KINETIC · ONE PLATFORM · THE VERB CODEX
Every verb. The signal it mints. The fear it removes.
Full panel, Stripe and Palantir co-chairing. 22 verbs across 9 namespaces. Status: 3 live, the rest already exist as processes, events, or locked ideation.
STRIPE · CO-CHAIR
A verb ships when it has three things: an idempotent output schema, a meter unit, and a webhook. The catalog IS the pricing page.
PALANTIR · CO-CHAIR
Every output must resolve to subject, actor, or edge in one ontology, or it does not ship. Verbs are how the graph grows.
INQTEL
Split the catalog on one line: verbs that READ the world are open and metered. Verbs that TOUCH the world stay operator-gated forever.
APPLE
Grammar is the product: subject.verb, always. Nine namespaces is the ceiling. Say no to verb number 25.
VERCEL
Ship read verbs to MCP first. The ephemeral app layer is distribution you never have to build or maintain.
LUX
Price the fear removed, never the compute. A wallet screen that stops one bad wire is worth 10,000x its API cost.
PRODUCT FLOW · CEO LOCKED 08·04Subject + Verb → Components → File Builder → Export. Kinetic provides verified building blocks; the user assembles the File and decides what to do. Deterministic intelligence, explicit uncertainty, no advice.
OPEN THE VISUAL FLOW →
OPERATIONS · INTERACTIVE API STUDYEvery single Operation and its full result. Search the catalog, then open the human Record, Findings, Sources & method, run details, and exact API response.
EXPLORE THE GALLERY →
UI STUDY 01 · ACTIVE THEORY ROUNDUniversal shell, content-native views, one spatial File system. Explore dense synthesis, pin exact Component versions into a persistent File, and compose the complete Kinetic Record without rebuilding the data.
OPEN THE CLICKABLE STUDY →
PRICING LAB · PANEL DRAFTGround-zero market map, buyer science, unit economics, price architecture, and first CEO rulings.
OPEN PRICING LAB →
COMMERCIAL GOLD · CEO LOCKED 08·04Take a seat. Add a card. Choose capabilities. Deep Screen is on. Start cranking. One account, no bespoke deployment, investigative depth equal to the Newlin Level 1 and Level 2 work, rebuilt without advice. Native Kinetic Dark and Light appearance, chosen by the user.
OPEN THE GOLDEN PATH →
THE 360 BLUEPRINT · GROUND-UP ARCHITECTURE · LOCKED SECTION BY SECTION WITH M1K3D0W
| ROUND | SECTION | THE QUESTION IT ANSWERS | STATUS |
|---|
| R0 | Physics | 11 objects · verb→data→signal→pack→case · subject abstraction · source classes · exhaust | LOCKED 08·03 |
| R1 | Greenfield verdict | Ground zero on the ideal stack · contracts + tests cross · old system is the regression oracle | LOCKED 08·04 |
| R2 | Stack & scale | Special panel · ideal tools, structure, infra against the scale model · the visible architecture | IN PANEL — BELOW |
| R3 | The Ledger | Schema of the 11 objects, append-only rules, tenancy walls, source-class tags | QUEUED |
| R4 | Verb runtime | Registry, closed fleet, verb contract, how a new verb ships in a day | QUEUED |
| R5 | Synthesis & exhaust | Actor resolution, edges, patterns, signal minting — the only layer with the full graph | QUEUED |
| R6 | Surfaces | app shell, the API, MCP, webhooks, packs — all thin, all reading one seam | QUEUED |
| R7 | Machine distribution | MCP as a channel: read verbs as agent tools · agent auth + metering · registry strategy · abuse limits · payload provenance (D20 promoted · ruled 1a 08·04) | QUEUED |
| R8 | Meter & money | 4 meters on the synthesis seam, entitlements, the invoice that writes itself | QUEUED |
| R9 | Trust fabric | Auth, gates, provenance chain, court-readiness, why matter.* stays operator-gated | QUEUED |
| R10 | Partner rails | Data · execution · authority · expertise-as-process, all behind the verb | QUEUED |
| R11 | Divisions & presets | 10 buyer types as 4-value presets, seeded plays as pre-seeded desks | QUEUED |
| R12 | Build sequence | Repo plan, milestones, cutover doctrine: nothing migrates, surfaces re-point | QUEUED |
| R13 | The message | The value ladder · one noun owned (cases), one enemy (the dead-end report) · hero, proof, machine, flywheel lines | LOCKED 08·04 |
R1 · GREENFIELD VERDICT · WHY START FRESH IS RIGHT — AND THE ONE RULE THAT KEEPS IT SAFE
STRIPE · CO-CHAIR
Rewrites die when they break contracts. Yours survive: the verb API, the taxonomy, the meters are all seams. Keep the contract byte-stable, replace everything behind it.
PALANTIR · CO-CHAIR
This is not a rewrite. Nothing you have today stores actors, edges, actions, or outcomes. You are giving the ontology its first home. Greenfield is the honest name for that.
INQTEL
Append-only, source-class tags, and custody must be birth properties of the ledger. You cannot retrofit provenance into a mutable store and take it to court.
VERCEL
One monorepo. Ledger ships dark next to prod; verbs keep running on the old system untouched; every PR gets a preview. Cutover is a re-point, not a migration.
APPLE
The danger is the second-system: rebuilding is permission to add. Rule: the ledger is the only net-new code. Everything else must justify itself as a port.
LUX
Value milestone is not feature parity. It is the first exhaust signal minted end-to-end — the day one customer's run enriches another's. Sequence everything to hit that soonest.
