Write rail
Seat A. Seat B. One hash. Then the write. A 10/10 of the write rail is not launch.
Job C · two humans before the write · not a fourth SKU
The unauthorized general-journal post two humans did not admit.
Controllers already have Business Central Premium, Entra, and two-person journal SOD. They do not have a gate in front of the write.
- Seat ATreasury admits
- Seat BController admits
- One hashConsume once
- Then the writeFail-closed SoR
Write rail is launch no
Polished roster is a wired firm no
Identify flag strip is admit no
Proof day
Ninety minutes. Graph is not called. A 10/10 proof day is not launch.
Bake-off
They already have a cheaper button. Walk away. A 10/10 bake-off is not launch.
Ninety-minute proof day
Close on a client twin
Run the firm
When to walk away
The whole firm
The write
Product · three SKUs
Admit plane
The product is the admit plane. Three SKUs. One dashboard included with L1. Encyclopedia is a drawer.
Demo · ninety minutes
Proof day
The first-class demo is the ninety-minute proof day on this twin. Browser rehearsal. Graph is not called. Not a video SKU. Not Calendly.
Managed · static SWA
First-class face
Azure SWA hosts. Catalog regen. Gold CI. --publish-twin. Owner authorizes launch. Not a webmaster CMS. Not Squarespace. Not Power Pages. Not Copilot Studio. Not connected-as-live.
Not a CMS. Not a dynamic app.
Close · sandbox
Client twin
Qualify. Remote proof. Close L1. Assign a segregated sandbox. Paid enhance stays there. Not production.
Firm · gate closed
Operating day
Operating day on the Microsoft roster. Licensed-not-wired. Launch gate closed. 0 of 500 live. 0 of 500 pipeline.
Client · sit-down day
Client universe
Sit-down day. Now mailbox recorded. Next seat B. After L1 unnamed. Honest zeros. Refuse is visible. Maps claimed=false. Packs are not SKUs.
Industry · complete drawer · honest control · every refuse clicks
Industry drawer
Sit Dynamics BC treasury. Room 1 is books. Room 2 is refuse. Agent Intent walks Room 1 versus Room 2. Complete industry drawer. Honest control. Need. Consequence. Now. Around the corner. GENIUS and CLARITY claimed=false. Fully operable. Every refuse clicks. Catalog is the message. Honest zeros. Refuse is visible. Not a crypto product. Not 17a-4. Papers are not filings. Packs, libraries, and repositories are not SKUs.
The Institute is a managed first-class static application. Catalog is law. Gold 99.5. Twin publish. Not a CMS. Not a dynamic app.
Substitute vs Job C. They can copy the licensed button. They cannot copy consume-once action_hash, fail-closed EffectLedger, or independence from the drafting vendor.
- L1 Prove
The unauthorized general-journal post that two humans did not admit. $28,000–$40,000 · 2–4 weeks. Not live SoR. Not LIVE_PIN_OK.
- P-ADM Keep
Keep the same admit plane covered after L1 Acceptance Kit PASS. $40,000–$60,000 annual. U-DUAL is never free.
- U-DUAL Deepen
Additional action classes on the same admit plane. $20,000–$35,000 annual. Not a second control product.
The gate · then the licensed copies
Job C
Two distinct humans. One action_hash. Then the write. Job C is a SoR write-gate, not agent inventory.
Vendor-native approval
A vendor-native button only covers that vendor.
Teams vote
A chat is not a seat. A Teams vote is not dual admit.
PIM activation
PIM is not dual admit. Eligible seats stay eligible.
Copilot asking a human
Copilot asking a human leaves Agentforce and the counterparty's model ungated.
BC native dual approval
Workflow User Groups can require two humans. That is not consume-once action_hash and not a fail-closed EffectLedger.
In-harness AI governor
Policy inside the agent loop is not an independent SoR admit plane. Job C sits outside the drafting AI.
Must-have: every new client AI is another unauthorized-write surface unless one human plane sits over all of them. Controllers already have Business Central Premium, Entra, and two-person journal SOD. They do not have a gate in front of the write. The client utilizes AI. Their customers do too. Humans stay in control. Two humans before the write. Microsoft hosts, identifies, notifies, and receives the write. Microsoft is not the product.
Not agent inventory. Not an identity provider. Not a Teams vote. Not Copilot. Not the client's AI. Not LIVE_PIN_OK. Not a vendor-native button.
The sale is the ninety-minute proof. The product is the admit plane.
How to do a run-through · five hops · not launch
- WriteUnauthorized journal. Two humans. One hash. Then the write. A run-through is not launch.
- PitchL1 Need / Why / Must-have / Populate. Controllers already have BC SOD. They do not have Job C in front of the write.
- ProofNinety minutes. Two named humans. Lab oids are not seats. Graph is not called.
- Bake-offCheaper native is a refuse. Walk away. A considered walk is not a live client.
- AttachKit PASS then P-ADM. Paid U-DUAL never free. How to do a run through is not production.
Duty, keep, and owner clicks
The duty matrix is who may admit, freeze, keep, draft, host, or counsel. Only seat A and seat B admit. Owner and board can ask for a freeze. They are not seats. Lab oids are not two named treasury humans.
Governance is a catalog map. It is not counsel, not a filing, and not a certificate. Host policy cannot weaken Job C. LIVE_PIN_OK cannot be marked from this plane.
Record keeping is two records and a keep. Reset is the last sealed keep. Rollback is a compensating write that itself requires dual admit. Not a time machine. A mailbox is not the second record.
This Cloud Agent cannot create users, grant Graph roles, publish to Cloudflare, or mark LIVE_PIN_OK. --publish-twin updates the Azure SWA review host only. The owner clicks the Microsoft admin links. Do not create a new Entra app.
Honest whole · business, build, and website · the stitch is not a SKU
The whole firm
Put the write, three SKUs, industry certify, honest build, the board packet, and the twin on one board. The stitch is not a SKU. A 10/10 review is not launch. The whole firm is not launch.
Whole is launch no
10/10 is launch no
Stitch is a SKU no
Twin is apex no
LIVE_PIN_OK no
The write
Job C Two humans. One hash. Then the write.
Three SKUs
L1 · P-ADM · U-DUAL Only three. Packs are not SKUs.
Industry certify
26 desks Standard and upsell. Industry certify is not launch.
Build
Honest ladder Agents, access, operators, build, readiness.
Business
Board packet Recognized revenue $0. Not a priced round.
Website
Azure SWA twin Cloudflare apex empty. Power Pages is not the host.
Launch
Owner-only Gold is not launch. LIVE_PIN_OK stays false.
Refuse rehearsal · do not launch the stitch
Waiting. Click a refuse. The whole firm is not launch.
whole_is_launch=false · ten_is_launch=false · stitch_is_sku=false · live=false
Proof the ecosystem · gold and hops · not a running firm
How we proof the whole ecosystem
We proof Job C, the Institute twin, the client lifecycle, industry refuse, and the Microsoft run by gold, kit, hops visible, and refuse held. We do not proof a running firm. A green check is not launch. The whole firm is not launch. Assigned stays 0. Graph is not called.
Need: gold plus hops is treated as the whole ecosystem live.
Why: the proof is make gold, kit, hops visible, and refuse held. The stitch is not a SKU. A 10/10 review is not launch. LIVE_PIN_OK stays owner-only.
Gold held yes
Ecosystem is a running firm no
Assigned no
Graph is called no
LIVE_PIN_OK no
We test · gold · hops · refuse
make gold. Kit. Hops visible. Refuse held. Complements stay eight.
We refuse · the stitched ecosystem is not a running firm
Gold as a running firm. A 10/10 review as launch. Graph from this plane. LIVE_PIN_OK from this plane.
Four facts · not hops
Test
make gold 99.5. Kit. Hops visible. A green check is not launch.
Twin
Job C. Ninety minutes. Readiness. Twin certified is not launch day.
Client
Walk the lifecycle. Refuse assign. A walked path is not a live client.
Gate
The stitched ecosystem is not a running firm. Complements stay eight.
Six hops · how we test the stitch · refuse what we cannot
- GoldNeed: a green check as launch. Why:
make gold99.5. The whole firm is not launch. - Job CNeed: Copilot as the admit plane. Why: dual admit. Consume once. Fail-closed SoR.
- TwinNeed: this host as named-human close. Why: ninety minutes. Kit. Graph is not called.
- LifecycleNeed: a walked path as a booked client. Why: assigned stays 0. Refuse held.
- MicrosoftNeed: licensed-not-wired as wired. Why: complements stay eight. Not the product.
- Owner gapsNeed: owner gaps closed from this plane. Why: named seats. Signed L1. LIVE_PIN_OK.
Walk what we proof · Walk the client lifecycle · Walk the industry · Walk Agent Intent · Walk the Microsoft roster · Walk the operating company · Walk the 10/10 · Walk the Microsoft 10/10 · Walk the Microsoft universe · Walk the client 10/10 · Walk the offer 10/10 · Walk Grok Bot Microsoft · Walk the join · The whole firm is not launch
Walk the join · Walk honest better · Walk the ecosystem proof · Walk the industry · Walk Agent Intent · website hop · 10/10+ is not launch
The write that must not happen
A controller can forward this. There is no invented inbox. Must-have, not a mandate.
An unauthorized general-journal post the client's AI or the client's customer AI drafted and two humans did not admit.
The unauthorized general-journal post the client's AI or the client's customer AI drafted and two humans did not admit. Every new client AI is another such surface. L1 is the week you prove one human plane sits over all of them: no admit, no write. The client institutes AINav as the failsafe, not as the AI.
Controllers already have Business Central Premium, Entra, and two-person journal SOD. They do not have a gate in front of the write. A Teams vote, a PIM activation, or Copilot asking a human is not dual admit.
Owner
The controller who cannot let any AI post a journal without two seats, and who must be able to freeze writes without turning the business off.
Board
Fiduciary oversight of material AI write risk. Inventory of models is not a control. One admit plane plus second-record keep is.
Examiner
First record is the SoR write. Second record is who admitted it. Off-switch evidence is that the plane can freeze. Not a filing.
Vendor-native approval
A vendor-native button only covers that vendor.
Teams vote
A chat is not a seat. A Teams vote is not dual admit.
PIM activation
PIM is not dual admit. Eligible seats stay eligible.
Copilot asking a human
Copilot asking a human leaves Agentforce and the counterparty's model ungated.
BC native dual approval
Workflow User Groups can require two humans. That is not consume-once action_hash and not a fail-closed EffectLedger.
In-harness AI governor
Policy inside the agent loop is not an independent SoR admit plane. Job C sits outside the drafting AI.
Walk in
Ninety minutes. Two existing treasury seats. Client AI or a customer AI may draft.
Walk out
Sealed DecisionRecord. Merkle / audit export. Not signed L1. Not LIVE_PIN_OK.
What no does
Refusing is the product working. If either person is missing, the write does not land. Off switch freezes new grants. Inference may continue. Consequence does not.
Walk in: two existing treasury seats. Walk out: sealed DecisionRecord and Merkle / audit export. Refusing is the product working. If either person is missing, the write does not land.
The sale is the ninety-minute proof.
This week: qualify → ninety-minute proof day → sell L1 → kit on the BC twin → refuse live pin. P-ADM attaches after kit PASS. U-DUAL is a later paid offer.
The duty matrix is who may admit, freeze, keep, draft, host, or counsel. Only seat A and seat B admit.
Seat A / seat B
Treasury (seat A) and controller (seat B) are the only two humans who bind the action_hash.
Owner / board
Owner and board oversee. They institute the plane and can ask for a freeze. They are not seats.
Examiner
First record is the SoR write. Second record is who admitted it. Off-switch evidence is that the plane can freeze. Not a filing.
Not a seat
One title cannot click both admits. Lab oids are not two named treasury humans.
Governance is a catalog map. It is not counsel, not a filing, and not a certificate.
Not counsel
This tree maps instruments. It does not certify. Counsel stays open (G12). Unsigned order form and MSA skeleton are not a signature.
Second record
Sealed DecisionRecord and Merkle keep of who admitted the write.
Host policy
Host policy. Cannot weaken Job C invariants. LIVE_PIN_OK cannot be marked from this plane.
Lockfile digest
Frozen vectors and lockfile digest. A rebrand breaks gold.
Record keeping is two records and a keep.
First record
The privileged SoR write after dual admit (journal, invoice, order).
Keep
Weekly export after kit PASS.
Reset
Return the admit plane to the last sealed DecisionRecord / Merkle root as the keep.
Rollback
Rollback is a compensating write that itself requires dual admit. Not a time machine.
This Cloud Agent cannot create users, grant Graph roles, publish the Institute, or mark LIVE_PIN_OK.
- Microsoft 365 admin → Users — Cynthia agreed. Mailbox recorded: chodnett@ainav.institute. Owner assigned paid Microsoft 365 E7 and Teams Premium. James keeps the fallback E7. She signs in once as the second unique human. She clicks seat B. Teams Premium is not a seat. Do not invent an object id in this tree.
- Entra users — Confirm her Entra object id is different from James Hodnett. She signs in once. She is treasury_controller / Inception business executive. She clicks seat B. You do not click both seats.
- Agents > Tools registry — Leave Available: Work IQ User, Work IQ Teams, Work IQ SharePoint, Work IQ Mail, Microsoft MCP Management. Block Dataverse MCP until paid U-DUAL.
- Same app API permissions — Recorded. On the same Entra app leftovers Speech, Azure Service Management, and Key Vault are gone. Owner revoked Organization.ReadWrite.All Delegated, Organization.ReadWrite.All Application, and User.ReadWrite.All Application on AINav Cloud Agent1. Four Reads stay Granted. CRM impersonation left. Business Central Application stays. Do not add Write. Do not create a new app. Not Graph Write claimed. Not from this plane. Not LIVE_PIN_OK.
- Power Platform environments — Ticket 2609030040009525: Support recorded North America Sandbox affinity to Canada. ADR cannot be purchased on a USA sign-up tenant. Geo-to-geo also needs ADR. Engineering exception routed, not granted. US Dataverse stays open. Do not treat Canada as United States. Do not paste a Dataverse environment id. Do not set DATAVERSE_URL from this plane. Keep Dataverse MCP Blocked. Do not Add Dataverse on Default. Do not pick The Americas.
- Delaware entity search — Record the Delaware C-corp incorporation date outside this tree for Microsoft for Startups and NVIDIA Inception. Do not commit the date here.
- Microsoft for Startups — Apply to Microsoft for Startups first, only after you say launch and the public site is the custom domain. Membership is not claimed.
- Azure Static Web Apps — Say launch only when you want ainav.institute bound. Then add SWA asuid TXT and point DNS off empty Pages. Empty Pages is not the Institute. Do not publish until you say launch.
- Business Central Sandbox — Enable the same Entra app in Business Central Production only when you explicitly authorize a Production write. Sandbox journal AINAV-L1 is not Production.
Two seats
- treasury_approver
- treasury_controller
Proof day
Ninety minutes. Client AI or a customer AI may draft. Two existing treasury seats admit. One journal. First record on the twin. Second record is the sealed DecisionRecord. Walk out.
Three prices
- L1 $28–40k / 2–4 weeks
- P-ADM $40–60k / year after kit PASS
- U-DUAL $20–35k / year — never free
What we refuse
- Teams vote as dual
- Copilot as the admit plane
- free U-DUAL
- LIVE_PIN_OK
- named design partner
- invented contact inbox
- client AI as dual
- AINav is the client's AI
- EU AI Act certified
Generate a proof-day brief a controller can forward. Do not invent a contact inbox.
Honest ten · recorded · not launch
A 10/10 quality check is not launch
Gold 99.9 is not LIVE_PIN_OK. A competitor analysis is not a named client. A green service is not production. A quality check is not a seated second human.
Need: a 10/10 quality check as launch, gold 99.9 as LIVE_PIN_OK, and this review as a seated second human.
Why: hops visible. Refuse held. make gold. Making all much better is not launch. Seat B click stays owner-only.
10/10 · quality · test · interop · simulation · not launch
How we raise quality, test, interop, and simulation
Need is a 10/10 quality check as launch, gold as LIVE_PIN_OK, and a simulation as production. Why is the 10/10. Quality is hops visible and refuse held. Test is make gold. Interop is the Microsoft roster, Sales tools, Business Central, and cross-page hops after paint. Simulation is the Institute twin. A 10/10 quality check is not launch. A 10/10+ quality check is not launch. Making all much better is not launch. A certified simulation is not a running firm. A 10/10 of quality, content, format, and graphics is not launch. A 10/10 look is not production. A polished graphic is not launch. Please make better is not launch. A green kit check is not launch. A 10/10 face is not production. Readable type is not launch. A 10/10 of operability, interoperability, and usability is not launch. A 10/10 of prebuilt certified day-one is not launch. Packs, modules, and custom builds are not a fourth SKU. A better pass is not launch. Raising certified again is not launch. A raise is not production. A 10/10 of day-one delivery is not launch. Industry and client segmentation is not a live client. Lifecycle activation is not production.
Need: this 10/10 is treated as launch, gold as LIVE_PIN_OK, and the twin as production.
Why: we raise the stitch on this twin. Hops land. Refuses click. Complements stay eight. Seat B click stays owner-only.
10/10 is launch no
Gold is LIVE_PIN_OK no
Interop is wired no
Simulation is production no
Quality is seated no
Quality, content, format, and graphics is launch no
A 10/10 look is production no
A polished graphic is launch no
Please make better is launch no
Kit green is launch no
A 10/10 face is production no
Operability, interoperability, and usability is launch no
Prebuilt certified day-one is launch no
Packs are a fourth SKU no
A better pass is launch no
Raising certified again is launch no
A raise is production no
Day-one delivery is launch no
Industry and client segmentation is a live client no
Lifecycle activation is production no
Please make much better is launch no
I know you can do much better is launch no
A much better delivery is production no
A run-through is launch no
How to do a run through is production no
A considered walk is a live client no
Walk
Write, pitch, proof, bake-off, attach. A run-through is not launch. Complements stay eight.
Consider
A considered walk is not a live client. Lab oids are not seats. Walk the hops.
Through
How to do a run through is not production. Kit PASS then P-ADM. Walk the offer.
Pitch
L1 is the week-one prove. Controllers already have BC SOD. They do not have Job C in front of the write. Please make much better is not launch.
Know
I know you can do much better is not launch. Complements stay eight. Walk the kit.
Deliver
A much better delivery is not production. Kit PASS then P-ADM. Paid U-DUAL never free. Walk the offer.
Day-one
A 10/10 of day-one delivery is not launch. Complements stay eight. Walk the kit.
Segment
Industry and client segmentation is not a live client. Walk industry.
Activate
Lifecycle activation is not production. BD twin, assigned sandbox, kit PASS, FFS care. Walk the lifecycle.
Pass
A better pass is not launch. Please make better is not launch.
Raise
Raising certified again is not launch. Complements stay eight. Walk the kit.
Attach
A raise is not production. Packs, modules, and custom builds are not a fourth SKU. Walk packs.
Use
A 10/10 of operability, interoperability, and usability is not launch.
Day-one
A 10/10 of prebuilt certified day-one is not launch. Complements stay eight. Walk the kit.
Packs
Packs, modules, and custom builds are not a fourth SKU. Walk packs.
Please make better
Please make better is not launch. Twin HTTP 200 is not launch.
Kit green
A green kit check is not launch. Complements stay eight. Walk the kit.
Face
A 10/10 face is not production. Readable type is not launch.
Quality
Hops visible. Refuse held. Need and why in ink. A 10/10 of quality is not launch.
Content
Catalog is the message. Search does not invent a page. A 10/10 of content is not launch.
Format · graphics
Write-rail diagram, vector mark, share card. A 10/10 look is not production. A polished graphic is not launch.
We raise · hops · refuse · gold
Need and why on every hop. Interop lands after paint. Simulation stays on the Institute twin. Graph is not called. Complements stay eight.
We refuse · a 10/10+ quality check is not launch
10/10 as launch. Gold as LIVE_PIN_OK. A competitor analysis as a named client. A green service as production. A quality check as a seated second human.
Four facts · not hops
Quality
Hops visible. Refuse held. Need and why in ink. A 10/10 quality check is not launch.
Test
make gold 99.5. Kit. Playwright hops. A green check is not launch.
Interop
Roster, Sales tools, Business Central, twin, kit. Licensed-not-wired. Paint keeps hop ids.
Simulation
Institute twin. Ninety minutes. Graph is not called. A certified simulation is not a running firm.
Six hops · raise the 10/10 · refuse what we cannot
- QualityNeed: a 10/10 review as launch. Why: the stitch is not a SKU. A 10/10 review is not launch.
