Indhu
Senior Product Designer
based in Seattle
Contents
01LATShipped
02KeyeShipped
03Misinformation Center
Set up a time →AboutEmailResumeLinkedIn

LAT

Lifecycle Assessment Tracker — Designing an AI-assisted maintenance system people could trust with $180K decisions

01 — Snapshot

Context
Lead designer for an ML platform helping a university manage 60–80+ buildings across three campuses, delivered through a consulting engagement at Amento.
Constraint
Legacy CMMS/ERP couldn't be disrupted, data had hard integrity boundaries, and capital decisions were political.
Decision
Shipped as a modular API layer with human-in-the-loop AI: approval gates, visible reasoning, logged overrides.
Tradeoff
Chose human review over full automation, even though it was slower than letting the model act on its own — the boiler incident validated staying cautious.

TL;DR

Role
Lead Product Designer (60% design, 40% strategy), at Amento
Team
1 PM, 1 designer (me), 2 external engineers, client stakeholders
Timeline
12 months (Jun 2023–May 2024)
Impact
95% pilot → 96% rollout adoption
Key Skills
Enterprise UX · Trust-centered AI design · Stakeholder alignment · Field research · API-first architecture
Decision Authority
Owned: workflow design, the human-in-the-loop approval model, and the alert-framing decisions that rebuilt manager trust in the system (see Decision 03). Client stakeholders owned data-integrity and political constraints I had to design within.

Fragmented data was forcing humans to do the work a system should have done

70–75% of operational U.S. buildings predate 2000 (EIA.gov). The tools we evaluated didn't connect maintenance history, lifecycle risk, and capital planning to fit the university's existing systems.

A technician underground can't access repair history. A manager stitches spreadsheets before planning. Leadership decides on partial data.

Diagram of fragmented maintenance data flow

"I do the physical work in 30 minutes, but reporting takes another 20."

"Each year I'm choosing between urgent-now and smart-long-term with partial data."

Live Click through the real prototype
A flagged decision, three tasks, the CapEx proposal, and Messages — all wired together, built from the real LAT design system.
My contribution
Reframed the product from a shared facilities dashboard into role-specific decision surfaces, set the approval model that let managers act on AI recommendations without blind faith, and carried the offline-first field workflow from research through pilot.

Impact

Pilot cohort: 43 people (18 technicians, 15 operations/asset managers, 7 accounting, 3 executives), tracked over 12 weeks — the test group for a tool that rolled out to ~4,000 technicians and facilities-adjacent staff with system access across every building and campus.

96%
Weekly active use across the full ~4,000-person rollout by week 12 — up from 95% in the 43-person pilot that preceded it, clearing the university IT department's 70% threshold for keeping a tool live
Observed
50% → 92%
Data accuracy, pilot through full rollout — historical records had years of duplicate and inconsistent entries; a cleanup pass plus a flow that caught redundancies at the source closed most of the gap as adoption grew
Observed
25%
Fewer unexpected maintenance costs, month-4 trend projected forward a year
Projected

Observed metrics come directly from pilot and rollout usage logs.

Operational. Linking work orders to lifecycle cost made repair history visible in real time.

Decision-making. Teams stopped entering meetings to reconcile facts, and started entering them to decide.

Strategic. Scenario simulation moved feasibility analysis in-house and drew interest from other universities.

02 — Context & Problem

Why existing tools failed the people managing this infrastructure

Discovery research (separate from the 43-person pilot that came later): 7–8 technicians and vendors, 4 project managers, 2 accountants, 5–6 executives, and the Director of Facilities — the university's primary sponsor.

The institution had expertise. It lacked a unified source of truth.

CMMS platforms don't model asset lifespan or CapEx tradeoffs — preventive maintenance ran on time, not risk. Replacing the stack wasn't viable, and no tool we evaluated offered the integrated version at any price.

Fragmentation, by owner
Field conditions
Technicians & vendors — tracked on paper or memory, rarely reached managers
Maintenance scheduling
Legacy CMMS/ERP, IT-owned — ran on fixed intervals, not real risk
Capital requests
Managers & accountants — spreadsheets stitched before each planning cycle
Final approval
Executives & the Director of Facilities — decided on whatever data reached them
What the research changed

Technicians worked underground with no signal → connectivity isn't guaranteed → offline-first capture with queued auto-sync

Managers scanned a wall of graphs before acting on anything → more information wasn't producing better decisions → a ranked priority queue replaced the dashboard

Managers hesitated on a "68% failure risk" alert → a risk score tells you how worried to be, not what to do → alerts reframed around cost and timeframe

Legacy records had inherited duplicates that inflated risk scores → an AI system inherits its data's quality problems → a "Needs Verification" state with mandatory human approval

Market Gap Analysis

03 — Solution

Three decisions, one standard running through all of them: never act without a human verifying it first

Translating numbers into decisions was the real problem. The system did three things: kept data clean, prioritized attention, explained financial stakes — each one verified before it reached a budget. Trustworthy decisions were the actual product.