THE RISK LEDGER · WHAT OLD CODE ACTUALLY COSTS YOU · PANEL RE-RUN ON MIKE'S CHALLENGE
| RISK | HOW IT BITES | SEVERITY |
|---|
| worldview leak | ported plumbing smuggles 2025's assumptions — per-app databases, serverless job model, REST-noun shapes — into a ledger designed for 2026 scale | HIGH |
| invisible coupling | old modules drag their framework choices, deps, and workarounds; the ideal stack is constrained before it exists | HIGH |
| false economy | porting + adapter glue routinely costs more than a clean rewrite against a known spec — and you maintain the glue forever | MED |
| losing proven behavior | the only real risk of ground zero — but behavior lives in contracts and tests, not source files. Transplant those, not code | SOLVED |
Synthesized v2: ground zero on the ideal stack. Zero source files cross by default. What transplants is knowledge, not code: the taxonomy tree, sanitizer rules, output schemas, and test suites cross as contracts and regression oracles. The old system stays live in prod as the oracle — run both, diff outputs to parity, then surfaces re-point. Any file that wants to cross must argue its way in. Quality bar: Apple-grade elegance, front and back — one design system, one schema, no adapter glue, nothing that would embarrass the seam.
WHAT CROSSES OVER · KNOWLEDGE CROSSES, SOURCE FILES DO NOT
| ASSET | WHAT IT IS TODAY | DISPOSITION | WHY |
|---|
| taxonomy v2 | canonical provider-neutral element tree, live on all 3 verbs, zero vendor strings | AS CONTRACT | the element tree + stable IDs cross as schema and tests; implementation rewritten clean |
| verb workers | anvil-tracer fleet: crypto.trace / crypto.monitor / impersonation detector + Elliptic adapter | AS ORACLE | logic re-implemented on the new fleet; old workers stay live to diff outputs to parity |
| sanitizer + signing | recursive provider scrubber, signed webhooks, source-privacy smoke tests | AS CONTRACT | the rules and smoke tests cross; enforcement rewritten into the new boundary |
| anvil-api protocol plane | 45 ops, 23 webhooks, jobs, idempotency, scopes, usage | AS CONTRACT | the OpenAPI surface stays byte-stable for existing keys; a brand-new implementation serves it |
| billing spine | catalog-as-code, append-only stripe_events, entitlement fan-out | AS PATTERN | append-only event store + entitlement fan-out pattern proven; rebuilt on the ledger itself |
| app shell | kinetic-desk app: hyperminimal UI, Better Auth, invites, vault | REBUILD THIN | surfaces are disposable; keep the design system and auth pattern, drop the private store |
| Dragnet · VEIL · screening · LODESTAR | live processes with their own consoles and scripts | REBUILD AS VERBS | processes become verbs + presets; their consoles become app views |
| standalone consoles | Dragnet console, Nexus mock, portal experiments, per-client desks | RETIRE | every surface that doesn't read the seam dies at cutover |
ROUND 1 RULINGS · RECORDED 08·04 ON CEO ORDER “GO”
1 · Verdict — 🟢 RULED 1a: ground zero, ideal stack, zero source files by default; contracts + tests cross, old system stays live as regression oracle
2 · Scale step-back — 🟢 RULED 2a: STACK & SCALE inserted as R2, decided before any schema, run by the special panel below
3 · Cadence — 🟢 RULED 3a: one round at a time, rulings lock on the page with dates
R2 · STACK & SCALE · THE SPECIAL PANEL · MULTI-LANE ANALYSIS: PROCESS · TASTE · PRODUCT
APPLE · SYSTEMS & PRODUCT · CHAIR
Elegance is subtraction under constraint. One language, one schema, one design system, one deploy path. Every additional technology must buy its complexity back with interest.
STRIPE · PLATFORM ENGINEERING · CHAIR
The core must be boring and provable. Postgres, append-only, idempotent at the door. Spend your innovation budget on the ontology and the developer experience, never on infrastructure novelty.
PALANTIR · ONTOLOGY & BACKEND
Model the ontology first; storage is an implementation detail behind projections. Actors and edges are derived state — rebuildable from the event log at any time. If you cannot replay it, you do not own it.
VERCEL · FRONTEND & DELIVERY
Monorepo, preview-per-PR, contracts generate types in both directions. The frontend is a projection of the ledger the same way the invoice is. Ship every change behind a URL someone can click.
ACTIVE THEORY · EXPERIENCE & MOTION
The app should feel like an instrument, not a website. Motion is physics with intent — nothing decorative, everything under 200ms, every transition explains where data came from and where it went.
STUDIO FREIGHT · HYPERMINIMAL CRAFT
Typography and rhythm carry the hierarchy; boxes and chrome do not. Density is respect for the operator. Design the empty state, the loading state, the gated state — the in-between is the product.