- TestNeed: gold plus hops as a running firm. Why:
make gold. A green check is not launch. - InteropNeed: licensed-not-wired as a wired firm. Why: complements stay eight. Microsoft is not the product.
- SimulationNeed: this twin as named-human close. Why: twin certified is not launch day. Graph is not called.
- SoR toolsNeed: the sandbox journal as production. Why: Lab AINAV-L1 is not commercial close.
- Owner gapsNeed: a quality check as seated second human. Why: seat B click stays owner-only. A 10/10+ quality check is not launch.
Walk the ecosystem proof · Walk what we proof · Walk the sales tools · Walk Business Central · Walk the Microsoft 10/10 · Walk the Microsoft universe · Walk the client lifecycle · Walk the client 10/10 · Walk the offer 10/10 · Walk honest ten · Walk the honest hold · Walk Grok Bot Microsoft · Walk the join · A 10/10+ quality check is not launch
A 10/10 quality check is launch no
10/10+ is launch no
Gold 99.9 is LIVE_PIN_OK no
A competitor analysis is a named client no
A green service is production no
A quality check is seated no
Quality
Microsoft four Reads Granted, Writes revoked. Cloudflare apex empty/403. GitHub green is not LIVE_PIN_OK. Cursor is not a seat.
Compete
Teams vote, Entra MFA, Cursor, and Cloudflare do not win consume-once, fail-closed SoR, or counterparty AI.
Gold
Gold 99.9 is the target. Claiming 99.9 without coverage is a lie. Gold 99.9 is not LIVE_PIN_OK.
Ten
A 10/10 quality check is not launch and not LIVE_PIN_OK.
Owner-only
Seat B, oid, signed L1, Teams ids, SHAREPOINT_SITE_ID, Sentinel, US Dataverse stay owner-only.
Refuse rehearsal · do not treat a 10/10 quality check as launch
Waiting. Click a refuse. A 10/10 quality check is not launch.
quality_ten_is_launch=false · gold_999_is_live_pin=false · compete_is_named_client=false · live=false
Walk the join · Walk honest better · Walk the 10/10 · Walk honest ten · Walk the Microsoft universe · Walk the honest hold · Walk Grok Bot Microsoft · Walk the access window · Walk the write window · Walk the ecosystem proof · Walk the industry · Walk Agent Intent · certify hop · 10/10+ is not launch
Honest better · making better · recorded · not launch
A much better build and business is not launch
A much better build and business is not launch. Making better is not launch. Please make better is not launch. Twin HTTP 200 is not launch. Sandbox HTTP is not G14. A 10/10 is not a seated second human. A systems review is not a wired firm. A polish pass is not production. Interpretability is not LIVE_PIN_OK.
Need: this 10/10 of systems, services, interpretability, polish, and business treated as launch, a wired firm, production, LIVE_PIN_OK, and a seated second human.
Why: hops scan six-wide. Facts stack with labels. Refuse clicks. HASH_FIELDS fail-closed. Complements stay eight. Seat B click stays owner-only. Please make better is not launch. Twin HTTP 200 is not launch. Sandbox HTTP is not G14.
A much better build and business is launch no
A 10/10 is seated no
A systems review is a wired firm no
A polish pass is production no
Interpretability is LIVE_PIN_OK no
Making better is launch no
Please make better is launch no
Twin HTTP is launch no
Sandbox HTTP is G14 no
A 10/10 of industry, client, and twin is launch no
Institute twin
Azure SWA HTTP 200. Review host. Twin HTTP is not launch. Twin review.
AINav, Inc sandbox
DEFAULT journal on the BC twin. Sandbox HTTP is not G14. Lab oids are not named treasury humans.
Public apex
ainav.institute stays empty. Do not treat 404 as the Institute.
Six hops · walk the 10/10 · not launch
- SystemsJob C. HASH_FIELDS fail-closed. A systems review is not a wired firm.
- BuildHonest whole. A 10/10 review is not launch.
- BusinessOperating day. A 10/10 business is not recognized revenue.
- ServicesMicrosoft roster. A green service is not production.
- PolishHonest ten. A 10/10 polish is not launch. A polish pass is not production.
- OwnerSeat B click stays owner-only. A 10/10 is not a seated second human.
Five facts · not hops
Systems
HASH_FIELDS fail-closed. Extra keys cannot mint a second slot. Missing HASH_FIELDS cannot share an empty hash.
Job C: two distinct humans, one action_hash, consume once. Gold 99.5 is the floor. A systems review is not a wired firm.
Services
Microsoft six required plus eight complements. GitHub gold. Cursor Cloud Agent is not a seat. Cloudflare apex empty.
A green service is not production. Licensed-not-wired stays honest.
Interpretability
Hops visible. Refuse clicks. Fact-stacks scan. Need and why in ink.
A readable board is not a seated second human.
Polish
Twin, kit, CSS. Query strings. The owner-book hops. First glance stays the write rail.
Six hops scan. Five facts stack. Making better is not launch. Please make better is not launch. Twin HTTP 200 is not launch. Sandbox HTTP is not G14. A 10/10 polish is not launch. A polish pass is not production.
Business
Three SKUs: L1, P-ADM, U-DUAL. Operating day on #firm. Catalog list is not recognized revenue.
A 10/10 business is not recognized revenue. A much better build and business is not launch.
Refuse rehearsal · do not treat a much better build and business as launch
Waiting. Click a refuse. A much better build and business is not launch.
better_as_launch=false · ten_as_seated=false · systems_as_wired=false · polish_as_production=false · interpret_as_live_pin=false · make_as_launch=false · live=false
Walk honest better · Walk the write-rail diagram · Walk the brand · Walk the 10/10 · Walk search · Walk the kit · Walk the write rail · Walk proof day · Walk the bake-off · Walk industry · Walk the client universe · Walk the client plane · Walk the twin · Walk honest ten · Walk the join · Walk the firm · Walk the Microsoft roster · Walk the whole · A 10/10 of quality, content, format, and graphics is not launch · A green kit check is not launch · A 10/10 face is not production · A 10/10 of prebuilt certified day-one is not launch · Packs, modules, and custom builds are not a fourth SKU · A better pass is not launch · Raising certified again is not launch · A raise is not production · Walk packs · Walk the raise
Honest Copilot Studio · considered · not Job C
Copilot Studio
Microsoft Copilot Studio is an agent-builder. Considered. A human looked is not Job C. Copilot Studio is not Job C. Copilot Studio is not a SKU.
Copilot Studio is Job C no
Copilot Studio is a SKU no
Copilot Studio is admit no
Copilot Studio is seat B no
LIVE_PIN_OK no
Microsoft Copilot Studio
Agent-builder. RFI is a human looked. Not Job C.
Dual admit
One human reviewing a Copilot is not two humans + one hash.
Three SKUs
L1, P-ADM, U-DUAL only. Copilot Studio is not a SKU.
Complements
Complements stay eight. Copilot Studio is not a complement.
Seat B
Copilot Studio RFI is not Cynthia's click. Mailbox is not a click.
Refuse rehearsal · do not treat Copilot Studio as Job C
Waiting. Click a refuse. Copilot Studio is not Job C.
is_job_c=false · is_sku=false · is_admit_plane=false · is_seat=false · live=false
Bake-off — when they win, when we win, when to walk away
Catalog-honest. Not a fourth SKU. Not uncopyable. Not LIVE_PIN_OK. A 10/10 bake-off is not launch.
Cheaper button
They already have a cheaper licensed button. Native is not Job C.
Walk away
Walk the cheap-native buyer. Proof day is for the controller who cannot let any AI post.
Not launch
A 10/10 bake-off is not launch. A 10/10 of the write rail, proof day, and bake-off is not launch.
The business succeeds when a named controller walks away from the licensed substitute and buys L1. The build succeeds when that sale cannot invent seats, revenue, or LIVE_PIN_OK.
They already have a cheaper button. Buy L1 only when independence, consume-once, and a fail-closed SoR are the requirement.
They win
One vendor, one button
They only run Copilot on Business Central. Workflow User Groups is enough this quarter.
Native is already licensed
They will not pay L1 to prove a gate they think they already have.
Chat approval is fast
They accept a Teams vote as two humans looked.
We win
Independence
The drafting vendor is the worst failsafe for that draft. Job C sits outside the model.
Consume-once
Native approval can be replayed. Job C consumes the grant once on one action_hash.
Fail-closed SoR
If either seat is missing, the write does not land. No fake success.
Counterparty AI
A Copilot-only button leaves Agentforce and the customer's model ungated.
Walk away from the cheap-native buyer. Proof day is for the controller who cannot let any AI post.
Must
- Business Central Premium
- Entra ID
- Two existing treasury humans — not one title as both seats
- Client AI that can draft a privileged write
- Controller who cannot let any AI post without two seats
Walk away
- Just give us cheaper Workflow User Groups
- One human wearing both titles
- Copilot Studio RFI as the product
- AINav as the client's AI
- LIVE_PIN_OK from a demo
- Invented named customer or inbox
- AI doom as the product
- Fear brand / AGI theater
- SOX certificate as the product
- Buy L1 and we are compliant
- D&O / personal-liability product
- Maps as the sale
- TAM / forecast as the product
- Priced round as the sale
- Category leader from a demo
- Another Copilot as the wow
- CMS as the product
- Fourth SKU as what you've been missing
- Dynamic app as the Institute
- Calendly as the demo, a shared twin as production, or a client twin as a SKU
Objection cards
Native is free.
Native is licensed. L1 prices the unauthorized journal, not hours. If independence is not the requirement, walk away.
Microsoft already does this.
Microsoft hosts, identifies, notifies, and receives the write. Microsoft is not the admit plane. A vendor-native button only covers that vendor.
Two humans is slow.
One missing human is the product working. The unauthorized post is faster. Controllers buy the gate.
Why not PIM?
PIM is eligible access. Eligible is not admit. PIM does not consume an action_hash.
Copilot Studio already asks a human.
That leaves Agentforce and the counterparty's model ungated. Job C sits over all of them.
AI will take over.
Wrong meeting. We do not power down Copilot. We bind the write. Doom-fear is not the sale. Write-fear is the unauthorized journal.
Will this make us SOX compliant?
No. Dual admit is a control on the journal. It is not a SOX opinion. Maps stay claimed=false. G12 stays open.
What is my personal liability?
The write that landed under your title. We bind that write. We do not indemnify. We do not replace counsel.
What's your market share?
Zero booked. Named customers: none. Position is the independent admit plane, not a share of Copilot.
What's the five-year plan?
The only future that counts is a named controller who walks away from the licensed substitute and buys L1. There is no forecast ARR. There is no priced round.
CISO posture is fail-closed and zero-standing. It is not a certificate and not Graph Write.
Holds
- No Graph Write from this plane
- Fail-closed EffectLedger — no admit, no write
- Zero-standing grants — identify is not admit
- Sandbox first; Production blocked until the owner authorizes
- Mailbox is not an Entra oid and not a click
Does not
- Store a buyer inbox
- Invent an Entra object id
- Mark LIVE_PIN_OK
- Replace counsel
- Power down Copilot
- Sell doom-fear
- Sell a SOX certificate
- Close G12
- Sell D&O
- Invent TAM or forecast ARR
- Claim a priced round
- Mark Institute launch
Mailbox recorded is not the click. Seat B meaning stays honest. Cynthia Hodnett · chodnett@ainav.institute.
Seat B is
- Agreed human for seat B
- Mailbox chodnett@ainav.institute recorded
- Intended treasury_controller
- Intended Inception business_executive contact when programs open
Seat B is not
- An Entra object id
- A seat B click
- An officer
- A stockholder
- The second unique human until oid and click
- The Cloud Agent
If either seat is missing, the write does not land. That is the product working. Not a bypass. Not a standing grant. Freeze is the off switch. Inference may continue. Consequence does not.
Human control — write-fear, not doom-fear
Catalog-honest. Not a fear brand. Not a /fear route. Not a CMS. Not LIVE_PIN_OK.
Human control is authority over the write. Loss of control is a privileged SoR line that two humans did not bind. Thinking you have it under control without seat B is not seated. Get it under control is the second unique human. Fear is only useful if it names that write.
Write-fear: a client or customer model drafted a privileged line. Two humans did not admit. The write can still land. That is the sale.
Doom-fear: AGI, mass irrelevance, the machines are coming. Not the category. Not the ICP. Walk it like cheaper native.
Loss of control
- Identify pretends to be admit
- Teams vote, Copilot confirm, or PIM eligible — replayable, not consume-once
- One title clicks both seats
- The vendor of the draft is the failsafe
- One vendor HITL leaves counterparty models ungated
- Seat missing and the write still lands
- Thinking you have it under control is mailbox without a click
- Employee AI drafts; department AI is not a seat
- Change without two humans is not under control
Restore control
- Two distinct humans bind one action_hash
- Consume-once
- Fail-closed SoR
- Plane outside the drafting model
- Freeze: inference may continue, consequence does not
- Get it under control is the second unique human. Do not claim we have it
- Fear management is refuse rehearsal, not a /fear brand
- Change is sit / maps / attach / refuse
First glance stays the write rail. This band sits after the bake-off. Not a /fear route. Not a CMS.
A human looked in Teams. The journal still posted. Not: AI will take your job.
Must-have is not a mandate. Maps are not counsel. Certified is false. Not a fear brand. Not LIVE_PIN_OK.
Executive risk — the write, not the certificate
Catalog-honest. Not a GRC SKU. Not counsel. Not a SOX opinion. Not D&O. Not a /risk route. Not LIVE_PIN_OK.
Executive risk is the unauthorized write under a name that certifies the books. Personal and business are the same journal. Fiduciary is why two humans bind, not a penalty product. Compliance maps are not the sale.
Personal: the controller or officer who certifies. 'I did not know the AI posted' is identify, not admit. We do not indemnify. We do not appoint officers. We do not sell D&O.
Business: restatement, ICFR weakness, customer or counterparty write, examiner exception. Buying L1 does not close regulator clocks.
Compliance-fear
Compliance-fear: maps, SOX opinion, EU AI Act certificate, NIST badge, GENIUS close, CLARITY close. Claimed stays false. G12 stays open. Not counsel. Walk it like cheaper native.
Non-compliance that is ours
Non-compliance that is ours: a privileged SoR line landed and two humans did not bind. That is write-fear. A missed map is counsel's clock.
Also consider
- Board oversees. Overseeing is not admitting.
- One title cannot wear both seats to shed personal risk.
- Second record is the keep, not the first record.
- Counterparty model into the client's SoR is the same write.
- Small client and large client: same journal, same L1.
- Insurance, D&O, and personal-liability product: walk away.
- Privacy, model-risk, and job-loss theater: not the category unless they are the write.
- Fiduciary duty is why two humans bind. Not a D&O product and not a penalty SKU.
- GENIUS and CLARITY stay claimed=false. Buying L1 does not close those clocks.
- Internal doctrine is catalog law. Company policy is not a SKU.
This band sits after human control. First glance stays the write rail. Not a /risk route. Not a GRC SKU.
Not a SOX opinion. Not 17a-4. Not counsel. Not a certificate. Not LIVE_PIN_OK.
Market position — now, not a forecast
Catalog-honest. Not TAM. Not forecast ARR. Not a priced round. Not a /market route. Not LIVE_PIN_OK.
AINav, Inc. market position is an unlaunched independent admit plane. Last authority over the write, not another Copilot. Named customers: none. Recognized revenue: none.
Now: a running Job C plane, an Azure-hosted Institute that is not launched, and catalog list times zero booked. Demand is 0. Substitutes are already licensed and cheaper.
The only future that counts is a named controller who walks away from the licensed substitute and buys L1. That sale cannot invent seats, revenue, or LIVE_PIN_OK.
Not TAM. Not forecast ARR. Not a priced round. Not a valuation. Not a design partner. Not category leader from a demo. Not Institute launch from this plane.
Also consider
- Category is last authority, not another Copilot.
- We win only on independence, consume-once, fail-closed SoR, and counterparty AI.
- Not uncopyable. Not a patent. G12 stays open.
- Complements stay eight. Cloudflare is DNS/edge, not a SKU.
- Startups then Inception only after launch. Membership is not claimed.
- Thought leadership points at the write rail. Not a blog SKU.
- Switching cost after kit PASS is segregation of duties, not contract fiction.
This band sits after executive risk. First glance stays the write rail. Not a /market route. Not a forecast.
Catalog list times zero booked times a two-human close. Not a priced round. Not LIVE_PIN_OK.
What you've been missing — not another Copilot
Catalog-honest. Not a fourth SKU. Not a /have route. Not #missing. #missing stays owner-honest. Not LIVE_PIN_OK.
What you've been missing is not another Copilot. You already licensed cheaper copies. The missing piece is two humans, one hash, consume-once, fail-closed SoR.
You already have
- Business Central Premium — two-person journal SOD
- Entra ID — identify, MFA, Conditional Access
- Workflow User Groups — native dual approval, replayable
- Copilot Studio RFI — a human looked
- Teams vote — a chat is not admit
- PIM eligible — eligible is not admit
- Defender / Purview — detect and retain, not bind the write
- Microsoft 365 E7 — mailbox and identify, not a seat
- Company policy / AI acceptable-use — doctrine is not a seat
You've been missing
- Two distinct humans bind one action_hash
- Consume-once — the grant cannot be replayed
- Fail-closed SoR — no admit, no write
- Second record — sealed DecisionRecord, not the first record
- Freeze — inference may continue, consequence does not
- Independence — plane outside the drafting vendor
- Counterparty AI — the same write when their model drafts into your SoR
- Ninety-minute proof day — walk out with kit PASS, not a demo
- Employee AI oversight — department AI is not a seat
Whole-business capabilities — not SKUs
- Admit — two humans, one hash. Not identify.
- Consume-once — the grant dies on the write.
- Fail-closed effect — no admit, no SoR line.
- Keep / Merkle — second record. Examiner walk.
- Freeze — off switch. Consequence does not.
- Examiner walk — read-only Merkle prove. Not 17a-4.
- Walk-away qualify — cheaper native is a refuse.
- Twin review — see the Institute before launch.
- One dashboard — included with L1. Not a second SKU.
Tools around the plane — not the product
- Teams notify — complement. A chat is not a seat.
- E7 identify — mailbox and MFA. Identify is not admit.
- Cloudflare edge — DNS/edge. Not a SKU. Not the Institute.
- Gold CI — coverage at or above 99.5. A green check is not LIVE_PIN_OK.
- Kit Playwright / Lighthouse — proof tooling. Not a CMS.
- Azure SWA twin — review host. Not launch.
- status.json paint — catalog-honest live paint. Not a CMS.
We refuse to become
- Another Copilot
- A CMS — Webflow, Squarespace, Storybook as the product
- A GRC certificate
- A forecast / TAM product
- A ninth complement
- Cloudflare as a SKU
- LIVE_PIN_OK theater
- Intercom / live-chat as the sale
- HubSpot / Salesforce as the wow
- AI Governess
- GENIUS / CLARITY close
- D&O / penalty product
This band sits after market position. First glance stays the write rail. Not a /have route. Not #missing. #missing stays owner-honest.
The wow is the missing admit plane. Not a fourth SKU. Not launch. Not LIVE_PIN_OK.
Honest Power Pages · considered · not the Institute host
Power Pages
Microsoft Power Pages is a Dataverse-backed Power Platform website. Considered. Azure SWA stays the Institute host. Power Pages is not the Institute host. Power Pages is not a SKU.
Power Pages is host no
Power Pages is a SKU no
Power Pages is the CMS no
Closes Dataverse no
LIVE_PIN_OK no
Microsoft Power Pages
Power Platform external website. Dataverse-backed. Not Job C.
Institute host
Azure SWA stays the host. Power Pages is not the Institute.
US Dataverse
Power Pages needs Dataverse. US Dataverse stays open. Canada is not United States.
Complements
Complements stay eight. Power Pages is not a complement.
Job C
A portal login is not dual admit. Two humans. One hash. Then the write.
Refuse rehearsal · do not host on Power Pages
Waiting. Click a refuse. Power Pages is not the Institute host.
is_host=false · is_sku=false · cms=false · closes_dataverse=false · live=false
First-class demo · Microsoft twin bench · ninety minutes · browser rehearsal
Proof day
The sale is the ninety-minute proof. Walk out with a sealed DecisionRecord and a Merkle / audit export. Browser twin only. Dynamics 365 Business Central, Sales, Teams, and SharePoint writes stay off this page. Not LIVE_PIN_OK. Not Production.
