It is convergence — we have far more built than we have sold. This gameplan is about closing that gap, not building more.

The Front Door — the Mixed Media Feed + Activity Feed

The Network now has one front-facing home at /mixed-media-library: a Feed that merges everything we publish — blogs, news, games, songs, ebooks and LIVE recaps — with a built-in Activity Feed (the community social wall), personalized to each member by what they follow, newest first. It is rebuilt natively on our own engine after retiring WordPress and BuddyBoss — we own the whole stack now.

📰 One home, many media

Content newsstand and community wall in a single scroll. Official content (blogs, events, drops) auto-posts into the feed and still keeps its own tab.

🎯 Personalized by follows

Each member sees the channels they follow — My Healthy Arizona, My Cardio Girl, Marstronaut, Coach Lucy, Coach Rob — plus their groups. A Discover view finds more to follow.

🔑 Engagement universal, authorship earned

Everyone can like, comment and share from day one. Starting a post is earned by completing Certified Basics — built-in spam control and a concrete reason to finish onboarding.

🛡️ Governed & safe

Per-group privacy and who-can-post, a six-layer spam defense, and health-data guardrails for a community that includes patients, caregivers and minors.

🔔 Daily Digest at 7 PM

Replaces email-on-every-post with one personal, member-tunable digest — the natural home for Dr. Rob's Daily Dose and the day's active feeds.

🧱 We own the stack

Native tables (activity_posts, follows, channels) on our own engine — not a rented platform we can lose.

Why it anchors the gameplan

This is the convergence surface. It turns the 452 modules we've built into a daily habit: every game, song, blog and course finally has one place to be discovered, shared and talked about — driving retention and engagement, feeding the PHIT data layer, and tying member activity directly to onboarding completion.

Leg 1 in Full — The Healthcare Pre-Apprentice Pathway

This is our lead offer. Not a course — a work-based learning engine that carries a person from first exposure all the way to a community health leadership role, with real placements and real credentials at every step.

We address both ends of the health workforce crisis at once: we raise health literacy so the population is more ready and resilient, and we accelerate workforce development through exposure, access, and supported pathways. Already building and deploying in Arizona and Pennsylvania, with a national replication model.

The role progression — Learner to Leader

ExposureSkill BuildingPracticumLeadershipManagementDirector-Level
StudentInternAmbassadorGroup LeaderCoachCommunity Director

That scaffolding is the differentiator. Most workforce programs hand someone a certificate and wish them luck. Ours gives them a next rung — and the top rung is a Chamber of Health Community Director, which means the pathway feeds our own franchise.

🎯 The Work-Based Learning Engine

Proven internship site: active placements for 20+ universities, 80–240 hours over 8–24 week terms, averaging 4.7/5 stars via Riipen. Spans graphic design, healthcare, data science, business, and public health — now expanding down into middle school, high school, and young adult.

💡 Healthy IDEAS Challenge

Project-based learning where students research, create and publish real health education content — portfolio-ready work with tangible community impact. This is what a pre-apprentice actually produces.

🫀 360° Human Explorer

1,800+ interactive 3D anatomy lessons across 11 body systems, bilingual EN/ES, mapped to NHES, NGSS, CASEL and Common Core. The clinical-literacy foundation of the pathway.

🎓 Gamified Health Academy

Virtual Dr. Rob + Prevention Bingo Cards with assessments and coin-based rewards — the engagement layer that keeps learners progressing instead of dropping out.

🩸 Certification tracks

Phlebotomy certification prep, Berry Best WEX pathway and phleb gate — the concrete credential a Banner or a health system actually hires against.

🏥 White-Label Apprenticeship

Health systems and employers deploy branded Academy instances — a direct learner-to-employer pipeline they own. This is where Leg 1 meets the white-label ladder and becomes recurring revenue.

