Upper East Side: the front door is attended, the service door is not

Because the doorman is at the front and almost everything that goes wrong comes in at the back. The service entrance, the areaway door, the basement corridor and the service elevator are the paths that stay open through deliveries and contractor traffic, and they usually have no credential, no camera at face height and no record of who came through.

The second reason is the record. When something happens on the eleventh floor at 2 p.m., a desk log tells you a person was announced. A credential log plus a camera at the service vestibule tells you who presented what, at which door, and which elevator floor was selected. That difference matters most in exactly the situations boards least want to be in.

Inside a historic district, that is a Landmarks question before it is a technical one, and the answer depends on the specific facade and how the work is drawn. It is not automatically refused. It is reviewed.

In practice most attended buildings do not need it. The visitor is already through the outer door when they reach the desk, so the panel or reader goes on the vestibule reveal or the interior door face where it is not street-visible. Where a building genuinely needs a street-face panel (usually an unattended building or one converting away from a full-time desk), we scope the LPC filing before quoting the hardware, so the permit path is priced rather than discovered.

With floor restriction, on both cars. A credential authorizes the resident’s floor and the amenity floors and nothing else, and the restriction has to be applied to the service elevator identically or it is decorative.

What is specific to a private landing is that there is no corridor to absorb a mistake. In an ordinary building somebody who reaches the wrong floor is standing in a public hallway. Here they are standing in your foyer. So two settings matter more than the hardware. The timed window after a read should be short enough that a car cannot simply be re-boarded on somebody else’s authorization while the doors are still open. And building staff have to be handled deliberately: porters, the superintendent and an insured contractor all legitimately need to reach these landings, and issuing them a blanket all-floors credential quietly undoes the entire design. Scheduled credentials that log their own use are the answer, and that log is the only record anyone will ever have of who reached your door.

Sometimes, and it is worth asking before assuming otherwise. In a building where the riser has enough usable conductors and the existing in-unit device is a simple audio handset, several retrofit paths keep the apartment side untouched and replace only the entry panel and the head-end. That avoids 120 in-unit appointments, which is the expensive and disruptive part of any co-op job.

Where it does not work is when residents want video in the apartment, or when the riser cannot carry the new signaling. Then the choice is honest: keep audio and change nothing inside the apartments, or accept in-unit work and get video. We price both and let the board choose rather than presenting one as the only option.

Yes, across the whole East Side above 59th Street. Lenox Hill and Carnegie Hill read as classic pre-war co-op work with the landmark constraints described above. Yorkville east of Third mixes post-war towers with walk-up tenements, and the walk-up work there is much closer to a Brooklyn or Astoria retrofit: two-wire risers, plaster over lath, and the question of whether the existing pair tests clean.

The Madison Avenue and East Midtown commercial corridors sit immediately alongside, and office and retail work there is a different track again: turnstiles, tenant credential federation and visitor pre-registration rather than tenant directories.