Two distinct seats admit. Each privileged write binds its own action hash and is consumed once. A Business Central journal is the L1 wedge. A Sales quote stays refused until paid U-DUAL. Teams notify and SharePoint kit evidence are complements — a chat is not a seat.
Ninety minutes is launch no
Graph is called no
A 10/10 proof day is launch no
Ninety minutes
The sale is the ninety-minute proof. Walk out with a sealed DecisionRecord. Not Calendly.
Graph is not called
Browser twin only. Business Central, Sales, Teams, and SharePoint writes stay off this page.
Not launch
A 10/10 proof day is not launch. A 10/10 of the write rail, proof day, and bake-off is not launch.
Admit → effect → refuse the cheaper copies. Graph is not called. Not a /demo route. Not LIVE_PIN_OK.
- 1 Admit
- 2 Effect
- 3 Refuse copies
1. Admit
Lab oids are not two named treasury humans. LIVE_PIN_OK cannot be marked from this plane. Host policy cannot weaken Job C. A mailbox is not the second record. Reset is the last sealed keep. Rollback is a compensating write that itself requires dual admit. Not a time machine. This Cloud Agent cannot create users, grant Graph roles, publish the Institute, or mark LIVE_PIN_OK.
Waiting for two distinct humans.
2. Systems of record
L1 wedge: bc.general_journal.post → Business Central Sandbox company AINav.
U-DUAL deepen: d365.quote.discount_override → Dynamics 365 Sales Enterprise. Licensed, not wired.
3. Complements
After an effect: Teams notify. Kit evidence: SharePoint sandbox. Neither is dual admit.
Graph is not called. PIM activation is not dual admit. Copilot and Agent Tools are not the admit plane.
How we utilize the twin · three planes · not one host
Three planes. Not one host.
The Institute twin is the remote demo on this Azure SWA host. The client twin is a segregated sandbox after signed L1. Production is owner LIVE_PIN_OK only. Assigned stays 0. A shared sandbox is not production. Power Pages is not the Institute host.
Need: one review host is treated as the assigned client sandbox and as production.
Why: the remote demo, the client sandbox, and production write stay distinct. Graph is not called. This plane cannot mark LIVE_PIN_OK.
- Institute twinNinety-minute proof. Browser rehearsal. Graph is not called. Not the assigned sandbox.
- Client sandboxAssigned after signed L1. Segregated. Not shared. Count stays 0.
- ProductionOwner LIVE_PIN_OK only. Not auto-promote. A production sim is not production.
Walk what we proof · Walk the client lifecycle · Walk the client 10/10 · Walk the ecosystem proof · Walk the segregated planes · Walk the client twin · Walk operations · Walk the join · The Institute twin is not the assigned client sandbox
Proof on this twin · Job C yes · named-human close no · not launch
Proof what the twin can hold
Yes: Job C, the ninety-minute proof, kit, and readiness — quality, operability, simulation, deliverability, updateability, and debugging. No: named dual seats, signed L1, LIVE_PIN_OK, and launch. Graph is not called. Twin certified is not launch day. A shared sandbox is not production.
Need: proof-all on this host is treated as the named-human close and as launch day.
Why: the Institute twin proofs the admit plane in-browser. Named-human proof day stays owner-only. Lab AINAV-L1 is not two named treasury humans. Launch stays owner-only.
Job C on this twin yes
Named-human proof day no
Twin certified is launch no
Graph is called no
Assigned no
We proof · Job C · kit · readiness
Ninety minutes. Browser. Six readiness lanes. Graph is not called.
We refuse · twin certified is not launch day
Named-human close. Signed L1. LIVE_PIN_OK. This host as their tenancy.
Four facts · not hops
Proof
Ninety minutes. Browser. python3 -m ainav proof-day. Graph is not called.
Certify
Quality, operability, simulation, deliverability, updateability, debugging. Gold is not launch.
Cannot
Named dual seats. Signed L1. LIVE_PIN_OK. Launch. Seat B click.
Gate
Twin certified is not launch day. A production sim is not production.
Six hops · proof what we can · refuse what we cannot
- Job CNeed: Copilot as the gate. Why: the write rail. Two humans. Consume once.
- Ninety minutesNeed: Calendly as the proof. Why: browser rehearsal. Graph is not called.
- KitNeed: kit as a fourth SKU. Why: PASS then P-ADM. Not a second SKU.
- ReadinessNeed: six lanes as launch. Why: certified here. Launch stays owner-only.
- Client planeNeed: this host as their tenancy. Why: assigned stays 0. Rehearse only.
- Owner gapsNeed: named-human close from this plane. Why: seat B click. LIVE_PIN_OK.
Walk the proof console · Walk readiness · Walk the client lifecycle · Walk the client 10/10 · Walk the ecosystem proof · Walk the segregated planes · Walk the 10/10 · Walk the join · Twin certified is not launch day
First-class product · three SKUs · one dashboard
Product
The AINav Control Plane. Job C only. Not a CMS. Not a fourth SKU.
The product is the admit plane. Prove with L1. Keep with P-ADM. Deepen with paid U-DUAL. One dashboard is included. Encyclopedia is a drawer.
SKU 1 · prove
L1 · Prove
Ninety-minute proof day on the existing treasury pair. Digital twin. Acceptance Kit inside the SKU. $28–40k · 2–4 weeks.
SKU 2 · keep
P-ADM · Keep
Same admit plane after kit PASS. Never bundles free U-DUAL. $40–60k / year.
SKU 3 · deepen
U-DUAL · Deepen
Sales Enterprise quote override on the same plane. Never free. $20–35k / year.
Included · not a SKU
Included
One dashboard with L1. Floor is the executive plane. Not a second SKU.
Fulfillment · qualify to keep · not a fourth SKU
- QualifyBake-off. Walk cheaper native. An industry is not a named client.
- ProofNinety minutes on this twin. Not the assigned sandbox.
- Close L1Signed L1. A 10/10 close is not launch.
- FulfillKit. Assigned segregated sandbox. Hours are not a SKU.
- KeepP-ADM after kit PASS. Paid U-DUAL. Complements stay eight.
Walk the join · Walk Business Central · Walk the client lifecycle · Walk the segregated planes · Walk the industry · Walk Agent Intent · Walk operations · A 10/10+ quality check is not launch
- Agent proposes an action
- Seat A and Seat B — distinct principals — bind
action_hash - The grant is consumed once
- A DecisionRecord is sealed
- SoR apply only if admit is ok
from agent_gov import admit, ConsumeLedger, default_lockfile, EffectLedger
rec = admit(action, default_lockfile(), ledger=ConsumeLedger(),
seat_a="oid-1", seat_b="oid-2")
EffectLedger().effect(rec["request_id"], rec["action_hash"])Managed is catalog plus gold plus twin publish. Not Webflow. Not LIVE_PIN_OK.
Honest path · recorded · not launch
An industry is not a named client
A shared sandbox is not production. Hours are not a SKU. Rollback is not LIVE_PIN_OK. A redeploy is not launch.
An industry is a named client no
Shared sandbox is production no
Hours are a SKU no
Rollback is LIVE_PIN_OK no
A redeploy is launch no
Industry
Independent by industry. Standard and upsell packs, libraries, repositories. Packs are not SKUs. Named vertical stays false.
Client
Individual client BD. Assigned stays 0. Do not invent a named client.
Twin
Segregated sandbox after signed L1. Not the Institute twin. Not shared. Not production.
Close
Qualify. Proof. Signed L1. Assign. Sales is not close. Close is signed L1.
Service
Deploy kit, debug, upgrade, redeploy, FFS hours, billing, rollback. Hours are not a SKU. Rollback is not LIVE_PIN_OK. Billing is not recognized revenue. A redeploy is not launch.
Refuse rehearsal · do not treat a redeploy as launch
Waiting. Click a refuse. An industry is not a named client.
industry_is_named_client=false · shared_sandbox_is_production=false · hours_is_sku=false · live=false
Honest close · recorded · not launch
A 10/10 close is not launch
A 10/10 close is not launch. A booking is not recognized revenue. The Institute twin is not the assigned client sandbox. A custom database is not a fourth SKU. A catalog list is not collection.
A 10/10 close is launch no
A booking is recognized revenue no
Institute twin is assigned no
A custom database is a SKU no
A catalog list is collection no
Eleven hops · walk the close · a 10/10 close is not launch
- QualifyBake-off on #success. Named dual seats stay open. An industry is not a named client.
- ProofRemote demo on the Institute twin. Ninety minutes. Not the assigned client sandbox.
- BookCalendar hold after proof. A booking is not recognized revenue. Not Calendly as the demo.
- ContractUnsigned order form and MSA. G12 stays open. This board does not close G12.
- FulfillKit after signed L1. Hours are FFS. Hours are not a SKU.
- TwinAssigned segregated sandbox after L1. The Institute twin is not the assigned client sandbox.
- DataClient SoR stays BC and Sales sandbox. Custom databases are FFS packs. A custom database is not a fourth SKU. Master never writes client SoR.
- ProduceProduction write after LIVE_PIN_OK. A production sim is not production. Not auto-promote.
- BillBilling provider unset. A catalog list is not collection. A booking is not recognized revenue.
- KeepP-ADM after KIT_PASS. Maintenance on the assigned twin. A vault hold is not seated.
- UpsellPaid U-DUAL and FFS. Complements stay eight. Hours never attach free U-DUAL.
Five facts · not hops
Walk the join · Walk the client 10/10 · Walk the industry · Walk Agent Intent · eleven hops · 10/10+ is not launch
Close
Named dual seats times proof day times signed L1 times P-ADM attach. Close is signed L1. A 10/10 close is not launch.
Fulfill
Kit after signed L1. Hours are FFS. Hours are not a SKU. A redeploy is not launch.
Twin
Assigned segregated sandbox after L1. The Institute twin is not the assigned client sandbox. Not shared. Not production.
Produce
Production write after LIVE_PIN_OK. A production sim is not production. Not auto-promote.
Keep
P-ADM after kit. Paid U-DUAL and FFS. A catalog list is not collection. Complements stay eight.
Refuse rehearsal · do not treat a 10/10 close as launch
Waiting. Click a refuse. A 10/10 close is not launch.
close_as_launch=false · booking_as_revenue=false · twin_as_assigned=false · custom_db_as_sku=false · list_as_collection=false · live=false
First-class close · remote demo · assigned sandbox
Close on a client twin
Business development qualifies. Sales runs the remote demo on this Institute twin. Close is signed L1. Then a client-assigned segregated sandbox — not this review host, not production. Not a fourth SKU. Not LIVE_PIN_OK.
The first-class close is this bench. Qualify. Remote proof on the Institute twin. Tailor the SOD pair. Close signed L1. Assign a segregated sandbox. Paid enhance stays there. Production stays owner-gated. Not a SKU.
- Institute twinRemote demo. This host. Not client production.
- Client sandboxAssigned after L1. Segregated. Not shared.
- ProductionOwner LIVE_PIN_OK only. Not auto-promote.
Segregated client planes · one client, one sandbox · not production
One client, one sandbox
Each signed L1 gets its own digital twin. Kit, enhance, debug, P-ADM, and paid U-DUAL run on that sandbox. Isolation is one live client, one sandbox. Never shared. Assigned stays 0. A shared sandbox is not production. Auto-promote is refused. Production write is owner LIVE_PIN_OK only. A 10/10 of day-one delivery is not launch. Industry and client segmentation is not a live client. Lifecycle activation is not production.
Need: a shared demo becomes the client's tenancy — or this plane invents a named client and auto-promotes the sandbox.
Why: each signed L1 gets a segregated digital twin. Kit, enhance, and debug stay there. Hours never mint a SKU. Production write is owner LIVE_PIN_OK only. Assigned stays 0.
Assigned no
Named client none
Count 0
Shared sandbox is production no
Auto-promote no
A 10/10 client is a live client no
Institute twin is the assigned sandbox no
Day-one delivery is launch no
Activation is production no
One client, one sandbox
Each signed L1 gets its own twin. Isolation is one live client, one sandbox. Assigned stays 0.
Institute twin
Remote demo on this host. The Institute twin is not the assigned client sandbox.
Not production
A shared sandbox is not production. Auto-promote is refused. LIVE_PIN_OK stays owner-only.
We isolate · one client, one sandbox
Qualify through produce on this host. Kit, enhance, and debug stay on that twin. Assigned stays 0.
We refuse · a shared sandbox is not production
Invent Acme. Assign. Treat this twin as their tenancy. Auto-promote. Hours as a SKU.
Four facts · not hops
Isolate
One live client, one sandbox. Never shared. Not the Institute twin.
Service
Kit PASS then P-ADM. Paid enhance and debug stay on that twin.
Hours
Hours are not a SKU. Hours never attach free U-DUAL.
Gate
A production sim is not production. Not auto-promote. Not LIVE_PIN_OK.
Six hops · sandbox to the production gate · assigned stays 0
- QualifyNeed: invent Acme as the close. Why: walk-away twenty. An industry is not a named client.
- Institute proofNeed: this host as their tenancy. Why: ninety minutes. Graph is not called. Not the client plane.
- Close L1Need: a 10/10 close as launch. Why: signed L1 then assign. A 10/10 close is not launch.
- SegregateNeed: assign from this plane. Why: one client, one sandbox. Assign stays refused. Count stays 0.
- ServiceNeed: hours as a SKU. Why: kit PASS then P-ADM. Hours are not a SKU.
- ProduceNeed: auto-promote. Why: owner LIVE_PIN_OK only. A production sim is not production.
Walk the assign refuse · Walk the kit · Walk enhance · Walk the unnamed universe · Walk the three planes · Walk what we proof · Walk the client lifecycle · Walk the client 10/10 · Walk the industry · Walk Agent Intent · Assigned stays 0
Proof the client lifecycle · walk and refuse · assigned stays 0
How we proof the client lifecycle
We proof qualify, remote proof, close, assign, activate, implement, billed care, and produce by walking each stage on this Institute twin and holding the refuse. BD presale is this host. Assigned sandbox after signed L1. Activation is kit PASS then P-ADM. Implementation and billed troubleshooting are FFS on that sandbox. We do not proof the lifecycle by assigning a sandbox, inventing a named client, or marking LIVE_PIN_OK. A walked lifecycle is not a live client. A 10/10 of day-one delivery is not launch. Industry and client segmentation is not a live client. Lifecycle activation is not production.
Need: a walked lifecycle is treated as a booked named client.
Why: the proof is hops visible and refuse held. Assigned stays 0. Do not invent a named client. Close is signed L1. Production write is owner LIVE_PIN_OK only.
Path walked yes
Named client none
Assigned no
Signed L1 no
LIVE_PIN_OK no
Day-one delivery is launch no
Segmentation is a live client no
Activation is production no
- BDNeed: invent Acme as the close. Why: walk-away twenty. Industry and client segmentation is not a live client.
- Presale twinNeed: this host as their tenancy. Why: remote proof. The Institute twin is not the assigned client sandbox.
- SandboxNeed: assign from this plane. Why: one client, one sandbox. Assigned stays 0.
- ActivateNeed: kit PASS as launch. Why: kit PASS then P-ADM. A 10/10 of day-one delivery is not launch.
- ImplementNeed: hours as a SKU. Why: FFS integration on that twin. Hours are not a SKU.
- CareNeed: billed debug as production. Why: FFS troubleshooting. Lifecycle activation is not production.
We walk · six stages · refuse held
Qualify through produce on this host. Hops visible. Assigned stays 0.
We refuse · a walked lifecycle is not a live client
Invent Acme. Assign. Auto-promote. A 10/10 close as launch.
Four facts · not hops
Walk
Six stages. Hops visible. Qualify through produce on this host.
Refuse
Invent Acme. Assign. Auto-promote. A walked path is not a booked client.
Evidence
Walk-away twenty. python3 -m ainav proof-day. Kit. Gold is not launch.
Gate
A walked lifecycle is not a live client. Lab AINAV-L1 is not two named treasury humans.
Six hops · how we proof each stage · refuse what we cannot
- QualifyNeed: invent Acme as the close. Why: walk-away twenty. An industry is not a named client.
- Remote proofNeed: Calendly as the proof. Why:
python3 -m ainav proof-day. Graph is not called. - Close L1Need: a 10/10 close as launch. Why: unsigned. Booking is not revenue.
- AssignNeed: this host as their sandbox. Why: assign refused. named_client=null · count=0.
- ServiceNeed: hours as a SKU. Why: kit PASS then P-ADM. Assigned stays 0.
- ProduceNeed: auto-promote. Why: LIVE_PIN_OK refused. Gold is not launch.
Walk the bake-off · Walk the proof console · Walk the assign refuse · Walk the segregated planes · Walk what we proof · Walk the ecosystem proof · Walk the 10/10 · Walk the client 10/10 · Walk the join · A walked lifecycle is not a live client
Client 10/10 · quality · test · interop · simulation · assigned stays 0
How we 10/10 a client
Need is a 10/10 client review as a booked named client, gold as signed L1, and this twin as their assigned sandbox. Why is the 10/10 of a client. Quality is hops visible and refuse held. Test is make gold and the walk-away twenty. Interop is the three planes: Institute twin, unassigned client sandbox, production. Simulation is this Institute twin. We do not 10/10 a client by inventing a name or assigning a sandbox. A 10/10 client is not a live client. A certified client simulation is not a named client.
Need: this 10/10 is treated as Acme, gold as a signed L1, and the Institute twin as their tenancy.
Why: we raise the client stitch on this twin. Hops land. Refuses click. Assigned stays 0. Do not invent a named client. Seat B click stays owner-only.
Named client none
Assigned no
10/10 client is launch no
Simulation is a live client no
Assign from this plane no
We raise · hops · refuse · gold
Qualify through produce on this host. Need and why on every hop. Simulation stays on the Institute twin. Assigned stays 0.
We refuse · a 10/10 client is not a live client
Invent Acme. Assign. Treat this twin as their sandbox. A 10/10 client as launch. Gold as signed L1.
Four facts · not hops
Quality
Hops visible. Refuse held. Need and why in ink. A 10/10 client is not a live client.
Test
make gold. Walk-away twenty. Playwright hops. A green check is not a signed L1.
Interop
Institute twin. Unassigned client sandbox. Production. Three planes stay uncollapsed.
Simulation
This host. Ninety minutes. Graph is not called. A certified client simulation is not a named client.
Six hops · raise the client 10/10 · refuse what we cannot
- QualityNeed: a 10/10 client as a booked named client. Why: hops visible. A walked lifecycle is not a live client.
- TestNeed: gold plus walk-away as signed L1. Why: walk-away twenty. An industry is not a named client.
- InteropNeed: this Institute twin as their assigned sandbox. Why: one client, one sandbox. Assigned stays 0.
- SimulationNeed: ninety minutes as named-human close. Why: twin certified is not launch day. Graph is not called.
- Assign refuseNeed: assign from this plane. Why: assign refused. named_client=null · count=0.
- Owner gapsNeed: a client 10/10 as LIVE_PIN_OK. Why: seat B, signed L1, LIVE_PIN_OK stay owner-only.
Walk the client lifecycle · Walk the segregated planes · Walk what we proof · Walk the 10/10 · Walk the Microsoft 10/10 · Walk the Microsoft universe · Walk the ecosystem proof · Walk the assign refuse · Walk the offer 10/10 · Walk the join · A 10/10 client is not a live client
Walk the join · Walk the client lifecycle · Walk the client 10/10 · Walk the ecosystem proof · Walk the segregated planes · Walk the industry · Walk Agent Intent · Walk operations · 10/10+ is not launch
Qualify → proof → close L1 → assign sandbox. Graph is not called. Not Calendly. Not LIVE_PIN_OK.
Need: assign, invent Acme, or promote from this console.
Why: signed L1 is 0. Assigned is no. named_client=null. A 10/10 client is not a live client.
- 1 Qualify
- 2 Proof
- 3 Close
- 4 Assign
1. Qualify
ICP. Walk cheaper native. No invented inbox. The first walk-away is not recorded.
Waiting for a real controller.
2. Remote proof
Ninety minutes on this Institute twin. Browser rehearsal. Graph is not called. Not Calendly.
Demo is #twin. Not a /demo route.
3. Close and assign
Signed L1 is 0. Assigned is no. Tailor titles stay empty. Do not invent a named customer.
Signed L1: 0. Assigned: no. Production: blocked.
Walk the client 10/10 · Walk the client lifecycle · Walk the segregated planes · Walk the join · Assign stays refused
- Qualify — ICP and walk-away. No invented inbox.
- Remote proof — ninety minutes on the Institute twin. Browser. Graph is not called. Not Calendly.
- Tailor — same plane, client SOD pair and journal class. Do not invent a named customer.
- Close L1 — signed order. Owner-only. Still open.
