Analytics, Safety & Reporting
The viewer-telemetry model, advertiser/program reporting, privacy boundary, and conservative safety-alert workflow.
Viewer telemetry event pipeline
HVN player
→ session_started
→ playback_started
→ heartbeat
→ pause/resume
→ buffering
→ quality_change
→ ad_start/ad_complete
→ program_changed
→ error
→ exit
↓
collector / Pages Function / Worker
↓
aggregated storage
↓
Command Audience Intelligence
Do not count Command’s own Program Monitor as an audience session.
Live Now dashboard
Display concurrent viewers, peak concurrent, unique viewers/sessions, joins/losses over the last minute, average watch/session time, market split, and a time-series. Label estimated/derived metrics clearly.
Retention and program intelligence
Retention should align viewer percentage/count over the program timeline and mark station IDs, commercial breaks, major presentation changes, and program boundaries. Program reports should include average/peak concurrent, watch time, completion, gained viewers, carryover into the next program, market/device/referrer breakdown, repeat audience, and commercial retention.
Advertiser reporting
Where measurable, include impressions/plays, completion, average audience during spot, market/program/time, reach/frequency, retention around the ad, link/campaign traffic, contracted vs delivered, and exportable proof-of-play. Do not label an estimate as a census count.
Privacy boundary
Use aggregated/pseudonymous analytics. Geography should be market/city/region/state/country level — not street address. Public privacy disclosures must match what is actually collected. Do not secretly add new telemetry categories without updating governance/privacy review.
Safety & Weather workflow
Ingest official alerts
Safety Worker / CommandUse National Weather Service official active alerts for market coordinates. Keep source text/raw record for traceability.
Geofence to the affected market
Safety DeskA Seattle local alert must not automatically appear in Miami. National presentation is a separate deliberate choice.
Draft concise copy
CommandAI may summarize official text only when configured; it does not decide whether the alert is true. Preserve event, area, expiry, and official action.
Preview
Safety DeskCheck market, wording, expiry, and layer placement.
TAKE or leave pending
OperatorNormal mode is operator-reviewed TAKE. Keep automatic TAKE disabled until formal policy/testing is complete.
Clear on expiry/cancellation
Safety DeskRemove outdated on-air copy and retain audit record.