LANE 1 · PROCESS · HOW IT IS BUILT, DEPLOYED, OPERATED
| DISCIPLINE | THE STANDARD |
|---|
| built | schema-first: contracts are the source of truth, types generated both directions; a verb ships as one PR — manifest + worker + tests; no code lands without a decision ID from the register |
| deployed | trunk-based, preview-per-PR, database branch per preview; prod re-points are gated on oracle parity thresholds, never on optimism; rollback is a re-point back |
| operated | structured events + traces from the first commit; the per-tenant audit log is a product feature, not an ops tool; every incident replayable from the ledger |
| quality gate | independent review on every PR, deterministic tests first, sanitizer smoke tests on every boundary — nothing that would embarrass the seam |
LANE 2 · TASTE · HOW IT LOOKS, FEELS, ACTS
| DIMENSION | THE STANDARD |
|---|
| looks | the hyperminimal register as a versioned package — tokens, primitives, LODESTAR spine; typography carries hierarchy; dark institutional; density as respect |
| feels | 100ms interaction budget, optimistic where the ledger allows; motion is physics with intent, under 200ms, never decorative; latency is a design defect |
| acts | like an instrument: every number traceable to its run, every state designed — empty, loading, error, gated; the interface never claims more certainty than the engine holds |
| everywhere | one design system across app, docs, packs, and invoices — the PDF a lawyer forwards is held to the same bar as the dashboard |
LANE 3 · PRODUCT · WHAT IT MUST BE
| PRINCIPLE | THE STANDARD |
|---|
| the catalog is the product | verbs, presets, and meters readable on one page; the pricing explains the architecture and the architecture explains the pricing |
| time to first signal | sandbox key to first minted signal in under five minutes; the demo is the funnel |
| files carry the work | verified components assembled into a forwardable, signed File carry the brand into rooms sales cannot enter |
| meters explain themselves | customers watch usage accrue in real time; the invoice is a projection of the ledger, never a surprise |
THE VISIBLE ARCHITECTURE · EVERY LAYER, ONE SEAM, ONE DIRECTION OF TRUTH
SURFACES
thin projections — all read the same seam, none hold state
appAPIMCP (read)webhookspacks / exportsinvoice▼ ONE CONTRACT · SCHEMA-FIRST · TYPES GENERATED BOTH WAYS ▼
RUNTIME · THE DISPATCH DOOR
every run passes one door — no path around the check
entitlement checkmeter tickidempotencyverb registry-as-codeclosed fleetoracle diff harness▼ FACTS LAND APPEND-ONLY · TAGGED AT BIRTH ▼
LEDGER · THE EVENT LOG
the one store — 11 objects as projections of an immutable log
append-only eventstyped projectionssource-class tagscustody chaintenancy walls (RLS)▼ DERIVED STATE · REBUILDABLE BY REPLAY ▼
SYNTHESIS · ENGINE ONLY
the only layer that sees the whole graph — never customer-visible
actor resolutionedgespattern mintingexhaust → signals4 meters read here
TRUST FABRIC · SPANS ALL LAYERS
org-bound identity & keys
sanitizer at every boundary
signed outputs, hash-chained custody
traces + per-tenant audit log
PARTNER SEAM · BEHIND THE VERB
data · execution · authority · expertise — all adapter contracts, never tenant-visible
old system runs live; outputs diffed to parity before any surface re-points
THE FIVE LAYERS · SOURCE → VERB → LEDGER → EXHAUST → SURFACE · SYSTEM DIAGRAM · RULED IN THREAD 08·04
1 · SOURCES · RAW CAPABILITY
dumb, reusable, no user meaning — one source feeds many verbs · the PROVENANCE GATE lives here: is the data clean
chain indexerssanctions listsleak indexesregistriesADS-B / AIS / RF (candidates)▼ COMPOSED BY · ADD SOURCES GREEDILY, VERBS SPARINGLY ▼
2 · VERBS · THE VALUE UNITS
each verb unifies many sources into one output that is RAW + DETERMINISTIC (taxonomy v2) — powerful in itself, machine-consumable · the VALUE GATE lives here: does it serve the user
API-consumableMCP (read)deterministic within itselfdeclares its sources▼ WRITES TO · APPEND-ONLY · TAGGED AT BIRTH ▼
3 · LEDGER · ONE GRAPH
every verb output lands as canonical objects with source-class tags — the single record every surface reads
append-onlycustody chaintenancy walls▼ ENRICHED BY · CROSS-JOB · THE SECOND KIND OF SYNTHESIS ▼
4 · SYNTHESIS · EXHAUST · THE IP MOAT
the only layer that has ever seen the full graph — correlates every job ever run: actors, edges, patterns → signals · a competitor without the ledger serves stale answers
exhaust → signalsengine only, never raw API4 meters read here▼ SERVED THROUGH ▼
5 · SURFACES · THIN, DISPOSABLE
the application layer reads synthesized outputs; machines read verbs directly
appAPIMCP (read)webhookspacks
THE ACTION PROCESS · ONE DISPATCH
01 dispatch — POST /v1/jobs · entitlement + meter at the door
02 claim & execute — closed fleet pulls the verb's declared sources
03 raw data — sanitized, internal only
04 canonicalize — API TIER · the raw + deterministic verb output
05 synthesize — APP TIER · exhaust enrichment mints signals · THE IP
06 deliver fan-out — app · API · MCP · webhook · pack
07 watch & meter — deltas only · billed at dispatch and at read
verb output (04): canonicalization of many sources — same inputs, same output, a fact a machine can trust
exhaust (05): cross-job correlation over the whole ledger — uniquely ours
read/analyze verbs: self-serve, metered, MCP-able · matter.*: operator-gated forever, never MCP
TRADE STUDIES · D01–D08 · PANEL POSITION → CTO RECOMMENDATION · AWAITING CEO RULING
| ID | DECISION | PANEL POSITION | CTO RECOMMENDATION ⭐ |
|---|
| D01 | Language | Vercel + Stripe: TypeScript end-to-end, one type system from schema to pixel. Palantir: acceptable if compute-heavy adapters stay seam-isolated so Rust can take hot paths later | TypeScript end-to-end. One language for ledger, runtime, surfaces; hot paths isolated behind the worker contract for future Rust without re-architecture |
| D02 | Compute | Vercel: surfaces belong on the edge with previews. Palantir: the fleet must be long-lived — licensed feeds, sessions, custody need processes, not lambdas | Hybrid. Surfaces on Vercel; verb fleet as long-lived containers. Two compute models, one contract between them |
| D03 | Ledger store | Stripe: the core must be boring and provable. Apple: one store until physics forces two | Postgres (Neon), event-sourced. Append-only events + typed projections; RLS tenancy; branch-per-preview. No exotic store earns its keep yet |
| D04 | Graph | Palantir: the graph is derived state — storage choice is secondary to replayability | Materialized from the ledger into Postgres graph tables. Dedicated graph DB deferred until traversal depth demands it; the seam makes the swap invisible |
| D05 | Queue | Stripe: idempotency at the door matters more than queue brand. Apple: fewest moving parts | Postgres-backed queue (SKIP LOCKED) for dispatch now; graduate to a Temporal-class engine when verb chaining ships — behind the same dispatch contract |
| D06 | Fleet | Unanimous: no Kubernetes until forced; per-verb-family isolation for blast radius and licensing walls | Per-verb-family services on managed containers. Closed fleet, never exposed; scale by adding workers, not orchestration layers |
| D07 | Repo | Vercel: one monorepo or the contract drifts. Apple: the repo layout should read like the architecture diagram above | Single monorepo, workspace packages: contracts · taxonomy · ledger · runtime · design-system · surfaces/*. Preview-per-PR across the whole tree |
| D08 | Objects | Panel: evidence must be court-ready by construction, not by later export discipline | Content-addressed object store (S3-class) — packs hash-chained with a custody manifest; the address is the integrity proof |
OPEN RULINGS · ROUND 2 · D01–D08 · REPLY “ALL AS RECOMMENDED” OR AMEND BY ID (E.G. “D05 TEMPORAL NOW”)
On your ruling, D01–D08 lock green on the register, the architecture above becomes canon, and R3 · THE LEDGER opens with the full schema of the 11 objects.