Industry connectivity — what's live vs. targeted

CapabilityWhat it unlocksStatus
Chamber of Health SystemsConvenes health institutions, public health agencies, employers and CBOs at the county levelLIVE
Omni-Media & mentorshipMedia production, advisory boards, cross-sector mentorship — professional exposure and industry accessLIVE
Intelligence Hub141 live panels across 3,143 U.S. counties and 200+ countries, powering data-driven workforce decisionsSUMMER 2026
SCORM / xAPI integrationCanvas, Blackboard, Moodle, Google Classroom, Schoology — the key to institutional adoptionSUMMER 2026
EHR connectivity (FHIR)Epic + Oracle Health data exchange — the Certified Patient credential writing back to the physicianSUMMER 2026

Where Marstronaut actually sits

Marstronaut is a track inside this pathway, not the pathway itself — it's the career-exploration and STEM on-ramp that feeds Leg 1 (healthcare) and anchors Leg 2 (engineering). Leading with Marstronaut undersells us: it makes a 22-module career program sound like the whole offer, when the real offer is a proven work-based learning engine with 20+ university partners, a 4.7/5 rating, and a six-rung ladder into employment. That is what Banner, TUSD, Pima CC and a grant reviewer are buying.

The Two Live Workstreams

Everything else waits behind these. #1 is existential; #2 is what turns our data into a product.

Workstream 1 — Close the PII exposure

Owner: Coach Lucy · Due: immediately

Detailed above. Code is done; the SQL has not been run. This blocks every enterprise and health-system contract we are chasing — Banner will ask, and we cannot answer well today. It is also the cheapest item on this entire page: an afternoon of work that is already written.

StepActionOwner
1Approve Option A (safe-public view; names/avatars stay visible, email + 32 columns lock down)Lucy + Rob
2Run 3-FIX-profiles-SAFE-PUBLIC.sql on a Supabase branchLucy
3Run 4-FIX-membership-tables.sql (org / group rosters + group settings)Lucy
4Verify: incognito leak test returns empty; names still render via the viewLucy
5Confirm engagement-command-center is admin-gatedEng
6Promote to production; log the closure in the compliance trackerLucy

Workstream 2 — Ship PHIT™ Live It + Share It

Owner: Dr. Rob + Coach Lucy · Q3 2026

The Chamber of Health Intelligence Hub is extraordinary — 141 live data panels, 8 categories, 107 live APIs, county-vs-peer comparison. But it is a viewer, not a scorecard. A Director can look at their county's health and do nothing with it. Two of the three pillars don't exist:

PillarStatusWhat it needs to be
Learn It
COMPLETE
141 panels, live APIs, peer comparisonDone. This is the moat.
Live It
NOT BUILT
NothingTasks & Targets. A Director picks 3–5 county metrics, sets a target and a horizon, and the platform tracks movement against it. Wires into the existing LIVE It Trackers so individual member actions roll up into the county number. This is what makes a Chamber accountable — and what a funder actually buys.
Share It
NOT BUILT
NothingShareable Assets. One-click export of a branded county health report (PDF + web), chart images for social, and a "My County Health Profile" one-pager. Wires into Share It Studio and QR Studio. This is how a Director recruits — and how the magazine gets its content.

Why this is the highest-leverage build we have

It unblocks four things at once: the Director scorecard (Gear 1), the PHIT product story investors are underwriting (Gear 2), the magazine's data spine (Gear 6), and the cross-sector leaderboard (Gear 4 — all three of those need a target to score against). Nothing else on this page unlocks four gears.

The Authoring Advisor Treatment REPEATABLE PRODUCT

A Global Advisor brings a book. We turn it into a platform. This is a productized, nine-step treatment — not a bespoke favor. Below is the full treatment, with Ricardo Valerdi's The Five-Tool Team as the completed worked example. This is what we show the next author.

The trade, in one line

They get: a digital companion that drives book sales and speaking engagements, a turnkey teaching product for their audiences, and a co-branded showcase. We get: their network, their credibility, their existing distribution — and a repeatable Force Marketplace SKU. Ricardo alone brings Arizona Diamondbacks / MLB, NCAA, SpaceX and West Point relationships plus a K-12 Science of Sport school footprint.