- Kit — L1 kit on the BC sandbox. PASS then P-ADM.
- Assigned sandbox — client-specific segregated digital twin. Not the Institute review twin. Not production.
- Paid enhance — packs and FFS hours on that client twin. Hours never mint a SKU. Hours never attach free U-DUAL.
This path is
- A sale path, not a product SKU
- Remote demo on the Institute twin
- Client-assigned after qualify or with L1
- Segregated sandbox — not shared multi-tenant production
- The place for paid enhance, debug, and custom packs
This path is not
- A fourth SKU
- The Institute review twin as client production
- Production write or LIVE_PIN_OK
- A named client until a real L1
- Auto-promote from sandbox to production
- Calendly, HubSpot, or Intercom as the close
- Hours that attach free U-DUAL
Assigned
No
Count stays 0 until a real L1.
Named client
None
Do not invent a customer.
SKU
No
Three SKUs only. This is a path.
Production
No
Sandbox. LIVE_PIN_OK stays false.
Paid packs and FFS hours on the assigned client twin. Continuous enhancement and debug stay on that sandbox. Custom features are pay-for-service on the same admit plane. Never a SKU.
Deployment is the L1 kit on a BC sandbox, then P-ADM. Production write only if the owner marks LIVE_PIN_OK. This plane cannot mark it.
This band sits after the product. First glance stays the write rail. Demo is #twin. Path is #path. The close bench is #close-console. Not a /demo route. Not a fourth SKU.
Assigned stays false. Named client stays none. Count stays 0. Not production. Not LIVE_PIN_OK.
Honest production · recorded · not launch
A production sim is not production
Fixing all is not this plane. Rehearsed elements are not live. Making all much better is not launch. A rehearsal is not LIVE_PIN_OK.
A production sim is production no
Fixing all is this plane no
Rehearsed elements are live no
Making all much better is launch no
A rehearsal is LIVE_PIN_OK no
Walk the join · Walk the segregated planes · Walk the industry · Walk Agent Intent · produce hop · making all much better is not launch
Day
Qualify, proof, close, assign, service, launch gate. Rehearsed. Not live.
Attach
L1 then kit then P-ADM then U-DUAL. Hours never attach free U-DUAL.
Write
Sandbox journal rehearsal. Lab oids are not named seats. Not a live SoR write.
Service
Debug, upgrade, redeploy, FFS hours, billing, rollback. Hours are not a SKU. Billing is not recognized revenue.
Gate
Launch stays closed. Gold is not launch. A production sim is not production.
Refuse rehearsal · do not treat a production sim as production
Waiting. Click a refuse. A production sim is not production.
production_sim_is_production=false · fix_all_is_this_plane=false · elements_are_live=false · live=false
Honest join · recorded · not launch
The join is not launch
The join is not launch. The stitched firm is not LIVE_PIN_OK. Licensed-not-wired is not a wired firm. Management and operations are not closed from this plane. A certified simulation is not a running firm. A 10/10+ quality check is not launch.
The join is launch no
The stitched firm is LIVE_PIN_OK no
Licensed-not-wired is a wired firm no
Management and operations are closed no
A certified simulation is a running firm no
10/10+ is launch no
Eleven hops · walk the join · not a running firm
- WriteJob C. The unauthorized journal. First glance stays the write rail.
- PlanBusiness plan and management maps. Not a running firm.
- CloseHonest close hops by reference. A 10/10 close is not launch.
- FulfillClient twin after signed L1. Hours are not a SKU. Not a named client.
- ProduceOperating day on #firm. A production sim is not production.
- MicrosoftBC, Sales, Teams, SharePoint, Sentinel. Licensed-not-wired is visible.
- FabricAzure hosts. Entra identifies. AINav admits. Complements stay eight.
- WebsiteInstitute twin on Azure SWA. Apex empty. The twin is not launch.
- OperateConnect, operate, hold. Licensed is not wired. Connected is not live.
- KeepP-ADM after kit. Maintenance is not launch. Complements stay eight.
- CertifyHonest ten. A 10/10 quality check is not launch. A certified simulation is not a running firm.
Five facts · not hops
Join
The join stitches existing boards. The joined firm is not launch.
Manage
Business plan and ops maps. Management and operations are not closed from this plane.
Fulfill
Client fulfillment stays on #path. Not a named client. Hours are not a SKU.
Produce
Production stays owner-gated. A production sim is not production. Not auto-promote.
Certify
A certified simulation is not a running firm. A 10/10 quality check is not launch.
Refuse rehearsal · do not treat the join as launch
Waiting. Click a refuse. The join is not launch.
join_as_launch=false · stitch_as_live_pin=false · licensed_as_wired_firm=false · manage_ops_as_closed=false · certify_as_running=false · live=false
Walk the join · Walk honest better · Walk the industry · Walk Agent Intent · five areas · 10/10+ is not launch
Operating day · launch gate · 500 live · 500 pipeline · capacity not booked
Run the firm
One operating day. Qualify. Proof. Close L1. Assign a segregated sandbox. Service that twin. The launch gate stays closed. Gold is not launch. Independent contractors are not seats. This plane cannot pay a commission. Not a CRM. Not a fourth SKU. Not LIVE_PIN_OK.
The firm is one spine and one operating day. BD qualifies. Sales proofs on the Institute twin. Close assigns a segregated sandbox. Service keeps P-ADM and FFS on that twin. The launch gate stays closed. Five hundred live and five hundred pipeline are capacity. Live stays 0. Pipeline stays 0. Gold is not launch. Not a CRM. Not a fourth SKU.
Operate the company · walk and refuse · not a running firm
How we operate AINav, Inc.
Need is a running firm: wired Teams, booked revenue, a named client brand. Why is the walk. BD qualifies. Sales proofs. Close is signed L1. One mark set. Co-brand stays unnamed until signed L1. Teams Premium is not a seat. Catalog list is not recognized revenue. Assigned stays 0. A certified simulation is not a running firm.
Need: the operating stitch is treated as a running firm with wired Teams, booked revenue, and a named client brand.
Why: we operate by walking and refusing. Management and operations are not closed from this plane. A certified simulation is not a running firm. The segregated branded sandbox stays unnamed until signed L1.
Firm running no
Teams Premium is a seat no
Recognized revenue no
Co-brand named unnamed
Assigned no
We operate · hops visible · refuse held
Walk manage, BD and sales, Teams Premium, financials, brand, and the unnamed co-brand. Implementation stays licensed-not-wired. Complements stay eight.
We refuse · not a running firm
Wired Teams. Booked revenue. Named client brand. HubSpot. Hours as a SKU. Management and operations closed from this plane.
Four facts · not hops
Operate
Qualify, proof, close, assign, service. Live 0. Pipeline 0. Not a CRM.
Integrate
Licensed-not-wired. Complements stay eight. Graph Writes revoked. Teams ids unset.
Brand
AINav, Inc. Control Plane. AINAV.Institute. Write-fear. Not a fear brand.
Gate
Management and operations are not closed. A certified simulation is not a running firm.
Six hops · operate the company · refuse what we cannot
- ManageNeed: weekly pipeline as a running firm. Why: maps stay recorded. Not closed from this plane.
- BD and salesNeed: HubSpot as the close. Why: walk-away twenty. Proof then sell L1.
- Teams PremiumNeed: paid license as seat B. Why: Teams Premium is not a seat. Channel ids unset.
- FinancialsNeed: catalog list as recognized revenue. Why: no billing provider. Hours are not a SKU.
- BrandNeed: Microsoft or fear as the product. Why: one mark set. Trademark owner-only.
- Co-brandNeed: this host as their named brand. Why: Co-brand stays unnamed until signed L1.
Walk operations · Walk the segregated planes · Walk the client lifecycle · Walk the ecosystem proof · Walk the industry · Walk Agent Intent · Walk the sales tools · Walk Business Central · Walk the 10/10 · Walk the Microsoft 10/10 · Walk the Microsoft universe · Walk the client 10/10 · Walk the join · A certified simulation is not a running firm
Sales tools · AINav brand · Microsoft marks · not the product
How we use Sales Enterprise and Teams Premium
Need is HubSpot as the firm, Sales Enterprise as the CRM, and Teams Premium as seat B. Why is the toolkit. Dynamics 365 Sales Enterprise qualifies. Teams Premium meets for ninety minutes. E7 identifies. Entra may identify. AINav brand is write-fear on the Institute twin. Microsoft marks are theirs. Sales Enterprise is not the firm CRM. Teams Premium is not a seat. Microsoft is not the product.
Need: Sales Enterprise is treated as the firm CRM, Teams Premium as seat B, and HubSpot as the close.
Why: they are licensed Microsoft tools for BD and notify. A chat is not dual admit. Mailbox is not a click. Channel ids stay unset. Graph Writes stay revoked.
Sales is the firm CRM no
Teams Premium is a seat no
Tools are SKUs no
Notify is wired no
HubSpot no
We use · licensed tools · AINav brand
Sales Enterprise qualifies. Teams Premium meets. E7 and Entra identify. The Institute twin proofs. Write-fear is the voice. Complements stay eight.
We refuse · Microsoft is not the product
Sales as CRM. Teams Premium as a seat. HubSpot. Calendly as the demo. A chat as dual admit. Wired notify from this plane.
Four facts · not hops
Qualify
Sales Enterprise license exists. Zero Dataverse. Canada is not United States. Not the firm CRM.
Meet
Teams Premium on Cynthia. Ninety minutes. Not Calendly. Teams Premium is not a seat.
Identify
E7 mailbox recorded. Entra may identify. Identify is not admit. Mailbox is not a click.
Gate
Microsoft marks are theirs. Licensed-not-wired. Graph Writes revoked. Complements stay eight.
Six hops · the BD toolkit · refuse what we cannot
- Sales EnterpriseNeed: HubSpot or Sales as the firm CRM. Why: license exists. Zero Dataverse. Not the firm CRM.
- Teams PremiumNeed: paid license as seat B. Why: Teams Premium is not a seat. Meet for ninety minutes.
- Teams EnterpriseNeed: a chat as dual admit. Why: a chat is not a seat. Channel ids unset.
- Microsoft 365 E7Need: mailbox as the click. Why: paid mail is not an oid and not a click.
- QualifyNeed: invented 500 leads. Why: walk-away twenty. Proof then sell L1. Not Calendly.
- AINav brandNeed: Microsoft marks as the product. Why: write-fear. Microsoft marks are theirs.
Walk the Microsoft roster · Walk the operating company · Walk Business Central · Walk the bake-off · Walk the twin · Walk identify · Walk the 10/10 · Walk the Microsoft 10/10 · Walk the Microsoft universe · Walk the client 10/10 · Walk the join · Microsoft is not the product
BC tools · setup · implement · integrate · brand
How we set up and brand Business Central
Need is the sandbox as production, AINAV-L1 as commercial close, and Microsoft as the product. Why is the SoR toolkit. Setup is sandbox company AINav. Implement is the L1 journal wedge. Integrate is the Entra app in sandbox only. Azure hosts the Institute twin. AINav brand is write-fear. Microsoft marks are theirs. A sandbox journal is not production. Lab AINAV-L1 is not two named treasury humans. Controllers already have Business Central. They do not replace their ERP.
Need: the AINav sandbox is treated as production, AINAV-L1 as the commercial close, and Business Central as the product.
Why: we set up, implement, integrate, and brand the SoR on this twin. Production stays blocked. Enable Production only when the owner authorizes a Production write. Graph Writes stay revoked.
BC is production no
AINAV-L1 is commercial close no
Wired from this plane no
Named client brand no
BC is a SKU no
We use · sandbox · L1 wedge · AINav brand
Setup company AINav. Implement bc.general_journal.post. Integrate Entra in sandbox. Azure hosts the twin. Write-fear is the voice. Complements stay eight.
We refuse · a sandbox journal is not production
Sandbox as production. AINAV-L1 as commercial close. Wire Production from this plane. Microsoft as the product. Named client brand on the lab company.
Four facts · not hops
Setup
Sandbox company AINav exists. Document AINAV-L1. Production stays blocked. Not LIVE_PIN_OK.
Implement
L1 wedge bc.general_journal.post. Lab oids are not two named treasury humans.
Integrate
Same Entra app in sandbox. Production enable is owner-only. Graph Writes revoked.
Brand
AINav marks. Microsoft marks are theirs. Co-brand unnamed until signed L1.
Six hops · setup the SoR · refuse what we cannot
- SetupNeed: this sandbox as a live SoR. Why: company AINav exists. Production stays blocked.
- ImplementNeed: AINAV-L1 as commercial close. Why: lab oids are not two named treasury humans.
- IntegrateNeed: wire Production from this plane. Why: Entra app stays sandbox. Graph Writes revoked.
- Azure hostNeed: this twin as public apex. Why: SWA hosts review. Not the public apex.
- AINav brandNeed: Microsoft or the lab company as the product. Why: write-fear. Co-brand unnamed until signed L1.
- ProductionNeed: auto-promote the sandbox. Why: owner LIVE_PIN_OK only. A sandbox journal is not production.
Walk the Microsoft roster · Walk the sales tools · Walk the operating company · Walk what we proof · Walk L1 · Walk the 10/10 · Walk the Microsoft 10/10 · Walk the Microsoft universe · Walk the client 10/10 · Walk the join · A sandbox journal is not production
Microsoft 10/10 · implement · integrate · licensed-not-wired
How we 10/10 Microsoft implementations and integrations
Need is a wired Microsoft estate as Job C, a ninth complement, and Microsoft as the product. Why is the 10/10 of the run. Azure hosts the Institute twin. Entra may identify. Business Central is the L1 SoR. Sales Enterprise qualifies. Teams Premium meets. Eight complements keep secrets, evidence, policy, and audit. Licensed-not-wired stays visible. Microsoft is not the product. Complements stay eight. Graph Writes stay revoked. A 10/10 Microsoft estate is not launch.
Need: licensed-not-wired is treated as a wired firm, eight complements as eight SKUs, and Microsoft as the product.
Why: we implement and integrate the declared Microsoft substrate on this twin. Channel ids stay unset. Production stays blocked. Seat B click stays owner-only.
Wired from this plane no
Ninth complement no
Microsoft is the product no
10/10 Microsoft is launch no
Graph Writes revoked
We implement · we integrate · AINav brand
Azure hosts. Entra identifies. BC receives the L1 write after dual admit. Sales qualifies. Teams notifies. Complements stay eight.
We refuse · licensed-not-wired is not a wired firm
Wire Teams. Close US Dataverse. Trash Graph Writes. Make Microsoft the product. A ninth complement. A chat as dual admit.
Four facts · not hops
Implement
Six required connections. Sandbox company AINav. Twin on Azure SWA. Not the public apex.
Integrate
Entra in sandbox. Four Reads Granted. Graph Writes revoked. Channel ids unset.
Complements
Key Vault, Monitor, SharePoint, Defender, PIM, Sentinel, Policy, Entra. Complements stay eight.
Gate
A 10/10 Microsoft estate is not launch. Licensed-not-wired is not a wired firm.
Six hops · implement and integrate · refuse what we cannot
- Azure hostNeed: this twin as public apex. Why: SWA hosts review. Client sandboxes stay unassigned.
- Entra identityNeed: identify as admit. Why: Entra may identify. Mailbox is not a click.
- BC implementNeed: the sandbox as production. Why: company AINav exists. Production stays blocked.
- Sales integrateNeed: Sales as the firm CRM. Why: license exists. Zero Dataverse. Not the firm CRM.
- Teams notifyNeed: Teams Premium as seat B. Why: Teams Premium is not a seat. Channel ids unset.
- ComplementsNeed: a ninth complement or wired keep. Why: complements stay eight. Graph Writes revoked.
Walk the Microsoft roster · Walk the sales tools · Walk Business Central · Walk the 10/10 · Walk what we proof · Walk the client 10/10 · Walk the Microsoft universe · Walk Grok Bot Microsoft · Walk the join · Licensed-not-wired is not a wired firm
Microsoft universe · utilize · needed · James-only
How we 10/10 the Microsoft software, systems, and services
Need is a complete Microsoft estate as Job C, temporary access as LIVE_PIN_OK, and this plane closing James's binds. Why is the inventory of the run. AINav and AINAV.Institute utilize six required Microsoft connections and eight complements on this twin. Licensed-not-wired stays visible. Power Pages is not the Institute host. Copilot Studio is not Job C. Agent 365 is not AINav. Complements stay eight. Graph Writes stay revoked. Temporary complete access is not LIVE_PIN_OK. A 10/10 Microsoft universe is not launch.
Need: licensed-not-wired treated as wired, temporary access as seat B, and James's binds closed from this plane.
Why: we list utilize, needed, and James-only. This Cloud Agent has no Get. Even with temporary access this plane does not wire Teams, close US Dataverse, assign a sandbox, or mark LIVE_PIN_OK.
Wired from this plane no
Ninth complement no
Temporary access is LIVE_PIN_OK no
Temporary access is seat B no
Graph Writes revoked
We utilize · we list · we refuse
Six required. Eight complements. Host, identify, SoR, qualify, notify, keep. James-only stays James-only.
We refuse · temporary access is not LIVE_PIN_OK
Wire Teams. Close US Dataverse. Trash Graph Writes. Invent channel ids. Treat temporary access as seat B. A ninth complement.
Four facts · not hops
Utilize now
Azure host, Microsoft 365 E7, Teams Enterprise, Teams Premium, Business Central Premium, Sales Enterprise. Complements: Entra ID, Key Vault, Monitor, SharePoint, Defender XDR, Entra PIM, Sentinel, Azure Policy. Licensed-not-wired. Power Pages and Copilot Studio stay considered, not stack connections.
Needed · attention · activate
Cynthia distinct oid is a boolean. She still clicks. Teams team and channel ids. SHAREPOINT_SITE_ID. US Dataverse ticket 2609030040009525. LAW ainav-mothership exists. Sentinel readable. James confirmed the six current versions are not blank. Values unread.
A later Cloud Agent probed Teams and SharePoint connected. This process stays unbound. Sales stays blocked. SWA custom domain list empty. asuid not bound on the twin. Vault ARM list shows the six held names.
Azure budget for N sandboxes. Named-human proof day. Graph Writes stay revoked — do not activate Writes.
James must do
Cynthia clicks her own mailbox. Vault current versions exist. Cursor Secrets exist on a later Cloud Agent. Work the US Dataverse ticket. Turn Sentinel on the LAW or decide not to. G12 counsel. G13 signed L1. Billing provider. Commission rates, payout vehicle, contractor MSA. Rocket Loader, trademark, dash-to-underscore host bind. LIVE_PIN_OK. This plane cannot.
Temporary access
Temporary complete access is not LIVE_PIN_OK, not seat B, not Graph Writes Granted, and not invented channel ids. This Cloud Agent has no Get. Even with access, this plane does not wire Teams, close US Dataverse, assign a sandbox, or invent a named client.
Six hops · utilize and James · refuse what we cannot
- Utilize hostNeed: this twin as public apex. Why: SWA hosts review. Client sandboxes stay unassigned.
- Identify / E7Need: mailbox as oid. Why: paid E7. Mailbox is not a click.
- SoRNeed: the sandbox as production. Why: company AINav exists. Production stays blocked.
- QualifyNeed: Sales as the firm CRM. Why: license exists. Zero Dataverse. Not the firm CRM.
- NotifyNeed: Teams Premium as seat B. Why: Teams Premium is not a seat. Channel ids unset.
- James listNeed: this plane as LIVE_PIN_OK. Why: James-only. Temporary access is not LIVE_PIN_OK. A vault hold is not LIVE_PIN_OK.
Walk the Microsoft 10/10 · Walk the Microsoft roster · Walk the sales tools · Walk Business Central · Walk the 10/10 · Walk the offer 10/10 · Walk the honest hold · Walk Grok Bot Microsoft · Walk the access window · Walk the write window · Walk the join · Temporary access is not LIVE_PIN_OK
- Pipeline0 of 500. BD qualifies. Do not invent a lead.
- Live book0 of 500. Signed L1 then sandbox. Not production.
- Client twinOne live client, one segregated sandbox. Never shared.
- ProductionOwner LIVE_PIN_OK only. Not auto-promote.
Qualify → proof → close → assign → service → launch. Gold is not launch. Graph is not called. Not HubSpot. Not LIVE_PIN_OK.
- 1 Qualify
- 2 Proof
- 3 Close
- 4 Assign
- 5 Service
- 6 Launch
Microsoft roster
The Microsoft run is the operating-day roster. Every operating-day stage runs on the declared Microsoft substrate. Six required connections and eight complements. Microsoft is identity, notify, SoR, keep, and host — not the product. Licensed-not-wired stays visible. The roster is not wired.