THE FEEL — live experience mock of the app built to the taste lane:
codex.m1k3d0w.com/feel · Today · Run (live event ledger) · Packs · Meter
THE DECISION REGISTER · EVERY CHOICE, FRONT END TO BACK END · EACH RECEIVES A FULL TRADE STUDY IN ITS ROUND
| ID | LAYER | DECISION | LEADING OPTIONS | ROUND | STATUS |
|---|
| D01 | Language | Primary backend language | TypeScript end-to-end · Go runtime + TS surfaces · Rust core | STACK | PROPOSED ⭐ |
| D02 | Compute | Where code runs | containers (long-lived) · serverless · hybrid: containers for fleet, edge for surfaces | STACK | PROPOSED ⭐ |
| D03 | Ledger store | Home of the 11 objects | Postgres event-sourced · dedicated event store · document store | STACK | PROPOSED ⭐ |
| D04 | Graph | Actor/edge synthesis store | graph-in-Postgres · dedicated graph DB · materialized from ledger | STACK | PROPOSED ⭐ |
| D05 | Queue | Verb dispatch fabric | Postgres-backed queue · managed queue · workflow engine (Temporal-class) | STACK | PROPOSED ⭐ |
| D06 | Fleet | Worker orchestration | managed containers · Kubernetes · per-verb isolated services | STACK | PROPOSED ⭐ |
| D07 | Repo | Repository topology | single monorepo with workspaces · core + surfaces split · polyrepo | STACK | PROPOSED ⭐ |
| D08 | Objects | Packs / evidence storage | S3-class object store + content addressing · DB blobs · vault service | STACK | PROPOSED ⭐ |
| D09 | Ledger | Event model & immutability | append-only event log + projections · versioned rows · hybrid | LEDGER | OPEN |
| D10 | Ledger | Tenancy walls | row-level security · schema-per-tenant · DB-per-tenant for gov tier | LEDGER | OPEN |
| D11 | Ledger | Source-class + custody tags | first-class columns on every fact · provenance sidecar · hash-chained envelope | LEDGER | OPEN |
| D12 | Runtime | The verb contract | typed manifest per verb: input schema, output elements, meter unit, webhook, gate | RUNTIME | OPEN |
| D13 | Runtime | Registry & rollout | registry-as-code in repo · DB registry · signed manifest bundle | RUNTIME | OPEN |
| D14 | Runtime | Oracle diff harness | shadow-run both systems, diff canonical outputs to parity before any cutover | RUNTIME | OPEN |
| D15 | Synthesis | Actor resolution engine | deterministic rules first · scored matching · analyst-confirmed merges only | SYNTH | OPEN |
| D16 | Synthesis | Pattern & exhaust minting | case→pattern pipeline: what generalizes, what stays tenant-private, review gate | SYNTH | OPEN |
| D17 | Frontend | Application framework | Next.js App Router · Remix · SvelteKit | SURFACES | OPEN |
| D18 | Frontend | Design system | hyperminimal system as versioned package · tokens + primitives · per-surface CSS | SURFACES | OPEN |
| D19 | API | Contract source of truth | schema-first (OpenAPI generates types both ways) · code-first · RPC internal + REST external | SURFACES | OPEN |
| D20 | API | Machine surface | MCP read verbs · SDK generation · webhook contract carried over byte-stable | SURFACES | PROMOTED → R7 · RULED 1a 08·04 |
| D21 | Money | Metering pipeline | meter events on synthesis seam → aggregation → Stripe usage records · 4 meters as catalog-as-code | METER | OPEN |
| D22 | Money | Entitlement enforcement | checked at dispatch door · fan-out pattern from billing spine, rebuilt on ledger | METER | OPEN |
| D23 | Trust | Identity & auth | Better Auth pattern · managed identity · custom, with org-bound keys as today | TRUST | OPEN |
| D24 | Trust | Provenance & signing | signed outputs, hash-chained custody, court-ready export · sanitizer at every boundary | TRUST | OPEN |
| D25 | Trust | Observability | structured events + traces from day one · per-tenant audit log as a product feature | TRUST | OPEN |
| D26 | Partners | Partner seam | all 4 shapes behind the verb: adapter contract, never tenant-visible | PARTNERS | OPEN |
| D27 | Ops | Environments & CI | preview-per-PR · staging with synthetic tenants · prod gated on oracle parity | SEQUENCE | OPEN |
| D28 | Ops | Cutover criteria | defined parity thresholds per verb · re-point order · rollback doctrine | SEQUENCE | OPEN |
| D29 | Sources | Source Rights Register | every source carries license, derivative-resale rights, provenance class · panel add (Lux + IQT) 08·04 | SOURCES | ADDED 1a 08·04 |
| D30 | Ledger | Recall-by-source | first-class ledger op: excise a poisoned source's objects by replay, re-mint signals without it · panel add (IQT) 08·04 | LEDGER | ADDED 1a 08·04 |
| D31 | Exhaust | Flywheel metric | named, scorecard-reported: signals minted per 1k jobs · % of verb outputs enriched by exhaust · panel add (Lux) 08·04 | EXHAUST | ADDED 1a 08·04 |
| D32 | Flow | Universal production contract | Subject + Verb → Components → File Builder → Export · human judgment and action remain outside the contract | SURFACES | RULED 08·04 |
| D33 | Files | Component library + Builder | typed verified components · plain Kinetic Record default · restrained styling · PDF/DOCX/JSON/web/API/MCP export | SURFACES | RULED 08·04 |
| D34 | Semantics | No-advice boundary | state what was found and how · never recommend what the recipient should do · Case/Matter/Mandate remain outside production flow | TRUST | RULED 08·04 |
| D35 | Synthesis | Deterministic intelligence | same frozen inputs + versioned rules + graph snapshot + model version = same Components · observation / derived fact / scored inference separated · uncertainty explicit | SYNTH | RULED 08·04 |
| D36 | Workspace | Universal shell + native renderers | stable Subject anatomy and Component contract · each content class receives its perfected map / timeline / entity / source / custody renderer | SURFACES | PROPOSED ⭐ |
| D37 | Composition | Persistent File rail | complete plain Record exists by default · exact Component versions pin into one spatial rail · compose expands into Record register without a separate builder app | SURFACES | PROPOSED ⭐ |
| D38 | Snapshots | Freeze at Component binding | File pins immutable Component versions immediately · live source can diverge · updates require explicit re-pin · manifest computed on seal/export | TRUST | PROPOSED ⭐ |
| D39 | Commerce | Commercial golden path | take a seat → add card → choose capabilities → run · one account and one application · no bespoke customer deployment or implementation project | MONEY | RULED 08·04 |
| D40 | Capability | First killer capability | Deep Screen · Newlin Level 1 and Level 2 investigative depth as the quality benchmark · typed verified Components and File · advice removed | RUNTIME | RULED 08·04 |
| D41 | Appearance | Customer-selected theme | native Kinetic Dark + Kinetic Light · user chooses · preference persists · semantic signal colors retain meaning in both | SURFACES | RULED 08·04 |