The nine treatment steps

StepWhat we doWorked example — The Five-Tool TeamStatus
1Extract the spine
Find the framework that can carry a course
The book's FLASH acronym — Focus on the Questions · Look at the Data · Analyze the Consequences · Scrutinize the Options · Humanize It. Five tools = five modules, five game categories, five scorecard axes. If a book has no five-part spine, it isn't a candidate.DONE
2Build the marketing front door
The page that sells it
Hero ("Great decisions don't happen by accident. They happen by design."), author bio, endorsement bar (Jim Cantrell/SpaceX, Alex Auerbach/Jaguars), the five tools, Learn·Live·Share, What's Inside, Free vs Full, Who It's For, a try-a-question demo, and the coaches. Three CTAs: Get the Book · Start the BASICS Course · Play Category Qwest.
→ See the live marketing page
LIVE
3Digitize the book
Read it or listen to it
Full digital edition with text-to-speech, paragraph highlighting, and an Author's Welcome video/audio slot per chapter. Built by a PDF→JSON converter so it swaps cleanly to the original manuscript.
→ The Digital Edition reader
LIVE
4Wrap it in Learn·Live·Share
The 9-module course
Warm-up (Process > Outcome) → Scorecard (Rookie/Pro/All-Star) → one module per tool → FLASH capstone. Every module pays a LEARN, LIVE and SHARE coin. Live It is always a real decision the member is facing right now — not a worksheet.
→ The course
LIVE
5Build the team challenge
So a leader can run it
5 weeks, one tool per week, run by a leader with their actual team on a real shared decision. Team "Tool Rating" climbs on a shared board. Coach Lucy hosts the cadence; the author appears weekly as the expert. All five tools All-Star = the trophy.
→ The keepsake / trophy
LIVE
6Build the game set
Reality Health Games
Category Qwest (flagship — one category per tool, questions drawn from the book's own laws and paradoxes) and Paradox Match. Spiral Sprint and The Tenth Man next.
→ Category Qwest · → Paradox Match
LIVE
7Bridge to their existing audience
Meet them where they already are
Ricardo already had a K-12 Science of Sport footprint — so we turned his Strike-Zone geometry worksheet into a Live It micro-game. That single bridge converts his existing school relationships into FFH members.
→ Science of Sport tie-in
LIVE
8Package free vs. paid
Give something away, monetize the rest
BASICS Badge (free): opening chapters, the scorecard, Category Qwest, the warm-up. Top-of-funnel taste.
Full Digital Edition (paid): the complete book, all 9 modules, the full game set, the All-Star certificate co-signed Author × FFH.
→ The Academy · → Join
LIVE
9Sign the rights agreement
The gate — never skip it
The Full Edition reproduces the author's copyrighted text. It ships only under a signed Contributing Partners Agreement covering revenue share and ownership. Until signed, the reader stays an internal preview behind the Full-Edition gate, and the raw source PDF comes out of the deploy folder.NOT SIGNED

⚠ Steps 1–8 are done. Step 9 is not — and it's the one that matters.

We have built and published a complete commercial product around another person's copyrighted book without a signed agreement. That is the single largest legal exposure in this document after the PII leak. It is also the easy fix: get the Contributing Partners Agreement signed with Ricardo, and that same agreement becomes the template for every Authoring Advisor after him. Sign it once, sell it ten times.

The Tucson Bench — Our Proof the Model Works

Regional Chamber of Health Partners. Six roles, all filled, in one city. No other region has this.

PartnerRole in the loopWhat we have
Amber Wells Smith
CEO, Pipeline Connects
Feeds the pipelinePartnership roadmap, pre-apprenticeship one-pager, AZ accreditation roster staged for Supabase → /pipeline-partnership/
Chuck McCollum
TUSD
Supplies the studentsCTE pilot deck + summary + demo school → /tusd-cte-pilot-deck/ · /tusd-demo-school/
Pima Community CollegeCredentials themApprenticeship-sponsor strategy, accreditation command center
Banner — University Family CareHires themPathways, ROI engine, incentive alignment → /banner-pathways/ · /banner-roi-engine/ · /bufc-academy/
Southern Arizona ChamberConvenes employersChamber-of-Health Spark, Karla meeting → /chamber-of-health-spark/
Courtney Slanaker
PCTWC Commissioner · Red Cross
Carries the communityPCTWC Commission Space + Know Your Blood challenge VERIFY TITLE
Edgar Soto
Pima County Film & Sports Tourism
Leg 3 anchorProduction-Adjacent Workforce Credentialing Rubric (co-designing)
Coach Tim Kish
Football is a Force for Good · U of A
Athletics on-rampBoard deck, NFL markets gameplan → /football-force-for-good/

Read it as a system

Amber feeds the pipeline → Chuck supplies the students → Pima CC credentials them → Banner hires them → the Chamber convenes the employers → PCTWC carries the community. That is a closed loop — a complete Chamber of Health in one city. This is the story for the RHT grant, and the answer to any investor asking whether the model actually works.