Need: licensed-not-wired treated as wired, temporary access as seat B, and this roster as LIVE_PIN_OK.
Why: six required and eight complements. Channel ids unset. Graph Writes revoked. James-only stays James-only.
Walk the join · Walk the sales tools · Walk Business Central · Walk the Microsoft 10/10 · Walk the Microsoft universe · Walk the honest hold · Walk Grok Bot Microsoft · Walk the access window · Walk the write window · Walk the industry · Walk Agent Intent · microsoft hop · licensed-not-wired is not a wired firm
- QualifyRuns on Microsoft 365 E7, Teams Enterprise, Teams Premium, Entra ID, and Entra PIM. Identity and notify. Not a CRM.
- ProofRuns on Azure host and Microsoft 365 E7. Institute twin on Azure SWA. Mailbox is not a click.
- CloseRuns on Business Central Premium and Sales Enterprise. SoR after signed L1. Canada is not United States.
- AssignRuns on Azure host. One live client, one segregated sandbox. Assigned stays 0.
- ServiceRuns on Key Vault, Monitor, SharePoint, Defender XDR, and Sentinel. Keep on the assigned twin. LAW is not Sentinel.
- LaunchRuns on Azure Policy. Policy cannot mark launch or LIVE_PIN_OK.
- Microsoft AzureSWA twin hosts the Institute review. Client sandboxes stay unassigned. Not the public apex.
- Microsoft 365 E7Paid E7 and Teams Premium assigned. Mailbox is not an oid and not a click.
- Microsoft Teams EnterpriseLicensed. Team and channel ids stay unset. A chat is not a seat.
- Dynamics 365 Business Central PremiumSandbox company AINav exists. Production stays blocked. Not LIVE_PIN_OK.
- Dynamics 365 Sales EnterpriseLicense exists. Zero Dataverse instances. Canada is not United States. Not the firm CRM.
- Microsoft Entra IDConsumes object ids. Does not replace the IdP. Mailbox is not a click.
- Azure Key VaultHold connection secrets. Do not paste them into the catalog.
- Azure MonitorMothership health. LAW is not Sentinel. Not the admit plane.
- SharePointKit evidence store. SHAREPOINT_SITE_ID stays unset. Graph Writes are owner-revoked.
- Microsoft Defender XDRE7 security sink. Not the admit plane. Graph Writes are owner-revoked.
- Microsoft Entra Privileged Identity ManagementEligible seats. A PIM activation is not dual admit.
- Microsoft SentinelDecisionRecord export sink after P-ADM. The mothership LAW is not Sentinel.
- Azure PolicyWest Europe stays blocked. Policy cannot loosen Job C or mark LIVE_PIN_OK.
- Seat B click
- Teams team and channel ids
- SHAREPOINT_SITE_ID
- US Dataverse / DATAVERSE_URL
- Sentinel on the existing LAW
- G12/G13
- billing
- launch
- LIVE_PIN_OK
The Microsoft run is catalog law on #firm-ms. The roster is the operating-day face. The day map is #firm-ms-day. Every operating-day stage runs on the declared Microsoft substrate. Assign sits on Azure host. Complements stay eight. Licensed-not-wired stays visible. This plane cannot invent owner binds. Not LIVE_PIN_OK.
1. Qualify
BD. ICP and walk-away. Do not invent a lead.
Runs on Microsoft 365 E7, Teams Enterprise, Teams Premium, Entra ID, and Entra PIM. Identity and notify. Not a CRM.
Pipeline 0 of 500. Waiting for a real controller.
2. Proof
Ninety minutes on the Institute twin. Not Calendly.
Runs on Azure host and Microsoft 365 E7. Institute twin on Azure SWA. Mailbox is not a click.
Demo is #twin. Graph is not called.
3. Close
Signed L1 on the close bench. Still 0.
Runs on Business Central Premium and Sales Enterprise. SoR after signed L1. Canada is not United States.
Live 0 of 500. Signed L1 is 0. Assigned is no.
4. Assign
One live client, one segregated sandbox. Never shared.
Runs on Azure host. One live client, one segregated sandbox. Assigned stays 0.
Assigned 0. Shared twin is a walk-away.
5. Service
P-ADM keep and FFS on that twin. Attach desks on the five industry areas. Industry certify is catalog law, not launch. Hours never mint a SKU.
Runs on Key Vault, Monitor, SharePoint, Defender XDR, and Sentinel. Keep on the assigned twin. LAW is not Sentinel.
P-ADM 0. FFS hours 0. Live book empty.
6. Launch
Owner says launch and gold holds 99. This plane cannot mark it.
Runs on Azure Policy. Policy cannot mark launch or LIVE_PIN_OK.
Launch gate closed. Gold is not launch.
People
Roles exist. Named contractors stay 0. ICs are not seats. This plane cannot pay.
- OwnerJames Hodnett. Sole. Marks payouts and LIVE_PIN_OK.
- Number twoCynthia. Mailbox recorded. Not all aspects. Not a click.
- Business developmentQualify ICP. Walk cheaper native. Independent contractor OK. Not a seat.
- CloserNinety minutes. Sell L1. Not dual admit.
- Kit operatorAcceptance Kit on the assigned sandbox.
- ServiceP-ADM keep and FFS on that twin. Hours never mint a SKU.
- Independent contractor1099. Not a seat. Not dual admit. Named count stays 0.
ICs 0. Payouts 0. CRM refused.
Comp
Policy is catalog law. Payouts stay 0. This plane cannot pay.
- Closer — after recognized L1 receipt only. Owner-set. Not booked.
- BD — after recognized L1 receipt if they qualified. Owner-set. Not booked.
- Residual — after collected P-ADM only. Owner-set. Not booked.
- Hours — FFS never commissions a SKU and never attaches free U-DUAL.
Launch gate
Every item stays not ready. Gold 99.5 is the release floor, not launch.
- Seat B clickOpen. Mailbox recorded. She clicks.
- First signed L1Open. Owner-only. Count stays 0.
- LIVE_PIN_OKOpen. Owner-only. This plane cannot mark it.
- Owner launch wordOpen. James says launch. Gold holds 99.
- Gold 99.5Held. Floor held. Gold is not launch.
Live
0
of 500 capacity. Not booked.
Pipeline
0
of 500 capacity. Not invented leads.
Contractors
0
Named ICs stay none. Not seats.
Payouts
0
This plane cannot pay.
Launch
No
Gate closed. Gold is not launch.
Owner still sets commission rates, a payout vehicle, and a contractor MSA. G12 stays open. Seat B click and the first signed L1 stay owner-only. Azure budget for N sandboxes is owner spend. Dataverse as a 500-lead CRM stays blocked on Canada affinity. Teams ids, SHAREPOINT_SITE_ID, and Sentinel on LAW stay owner-only.
The firm bench is #firm-console on #firm. The Microsoft run is #firm-ms. The day map is #firm-ms-day. The brand is #brand. The operating day is qualify, proof, close, assign, service, launch gate. Close is #path. Demo is #twin. First glance stays the write rail. Not a /firm route. Not a CRM. Gold is not launch.
Walk the join · Walk the operating company · Walk the sales tools · Walk Business Central · Walk the Microsoft 10/10 · Walk the Microsoft universe · Walk the segregated planes · Walk operations · Walk the Microsoft roster · Walk the industry · Walk Agent Intent · making all much better is not launch
Live stays 0. Pipeline stays 0. Contractors stay unnamed. Payouts stay 0. Launch stays false. Microsoft is not the product. Not LIVE_PIN_OK.
Marks · write-fear · lockfile job_c · not a SKU · not a fear brand
Brand
One mark set across the operating company, the sale, the Institute twin, the client sandbox, Teams, and Teams Premium. Microsoft marks name integrations. They are not the product.
One mark set across the firm. Legal is AINav, Inc. Product is AINav Control Plane. Institute is AINAV.Institute. Sale is L1, P-ADM, and U-DUAL. Write-fear names the unauthorized journal. Lockfile stays job_c. Microsoft marks are theirs. Teams is notify. The sandbox is not a production brand. A 10/10 look is not production. A polished graphic is not launch.
Need: Microsoft marks, or fear, become the product — or the sandbox is treated as a production brand.
Why: one mark set. Write-fear names the unauthorized journal. Trademark filing and public apex brand stay owner-only. Co-brand stays unnamed until signed L1.
Quality, content, format, and graphics is launch no
A 10/10 look is production no
A polished graphic is launch no
Emblem
Vector A on void. Gold disc. A 10/10 look is not production.
Write rail
The diagram sits the sale hero. A polished graphic is not launch.
Share card
OG names the write. Not a fear brand. A 10/10 of quality, content, format, and graphics is not launch.
Surfaces
- AINav, Inc.Delaware C corporation. Sole owner James Hodnett.
- AINav Control PlaneJob C. Three SKUs. Lockfile stays job_c.
- AINAV.InstituteSale face. Twin review. Not launched.
- AINav, Inc.Operating company. Not HubSpot. Not a CRM.
- L1 · P-ADM · U-DUALProve, keep, deepen. Write-fear. Not doom-fear.
- AINAV.Institute twinAzure SWA review. Not client production.
- unnamed until signed L1Segregated after L1. Never shared. Lab pin AINAV-L1 is not commercial close. BC company AINav exists. Not production.
- Microsoft TeamsNotify. Not a seat. Team and channel ids stay unset. Microsoft mark.
- Microsoft Teams PremiumPaid on Cynthia. Not a seat. Microsoft mark.
- Dynamics 365 Sales EnterpriseMicrosoft mark. Not the firm CRM.
- James HodnettSole. Marks payouts and LIVE_PIN_OK.
Write-fear names the unauthorized journal two humans did not admit. Doom-fear is AGI theater. Not a fear brand.
Brand system on #brand. Firm is #firm. Twin is #twin. Close is #path. Not a /brand route. Trademark filing and public apex brand stay owner-only. Not LIVE_PIN_OK.
Walk the operating company · Walk the sales tools · Walk Business Central · Walk the Microsoft 10/10 · Walk the Microsoft universe · Walk the unnamed universe · Walk the join · Walk the industry · Walk Agent Intent · co-brand unnamed until signed L1
Sit-down day · now / next / after L1 / blocked · honest zeros · refuse is visible
Client universe
The sit-down client day is the post-close operator face. Now is recorded. Next is owner-only. After L1 stays unnamed. MFA identifies. Identify is not admit. Maps stay claimed=false. Packs are not SKUs.
Client mark unnamed
Assigned no
First record 0
Second record 0
Maps claimed=false
Packs 0
A 10/10 client is a live client no
Institute twin is the assigned sandbox no
Shared sandbox is production no
Sit-down day
Now mailbox recorded. Next seat B. After L1 unnamed. A 10/10 client is not a live client.
Assigned stays 0
The Institute twin is not the assigned client sandbox. A shared sandbox is not production.
/universe is 404
/universe is not a page. The sit-down day sits on this sale page. Not a live named day.
Now
- Mailbox recordedchodnett@ainav.institute. Mailbox is not oid. Mailbox is not the click.
- MFA identifiesIdentify is not admit. Credentialed SWA identify is not seated.
- Honest zerosUnnamed. Assigned no. Records 0. Packs 0. Maps claimed=false.
Next
- Seat B clickShe clicks. James does not click both. Owner-only.
- Distinct Entra oidThis plane cannot invent an oid.
After L1
- Named client markUnnamed until signed L1.
- Assigned sandboxNever shared. Not production. Not the Institute twin.
- First and second recordSoR write then sealed DecisionRecord.
Blocked
- MFA as admitRefused. Identify is not admit.
- Invent a named clientRefused. Unnamed until signed L1.
- LIVE_PIN_OKNot from this plane.
- IdentifyReady. MFA identifies. Identify is not admit.
- AdmitOwner-only. Seat B click. Two seats. One hash.
- WriteBlocked. No admit, no write. First record 0.
- RecordBlocked. Second record 0. Not 17a-4.
- KeepAfter L1. P-ADM after kit PASS. Hours never mint a SKU.
- PackAfter L1. Custom packs on the assigned twin. Not SKUs.
Rails
Control
- MFA / Entra identifyIdentify is not admit. MFA and Conditional Access identify. Credentialed SWA identify is not seated.
- Two seatsSeat A treasury. Seat B controller. One hash. Consume once. Mailbox is not the click.
- Fail-closed SoRNo admit, no write. First record is the SoR write. Graph is not called from this plane.
- Audit trailSecond record is the sealed DecisionRecord. Weekly keep after kit PASS. Not 17a-4. Not WORM.
Marks
- AINav / client marksAINav Control Plane plus an unnamed client mark until signed L1. Never shared. Not a production brand.
- Segregated twinAssigned after signed L1. Not the Institute twin. Never shared. Not production.
Govern
- MapsNIST AI RMF, SOX ICFR, EU AI Act, ISO 42001. claimed=false. Buying L1 is not a certificate.
- Non-complianceThe landed write. Buying L1 does not close clocks. Not D&O. Not a SOX opinion. Maps stay claimed=false.
Offer
- Product needIndependent admit plane. Write-fear names the unauthorized journal. Not doom-fear. Not a fear brand.
- Thought leadershipLast authority, not another Copilot. Not TAM. Not a forecast. Not a priced round.
- P-ADMKeep after kit PASS. Hours never mint a SKU. Hours never attach free U-DUAL.
- U-DUALPaid. Never free with P-ADM. Additional action classes on the same admit plane.
- Custom packs / modulesA la carte after the required SKU. FFS $3500/day. Libraries and industry packs are not SKUs.
Unnamed until signed L1. MFA identifies. Two seats admit. First and second record 0. Packs 0. Maps claimed=false. Refuse is visible. Not a fourth SKU. Not LIVE_PIN_OK.
Refuse rehearsal · not a live record
Waiting. Click a refuse. The well stays empty.
Client universe on #universe. Close is #path. Twin is #twin. Brand is #brand. Firm is #firm. First glance stays the write rail. Honest zeros sit the board. Refuse is visible. Not a /universe route.
Walk the operating company · Walk the segregated planes · Walk the brand · Walk the join · Co-brand unnamed until signed L1
Complete · honest control · sit / maps / attach / refuse · Room 1 books · every refuse clicks
Industry drawer
The sit-down industry drawer is who we sit, domestic and international maps, papers that are not certificates, and attach that is not a fourth SKU. Sit is Dynamics BC treasury. Maps stay claimed=false. Packs, libraries, and repositories are not SKUs. Room 1 is books. Room 2 is refuse. Agent Intent is what the buyer says. Banks, reserve journals, and booked receivables sit the write. Tokenization, RWAs, stablecoin mint, and crypto asset management stay Room 2. Operable industry rooms. Fully operable industry drawer. Complete industry drawer. Honest control. Need. If you don't have it. Consequence. Now. Around the corner. Fiduciary is why two humans bind. GENIUS and CLARITY claimed=false. Company policy is not a SKU. Every refuse clicks. Catalog is the message. Honest zeros sit the board. Refuse is visible. Not a crypto product. Not 17a-4.
Room 1 assigned no
Named vertical no
First record 0
Room 2 records 0
Maps claimed=false
Crypto product no
17a-4 no
Control yes
GENIUS no
CLARITY no
A 10/10 industry is launch no
A named vertical is a SKU no
/industry is a route no
Room 1 books
Banks, reserve journals, and booked receivables sit the write. A booked room is not a SKU.
Room 2 refuses
Mint, tokenization, wallet, and ATS stay refuse. A named vertical is not a SKU. Complements stay eight.
/industry is 404
/industry is not a page. The drawer sits on this sale page. A 10/10 industry is not launch.
Agent Intent · Room 1 walks the journal · Room 2 stays refuse · not a named vertical
Agent Intent
Agent Intent is what the buyer says. Bank. Stablecoin. RWA. Tokenization. Crypto asset management. Those words are intents. They are not SKUs. If the write is already in Business Central — a bank rec, a reserve journal, a booked receivable, a fund NAV — that is Room 1. Walk the books. If the write is the mint, the token, the wallet, or the ATS match — that is Room 2. Refuse it as product. A named vertical is not a SKU. Industry certify is not launch. A 10/10+ quality check is not launch. Not a crypto product. Not a /crypto route.
Need: the buyer names a vertical and this plane invents a fourth SKU — or a bank rec, reserve journal, or booked RWA receivable lands without two seats.
Why: Job C sits in front of the book write they already have. It does not mint a coin, issue a token, or stand up a CASP product. Room 1 walks. Room 2 stays refuse.
Four facts · not hops
Walk
Banks, treasury, payments, reserve, NAV, booked RWAs. Same admit plane.
Refuse
Mint, tokenization, crypto AMS, custody, ATS. Not SKUs.
Vertical
A named vertical is not a SKU. Maps stay claimed=false.
Launch
Industry certify is not launch. 10/10+ is not launch.
Waiting. Click a Room 2 intent. A named vertical is not a SKU.
Five intents · walk Room 1 or refuse Room 2 · not named verticals
- BanksRoom 1. Need: an unauthorized bank rec.
- StablecoinsRoom 1 is the reserve journal. Mint stays Room 2.
- RWAsRoom 1 is the booked receivable. Issuance stays Room 2.
Room 1 · walk the journal · not a fourth SKU
- BanksNeed: an unauthorized bank rec. Why: industry.bank is the same admit plane. Not 17a-4.
- TreasuryNeed: an unauthorized treasury journal. Why: week-one prove is the wedge. Sit is Dynamics BC.
- Payments / cashNeed: an unauthorized cash receipt. Why: cash on the books is Room 1. On-chain rails stay Room 2.
- PayablesNeed: an unauthorized payable. Why: same L1 plane after the journal. Not a payments SKU.
- Stablecoin reserveNeed: a reserve journal two humans did not admit. Why: GENIUS is a map. claimed=false. Mint is Room 2.
- Fund NAV / fee adminNeed: NAV or fee in BC without two seats. Why: the booked number is Room 1. Wallet signing is Room 2.
- RWAs on the booksNeed: a booked RWA receivable without two seats. Why: the receivable is Room 1. Issuing the token is Room 2.
- Broker booksNeed: a booked trade in BC. Why: the journal is Room 1. 17a-4 WORM stays Room 2.
Room 2 · refuse as product · catalog is the message
- On-chain mint is Room 2. Reserve journal is Room 1.
- Issuing the token is Room 2. Booked receivable is Room 1.
- Wallet signing is Room 2. NAV in BC is Room 1.
- Custody move and ATS match stay Room 2. Wallet is not a seat.
- Issuance stays Room 2. A booked deposit is Room 1.
- EU-ready as a named vertical stays refused. Maps claimed=false.
- Not 17a-4. Not a coin. Walk away if they think P-ADM is WORM.
- Banks, stablecoins, RWAs, and crypto AMS are intents. Not SKUs.
Agent Intent walks Room 1 to the five industry areas. Room 2 stays refuse. A named vertical is not a SKU. Walk the join · Walk the industry · Open the rooms · Walk the write
Sit
- Dynamics BC treasury / controllerWeek-one prove. Journal wedge. industry.treasury + lib.l1.wedge.
- Same-plane desksPayables, bank, cash after L1. Not a fourth SKU.
- Maps claimed=falseBuying L1 is not a certificate.
Maps
- US domesticNIST AI RMF, SOX ICFR, books, COSO, fiduciary. claimed=false.
- InternationalEU AI Act, ISO 42001, OECD, GDPR Art 22. claimed=false. Not a conformity assessment.
- Non-compliance that is oursThe landed write. Buying L1 does not close clocks.
Attach
- Included with L1industry.treasury + lib.l1.wedge. Included is not free.
- Upsell bandPriced desks, P-ADM, paid U-DUAL, FFS. Not SKUs.
- LibrariesLibraries seat the same plane. Not products.
- Repositoriesrepo.packs / repo.governance / repo.runbooks. Not SKUs.
- White papersCatalog drawers. Not certificates. Not filings.
Refuse
- Refused. Not a GRC product.
- Refused. Maps are not filings.
- Refused. Packs deepen L1.
- Refused. Drawer is #industry.
- Refused. Not a fourth SKU.
Room 1 · books
- Bank deskindustry.bank. Same admit plane. Not 17a-4.
- Reserve journal / fund NAVStablecoin reserve journal or fund NAV in BC is Room 1.
- Booked receivableTokenized RWA on the books is Room 1. Issuing the token is Room 2.
Room 2 · refuse
- On-chain mint is Room 2. Not a stablecoin SKU.
- Issuing the token is Room 2. Not a tokenization SKU.
- Wallet signing is Room 2. Not a crypto asset-management SKU.