| D42 | Application layout | Which layout register is home | Calm Canvas is the application layout direction · Quiet Workspace soft containers only for dense multi-object screens · Guided Focus reserved for first-run activation · study at /layouts | SURFACES | RULED 08·04 |
| D45 | Capability packaging | How standard Capability access is sold | Single Capability or Kinetic Complete · Complete unlocks all standard Capabilities · cross-capability work requires the contributing rights | COMMERCIAL | RULED 08·04 |
| D46 | Complete economics | Whether Complete means unlimited Runs | Unlimited standard Capability access, not unlimited compute · shared usage balance across app, API, and MCP · price toward broad experimentation without uncapped loss | COMMERCIAL | RULED 08·04 |
THE VC AUDIT · ZOOM OUT · WHAT DILIGENCE WOULD FIND, WHAT TO FIX, IN WHAT ORDER
LUX CAPITAL · DEEP TECH · CHAIR
We fund moats that compound without permission. The exhaust graph is one. But a moat that requires volume is a promise until the volume exists. Sequence everything to the first cross-tenant signal, then to the tenth.
Y COMBINATOR · PMF & SPEED · CHAIR
The only metric that survives contact with us is paid usage. Zero users is not a positioning problem, it is the whole problem. Charge early, talk to users weekly, let the invoice grade the roadmap.
A16Z · CATEGORY
Category creation is real here: signals that build cases has no incumbent. But categories are won with distribution, not taxonomy. The register proves you can decide; only the pipeline proves you can sell.
FOUNDERS FUND · MONOPOLY
One graph that ten buyer types fund together is a monopoly shape. The risk is not competition, it is dilution of effort. Eleven named properties is ten experiments taxing one asset.
INDEX · GTM & PRICING
The pre-seeded claim motion is the best go-to-market instinct in this file: the demo is already personalized when the buyer arrives. Prove claim-to-paid in one market before the atlas runs.
BESSEMER · SAAS METRICS
Time-to-first-signal under five minutes is elite. Operator pricing at $2,500/mo implies sales-assisted. Solo operations implies no pipeline coverage. Every metric you lack is a sales-side metric.
IN-Q-TEL · GOV TRUST
Government and institutional buyers purchase provenance, not features. SOC 2, the custody chain, and the operator gate on matter.* are the product for this segment. Ship the trust fabric like a feature.
KHOSLA · TECHNICAL RISK
Technical risk is largely retired: the hard choices are made and boring in the right ways. Reallocate founder hours accordingly; the code no longer needs you the way the market does.
FIRST ROUND · FOUNDER OPS
Key-person concentration is the quiet company-killer. This codex is the mitigation: decisions on paper, contracts as memory, closers with quotas. Institutionalize before you scale.
THE SCORECARD · TEN DIMENSIONS, CODE TO MARKETING · PASS / WATCH / FLAG
| DIMENSION | GRADE | WHAT DILIGENCE FINDS | THE MOVE |
|---|
| architecture & code | PASS | One ontology, seams everywhere, contracts as memory. The rewrite is de-risked by the oracle doctrine and the ledger-only rule from R1 | Hold the R1 guardrail: anything beyond the ledger argues its way in |
| moat | WATCH | The exhaust graph is a genuine data network effect, but it compounds only with tenant volume. Today it is a design, not yet an asset | Count minted cross-tenant signals as a KPI from the first commit |
| market | PASS | Landscape sweep found zero direct competitors; the flat-fee wedge against contingency and enterprise pricing is durable | Re-run the landscape quarterly; TRM Seizure360 and AssetTrace Q4 '26 are the watch items |
| revenue proof | FLAG | Zero paying users. Every strength above is theory until an invoice clears. No deck survives this line | First paid logos on the current canon before any new lane opens |
| distribution | FLAG | Build hours outweigh sell hours by an order of magnitude. The bottleneck is not product and has not been for months | A fixed weekly GTM block that outranks the build queue; run the pre-seeded motion rather than refining it |
| focus | WATCH | Eleven named properties, three in the sales canon. Every dark surface taxes attention, story, and maintenance | Everything outside the canon stays dark until the spine earns it; fold, never multiply |
| key person | FLAG | One operator holds architecture, sales, ops, and brand. No redundancy on any of it | Rulings on paper (this codex), first senior hire is distribution not engineering, close the two-closer quota loop |
| pre-seeded GTM | WATCH | Claim-your-instance is real product-led distribution, with guardrails already written: self-refreshing seed, dispute lane, no EU person-profiles | Prove claim → paid conversion in one market; conversion math beats atlas breadth |
| pricing | WATCH | Four meters and catalog-as-code are elite mechanics resting on zero willingness-to-pay evidence | Price the first ten deals by hand; publish nothing until three close at the same number |
| trust & compliance | WATCH | Court-grade claims require court-grade posture: SOC 2, custody chain, and signed outputs are still ahead of us | Trust fabric ships with the ledger, not after it; matter.* stays operator-gated forever (ruled) |
THE PRE-SEEDED DEMO STRATEGY · ONE MOTION ACROSS USER TYPES AND MARKETS · SEED → CLAIM → METER
| WEDGE | USER TYPE | THE SEEDED DEMO | THE CLAIM HOOK | PANEL READ |
|---|
| Judgment LEAD · INSTITUTIONAL | Law / recovery firm | Their own uncollected judgments pre-loaded from public dockets, watch already running | Your judgments. Already traced. Sign in. | Highest ACV, docket evidence base exists, self-onboard collapses the sales cycle |
| Brand | Brand / general counsel | Live impersonation hits under their logo, pre-scanned | This is running under your name right now. | Fastest emotional close, scan cost near zero, mid ACV |
| Counterparty | Deal principal / fund | Screen pre-built on their announced deal or portfolio | We screened your last deal. One flag. | Warm-intro market through existing relationships; white-glove tier |
| Creator | Creator / talent agency | Leak scan pre-run, findings counted, media never stored | Found in 14 places. Claim to see where. | Total urgency; volume play; handled under the sensitivity rules |
| Consumer scale LEAD · VOLUME | Owner-operator (trucking CSA) | Score recomputed from the public FMCSA record, top premium drag identified | Your score moved. See why, free. | Proves the loop at 500k-subject scale; different muscle: brokers and community, never cold-call |
The audit in one line: the product thesis passes diligence; the company thesis carries three flags: revenue proof, distribution, key person. All three are fixable in ninety days. None are fixable with more architecture.