One data model, three surfaces
Technician — mobile, offline-first
Field reports queue locally, voice-captured, and sync when connectivity returns
↓ feeds shared data model ↓
Manager — priority queue
Same records, ranked by risk and consequence instead of raw graphs; approves or overrides flagged items
↓ rolls up ↓
Executive — summary
Portfolio-level cost and risk, traceable back to the field report that drove it
Decision 01
Keep the data clean at the source

Problem. Field data is where "50% data accuracy" actually breaks — a completed job whose update never reaches the system is, downstream, a job that never happened.

Sync state became visible on the work order itself — saved, sending, or failed, with a one-tap retry.

Technician
Technician work order queue — a summary banner showing unsent changes, including the failed Roof drain job with its Retry button
One shift, one status
Banner breaks out saved, sending, and failed.
Technician job with synced updates, awaiting PM approval for extra work
Extra work, locked
Synced, but locked until a Project Manager approves the extra work.
Project Manager
Project Manager view of pending approvals
Approvals
Authorizes the spend; above $5K it routes to Accounts.
Project Manager view of the Boiler Unit 3 job detail
Job detail
Request, synced updates, and messages together before deciding.

A failed sync shouldn't feel like lost work. We kept the update safely on-device and made recovery one tap.

Result. This is the field layer behind the 50%→92% data-accuracy jump (see Impact). Median approval time: 7-9 minutes with everything needed, 2.2-2.8 hours when still waiting on data.

Decision 02
Replace the "Everything Dashboard"

Problem. 8 of 10 managers were overwhelmed by the dashboard's graphs, map, and calendar — and queued items instead of acting.

Considered. Five versions, from a 26-panel dashboard down to one decision and three tasks — each one removed or added something, and the overwhelm only eased once we stopped trimming panels and started ranking what the manager should do.

V1
Everything dashboard
First launch
26
panels + 12 KPI tiles
V2
Refined
Half the graphs
14
panels, 6 KPI tiles
V3
AI summary + list
Still overwhelmed
16
panels + 4 dropdowns
V4
Today, closer to final
Ranked queue
1
ranked list of 5
Final
Decision + 3 tasks
Clickable prototype
1
decision, 0 charts

Click a screen to view the full image.

V1 → V2
V2 — refined dashboard with half the panels

Cut the graphs

Still no first action — every remaining panel had equal weight.

V2 → V3
V3 — AI summary and priority list added

Added AI help

A summary and 4 dropdowns added more to read, not more direction.

V3 → V4
V4 — ranked queue, closer to final

Queue replaces the grid

Five equal rows — the boiler said "Review," not a decision.

V4 → Final
Final — one decision card plus three tasks

One decision first

Cost + date framing worked — everything else reads as secondary.

Design. A ranked priority queue replaced it; filters now show which options are feasible.

Cost. Lost the liked-but-messy auto-arranged calendar; rolled out to 20 managers for two weeks before the full 64.

Result. Weekly closure rate roughly doubled (4/10 → 8–9/10 across 12 managers), decision time dropped 14→4 min, and IT saw just 1–2 help requests a month after full launch.

Design for AI failure, not the demo
The Boiler Incident

Model said: Critical — Boiler Unit 3, the same asset Decision 03 below walks through, now flagged for a $180K replacement.
Human found: duplicated maintenance records had inflated the risk score.
Design response: a "Needs Verification" state, visible risk drivers, mandatory manager approval, and logged overrides.
Result: adoption held steady — the near-miss became a reason to trust the system more, not less.

Decision 03 — the core insight
Turn predictions into consequences
A probability isn't a decision. A consequence is.

First version showed "Boiler failure risk: 68%." Managers didn't trust a number they couldn't trace. We landed on dollars instead — managers think in the monthly CAPEX cycle, where a figure maps straight onto "can I request this now."

Click either card to compare
Probability framing

Boiler failure risk: 68%

Consequence framing

3 years past 9-year lifespan → $3K/month if not replaced

Manager response: requested inspection → approved replacement in 1 day
CriticalMonitorSafe

Result. Override rate 61%→19%; acceptance 42%→78%; resolution time 3 days→2 hours — voice capture in the field closed the gap technicians avoided by skipping the office trip.