The Estate — Seven Gears, All Linked

Click anything. This is the full platform a partner or investor can walk themselves through.

⚙️ Gear 1 · Chamber of Health

The franchise unit. Plus Commission-in-a-Box — the second replicable unit, and possibly the faster sale.

📊 Gear 2 · PHIT™ Scores & Data

The measurement moat. 141 panels, 107 APIs. Live It + Share It pillars pending (Workstream 2).

🎓 Gear 3 · 360° Academy & Trackers

The retention engine. ~90 modules. Includes the Tucson-born My Girl Power® franchise (24+ modules).

🎮 Gear 4 · STEAM TEAMS & Games

Top-of-funnel. 24 Category Qwests, 16 clubs, 16 leadership councils. Unified leaderboard still to build.

🧭 Gear 5 · Workforce Development

Where the money is. Marstronaut (22 modules), Banner, Berry Best, phlebotomy, accreditation.

📣 Gear 6 · OmniMedia Publishing

Voice, reach, and the second revenue line. 152 original songs. Marketplace not yet shipped.

🛰️ Gear 7 · Command Control Center

How we actually run 452 modules without chaos.

🏷️ The White-Label Ladder

Four tiers, four reference customers, zero price sheet. Our most under-monetized asset.

🏛️ Commission-in-a-Box

Virtual Boardroom: quorum tracker, auto-agenda, one-tap motions, self-drafting minutes. PCTWC is the live reference customer.

Health BASICS — Quick Audit & Compliance Posture

Added October 10, 2026. The Health BASICS series becomes the core of the FREE Basics Health Academy on theforce.health, with an on/off toggle for custom command centers and white-label academies.

Our compliance posture today: B2C, not HIPAA

We have no school contracts and no healthcare contracts, so we are not operating under HIPAA, and the Supabase HIPAA agreement is not a launch blocker. As a consumer app that stores health numbers we still follow the FTC Health Breach Notification Rule and state consumer health-data laws: members see only their own readings, consent is clear, the privacy policy covers health logs, and we keep a breach plan. HIPAA/BAA and school (FERPA) requirements come back on the table the day we sign the first healthcare or school contract.

The audit in one line

Health BASICS had 95 courses and 1,122 lessons under one tag, but no structure. We cut it to 12 topics, starting with the tools: 5 are ready, 5 need work, 2 need new content.

#TopicStatus
1Health Tracker 101 — how to use our trackersNew content
2Habits & Streaks — SMART goals, 7-day streaksNeeds work
3NutritionReady
4BMI & Healthy WeightNeeds work
5Blood PressureNeeds work
6CholesterolNew content
7Blood Sugar (Diabetes & A1C)Ready
8FitnessReady
9Sleep & StressReady
10Substance Smarts — opioids, tobacco, vapingNeeds work
11Stop the Bleed & CPRNeeds work
12Know Your Care — health literacy, meds, portalReady

Every topic ends the same way: log the number in a LIVE It tracker and start a 7-day streak. That teaches members to know and use our tools — the point of a free academy.

Done and next

ItemOwnerStatus
Four new LIVE It trackers: Blood Pressure, Cholesterol, Blood Sugar, Smoke-Free (own-rows-only data, safety alerts, coins)LucyBuilt · deploy
Run the lit_vitals migration in Supabase, then _deploy-lit-vitals-2026-10-08.pyLucyOpen
Clinical sign-off on tracker ranges and safety messagesDr. RobOpen
Consumer privacy basics: consent wording, privacy policy covers health logs, breach planLucyOpen
Write Health Tracker 101 and Habits & Streaks (5 lessons each)Coach LucyOpen
Re-import 4 courses whose lessons never arrived; write new Cholesterol and Blood Pressure lessonsDr. Rob + EngOpen
Health BASICS Qwest (Know Your Numbers + Live Well boards); rebuild the bingo cardEngOpen
Rebuild /health-basics/ as the series front door; move the ~1/3 non-health courses to their own shelvesLucy + EngOpen
Omni-media package: flip book per topic, Leader's Guide, FREE Basics toggle for white-label academiesLucyOpen

The Gameplan — FY 2026–2027

Four quarters. Owners named. This is what we hold each other to.