VC AUDIT RULINGS · RECORDED 08·04 ON CEO ORDER “1A 2A 3A 4A”
1 · Flag order · 🟢 RULED 1a: revenue proof first. Paid logos on the current canon; everything else queues behind
2 · Demo canon · 🟢 RULED 2a: judgment wedge leads institutional, trucking CSA proves the consumer loop, the rest stays banked
3 · Capital posture · 🟢 RULED 3a: default-alive, revenue-funded. A Lux / In-Q-Tel-shaped conversation opens only once the motion repeats. Raise to scale, never to search
4 · Standing lens · 🟢 RULED 4a: an INVESTOR LENS line closes every blueprint round R3–R11 and moves the scorecard grades above
THE FLOW · VERB RUN TO DELIVERED OUTPUT · JUST LIKE STRIPE
01
DispatchRUN created
POST /v1/jobs {verb:"crypto.trace", subject:{...}} with idempotency key. Entitlement + meter checked at the door; instant 202 {job_id, status:queued}. Unentitled verb returns 422 verb_not_available.
Stripe parallel · creating a PaymentIntent: instant object back, work continues async, card declined at the door
02
Claim + executeRUN running
Closed fleet claims the job. Tools fire: OSINT pulls, licensed feeds, customer evidence joined from the Vault. Server stays closed; runners never exposed.
Stripe parallel · the network hop nobody sees: issuer, rails, risk checks
03
Raw dataDATA (internal)
Provider outputs land and are sanitized. Never shown, never sold, never leaves the engine. Each fact tagged by source class for court.
Stripe parallel · raw network responses: customers never see ISO 8583
04
CanonicalizeRUN succeeded
Taxonomy v2: one provider-neutral element tree (elements, nodes, edges, stable IDs). This IS the API-tier output. Webhook job.succeeded fires.
Stripe parallel · the clean Charge object: one schema no matter which rail ran it
05
SynthesizeSIGNALS minted
Engine joins the exhaust: actors resolved, edges drawn, patterns applied, severity graded. Signals minted append-only. App tier only; structurally impossible on raw API output.
Stripe parallel · Radar: the score you cannot compute yourself because you do not have everyone's traffic
06
Deliverfan-out below
The user chooses where output lands: app, webhook, API, MCP, or an assembled pack. Same objects on every surface.
Stripe parallel · Dashboard, webhooks, API, Sigma: one ledger, many windows
07
Watch + meterWATCH · OUTCOME
If cadence is set the verb re-runs; only deltas mint new signals (MX dropped = an Outcome). Meter records usage at dispatch and at read; the invoice writes itself.
Stripe parallel · subscriptions + balance transactions: recurring by construction, billed from the ledger
APP
Signal cards land in the Receiver, evidence files into the Vault, the subject timeline updates live
WEBHOOK
signal.minted and movement events to their endpoint, signed
API
GET the run, query signals by subject. Structured JSON, stable IDs, source-class tags
MCP
Read-only resolvers: their AI answers from your signals. Never dispatches
PACK
Signals assembled into a Brief or sealed Dossier, delivered to Vault or counsel
FIRST PRINCIPLES · WHAT WE FOLLOW, COINCIDE WITH, AND GUARDRAIL WITH · CITED
APPEND-ONLY LEDGER
Immutability + double-entry
Pacioli, Summa de Arithmetica, 1494 · Helland, "Immutability Changes Everything," CIDR 2015
Nothing is edited, only appended. Disputes are settled by replaying history, exactly how a balance sheet defends itself.
ENTITLEMENT AT THE DOOR · READ/WORLD GATE
Complete mediation + least privilege
Saltzer & Schroeder, "The Protection of Information in Computer Systems," Proc. IEEE, 1975
Every dispatch is checked, no path around the check. Verbs that touch the world stay operator-gated; MCP reads and never dispatches.
CANONICAL TAXONOMY
Information hiding + data independence
Parnas, CACM 1972 · Codd, "A Relational Model of Data," CACM 1970
Customers bind to our schema, never to providers. Swapping Elliptic for a rival breaks nobody: the interface hides the decision.
ACTOR ATTRIBUTION
Probabilistic record linkage
Fellegi & Sunter, "A Theory for Record Linkage," JASA, 1969
Entity resolution is scored, never asserted flat. An actor cluster carries a match confidence, and it stays in the engine, not the customer UI.