- Custody move and ATS match stay Room 2. Wallet is not a seat.
- Not 17a-4. Not a coin. Walk away if they think P-ADM is WORM.
Need
- If you don't have itOne human cannot bind Job C. The write does not land.
- ConsequenceThinking you have it under control without seat B is not seated. MFA identifies. It does not admit.
- NowComplete industry drawer. Every refuse clicks. Catalog is the message. Gold 99.5. Twin on Azure SWA.
- Around the cornerSeat B click, Entra oid, signed L1, LIVE_PIN_OK, launch. Owner-only. This plane cannot invent them.
Human control
- Lack of controlA privileged SoR line two humans did not bind. Mailbox is not oid. Mailbox is not the click.
- Thinking you have itIdentify pretending to be admit. A Teams vote is not dual admit. PIM eligible is not admit.
- Get it under controlSecond unique human. One action_hash. Consume-once. Fail-closed SoR. Do not claim we have it.
Fiduciary
- Board / executive dutyTwo humans bind because the write is the duty. Inventory of models is not a control. Not a D&O opinion.
- Penalties / non-complianceNon-compliance that is ours is the landed write. Not a SOX opinion. Not D&O. Not a certificate.
Maps / oversight
- GENIUS ActPayment-stablecoin map. claimed=false. Not a close. Reserve journal is Room 1. On-chain mint stays Room 2.
- CLARITY ActDigital-asset market-structure map. claimed=false. Not a close. Not a crypto product.
- Employee AI oversightDepartment AI is not a seat. Loss of oversight is identify pretending to be admit.
- Internal doctrine / policyCompany policy is not a SKU. Catalog is the doctrine. Policy does not mint a fourth SKU.
- Change / fear managementChange is sit / maps / attach / refuse. Fear management is refuse rehearsal. Not a /fear brand.
Refuse
- Refused. Maps stay claimed=false.
- Refused. Maps stay claimed=false.
- Refused. Fiduciary is why two humans bind.
- Refused. The product is Job C.
- Refused. Doctrine is not a product.
- Refused. First glance stays the write.
- Room 1Ready. Books. Walks the books story.
- Refused. Not a route. Token mint stays refuse.
- After L1Unnamed. Assigned after signed L1.
Papers
- The unauthorized journalThe write that must not happen. Two humans admit.
- IndependenceThe vendor of the draft is the worst failsafe.
- Maps are not filingsDomestic and international maps stay claimed=false.
- Non-compliance is the writeNon-compliance that is ours is the landed write.
- Room 1 is the journalBooked receivable, reserve journal, and fund NAV in BC are Room 1.
- Not a crypto productImmutable is consume-once, not a coin. Not 17a-4.
Segregated areas
- Write railFirst glance. Not the industry drawer.
- Encyclopedia drawerEntire. Client Floor stays lean.
- OwnerOwner-only. Not the first glance.
- Client sandbox after L1Unnamed until signed L1. Never shared.
- Industry drawerSit / maps / attach / refuse. Not a /industry route.
Sit-down industry drawer. Sit Dynamics BC treasury. Maps claimed=false. Attach after the required SKU. Papers are not filings. Room 1 is books. Room 2 is refuse. Agent Intent walks Room 1 versus Room 2. Fully operable. Complete industry drawer. Honest control. Need. Consequence. Now. Around the corner. GENIUS and CLARITY claimed=false. Every refuse clicks. Honest zeros. Refuse is visible. Not a /industry route. Not a crypto product. Not AI Governess. Not LIVE_PIN_OK.
Refuse rehearsal · not a live filing
Waiting. Click a refuse. Maps stay claimed=false.
Industry drawer on #industry. Packs is #packs. Maps is #governance. Non-compliance is #risk. First glance stays the write rail. Sit / maps / attach / refuse. Room 1 is books. Room 2 is refuse. Agent Intent sits on #agent-intent. Fully operable industry drawer. Complete industry drawer. Honest control on #industry. Need is #control. Consequence is #risk. GENIUS and CLARITY stay claimed=false. Every refuse clicks. Catalog is the message. Honest zeros sit the board. Refuse is visible. Not a crypto product. Not 17a-4. Not AI Governess. Not a /industry route.
Walk the industry · Walk the offer 10/10 · Walk Agent Intent · five areas · need and why · 10/10+ is not launch
Company · catalog · open items · not a running firm
About AINav, Inc.
Company, catalog, and open items. The product is the admit plane. The sale is the ninety-minute proof. This page is the company. It is not launch.
Every new client AI is another way an unauthorized journal can land. AINav is the human failsafe that sits over all of them — not the AI. Two distinct humans bind one action hash. Then the write. No admit, no write.
Controllers already have Business Central Premium, Entra, and two-person journal SOD. That SOD was built for people. It does not sit in front of Copilot, Agentforce, or a customer's model. A Teams vote, a PIM activation, or Copilot asking a human is not dual admit.
Job C is the gate. Treasury and controller admit the exact same action before the SoR write. Fail-closed. Consume-once. Microsoft is identity, notify, SoR, and host. Microsoft is not the product.
The sale is ninety minutes on this twin. Two existing seats. Walk out with a sealed DecisionRecord. L1 is the week they prove it. Keep with P-ADM after kit PASS. Deepen with paid U-DUAL. Three SKUs only. Complements stay eight.
James Hodnett is sole owner of this Delaware C corporation. Cynthia Hodnett agreed as seat B. Mailbox chodnett@ainav.institute recorded. Entra oid and click still open. The Cloud Agent is not a seat.
Recognized revenue is $0. Named customers are 0. Signed L1 is 0. That honesty is the company, not a placeholder. This Institute is the digital twin. Not launch. Not a named client. Not a running firm. The Job C plane runs in code. The firm is not running. A 10/10+ quality check is not launch. This is not a patent.
Six facts · not hops · not a scoreboard we invent
Product
Admit plane. Failsafe, not the AI.
Sale
Ninety-minute proof. Then L1.
SKUs
L1, P-ADM, U-DUAL. Complements stay eight.
Owner
James Hodnett. Sole. Cloud Agent is not a seat.
Seat B
Mailbox recorded. Oid and click open.
Books
Revenue $0. Named 0. Signed L1 0.
Still owner-only · not claimed from this page
- Seat B Entra oid and click
- Named-human proof day
- US Dataverse
- Institute launch
- LIVE_PIN_OK
What this company is not
- Not the AI
- Not a CRM
- Not a named design partner
- Not a patent
- Not a running firm
Walk the write · Walk the join · Walk the industry · Walk Agent Intent · Catalog list, not revenue
Business opportunity
Catalog list prices. Not recognized revenue. No invented customer. Company story sits on About AINav. Industry desks sit on Walk the industry. Banks, stablecoins, RWAs, and crypto AMS sit on Walk Agent Intent.
A controller already has two-person journal SOD and Business Central Premium. L1 is the week they prove an unauthorized post cannot land. Keep with P-ADM. Deepen with paid U-DUAL.
Prove
L1 · $28–40k · 2–4 weeks
Ninety-minute proof day on the existing treasury pair. Digital twin. Acceptance Kit inside the SKU.
Keep
P-ADM · $40–60k / year
Attach only after kit PASS. Same admit plane. Never bundles free U-DUAL.
Deepen
U-DUAL · $20–35k / year
Sales Enterprise quote override and order submit on the same plane. Never free.
Year-one catalog list if one controller buys all three: $88–135k. Not recognized revenue.
This week: qualify → ninety-minute proof day → sell L1 → kit on the BC twin → refuse live pin. P-ADM attaches after kit PASS. U-DUAL is a later paid offer.
Signed L1: 0. P-ADM attached: 0. U-DUAL attached: 0. Named customers: 0.
Recognized revenue: none. Named customers: none.
Who buys
- Dynamics 365 Business Central Premium
- Microsoft Entra ID seats already in SOD
- A write that must not happen without two humans
What we do not sell
- Consultancy hours as the product
- Copilot or Agent 365 as dual admit
- A named design partner we do not have
- Recognized revenue we have not earned
Commercial spine
Included with L1 is seating, not a gift. The upsell band is priced desks, keep, paid U-DUAL, and hours. Not a fourth SKU.
L1 FIRST_OFFER
$28–40k · 2–4 weeks
Need: Job C in front of the write. Controllers already have BC SOD.
Why: the unauthorized journal. Ninety minutes. Two named humans. Lab oids are not seats.
Must-have: one week-one journal that names the two humans, the first keep, and the first refuse. That journal is not a live pin.
Populate: industry.treasury plus lib.l1.wedge on first attach. The library is not a fourth SKU.
P-ADM ADMIT_COVERAGE
$40–60k / year
Need: the keep after the kit must not be a volunteer. P-ADM is the paid keep.
Why: attach after L1 Acceptance Kit PASS. Never includes free U-DUAL. Never soft dual.
Must-have: weekly sealed DecisionRecord keep on the assigned sandbox after kit PASS.
Populate: one assigned industry pack on first attach. The pack is not a fourth SKU.
U-DUAL
$20–35k / year
Need: deepen after kit PASS is never free with P-ADM.
Why: two distinct humans already exist. Deepen is the second paid motion, not a new identity.
Must-have: additional action classes on the same admit plane. Never free with P-ADM or U-SOR.
Populate: one quoted FFS custom build sits on this SKU. The custom build is not a fourth SKU.
Included with L1
inside $28–40k · 2–4 weeks
- Week-one prove: L1 + industry.treasury + lib.l1.wedge on the BC twin
- Every L1 pack and library with included_in_sku=true
- Entra identity, Teams notify, twin, proof day / Acceptance Kit
- Client executive dashboard
- Standard provision seating
Upsell band
attach after L1
- Priced L1 desks (a la carte)
- P-ADM keep after kit PASS — $40–60k / year
- Paid U-DUAL — $20–35k / year — never free
- Priced U-DUAL desks
- Industry packs, modules, libraries, repositories — not SKUs
- FFS implementation / integration $3,500 / day on the assigned sandbox
- Billed troubleshooting $3,500 / day — hours never attach U-DUAL
Included means included with the required SKU, not free. U-DUAL included desks require paid U-DUAL. P-ADM included libraries require attached P-ADM. BD presale twin is this Institute host. Assigned sandbox after signed L1. Activation is kit PASS then P-ADM. Implementation and billed troubleshooting are FFS. A 10/10 of day-one delivery is not launch. Industry and client segmentation is not a live client. Lifecycle activation is not production. Please make much better is not launch. I know you can do much better is not launch. A much better delivery is not production.
Walk the offer 10/10 · Walk the industry · Walk financials · Included is not free
- U-DUAL free with P-ADM
- included means free
- fourth SKU
- dashboard as SKU
Packs, libraries, services
Attach after the required SKU · sit-down on #industry · not SKUs
Industry desks, libraries, fee-for-service hours, and repositories are not SKUs. The sit-down industry drawer walks here. Five industry areas tell the need and the why. Catalog list from packs.json.
Offer 10/10 · include · industry · libraries · service · bill · certify · not a SKU
How we 10/10 the offer
Need is packs as SKUs, included as free, hours as a SKU, industry certify as launch, a trial as a live client, and Graph as wired. Why is the 10/10 of the offer. Standard inclusions seat with L1. Industry packs, modules, libraries, and repositories deepen the same plane. Options and upsells attach after the required SKU. Development is gold and hops. Certification is catalog law. Availability is licensed-not-wired. Trial is ninety minutes. Activation is kit PASS then P-ADM. Deactivation is revoke. Copy, images, and graphics stay catalog-honest. Billing is a catalog list. Servicing is keep and FFS. Customization never mints a SKU. Packs are not SKUs. Industry certify is not launch. A 10/10 offer is not a fourth SKU. A 10/10 of operability, interoperability, and usability is not launch. A 10/10 of prebuilt certified day-one is not launch. Packs, modules, and custom builds are not a fourth SKU. Sandbox-to-production is not launch. A better pass is not launch. Raising certified again is not launch. A raise is not production. A 10/10 of day-one delivery is not launch. Industry and client segmentation is not a live client. Lifecycle activation is not production. Please make much better is not launch. I know you can do much better is not launch. A much better delivery is not production. A run-through is not launch. How to do a run through is not production. A considered walk is not a live client.
Need: this 10/10 is treated as a fourth SKU, included as free, certify as launch, and a trial as a booked named client.
Why: we raise the catalog offer on this twin. Hops land. Refuses click. Complements stay eight. Three SKUs only. Seat B click stays owner-only.
Packs are SKUs no
Included is free no
Hours are a SKU no
Certify is launch no
Trial is a live client no
Operability is launch no
Day-one is launch no
Custom builds are a SKU no
Sandbox-to-production is launch no
A better pass is launch no
Raising certified again is launch no
A raise is production no
Better pass is launch no
Raising certified is launch no
Raise is production no
Day-one delivery is launch no
Segmentation is a live client no
Activation is production no
A run-through is launch no
How to do a run through is production no
A considered walk is a live client no
- WriteUnauthorized journal. Two humans. One hash. Then the write.
- PitchL1 Need / Why / Must-have / Populate on #commercial. A run-through is not launch.
- ProofNinety minutes. Two named humans. Lab oids are not seats.
- Bake-offCheaper native is a refuse. Walk away. A considered walk is not a live client.
- AttachKit PASS then P-ADM. Paid U-DUAL never free. How to do a run through is not production.
Write
Unauthorized journal. Two humans. One hash. Then the write. A run-through is not launch.
Pitch
Need is Job C in front of the write. Why is the unauthorized journal. Must-have is one week-one journal.
Proof
Ninety minutes. Two named humans. Lab oids are not seats. Graph is not called.
Bake-off
Cheaper native is a refuse. Walk away. A considered walk is not a live client.
Attach
Kit PASS then P-ADM. Paid U-DUAL never free. How to do a run through is not production.
- PitchL1 seats the week-one prove. Controllers already have BC SOD. They do not have Job C in front of the write.
- WhyThe unauthorized journal. Ninety minutes. Two named humans. Lab oids are not seats.
- Must-haveOne week-one journal that names the two humans, the first keep, and the first refuse. That journal is not a live pin.
- Populateindustry.treasury plus lib.l1.wedge on first attach. The library is not a fourth SKU.
- DeliverKit PASS then P-ADM keep. Paid U-DUAL never free. FFS implement and billed care. A much better delivery is not production.
Pitch
Need is Job C in front of the write. Why is the unauthorized journal. Please make much better is not launch.
Why
Controllers already have BC SOD. They do not replace their ERP. I know you can do much better is not launch.
Must-have
Week-one journal names two humans, the first keep, and the first refuse. Complements stay eight.
Populate
industry.treasury plus lib.l1.wedge. One industry pack on P-ADM. Quoted FFS custom builds sit on U-DUAL.
Deliver
A much better delivery is not production. Kit PASS then P-ADM. Hours never attach U-DUAL.
- BDQualify on this Institute twin. Industry and client segmentation is not a live client.
- TwinPresale demo here. Assigned sandbox after signed L1. The Institute twin is not the assigned client sandbox.
- ActivateKit PASS then P-ADM. A 10/10 of day-one delivery is not launch.
- ImplementIntegration and custom builds are FFS on that sandbox. Packs are not a fourth SKU.
- CareBilled troubleshooting is FFS hours. Hours are not a SKU. Lifecycle activation is not production.
Standard
L1 seats week-one prove. Complements stay eight. A 10/10 of day-one delivery is not launch.
Keep
P-ADM after kit PASS. Weekly sealed keep on the assigned sandbox. Industry and client segmentation is not a live client.
Deepen
Paid U-DUAL. Never free. Quoted FFS custom builds sit on the same SKU.
Libraries
Twenty-three libraries. Need and why sit with the industry desk. Not a product.
Repos
Eleven repositories. Client-segregated. Lifecycle activation is not production.
- StandardThe licensed SKU. Complements stay eight. A better pass is not launch.
- Add-onSits on the SKU you already licensed. Raising certified again is not launch.
- FFS custom buildsQuoted work on the same SKU. A raise is not production.
- LibrariesReusable packs. Complements stay eight. A better pass is not launch.
- ReposClient-segregated. Packs, modules, and custom builds are not a fourth SKU.
Standard
The licensed SKU. Complements stay eight. A better pass is not launch.
Add-on
Sits on the SKU you already licensed. Raising certified again is not launch.
FFS custom builds
Quoted work on the same SKU. A raise is not production.
Libraries
Reusable packs. Complements stay eight. A better pass is not launch.
Repos
Client-segregated. Packs, modules, and custom builds are not a fourth SKU. A raise is not production.
Use
A 10/10 of operability, interoperability, and usability is not launch. Hops land. Refuses click.
Day-one
A 10/10 of prebuilt certified day-one is not launch. Walk the kit.
Packs
Packs, modules, and custom builds are not a fourth SKU. Three SKUs only: L1, P-ADM, U-DUAL.
We raise · include · attach · keep
L1 seats. Five industry areas. Twenty-three libraries. Eleven repositories. P-ADM keep. FFS customize. Catalog list bills.
We refuse · a 10/10 offer is not a fourth SKU
Packs as SKUs. Included as free. Hours as a SKU. Certify as launch. Trial as a live client. Graph as wired.
Four facts · not hops
Content
Catalog is the message. Copy stays catalog-honest. First glance is the write rail. A competitor analysis is not a named client.
Graphics
Emblem and gold wash. Invented product shots are not the proof. Images do not mint a SKU.
Graphs
Four Reads Granted. Graph Writes revoked. A dashboard chart is not a SKU. Graph is not called.
Lifecycle
Develop is gold. Certify is catalog law. Trial is ninety minutes. Activate is kit PASS. Deactivate is revoke. Availability is licensed-not-wired.
Six hops · raise the offer 10/10 · refuse what we cannot
- DevelopNeed: gold as LIVE_PIN_OK. Why:
make gold. A 10/10 quality check is not launch. - IncludeNeed: included as free or a fourth SKU. Why: L1 seats. Included is not free. Three SKUs only.
- IndustryNeed: packs as SKUs or certify as launch. Why: five areas. Packs, modules, and repositories are not SKUs.
- LibrariesNeed: a library as a product. Why: twenty-three libraries seat. Eleven repos hold law. Not live.
- ServiceNeed: hours or customization as a SKU. Why: kit PASS then P-ADM. FFS never mints a SKU.
- ActivateNeed: trial as a live client or Graph as wired. Why: ninety minutes. Writes revoked. Deactivate is revoke.
Walk included and upsells · Walk the industry · Walk libraries · Walk the 10/10 · Walk the client 10/10 · Walk operations · Walk financials · Walk the Microsoft universe · Walk the join · A 10/10 offer is not a fourth SKU
Five industry areas · walk the need and the why · not named verticals
Industry here is the client's books, sales deepen, and keep — not a named vertical. Agent Intent is what the buyer says. Banks, reserve journals, and booked RWAs walk Room 1. Tokenization, stablecoin mint, and crypto asset management stay Room 2. Each area has a need, a why, standard inclusions, upsells, libraries, and shared repositories. Packs are not SKUs. Libraries seat the plane. They are not products. Repositories hold the law. They are not live. A named vertical is not a SKU. Industry certify is not launch. A 10/10+ quality check is not launch.
A named vertical is a SKU no
Industry certify is launch no
Packs are SKUs no
Libraries are products no
Repositories are live no
10/10+ is launch no
Five hops · walk the areas · not a named vertical
- BooksRoom 1. The unauthorized journal. Standard L1 plus priced desks.
- SalesPaid U-DUAL. Quote, order, invoice on the same plane.
- KeepP-ADM after kit PASS. Second record. Not a certificate.
- LibrariesSeat identity and notify with the module. Not products.
- RepositoriesEleven shared repos. Catalog law. Not live. Not SKUs.
Room 1 · books · L1 · not 17a-4
Books
Controllers already have two-person SOD on Business Central. That SOD was built for people. It does not sit in front of Copilot or a customer's model. The week-one prove is one journal on this twin. Agent Intent that sits the write — banks, treasury, payments, reserve journals, fund NAV, booked RWAs — walks here. Mint, tokenization, and wallet signing stay refuse.
Need: an unauthorized Business Central journal — or a payable, bank rec, cash receipt, asset journal, or inventory adjust — that client AI drafted and two humans did not admit.
Why: controllers already have two-person SOD. They do not have Job C in front of the write. Week-one prove is the journal wedge. Same-plane desks deepen after L1. Not a fourth SKU. Not a named vertical.
Four facts · not hops
Standard
Six L1 seats. Journal first. Included, not free.
Upsell
Eight priced L1 desks after the SKU.
Libraries
lib.l1.* seats Entra and notify. Not products.