Q3 2026
Jul – Sep

Close the gaps. Stop building.

  • Close the PII exposure — run the SQL, verify, promote. (Lucy — this week)
  • Ship PHIT Live It + Share It — Tasks & Targets, exportable county report. (Rob + Lucy)
  • Sign the Valerdi Contributing Partners Agreement, then send him the demo. Template for all future authors. (Lucy)
  • Audit template drift across SCFA + Berry Best before we sell another white-label. (Eng)
  • Fix the two known gaps — the 16th club has no page; Showcase links a dead /human-explorer-club/. (Eng)
Q4 2026
Oct – Dec

Convert Tucson. Prove the loop.

  • Close Banner — University Family Care. First anchor health-system revenue; validates Leg 1. (Lucy)
  • Seat the Tucson anchor triad — AZHCAN + Raytheon + Edgar Soto. (Lucy)
  • Package Arizona as the RHT grant ask — the six-role closed loop is the story. (Lucy + Rob)
  • Name & price the Custom Academy ladder — publish tiers 1–4 as a real SKU. (Lucy)
  • Launch My Healthy Arizona Magazine #1 — proves the Director revenue line. (Coach Lucy)
  • File the IP with Krajec — PHIT™ + the Certified Patient FHIR flow are the defensible claims. (Lucy)
Q1 2027
Jan – Mar

Turn the arcade into a competition.

  • Ship Force Marketplace v1 — Leg 3 has no proof point without it; first non-grant recurring margin. (Lucy)
  • Build the unified Leaderboard layer — cross-sector, cross-generational, international. Needs a shared schema, profile tagging, and a privacy pass. (Eng + Rob)
  • Productize Commission-in-a-Box — price it, name it, sell it beyond Pima County. (Lucy)
  • Certified Patient credential — FHIR pilot with Banner writing back to the EHR. (Rob)
Q2 2027
Apr – Jun

Replicate.

  • Stand up Chamber #2 using the Tucson template + Business-in-a-Box. Fill the same six roles. (Lucy)
  • Author-to-platform #2 — a second Global Advisor's book through the Valerdi template. (Lucy)
  • Regional magazines — the two-tier publishing playbook in two markets. (Coach Lucy)
  • Raise — with PHIT complete, Banner signed, and Marketplace live, the story is finally whole. (Lucy)

The one discipline that makes this gameplan work

Notice that Q3 contains no new products. That is deliberate. We have 452 modules and 41 open opportunities; our failure mode is not a lack of ideas, it is starting the next thing before finishing the last one. The single biggest risk to this plan is that we build something new in Q3 instead of closing the security hole, shipping PHIT, and signing Banner.

Open Decisions — Lucy & Rob

Things this document cannot resolve on its own.

DecisionWhy it's blockedNeeds
Option A vs B on profilesDetermines whether members can see each other's names. A keeps social features; B is more secure but reworks more pages. Team built for A.Lucy + Rob
Who are the Global Advisors?Ricardo is the only one I can confirm as formally seated from our files. This tier is too important to leave to memory — an investor will ask.Lucy + Rob
Courtney Slanaker's titleOur files list her as PCTWC Commissioner and a Red Cross blood-drive champion. Confirm the Red Cross relationship before external use.Lucy
The 16th club16 clubs in the roster, only 15 have a Deploy Ready page. Which one is missing?Lucy
White-label pricingFour tiers shipped, no price sheet. Also unknown whether instances have forked from canonical templates — if they have, the margin is a mirage.Lucy + Eng
Dr. Rob sign-off on tracker rangesThe four new Health BASICS trackers label readings (e.g. "High · Stage 1") and show safety alerts. Clinical wording needs a physician's review before the FREE Basics academy goes public.Rob
Arizona SciTechZero assets on file, despite being arguably our best statewide distribution channel into every AZ district.Lucy