AP.

My Alumnus

Live demo

Fictional data, resets nightly.

Year
2026
Role
UX Research, Concept Ideation
Deliverable
Working Prototype
Duration
16 days
Course
System Design

0 s

Time to approve

Three taps, a real guard on first use. One think-aloud session.

16 of 22

Findings fixed

Four were major. One evaluator, who also built the app.

4 to 1

Holds in a queue

Wait 3 min 43 s down to 1 min 12 s. A model estimate, not re-run live.

0

Final screens

Guard desktop and iPad, admin, and a dark theme.

01 Brief

What it is

The guard console: a visitor record with a large photo and Approve, Deny and Put on hold.

02 Problem

What was wrong

  1. 01.

    There is nothing to check against.

  2. 02.

    The time goes to the phone chain.

  3. 03.

    Approvals depend on people who may not answer.

  4. 04.

    The guard is accountable for a decision he has no information to make.

03 Research

What I did

  • Interviews

    Four one-on-one: three alumni and one main-gate guard.

  • Contextual inquiry

    Two field visits: the security gate and the administration office.

  • Experience audit

    21 touchpoints across alumnus, guard and admin, each scored on five criteria.

  • Secondary research

    Gate-security practice, the DPDP Act 2023 and UGC safety guidelines.

  • Artifact analysis

    A teardown of MyGate, Envoy and Raptor: the guard screen and the visitor credential.

  • Gap analysis

    Needs mapped against four existing products.

In their words

Alumnus, interview (translated from Hindi)
Main-gate guard, interview (translated from Hindi)
Administration office, field visit

04 Insights

What I found

  1. 01.

    Recognition lives in people, not records.

  2. 02.

    Graduation takes away the only proof.

  3. 03.

    Every doubt becomes a chain of phone calls.

  4. 04.

    Records are written but never read.

  5. 05.

    Knowing in advance makes the check disappear.

05 Gaps

What no product does

  • Silent approvers

    Detail

    No product defines what happens when the approver does not respond. A time limit with a fallback is undocumented across every product studied.

  • Record to decision

    Detail

    No product joins the alumni record to the gate decision. Alumni-ID tools have the record but no guard console; visitor tools have the console but no alumni record.

  • The empty-handed walk-in

    Detail

    No product verifies a visitor who carries nothing. Every option needs an ID scan, an app credential or someone to vouch in real time.

06 People

Who it is for

Rohan Mehta

The returning alumnus. Research-based.

Proof of belonging ended at graduation, so the campus treats him as a stranger.

Ramesh Yadav

The main-gate guard. Research-based.

Carries responsibility for a decision he has no information to make.

Sunil Patel

The university admin. Partly inferred.

Receives escalations but cannot reach the gate.

Priya Shah

The student host. A proto-persona, to be validated.

Vouches for family visiting the campus.

07 Design

What I decided

The photo is the main check, so it is big.

180 by 240 on the record, with the photo's age shown. No initials avatars: a wrong letter could look like an identity.

Ask, do not show.

With two matching names, both records stay hidden until the visitor answers a batch and department question.

Host first.

The guard calls the host first and the case passes to the admin only if the host cannot confirm. Field research showed the admin was least likely to answer.

Approve locks outside visiting hours, and says why.

The locked button names both alternatives, Deny and Put on hold, instead of leaving a judgment call.

Colour never carries a verdict alone.

Every decision button has an icon and a label, because a colour-blindness simulation showed Approve and Deny converge.

A typeface chosen for a timer.

Google Sans, for its tabular figures, so the escalation timer does not jump as it ticks.

The admin console: an escalation case with the host's number, the case trail and a note for the audit.

08 System

One system

  • About 420 tokens

    What it does

    In three tiers: primitives, semantic roles and component tokens, each with a light and a dark value.

  • A contrast gate in the build

    What it does

    The build fails if any of 81 listed text and background pairs drops below its minimum in either theme.

  • 0 automated violations

    What it does

    axe-core across all 50 mockup pages, in light, dark and forced colours.

  • Mockups to app

    What it does

    The same token and component files style the mockups, the prototype and the live app.

09 Testing

How I tested

  • Heuristic evaluation

    Who

    One expert evaluator

    What it found

    22 findings: 4 major, 11 minor, 7 cosmetic

  • Cognitive walkthrough

    Who

    Expert, as the guard and admin personas

    What it found

    13 tasks: 8 clean, 5 with a failure story

  • Simulation

    Who

    A script on the real guard console

    What it found

    A queue of 12 visitors: holds 4 to 1

  • Think-aloud

    Who

    One working security guard, live app

    What it found

    4 of 5 tasks completed; 1 approval silently not saved

10 Queue

Before and after

  • Visitors held at the gate

    Before

    4

    After the fixes

    1

  • Mean time at the gate

    Before

    3 min 43 s

    After the fixes

    1 min 12 s

  • Longest time at the gate

    Before

    11 min 30 s

    After the fixes

    10 min 25 s

  • Guard's own time, all visitors

    Before

    4 min 12 s

    After the fixes

    3 min 53 s

A note on the numbers

  • One evaluator, who also built the app, ran the heuristic evaluation and the walkthrough.
  • Three of the four methods are expert or model based. Only one think-aloud session, with one working guard, observed a real user.
  • No admin was observed using the admin console, and there has been no pilot at a real university. The demo runs on fictional data that resets nightly.
  • Baselines come from four interviews and two field visits at one campus. They are accounts, not timings.

11 Limits

What is still open

  • In the think-aloud session, one of four approvals was silently not saved. It is reported and not fixed, by owner decision.
  • A visitor whose photo did not match was let in after the host's phone confirmation. The host confirms the visit, not who is standing at the gate. Accepted risk.
  • Expected visits can still be booked outside visiting hours, the admin has no gate phone number, and there is no undo for a decision.
  • Simulation times are estimates for an expert guard with an assumed arrival rate, measured on the evaluation build.
  • Dark-theme decision buttons sit at about 2:1 against a dark card. Their labels pass; a lighter edge is open.

12 Next

What comes next

Show the result of every decision

Display Saving on tap and an error if nothing comes back, so a silent failure cannot happen.

Pick the right hold reason

Pre-select it from what the record actually has.

Settle the photo-mismatch rule

Decide the identity rule before any real pilot.

Test at a real gate

Run the prepared pilot with three guards and two admins, to replace predictions with observed behaviour.

Summary

Next Project: MedAssist

Get in Touch

Write to me