Repos
Shared. Not live. Room 2 stays refuse.
Standard inclusions · walk the desks
- Treasuryindustry.treasury · lib.l1.wedge · week-one journal
- ControllerSame journal. Seat B if treasury is seat A
- Failsafeindustry.governance · lib.l1.failsafe · AI may draft
- Planeindustry.control_plane · lib.l1.plane · one gate
- Orgindustry.org · lib.l1.org · existing SOD
- Independenceindustry.independence · vendor is not the failsafe
Upsells · same plane · not a fourth SKU
- Payablesindustry.payables · lib.l1.payables · $6–10k / year
- Bankindustry.bank · lib.l1.bank
- Cashindustry.cash · lib.l1.cash
- Fixed assetindustry.fixed_asset · lib.l1.fixed_asset
- Inventoryindustry.inventory · unpaired
- Cascadeindustry.cascade · customer's AI drafts
- Off switchindustry.off_switch · freeze grants, not Copilot
- Rollbackindustry.rollback · reversing journal. Not a time machine
Inventory stays unpaired. Room 2 — mint, tokenization, wallet — stays refuse. Walk Agent Intent · Next: Sales deepen
Sales deepen · paid U-DUAL · never free with P-ADM
Sales deepen
L1 proves the journal. Sales is the same admit plane on a later paid attach. A quote without two seats is the write that must not happen. Never free with P-ADM.
Need: an unauthorized quote override, order submit, invoice, credit memo, return, or price change that Sales AI drafted and two humans did not admit.
Why: L1 proves the journal. U-DUAL deepens the same plane onto Sales Enterprise. A quote intent walks here. A mint intent stays refuse. Never free with P-ADM. Until G14 the twin is the Sales sandbox. Not a second product. Not a named vertical.
Four facts · not hops
Standard
Sales + quote desk. Included with paid U-DUAL.
Upsell
Invoice, credit, returns, pricing after attach.
Libraries
lib.udual.* never free with P-ADM.
Repos
Shared. Until G14 the Sales twin.
Standard inclusions · walk the desks
- Salesindustry.sales · lib.udual.sales · quote + order
- Quoteindustry.quote_desk · same library · override only
Upsells · same plane
- Invoiceindustry.invoice_desk · lib.udual.quote_to_cash
- Creditindustry.credit · unpaired
- Returnsindustry.returns · lib.udual.returns
- Pricingindustry.pricing · unpaired
Credit and pricing stay inventory until a dedicated library. Next: Keep
Keep · P-ADM after kit PASS · not a certificate
Keep
L1 proves the write. Keep is what the examiner walks out with: who admitted, freeze evidence, last sealed keep. A keep export is not dual admit. Included-with-L1 seating does not attach P-ADM.
Need: the examiner cannot see who admitted the write. The board cannot freeze with evidence. The second record is 0. A keep export is not dual admit.
Why: L1 proves the write. P-ADM keeps the sealed DecisionRecord, risk register, off-switch evidence, org seating map, and reserved-work notice. An examiner intent walks here. A named vertical stays refuse. Attach only after kit PASS. Not a filing. Not 17a-4. Not a patent. Not LIVE_PIN_OK.
Four facts · not hops
Standard
None as a keep SKU. P-ADM is the band.
Upsell
Six priced keeps after kit PASS. $5–8k list.
Libraries
lib.padm.* export. They do not admit.
Repos
Shared. Not live Sentinel. Not 17a-4.
Standard inclusions
None as a keep SKU. Keep is the P-ADM band after kit PASS.
Upsells · walk the desks · not a named auditor
- Retentionindustry.retention · lib.padm.retention · not live Defender
- Oversightindustry.oversight · lib.padm.governance · not a certificate
- Second recordindustry.second_record · lib.padm.records
- Boardindustry.board · who admitted, freeze, last keep
- Internal auditindustry.internal_audit · not a named auditor
- IP keepindustry.ip_keep · not a patent. G12 stays open
lib.padm.export and lib.padm.siem stay unpaired inventory. Next: Libraries
Twenty-three libraries · seat the plane · not products
Libraries
A pack without a library is a name. The library is the kit that seats identity and notify with the module. A desk that invents its own seating mints a fourth SKU. Walk a kit to the desk it already seats.
Need: a desk without identity and notify is a button, not a plane. A pack that invents its own seating mints a fourth SKU.
Why: libraries pair the privileged module to Entra seat verify and Teams notify. Included means included with the required SKU, not free. Libraries are not SKUs. They are not products. They do not launch the Institute.
Four facts · not hops
Standard
lib.l1.wedge and the L1 kit. lib.udual.sales with paid U-DUAL.
Upsell
Priced L1, U-DUAL, and P-ADM kits after the required SKU.
Unpaired
lib.kit.evidence, lib.padm.export, lib.padm.siem — no desk.
Not a SKU
A kit is not a product. A 10/10+ check is not launch.
Walk a kit to its desk · three unpaired have no row
- lib.l1.wedgeL1 books kit · Treasury wedge
- lib.l1.failsafeAI may draft. Two humans still admit
- lib.l1.planeOne gate. Not a second product
- lib.udual.salesPaid U-DUAL · never free with P-ADM
- lib.udual.quote_to_cashInvoice after attach
- lib.padm.retentionP-ADM keep · not live Defender
- lib.padm.recordsP-ADM keep · second record
- lib.padm.governanceNot a certificate
Twenty-three libraries. Three unpaired — lib.kit.evidence, lib.padm.export, lib.padm.siem — have no pack. A library is not a SKU. Next: Repositories
Eleven repositories · shared · not live
Repositories
Law has to live somewhere that is not a CMS and not a live system of record. The eleven repositories are that somewhere. None writes Production. There is no hop to a certify row.
Need: law has to live somewhere that is not a CMS and not a live system of record. A repo that writes Production is LIVE_PIN_OK we do not have.
Why: eleven shared repositories hold the admit plane, catalog law, Institute face, finance list, brief, review, pack attach, runbooks, owner gates, counsel pack, and governance maps. Every desk uses them. None is a SKU. None is live.
Four facts · not hops
Catalog
repo.catalog holds commercial law. Not a fourth SKU.
Shared
Admit plane, packs, runbooks, maps. Not an extra attach.
Owner / counsel
repo.owner and repo.legal stay owner-only. G12 stays open.
Not live
No #repo.catalog row. A repository is not Production.
Eleven repositories. repo.catalog is the catalog itself. Repositories are not SKUs. Repositories are not live. Next: Books · Five areas
Walk the industry · Walk the offer 10/10 · Walk Agent Intent · Walk the write · Walk the drawer · Walk the join · Walk the company
Industry
- industry.treasury — included with L1. Journal wedge.
- industry.payables / bank / cash / fixed_asset / inventory — priced L1 desks.
- industry.control_plane / industry.org / industry.independence — included with L1. Plane, org seating, and Microsoft-is-not-the-failsafe.
- industry.cascade — priced L1 desk. Client's customers utilize AI. Client's two humans admit.
- industry.off_switch / rollback — priced L1 desks. Fail-closed freeze. Compensating write. Not a time machine.
- industry.sales / quote_desk — included with paid U-DUAL.
- industry.invoice_desk / credit / returns / pricing — priced U-DUAL desks.
- industry.retention — priced P-ADM keep. Not live Defender.
- industry.second_record — priced P-ADM keep. Sealed DecisionRecord. Not a certificate.
- industry.board — priced P-ADM keep. Owner / board / examiner evidence. Not a filing.
- industry.internal_audit — priced P-ADM keep. Seating map plus second record. Not a named auditor.
- industry.ip_keep — priced P-ADM keep. Reserved-work notice. Not a patent. Not uncopyable.
Libraries, fee-for-service, repositories
- lib.l1.* — L1 seating. Not SKUs.
- lib.udual.* — paid U-DUAL. Never free with P-ADM.
- lib.padm.* — P-ADM keep. Not live Sentinel.
- Acceptance Kit — inside L1. Desk workshop / keep wiring $3,500/day after L1.
- repo.packs / repo.runbooks / repo.owner / repo.legal — not SKUs. Not live.
Honest industry certify · standard and upsell by desk · packs are not SKUs
Every industry desk, classed standard or upsell, with modules, paired library, and shared repositories. Five industry areas tell the need and the why: books, sales deepen, keep, libraries, repositories. Packs are not SKUs. Industry certify is not launch. A 10/10+ quality check is not launch. Credit, inventory, and pricing stay unpaired until a dedicated library.
Packs are SKUs no
Industry certified launch no
LIVE_PIN_OK no
10/10+ is launch no
Refuse rehearsal · do not SKU the inventory
Waiting. Click a refuse. Industry certify is not launch.
packs_are_skus=false · industry_certified_launch=false · certified=false · live=false
Walk Agent Intent. Walk the industry. Banks land on the bank rec row. Tokenization stays refuse. Crypto asset management stays refuse.
Treasury wedge
standard L1 · bc.general_journal.post · lib.l1.wedge · shared repos
Need: the unauthorized journal. Books
Controller desk
standard L1 · bc.general_journal.post · lib.l1.wedge · shared repos
Need: seat B if treasury is seat A. Books
AI failsafe desk
standard L1 · bc.general_journal.post · lib.l1.failsafe · shared repos
Need: AI may draft. Two humans still admit. Books
Human control plane
standard L1 · bc.general_journal.post · lib.l1.plane · shared repos
Need: one gate, not a second product. Books
Client org seating
standard L1 · bc.general_journal.post · lib.l1.org · shared repos
Need: existing SOD is not Job C. Books
Independent plane
standard L1 · bc.general_journal.post · lib.l1.independence · shared repos
Need: the vendor is not the failsafe. Books
Payables desk
upsell L1 · bc.payment_journal.post, bc.purchase_invoice.post · lib.l1.payables · shared repos
Need: an unauthorized payable. Books
Bank desk
upsell L1 · bc.bank_reconciliation.post · lib.l1.bank · shared repos
Need: an unauthorized bank rec. Books
Cash desk
upsell L1 · bc.cash_receipt.post, bc.sales_invoice.post · lib.l1.cash · shared repos
Need: an unauthorized cash receipt. Books
Fixed-asset desk
upsell L1 · bc.fixed_asset.post · lib.l1.fixed_asset · shared repos
Need: an unauthorized asset journal. Books
Inventory desk
upsell L1 · bc.inventory.adjust · no dedicated library · shared repos
Need: an unauthorized inventory adjust. Unpaired. Books
Counterparty AI desk
upsell L1 · bc.general_journal.post · lib.l1.cascade · shared repos
Need: the customer's AI drafted. Books
Off-switch desk
upsell L1 · bc.general_journal.post · lib.l1.off_switch · shared repos
Need: freeze grants, not Copilot. Books
Rollback desk
upsell L1 · bc.general_journal.post · lib.l1.wedge · shared repos
Need: a reversing journal. Not a time machine. Books
Sales deepen
standard U-DUAL · d365.quote.discount_override, d365.order.submit · lib.udual.sales · shared repos
Need: an unauthorized quote or order. Sales
Quote desk
standard U-DUAL · d365.quote.discount_override · lib.udual.sales · shared repos
Need: an unauthorized quote override. Sales
Invoice desk
upsell U-DUAL · d365.invoice.post · lib.udual.quote_to_cash · shared repos
Need: an unauthorized invoice. Sales
Credit desk
upsell U-DUAL · d365.creditmemo.issue · no dedicated library · shared repos
Need: an unauthorized credit memo. Unpaired. Sales
Returns desk
upsell U-DUAL · d365.return.authorize · lib.udual.returns · shared repos
Need: an unauthorized return. Sales
Pricing desk
upsell U-DUAL · d365.price.override, d365.quote.void · no dedicated library · shared repos
Need: an unauthorized price change. Unpaired. Sales
Retention keep
upsell P-ADM · defender / monitor / keyvault export · lib.padm.retention · shared repos
Need: freeze evidence the examiner cannot see. Keep
Oversight keep
upsell P-ADM · governance.decision.export, governance.risk.export · lib.padm.governance · shared repos
Need: the risk register is not a certificate. Keep
Second-record keep
upsell P-ADM · decision + second record · lib.padm.records · shared repos
Need: the second record is 0. Keep
Board / examiner keep
upsell P-ADM · decision, second record, off switch, reset · lib.padm.board · shared repos
Need: who admitted, freeze, last keep. Keep
Internal-audit keep
upsell P-ADM · decision, second record, org · lib.padm.audit · shared repos
Need: a seating map without a named auditor. Keep
IP / reserved-work keep
upsell P-ADM · ip.reserved.export · lib.padm.ip · shared repos
Need: reserved work is not a patent. Keep
Unpaired packs stay inventory until a dedicated library: industry.credit, industry.inventory, industry.pricing. Unpaired libraries stay inventory, not a desk: lib.kit.evidence, lib.padm.export, lib.padm.siem. Shared repositories: repo.agent_gov, repo.catalog, repo.institute, repo.finance, repo.brief, repo.review, repo.packs, repo.runbooks, repo.owner, repo.legal, repo.governance.
AI governance — a failsafe, not a certificate
Domestic × international · GENIUS × CLARITY · claimed=false · sit-down on #industry
Catalog map only. US domestic and international scopes stay claimed=false. GENIUS and CLARITY stay claimed=false. Not a SKU. Not counsel. Not EU AI Act / NIST / ISO 42001 / GENIUS / CLARITY certified. Buying L1 does not close regulator clocks.
The client utilizes AI. The client's customers utilize AI. AINav is the human control plane that sits over all of them.
Cascade: client's clients utilize AI × client institutes AINav × two-human control. Do not invent counterparty names.
First record: the admitted SoR write. Second record: the sealed DecisionRecord. Neither is a certificate.
Must-have: every new client AI is another unauthorized-write surface unless one human plane sits over all of them. For owner, board, examiner. Mandated: false. Not a fourth SKU.
Off switch is fail-closed. Reset is the last sealed keep. Rollback is a compensating write. Not powering down Copilot. Not a time machine.
Separate from
- client AI
- Microsoft 365 Copilot
- Agent 365
- BYO MCP
- Cloud Agent
Maps (claimed = false)
- NIST AI RMF
- SOX / ICFR
- EU AI Act
- ISO/IEC 42001
- GENIUS Act — claimed=false
- CLARITY Act — claimed=false
If client AI writes without dual admit
- unauthorized SoR write
- audit failure
- false certification
- seat collapse
Refuse
- EU AI Act certified
- NIST certified
- ISO 42001 certified
- replaces counsel
- client AI as dual
Ultimate control plane · 3.32.0 · must-have · not a SKU · not LIVE_PIN_OK
Human control plane — interface
Must-have for the named controller. From the top of the client's org chart through every drafting desk. Open the floor. Catalog from control-plane.json.
Must-have: every new client AI is another unauthorized-write surface unless one human plane sits over all of them. Humans sit on the plane from the owner down. Treasury and controller admit. Department AI is not a seat.
One dashboard included with L1. Hierarchical views are the same plane. Not a second dashboard SKU.
- Seat ATreasury admits
- Seat BController admits
- One hashConsume once
- Then the writeFail-closed SoR
Interface = humans from the top × one admit plane × hierarchical access × fail-closed tiles
Open the floor Application Client chart
Plane OPEN
Pending 0
Off switch READY
Revenue $0
Signed L1 0
Seats 1 mailbox / 0 oid
Plane state
OPEN
Not frozen. Fail-closed if thrown.
Pending dual admits
0
No named treasury pair has a live bind.
First record (SoR)
1 sandbox / 0 production
AINAV-L1 lab oids.
Second record
0
P-ADM keep not attached.
Off switch
READY
Does not power down Copilot.
Last sealed keep
none
Weekly DecisionRecord after kit PASS.
Recognized revenue
$0
Not booked. No billing provider.
Named customers
0
Do not invent a buyer.
Signed L1
0
Counsel pack G13 stays open.
Year-one if all three
$88–135k list
Catalog list. Not a forecast.
Seats recorded
1 mailbox / 0 oid
Cynthia Hodnett chodnett@ainav.institute recorded. Mailbox is not an Entra oid and not a click.
AI compliance maps
13 / claimed=false
NIST, SOX, EU AI Act, ISO 42001.
Real-time means the admit ledger and freeze state. Not live Production BC. Not forecast ARR.
Write path — draft to keep
Same path for every privileged class. Open the floor for authorization, provision, records, and the walkable rehearsal.
Draft
idle
Department AI is not a seat.
Bind
none
No live action_hash.
Seat A
0
treasury_approver.
Seat B
0
Mailbox recorded. Entra oid and click still open.
First record
1 sandbox
0 production.
Second record
0
P-ADM not attached.
Keep
none
After kit PASS.
Seating cascade — from the top
Oversee
Owner / executive · Board
Keep
Internal audit / examiner
Admit
Treasury — seat A · Controller — seat B
Draft
Payables / sales
Host
IT / identity
Counsel
Legal
Same plane
Remote human
Not a seat
Cloud Agent / client AI
Hierarchical access and control
| Level | Role | Admit | Freeze | Keep | Note |
|---|---|---|---|---|---|
| Owner / executive | oversee | no | request | view | Institutes the plane. One title cannot be both seats. |
| Board | oversee | no | request | view | Fiduciary oversight. Not a named director. |
| Internal audit / examiner | keep | no | no | second_record | Not a named auditor. Not a filing. |
| Treasury — seat A | admit | yes | refuse | view | Own Entra object id. Own click. |
| Controller — seat B | admit | yes | refuse | view | treasury_controller. Cynthia Hodnett agreed. Mailbox chodnett@ainav.institute recorded. Entra oid and click still open. |
| Payables / sales | draft | no | no | no | Department AI is not a seat. |
| IT / identity | host | no | no | no | Hosts Copilot and agents. Not a seat. |
| Legal | counsel | no | no | no | Not replaced. G12 stays open. |
| Remote human | same_plane | if seated | if seated | if role | Same Entra object id. Not a VPN SKU. |
| Cloud Agent / client AI | not_a_seat | no | no | no | May draft. Cannot bind an action_hash. |
Throughout the client organization
Existing SOD. Not invented department heads. Not a fourth SKU.
| Department | Role | Seat | AI | Note |
|---|---|---|---|---|
| Treasury | admit | treasury_approver | May draft. Not a seat. | Usually seat A. |
| Controller / accounting | admit | treasury_controller | May draft. Not a seat. | Usually seat B. |
| Payables | draft | — | Not a seat. | Same two humans admit. |
| Sales / quote desk | draft | — | Not a seat. | Paid U-DUAL deepens the same plane. |
| IT / identity | host | — | Not a seat. | PIM is not dual admit. |
| Security / compliance | keep | — | Not a seat. | 2LOD keep after P-ADM. |
| Internal audit | keep | — | Not a seat. | Reads first and second records. |
| Legal / counsel | counsel | — | Not a seat. | Not replaced. G12 stays open. |
| Owner / executive | oversee | — | Not a seat unless seated. | Can ask for a freeze. |
| Board | oversee | — | Not a seat. | Fiduciary oversight. |
Internal and remote access
Internal and remote use the same Entra object id. PIM is not dual. Teams is not a seat.
Internal
Entra ID on the client tenant. Same action_hash. Same consume ledger.
Remote
Same Entra object id from any network. Conditional Access may identify. It does not admit.
- Same plane. Not a second remote plane. Not a VPN SKU.
- Entra required. PIM is not dual. Teams is not a seat.
AI compliance maps
Maps, not certificates. Every instrument stays claimed=false until counsel says otherwise.
| Instrument | Maps to | Scope | Claimed |
|---|---|---|---|
| NIST AI RMF | Govern and Measure via sealed DecisionRecords | US domestic | claimed=false |
| SOX / ICFR | Dual admit is a control. Not a SOX opinion. | US domestic / books | claimed=false |
| EU AI Act | Write-gate failsafe, not the high-risk system. | international | claimed=false |
| ISO/IEC 42001 | Can feed an AIMS. Certification is not claimed. | international | claimed=false |
| Three lines of defense | 1LOD dual admit. 2LOD P-ADM keep. 3LOD not claimed. | risk / compliance | claimed=false |
Refuse
- fourth SKU
- invented live P&L
- remote second plane
- Cloud Agent as seat
Doctrine sits in the Cynthia letter. This floor tiles the admit ledger.
Client org chart — catalog template
Not AINav, Inc. departments. Not a named customer. Departments are not SKUs. Department AI is not a seat.
AINav sits on the client's existing SOD. Treasury and controller admit. IT hosts Copilot. Those AIs draft. They are not seats.
Seat A: treasury_approver (usually Treasury). Seat B: treasury_controller (usually Controller). One title cannot be both seats.
