Mamori kit: Risks

Risk table

Risk	Effect	Mitigation
Possible-fall flag performance (built-in Wi-Fi sensing)	False alarms worry the family; missed falls give false comfort. Results vary with room, furniture, pets, other people and the router.	Call it a target until the pilot shows otherwise; validate in real homes; clear wording that it may miss falls or raise false ones; a way to cancel a false flag; never a medical claim.
Medical-device boundary	A fall feature, or wording that drifts into health claims, could change how the product is classified.	Confirm with a regulatory specialist and the authority before the pilot; wording review before every release.
Privacy of always-on sensing	Wi-Fi sensing runs without the mic, so the shutter does not stop it; people may feel watched.	Raw sensing data stays on the device; only a flag is sent; its own on/off and indicator; explain it plainly; consent from the person who lives there.
Voice assistant: cloud and privacy	After the wake word, speech goes to a cloud service with its own data terms; false wake-ups send audio nobody meant to send.	Shutter cuts the mic in hardware; amber ring while listening; choose a speech service with clear retention terms; test false wake-ups.
Trust in the privacy circuit	If people doubt that the shutter really cuts the mic, the concept loses its point.	Hardware-only power path with no software override; independent review of schematic and board; privacy test on every unit; explain the circuit openly.
Carrier approval and cellular certification	Operator device approval and terminal conformity can add time and test rounds.	Use pre-certified cellular modules unchanged; talk to the operator early; plan these tests in DVT.
Certification time (radio and EMC)	A failed EMC test or a changed antenna adds weeks; new radio tests may be needed.	Modules with their own certification, used with their certified antennas; pre-scan in EVT; book a lab early (see Japan).
Antennas inside fabric on oak	Poor placement weakens Wi-Fi, cellular and the sensing.	No metal in the fabric; antennas high and apart; tune in the finished housing in EVT.
Power, battery and cellular	Cellular current peaks need a solid supply; no battery means no alert during a power cut.	Power design with reserve; decide on battery backup early, with its own safety and certification work; say plainly what happens without power.
Air sensor drift and placement	Readings drift over time; heat from the board, radios, display and adapter skews temperature and humidity.	Sensors near the rear intake, away from heat; thermal design; compare against a reference in EVT and DVT; plain-word messages, no false precision.
Fabric durability, cleaning and sound	Stains (off-white shows them), fading, pilling, fraying at the display opening, pet damage; the fabric damps speaker and mic.	Test abrasion, light and colour fastness; sealed edge at the display opening; measure sound through the fabric; care instructions; study a removable sleeve.
Wood movement	Humid summers and dry heated winters make oak swell and shrink: gaps or cracks at the joint with the body.	Kiln-dried stock, moisture check, finish on all faces, fixings that allow movement, humidity cycling test.
Heat inside a fabric cube	Radios, display and sensor fan warm the inside; parts age faster and readings shift.	Measure in EVT; air path through the base; low-power modes.
Supply of parts	A candidate part may go end-of-life or have long lead times.	Check the maker’s lifecycle status at each gate; name second sources; buffer stock for the pilot.
Partner dependency (now optional)	If a partner sensor is used, its interface, terms and performance are outside this design.	Keep it optional; the device works without it; written interface agreement if used.
User acceptance	The person may find a talking, sensing device intrusive or confusing, or unplug it; family and user may want different things.	Co-design sessions with older users; shutter closed by default; three clear ring colours and one word on the display; a calm voice.
Help button misuse or reach	Accidental presses cause worry; a fall away from the device means the button cannot be reached.	Test press feel and a cancel step with users; never present it as an emergency service.