GRADED SEVERITY
Estimative language + analytic standards
Kent, "Words of Estimative Probability," 1964 · ODNI ICD 203, Analytic Standards, rev. 2015
A fixed severity vocabulary, never inflated. Facts stated, advice never given. The same discipline the IC grades its own product against.
SYNTHESIS DISCIPLINE
Analysis of competing hypotheses
Heuer, Psychology of Intelligence Analysis, CIA CSI, 1999
A signal ships only if it survives the alternative explanation. Parked domain or armed storefront: the synthesis must eliminate the innocent reading first.
SOURCE-CLASS TAGS · HASHED PACKS
Provenance + evidentiary admissibility
W3C PROV-DM, 2013 · Daubert v. Merrell Dow, 509 U.S. 579 (1993) · FRE 902(13)-(14), 2017
Every fact carries its origin; packs are hashed and timestamped. Court-ready by construction, not by cleanup.
WHY WATCHING WORKS
Routine activity theory
Cohen & Felson, "Social Change and Crime Rate Trends," Am. Soc. Rev., 1979
Crime needs an offender, a target, and an absent guardian. The watch is the guardian: we remove the third condition and the economics of the scam collapse.
CASE TO PATTERN
Adversary behavior taxonomy
MITRE ATT&CK, 2015
Actors rotate infrastructure but keep their behavior. Cracked schemes are minted as detectors and applied fleet-wide, the way TTPs outlive any single IOC.
WATCH CADENCE · DELTAS ONLY
Feedback control + decision tempo
Wiener, Cybernetics, 1948 · Boyd, OODA, "Patterns of Conflict," 1976-86
Alert on change, never on state. Enforcement is won on tempo: the freeze window is an OODA race against the mule network.
EXHAUST MOAT
Increasing returns + data network effects
Arthur, "Increasing Returns and the New World of Business," HBR, 1996 · Metcalfe's law
Every case raises the value of every other. Exhaust is never sold raw: it compounds inside synthesis, where it cannot be copied out.
NINE NAMESPACES · FOUR METERS
Parsimony
William of Ockham, c. 1320 · Unix philosophy, McIlroy, 1978
Entities are not multiplied without necessity. Small composable verbs, a ceiling on namespaces, four meter shapes, fewer names every quarter.
1320 Ockham1494 Pacioli1948 Wiener1964 Kent1969 Fellegi-Sunter1970 Codd1972 Parnas1975 Saltzer-Schroeder1979 Cohen-Felson1993 Daubert1996 Arthur1999 Heuer2013 W3C PROV2015 Helland · ATT&CK · ICD 2032017 FRE 902(14)
CRYPTO · FUNDS AND WALLETS
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| crypto.trace | LIVE | Canonical element tree: nodes, edges, hops, endpoints. Provider-neutral, stable IDs | custodial endpoint reached · mixer entry · exposure concentration | Firm, principal: "where did the money go" answered in minutes, in evidence grammar |
| crypto.monitor | LIVE | Standing watch on addresses, movement webhooks | funds moved · dormancy broke · threshold crossed | Firm: never miss the one moment a freeze is possible |
| crypto.screen | PARKED | Risk verdict on a wallet before money moves | sanctioned exposure · mixer proximity · scam-cluster contact | Principal, fund: the wire that never happened. Cheapest insurance that exists |
| crypto.attribute | NEW · EXHAUST | Wallet resolved to an operator cluster | named actor cluster · infrastructure overlap | Everyone: turns "where" into "who". App tier only, cannot be replicated on raw API |
| crypto.expose | NEW | Net exposure map across a portfolio of addresses | tainted inflow share · counterparty concentration | Fund, family office: portfolio-grade answer to "how dirty is our book" |
IMPERSONATION · BRAND AND DOMAIN
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| impersonation.scan | PROCESS · DRAGNET | Full permutation sweep: registered, hostile, mail-armed, live commerce | live storefront on your brand · shared money rail · operator cluster | Brand: the free snapshot that opens every deal. PopSockets ran on this |
| impersonation.monitor | LIVE | Standing registry watch, movement webhooks | new registration · MX armed · store went live · MX dropped | Brand: the watch that keeps the snapshot alive. Recurring by nature |
SANCTIONS · LISTS AND PARTIES
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| sanctions.screen | PROCESS · LIVE TODAY | Multi-list verdict with per-list hits and near-matches | match · near-match · clear with conditions | Principal, family office: screen before the handshake. Runs by hand today on a private desk |
| sanctions.watch | NEW | Re-screen on every list update | counterparty newly listed | Fund, firm: yesterday's clear is today's hit. Nobody re-screens manually |
ENTITY · COUNTERPARTIES
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| entity.screen | PROCESS · LIVE V1 | Corporate graph: officers, filings, litigation, adverse media | shell indicators · undisclosed control · litigation trail | Deal principal: the app wedge itself. Commodity, energy, maritime |
| entity.resolve | NEW | Beneficial-owner path behind a name | nominee pattern · control chain resolved | Family office, fund: who you are actually in business with |
LEAK · CREATORS AND TALENT
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| leak.scan | BUILT · VEIL | Index of leaked and reuploaded content per identity | new leak site · reupload wave · monetized theft | Creator, agency: per protected identity. Portal exists, unsold |
| leak.monitor | BUILT · VEIL | Continuous re-scan and takedown-state tracking | content returned · takedown held | Creator: the watch is the subscription |
JUDGMENT · CREDITORS
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| judgment.locate | PIPELINE · LODESTAR | Debtor asset and wallet map | reachable assets · wallet linkage · income trail | Creditor, receiver: paper is worthless until this verb runs |
| judgment.monitor | NEW | Standing debtor watch | asset moved · new filing · new wallet activity | Creditor: enforcement timing is everything |
EVIDENCE · COURT-GRADE TRANSFORMS
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| evidence.assemble | PARKED · FIRM-SCALE | Exhibit-ready packet: hashed, timestamped, sourced | transformation verb: signals in, exhibits out | Firm, public office: the deliverable that goes in front of a judge |
