VA #4 Onboarding Runbook

Before you start

• Person already has a working email (usually @helpmerisecorp.com).
• USERS row exists with Role=va (Lane D / Commander stamp — invent no seats).
• access_tier will be VA (or VA_ZONE if zone-limited).

Steps (copy order)

1. Confirm USERS Email · Role=va · Status active.
2. Ask Lane D (or run Groups admin) to add email to staff-role-va@helpmecareedu.net as MEMBER.
3. Prove: members.get status=ACTIVE (door will show after D refresh).
4. Open session map: POST /api/portal-va-session-gate.php with {"action":"session_map","email":"…"} → 200.
5. Wall smoke: POST wall_probe student_pii and vault → both 403.
6. Login face: VA Portal (A owns paint; D owns gate).
7. Howto: va-howto.html · Manual: va-user-manual.html.
8. Assign first VA-4C task only after DOO fill-gate promote with access_tier=VA.

Never

• A STUDENT ROLE never receives staff Group clearance. A PERSON may hold STUDENT + EMPLOYEE concurrently (Chris/K'Lhana pattern) — provision the employee hat only.
• Do not invent NEXT_COHORT names.
• Do not open payment vault / student PII for VA.
• Do not flip real_shift_offer_send / Telnyx / pickup GO here.

Team already cleared (Sun 7/26)

• Joan Abejero — jabejero@helpmerisecorp.com
• Mary Grace Sequera — mgsequera@helpmerisecorp.com
• Ana Lacao — alacao@helpmerisecorp.com