Model behavior

Risk routes into Critical / Monitor / Safe, never a raw probability. Critical alerts always show their drivers and require a human call before touching budget.

Watching for rubber-stamping: managers log reasoning even when they agree, so a falling override rate reads as trust, not deferral.

"It's great that I can add my own opinion instead of just accepting or rejecting a flagged asset, and pulling up its history in one click instead of digging through folders has made decision-making a lot less stressful."

— facilities manager, post-launch stakeholder interview

Supporting workflows

Outside the core prioritize → explain → verify loop, two more workflows fed the same data model.

Offline field reporting. Work Orders, Asset DNA, and Cost-to-Date link automatically — offline capture, voice input, and auto-sync cut average reporting time from ~20 to ~8 minutes per ticket.

Typing underground or on a swing stage isn't practical, so voice fills the form hands-free. 40+ technicians used offline capture in the first month, surfacing an unscoped need for offline asset history, which we added. The real win, per managers: synced updates close jobs without chasing technicians.

Scenario simulation. In-house cost comparisons replaced feasibility studies, drawing outside interest.

04 — The Turning Point

We weren't designing another dashboard — we were connecting decisions that used to happen in isolation

We thought we were customizing a product. Research showed each role was making decisions in isolation, off the same data — what was missing was shared context and trust.

So instead of one dashboard for everyone, we built role-based surfaces over a shared foundation, surfacing only what was actionable.

Three-panel diagram of the old approach's failure modes: Manual (human error in a disconnected technician-to-PM chain), Silos (departments and tools that don't talk to each other), and Reactive (maintenance decided after problems occur, not before)

05 — Constraints & Design Responses

The legacy ecosystem couldn't be disrupted — LAT shipped as a modular layer alongside it

Legacy Ecosystem Couldn't Be Disrupted
A modular layer alongside the existing stack. The university's CS/IT teams kept running legacy CMMS/ERP; our 2 engineers owned only the LAT API layer on top.
Data Integrity Had Hard Boundaries
Strict governance meant inherited, duplicated records — the root of the boiler incident (Decision 03). Validation states and confidence tiers built that trust back.
Roles Had Wildly Different Needs
Technicians needed voice-to-text, managers delegation, executives two options — role-based surfaces beat one universal view.

06 — Tradeoffs

We chose human-in-the-loop over speed, even where it cost us

Every feature mapped to one driver: cost, planning accuracy, or adoption. Offline workflows and data integrity came before expanding AI scope — these three tradeoffs show where.

Override rate = the share of AI flags a manager or accountant overturned, compared early vs. late in the 12-week pilot. The drop was gradual — it fell week over week as managers built confidence in the score and began logging reasoning notes even when they agreed with it.

Considered
Auto-scheduled maintenance, no human gate.
Shipped
Human-in-the-loop review
The first visible mistake would have collapsed adoption otherwise.
61% → 19% override rate
Considered
One shared dashboard for every user.
Shipped
Role-based surfaces
One view stalled decisions — each role scanned for something different, so I split surfaces by role.
Considered
Widen predictive coverage fast after early results.
Shipped
Slowed for validation first
Data accuracy climbed as a result.
50% → 92% data accuracy
What we didn't build
AI auto-scheduling, ESG modeling, and digital twins were all requested and all cut. Twelve months forced one north star — decision confidence — and two drivers, cost and adoption.
The model keeps learning
By month four, stakeholders saw urgent maintenance requests already falling and projected that trend forward a year: 25% fewer unexpected maintenance costs Projected.
Weather drives a lot of this institution's maintenance load — winter failures spike independent of asset condition — already priced into CAPEX planning, so the 4-month baseline isn't assumed to hold flat across a year.
A usable interface alone couldn't drive adoption — that depended on reliable data, understandable recommendations, and clear decision ownership.

07 — Reflection

Clarity drove action more than completeness — users didn't want more data, they wanted less to think about

What I got wrong. I thought predictive accuracy would drive adoption. Data integrity mattered more — strong predictions failed when the data was messy.

What mattered more. The lifecycle linkage, not the AI. Once work orders, asset history, and cost were reliably connected, decisions improved before the predictive layer even matured.

What I learned about AI in enterprise. Adoption depends less on model sophistication than on whether people can see why it's wrong when it is. Design for the failure, not the demo.

Next Case Study
Misinformation Center
Media Literacy Tools
→
EmailLinkedIn ↗Resume ↗