Step 1 · Before the day — rooms and consent
The program brings its room roster — the same roster its enrollment system already holds — and a per-child consent request goes to each parent. A parent grants or declines whether their child may be photographed and whether the family wants to order. No face template is computed from a child’s photo in the shipping configuration. The consent machinery for face matching is off by default per child, and the matching capability is a capability we are building and is not turned on today — the recognizer is not yet wired. Because a childcare center so often has siblings enrolled in different rooms, the roster pairs them, so the photographer knows which children to bring together. Consent-gated capture is built and live.