| evidence.seal | SPEC'D · WRIT | Sealed court-grade dossier, chain of custody | apex transformation, qualification-gated | Qualified matters: the top of the price ladder |
ACTOR · EXHAUST TIER, APP ONLY, NEVER RAW API
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| actor.profile | NEW · EXHAUST | Operator cluster dossier: infra, rails, cross-brand footprint | your attacker in full · 40 domains on other brands | Everyone: the enrichment nobody can rebuild on raw output. The renewal engine |
| actor.watch | NEW · EXHAUST | Alert when your actor moves anywhere on the graph | actor resurfaced · new rail, new brand | Brand, firm: cross-client early warning. Pure network effect |
MATTER · TOUCHES THE WORLD · OPERATOR-GATED FOREVER · NEVER MCP, NEVER SELF-SERVE
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| matter.freeze | IDEATED · GATED | Freeze request package dispatched to VASPs and processors | freeze honored · funds held (an OUTCOME) | Firm, public office: the verb the whole company points at |
| matter.demand | IDEATED · GATED | Demand letter package with evidence attached | response received · settlement opened | Firm: pressure with a paper trail |
| matter.enforce | IDEATED · GATED | Enforcement filing support package | filing accepted · order issued | Firm, public office: litigation support, never case-taking |
SEEDED DIVISIONS · THE HIGH-REVENUE PLAYS, SAME LOOP · PRE-SEED THE INSTANCE, LET THEM CLAIM IT
| PLAY | SUBJECT | SEED (PUBLIC RECORD) | SIGNALS IT MINTS | REVENUE LANES |
|---|
| Trucking CSA LEAD | Carrier (DOT #), ~500k owner-ops | FMCSA monthly dump: inspections, violations. Recomputing the hidden percentiles IS the product | score moved · top premium drag · dispute window open | SaaS $29-249 → dispute desk → broker books $500-2k/mo → score API to insurers $2-10k/mo. ≈$2M ARR before the API lane |
| Vape stores | Retail license, NC/CA registries live | State license registries × directories (Kinetic Verified retrofit) | unlisted SKU on shelf · deadline exposure (PA Oct '26, TN Jan '27) | Store claim = sensor on-ramp; distributor mandate stays the money. Cheapest test on the board |
| Movers / charter buses | FMCSA carrier, ~8k + ~3.5k | Same FMCSA pipeline as trucking, zero new plumbing | complaint filed · safety rating moved | Same lanes, smaller ponds, consumers already check the record |
| Buildings · nursing homes · nonprofits · contractors | Building (LL97) · facility (CMS stars) · org (990s) · license/bond | Public scoring regimes that already cost the subject money | fine exposure · star moved · filing lapsed | Banked bench, same claim-your-instance hook |
Same physics, consumer scale: a seeded play is a pre-seeded desk. Subject from the public record, watch already running, signals already minted — the claim link is the invite link. PopSockets #001 and a trucker's CSA claim are the same move at two price points.
WHO RUNS WHAT · TEN BUYER TYPES, ONE CATALOG
| USER TYPE | THEIR VERB STACK | THE FEAR REMOVED |
|---|
| Deal principal | entity.screen · sanctions.screen · crypto.screen · watch | Wiring money to someone who was never who they said they were |
| Law / recovery firm | crypto.trace · crypto.monitor · evidence.assemble · matter.* | Missing the freeze window, walking into court under-documented |
| Brand | impersonation.scan · impersonation.monitor · actor.watch | Customers robbed under your logo while you find out from Twitter |
| Public office | crypto.trace · evidence.assemble · matter.freeze · actor.profile | National-scale programs stalled on evidence that will not hold |
| Family office | entity.resolve · sanctions.screen · crypto.screen · leak.scan | The family name in the wrong deal, or the wrong photos, forever |
| Hedge fund | crypto.expose · entity.screen · sanctions.watch | LP letter that starts with "regarding our exposure to..." |
| Creator / talent agency | leak.scan · leak.monitor · impersonation.monitor | Your body or your name monetized by someone else tonight |
| Receiver / trustee | judgment.locate · crypto.trace · judgment.monitor | Closing an estate while the assets sit one subpoena away |
| Insurer / underwriter | crypto.expose · entity.screen · actor.profile | Underwriting crypto-crime risk blind, pricing policies on vibes |
| Exchange / platform | crypto.screen · sanctions.watch · actor.watch | Being the rail the scam ran through, and the headline that follows |
STRIPE VERDICT
22 verbs, 4 meters, one catalog. Read verbs price per call. Watch verbs price per subject per month. Transform verbs price per pack. World verbs price per matter. The pricing page writes itself from the registry.
PALANTIR VERDICT
Every row above emits subjects, actors, and edges into one graph. Ten buyer types funding one ontology that none of them could afford alone. The catalog is the collection mechanism; the graph is the company.
R13 · THE MESSAGE · THE VALUE LADDER · RULED 1a 2a 3a 4a 08·04 · LOCKED
| RUNG | LINE | WHERE IT LIVES | RULING |
|---|
| CATEGORY | The enforcement operating system. | parent line, unchanged | STANDING |
| HERO | Signals that build cases. | homepage, decks, one-liners · the noun we own is CASES · the enemy is the dead-end report | RULED 1a 08·04 |
| DOCTRINE | "build", never "make" | we supply the build, counsel runs the case · never practice of law | RULED 2a 08·04 |
| PROOF | Court-grade outputs, provenance-chained end to end. | sub-hero, sales | RULED 3a 08·04 |
| MACHINE | Enforcement verbs, one API. | API surface, MCP, docs | LOCKED |
| FLYWHEEL | Every case makes the next one stronger. | investor deck only, never homepage | LOCKED |
Clean-slate naming doctrine (ruled in thread 08·04): legacy product names are shelved for the duration of the blueprint — surfaces are named by function only (counsel surface, self-serve defense surface, victim recovery surface). Good names, wrong time; they return at brand assembly.
Pick your subject. Turn on your verbs. Pay per what you protect. You get these signals. You pay X per Y.