- Treasury — admit (seat A)
- Controller — admit (seat B)
- Payables / Sales — draft
- IT — host. Not a seat.
- Compliance / internal audit — keep
- Legal — counsel. Not replaced.
- Owner / board — oversee. Can freeze.
Operations
QUALIFY → L1_SOLD → KIT_IN_PROGRESS → KIT_PASS → P_ADM_ATTACH → U_DUAL_OFFER → U_DUAL_ATTACH
BD → presale twin → signed L1 → assigned sandbox → activate (kit PASS) → implement / integrate (FFS) → billed troubleshooting (FFS) → production gate. A 10/10 of day-one delivery is not launch. Industry and client segmentation is not a live client. Lifecycle activation is not production. Please make much better is not launch. I know you can do much better is not launch. A much better delivery is not production. Assigned stays 0.
SKU attach chain. The operating day is Run the firm. Honest better sits on #success. Honest join sits on #join-consider. Honest whole sits on #whole. Honest industry certify sits on #packs. Walk the industry. Walk Agent Intent. Honest Power Pages sits on #twin. Honest Copilot Studio sits on #success. Honest ten sits on #success. A 10/10 quality check is not launch. A 10/10+ quality check is not launch. Copilot Studio is not Job C. Power Pages is not the Institute host. The Microsoft roster is #firm-ms. The brand is #brand. The client universe is #universe. Packs are not SKUs. Industry certify is not launch. The whole firm is not launch. Exits: LOST · KIT_FAIL · CHURN. Kit PASS is a twin proof, not a checkbox. 3.29.0 honest raise sits on kit, #packs, #ten-proof, and #better-consider. A better pass is not launch. Raising certified again is not launch. A raise is not production. 3.30.0 honest day-one sits on kit, #packs, #life-proof, and #ten-proof. A 10/10 of day-one delivery is not launch. Industry and client segmentation is not a live client. Lifecycle activation is not production. 3.31.0 honest much sits on kit, #packs, #offer-proof, and #ten-proof. Please make much better is not launch. I know you can do much better is not launch. A much better delivery is not production. 3.32.0 honest run sits on kit, #packs, #offer-proof, and #ten-proof. A run-through is not launch. How to do a run through is not production. A considered walk is not a live client.
Walk the join · Walk honest better · Walk the operating company · Walk the offer 10/10 · Walk the twin · Walk the segregated planes · Walk the client twin · Walk the industry · Walk Agent Intent · keep hop · 10/10+ is not launch
- P-ADM attaches only after kit PASS.
- U-DUAL requires L1 and never attaches as a free bundle with P-ADM.
- This plane cannot mark
LIVE_PIN_OKor signed L1.
Business operating system
One company. One plane. Catalog list is not recognized revenue.
Price L1 against the unauthorized journal that two humans did not admit. Prove it in ninety minutes. Keep with P-ADM. Deepen with paid U-DUAL.
Model
Prove L1. Keep P-ADM. Deepen U-DUAL. Not a consultancy. Not an IdP.
Management
Weekly pipeline. Kit board. Open-gap review. Cannot mark LIVE_PIN_OK, signed L1, recognized revenue, named contractor, commission payout, or launch.
Sales
Qualify → proof day → sell L1 that week → kit PASS → attach P-ADM → offer paid U-DUAL. Desks and libraries on the five industry areas after L1 — not SKUs. No free bundle. No soft dual close.
Delivery
Master issues the lockfile. Cloud and local motherships share one consume ledger. Twin write, Teams notify, SharePoint kit evidence. Not a live pin.
Join
Walk the join. Walk the operating company. Business, website, Microsoft, and the operating day stay recorded. 10/10+ is not launch. Not a running firm.
Financial model
Catalog list. Not booked. Not recognized revenue. No billing provider. Signed L1 is 0.
L1 is a fixed-scope project. P-ADM is an annual keep after kit PASS. U-DUAL is an annual deepen and is never free. Fee-for-service is $3,500/day on the same plane after L1.
One controller — L1 only
$28,000–$40,000
If one controller buys L1 and stops. Not a forecast.
One controller — L1 then P-ADM
$68,000–$100,000
If kit PASS, then annual keep. Never free U-DUAL.
One controller — all three
$88,000–$135,000
If L1, then P-ADM, then paid U-DUAL. Year-one catalog list.
Three controllers — L1 + P-ADM
$204,000–$300,000
If three controllers each buy L1 and attach P-ADM. No named buyers exist.
Walk the operating company · Walk commercial · Walk the offer 10/10 · Walk the join · Catalog list is not recognized revenue
Executive summary and letter
Board packet for Cynthia Hodnett. One fact per row. Then a first-person letter from James. Not a priced round. Not a forecast. Not LIVE_PIN_OK. Catalog list from investor.json.
Human control plane over every client AI that can draft a privileged write. Job C: two distinct humans bind the same action_hash. No admit, no write.
Job C: two distinct humans bind the same action_hash. The sale is the ninety-minute proof. Three SKUs only. Honest tiles stay zero until a controller buys.
| Item | What it is |
|---|---|
| Job C | Two distinct humans. Fail-closed. The Cloud Agent is not a seat. |
| Proof day | Ninety minutes. Two seats. One journal. Walk out with a sealed DecisionRecord. |
| Three SKUs | L1 $28–40k. P-ADM $40–60k / year. U-DUAL $20–35k / year, never free. |
| Scoreboard today | Revenue $0. Customers 0. Signed L1 0. Seats 1 mailbox recorded / 0 oid. |
| Microsoft | Microsoft is identity, notify, SoR, and host. Microsoft is not the product. |
| Must-have | Must-have is not mandated. Not counsel. Not a certificate. G12 stays open. |
| Owner-only still open | Named dual seats. US Dataverse. Institute launch. Production BC only if explicitly authorized. LIVE_PIN_OK cannot be marked from this plane. |
| The ask | Cynthia Hodnett as seat B. Mailbox chodnett@ainav.institute recorded. Entra oid and click still open. Not stock. Not a priced round. |
Dear Cynthia — I am writing to record that you agreed to be the second human on the admit plane. James recorded chodnett@ainav.institute. A mailbox is not your click.
You agreed. Mailbox chodnett@ainav.institute recorded. Entra oid and click still open. Not stock. Not a priced round. Revenue $0.
James Hodnett, sole owner of AINav, Inc.
Your decision
Seat A is treasury_approver (James). Seat B is treasury_controller (you). Each needs a distinct Entra object id. When a privileged write is proposed, both of you see the same action_hash. Admit or refuse. Refusing is the product working. James clicking twice is not dual. The Cloud Agent is not a seat. A mailbox is not the click.
Mailbox chodnett@ainav.institute is recorded. Your Entra object id and your click are still open. Your no, or not yet, on the click is still a complete answer.
Packet = catalog list × zero booked × two-human close
Recognized revenue
$0
Named customers
0
Signed L1
0
Year-one if all three
$88–135k list
Catalog detail
Problem
Client AI can draft a journal. A Teams vote is not dual admit.
Model
Prove L1. Keep P-ADM. Deepen paid U-DUAL. Packs are not SKUs.
Solution
Two humans. One action_hash. Fail-closed effect. Independent of Microsoft.
The ask
Cynthia Hodnett as seat B. Mailbox chodnett@ainav.institute recorded. Entra oid and click still open. Not stock. Not a priced round.
Why the ultimate control plane insulates
Last human gate over every drafting AI. The vendor of the AI cannot credibly be the failsafe. Not a patent. Not uncopyable.
Seat B is treasury_controller. Mailbox recorded: chodnett@ainav.institute. Entra object id is not recorded. Seat B click is not recorded.
Priced L1 desks $6–10k. P-ADM keep $5–8k. U-DUAL desks $6–10k. FFS $3,500/day. Not a fourth SKU.
Upsell catalog is on the same three SKUs. Priced L1 desks $6–10k. P-ADM keep $5–8k. U-DUAL desks $6–10k. FFS $3,500/day. Not a fourth SKU.
- L1 included: treasury, controller, governance, control plane, org, independence
- L1 priced: payables, bank, cash, fixed asset, inventory, cascade, off switch, rollback
- P-ADM keep: retention, oversight, second record, board, internal audit, IP keep
- U-DUAL: sales and quote included; invoice, credit, returns, pricing priced
- Fee-for-service $3,500/day after L1. Hours are not a SKU and never attach U-DUAL.
Print docs/CYNTHIA_HODNETT_INVESTOR.pdf — letter with the full upsell catalog. Companion brief: docs/CYNTHIA_HODNETT_BRIEF.pdf.
Operating organization
All departments exist out of the gate. Departments are not SKUs. Wired-and-running is not claimed for Sales, Teams, Institute, legal, or programs.
Sole owner James Hodnett. The Cloud Agent operates. It is not a dual seat and not an Inception contact. Cynthia Hodnett agreed. Mailbox chodnett@ainav.institute recorded. Entra oid and click still open.
Treasury / Finance
running_sandbox
Business Central Sandbox company AINav. Production stays blocked.
Identity / IT / Host
running_sandbox
Same Entra app. Azure host in eastus. Not LIVE_PIN_OK.
Sales / Revenue
licensed_not_wired
Sales Enterprise is licensed. No Dataverse instance yet.
People / Notify
licensed_not_wired
Teams is licensed. A chat is not a seat.
Security / Compliance
licensed_not_wired
E7 complements. PIM is not dual admit. LAW is not Sentinel.
Institute / GTM
azure_hosted_not_custom
Azure hostname is published. Apex CNAME is empty Cloudflare Pages. Pages is not the Institute.
Legal / Counsel
open_gap
G12 legal and G13 signed L1 stay open.
Product / Engineering
running_code
Job C admit plane. Three SKUs only.
Delivery / Customer Success
running_code
Master, cloud, and local motherships. Do not invent a customer.
Programs / Partnerships
qualify_not_claimed
Microsoft for Startups first. NVIDIA Inception second. Membership is not claimed.
Company review
Catalog-honest. Not a live pin. Not a launch. Not recognized revenue. The Cloud Agent operates. It is not a seat.
Success = LIVE_PIN_OK × proof day × signed L1 × P-ADM attach
AINav, Inc. can prove the L1 write-gate on Business Central Sandbox. It cannot yet sell a signed L1, attach P-ADM, or mark LIVE_PIN_OK.
LIVE_PIN_OK
open
Never marked from this plane.
Proof day
executable · unsold
Ninety minutes. Not a sold L1.
Signed L1
open
G13. Lab oids are not two named treasury humans.
P-ADM attach
0
Attaches after kit PASS. Never free U-DUAL.
How the pieces fit
Owner / operator
sole_owner
James Hodnett owns. cursor.cloud_agent operates. Not a seat. Cynthia Hodnett agreed. Mailbox recorded. Entra oid and click still open.
Job C admit plane
running_code
Two distinct humans. One action hash. Then the write.
L1 / Business Central
sandbox_journal
Company AINav. Document AINAV-L1. Production blocked. Not LIVE_PIN_OK.
P-ADM attach
unattached
Attaches after L1 Acceptance Kit PASS. Attached=0.
U-DUAL / Sales
licensed_not_wired
Sales Enterprise is licensed. No Dataverse. Twin only until G14.
Institute / DNS
azure_hosted_not_custom
Azure hostname is hosted. Apex CNAME is empty Cloudflare Pages. Launch is held.
Programs
qualify_not_claimed
Microsoft for Startups first. NVIDIA Inception second. Membership is not claimed.
Commercial spine
catalog_list_not_revenue
Year-one list $88k–$135k if one controller buys all three. Not recognized revenue.
Success upgrades
Tree = already encoded. Owner = James must click. None of these mark LIVE_PIN_OK.
Delivery system
One client. Two motherships. One ledger. Master never writes the client SoR.
Week one: provision the pair, run the ninety-minute proof or Acceptance Kit,
notify Teams, store kit evidence, refuse LIVE_PIN_OK.
- Master — AINav, Inc. Lockfile, catalog, gold.
- Cloud — Azure-declared client plane. Same ledger as local.
- Local — Client operators. Seats and twin. Same ledger as cloud.
- Buyer — Controller forwards the proof-day brief. No invented inbox.
Master, cloud, and local motherships
Master
AINav issues the lockfile, gold vectors, and catalog. It does not write the client’s SoR. Azure is the declared host — not a live pin.
Cloud
Azure-declared client plane. Same Job C lockfile and consume ledger as local. Sandbox twin. Not LIVE_PIN_OK.
Local
The client plane: AdmitClient, lockfile, shared ledger, Business Central twin, optional Sales twin. Standard L1 pack is bc.general_journal.post.
Microsoft fabric
Six connections. Eight complements. Cloudflare is DNS/edge, not a ninth complement. Sandbox only. Microsoft is not the product. Copilot and Agent 365 are not the admit plane.
Azure hosts. Entra seats from Microsoft 365 E7 identify. AINav admits. Business Central and Sales receive the write. Teams notifies. Complements hold secrets, evidence, policy, and audit. AINAV.Institute is a static site on Azure Static Web Apps — ainav.institute is not bound. E7 mail, Entra, Teams SIP, and lync SRV already point through Cloudflare. DNS is full.
Walk the join · Walk the industry · Walk Agent Intent · fabric hop · complements stay eight
-
1. Host
Microsoft Azure
hosted_sandbox
RG ainav-inc. Institute on eastus2 Static Web Apps. Custom domain not bound.
-
2. Identity
Microsoft 365 E7 / Entra ID
connected_sandbox
Seat object ids. Copilot is not a seat. PIM is not dual admit.
-
3. Admit
AINav Control Plane
Job C · running_code
Two distinct humans. One action hash. Then the write.
-
4. SoR · L1
Business Central Premium
sandbox · AINav
Company AINav. Wedge
bc.general_journal.post. Production blocked. -
5. SoR · U-DUAL
Sales Enterprise
licensed · not wired
No Dataverse instance. Quote override stays on the twin until G14.
-
6. Notify
Teams Enterprise
licensed · not wired
Effect notify. A chat is not a seat. Graph is not called from this page.
-
7. Protected notify
Teams Premium
licensed · not wired
Protected effect notify. A meeting is not a seat.
Open equation
G1/G10 · G12 · G13 · G14 · HA
Success = LIVE_PIN_OK × proof day × signed L1 × P-ADM attach
Honesty
live=false · production=false
Not LIVE_PIN_OK. Custom domain not claimed. Copilot and Agent 365 are not SKUs.
E7 on Cloudflare
Not a ninth complement. Not a hop on the privileged write. DNS/edge only. Cloudflare Pro is the edge plan, not a SKU. Mail, Entra, Teams SIP, and lync SRV already point. DNS is full. Cloudflare is not the product. This is not Institute launch.
Already pointed
- Cloudflare nameservers
- Outlook MX
- SPF include Outlook
- Entra MS= TXT
- autodiscover CNAME
- enterpriseenrollment CNAME
- enterpriseregistration CNAME
- DKIM selectors
- DMARC p=quarantine
- sip CNAME
- lyncdiscover CNAME
- _sip._tls SRV
- _sipfederationtls._tcp SRV
Still missing
- None. E7 DNS is full.
Institute launch is a different gate. Do not bind ainav.institute until James says launch. Do not orange-cloud MX or autodiscover. Dashboard: dash.cloudflare.com.
plan=pro · plan_sku=false · from_this_plane=false
- SSL/TLS — Confirm SSL/TLS Full, not Flexible. Minimum TLS 1.2. HTTP to HTTPS 301 is already on. That redirect is not Institute launch.
- WAF — Leave Cloudflare Managed and OWASP Core (Pro) on the empty apex. The 403 challenge is no longer holding. Apex is 404 empty on Cloudflare. That is not the Institute and not launch. Confirm you meant to drop the challenge.
- Speed — Rocket Loader Off. Auto Minify JavaScript Off. They break the static Institute after launch.
- DNS — MX and autodiscover resolve to Outlook. Confirm they stay DNS only / grey cloud. Do not orange-cloud mail.
Wait: do not add asuid or bind Azure SWA as the public apex. SWA stays the development twin. Pages is the empty Cloudflare origin. Launch stays owner-only. Do not point the apex at Azure SWA with Page Rules. Keep SWA as the twin. When James authorizes a gold-99.5 release, publish that gold tree to the Cloudflare public origin. That is launch. This plane cannot publish. Do not raise DMARC to p=reject until mail to Cynthia actually flows. Quarantine is enough.
Verified
- Cloudflare nameservers bella and dilbert
- E7 DNS 13/13 full
- Outlook MX, SPF -all, DKIM, DMARC p=quarantine
- HTTP to HTTPS 301
- Apex 404 empty on Cloudflare edge — not the Institute
- ainav-institute.pages.dev 404 empty
- Azure SWA twin 200 with Institute CSP
- asuid absent
- TLS 1.2 and 1.3 accepted; TLS 1.0 and 1.1 refused
- Autodiscover and MX resolve to Outlook, not Cloudflare anycast
- www 301 to apex
- Visitor cert is Cloudflare Universal SSL — not proof of Full
Owner recorded
- Automatic SSL/TLS currently Full (strict). Next scan Sep 9. From the owner dashboard, not this plane.
Confirm
- Do not downgrade Full (strict) to Flexible or Off
- Rocket Loader Off and Auto Minify JavaScript Off
- MX and autodiscover grey cloud
- 403 challenge drop was intended — apex is now 404 empty
Refuse
- asuid while Pages is the apex
- orange-cloud MX or autodiscover
- Flexible SSL
- Rocket Loader
- treat the apex 404 as launch
- treat Cloudflare edge as the Institute
Wait
- DMARC p=reject after mail flows
- Bind ainav.institute / asuid when the owner says launch
Quality is E7 DNS full, Cloudflare edge on an empty 404 apex, TLS 1.2+, and mail not Cloudflare anycast. Azure SWA is the development twin. Owner recorded Automatic SSL/TLS Full (strict). Visitor cert is not proof. Rocket Loader stays owner confirm. It is not Institute launch. This Cloud Agent cannot edit Cloudflare.
holding=ainav-institute.pages.dev · host=false · institute=false · launch=false · Apex is 404 empty on Cloudflare. Pages origin 404. Azure SWA is the development twin, not the public apex. Empty Pages is not the Institute. Leave the zone as-is until James authorizes a gold-99.5 release. Not launch.
The Institute has a digital twin. Development is Azure SWA. The public hostname is on Cloudflare and is empty. Gold 99.5 is the release floor. Authorization is owner-only. Cloudflare is the edge. Azure SWA is the twin. Apex 404 is not the Institute. A green check is not LIVE_PIN_OK. Not launch.
Twin review — website on Azure SWA
This host is the review website. Update here. Gold 99.5 stays the floor. Public release stays owner-only. Open the twin review page.
Sale
Write, proof day, bake-off, human control, executive risk, market, what you've been missing, first-class product.
Owner
Missing, stack walk, E7 quality, US Dataverse still open.
Release
Gold 99.5. --publish-twin updates this host. --publish-institute stays launch_not_ready.
twin_review=true · review_path=twin.html · authorized_release=false · launch_ready=false
Nameservers for ainav.institute. Cloudflare Pro is the edge plan, not a SKU. Microsoft 365 E7 mail, Entra, Teams SIP, and lync SRV already point through Cloudflare. DNS is full. Cloudflare is not the product, not a seat, not dual admit. MX and autodiscover stay DNS-only — orange-cloud is not dual admit. This is not Institute launch. This Cloud Agent cannot edit Cloudflare.
full=true · sku=false · live=false · is_admit_plane=false · complement=false
Stack walk — hop by hop with links
Azure hosts. Entra identifies. AINav admits. Business Central and Sales receive. Teams notifies. Complements hold. Cloudflare is DNS/edge, not a hop on the privileged write.
Job C gold plus fail-closed probes. Probe never writes a SoR and never marks LIVE_PIN_OK. CLI: python -m ainav stack.
- Cloudflare dashboard — full. DNS is full. Not Institute launch. Do not orange-cloud MX.
- Azure Static Web Apps — hosted_not_custom. Custom domain is not bound.
- Entra users — mailbox recorded, oid open. She clicks seat B.
- Azure-hosted Institute — running_code. Cloud Agent is not a seat.
- Business Central Sandbox — sandbox_journal. Production blocked.
- Power Platform environments — licensed_not_wired. Ticket 2609030040009525: North America sandboxes follow Canada affinity. United States is not pinned. Canada is not United States.
- Microsoft 365 admin — dns_full_graph_open. A chat is not a seat.
- Entra app registrations — four Reads Granted. Writes owner-revoked. No Write from this plane.
- Agents > Tools registry — Leave five Available. Block Dataverse MCP.
- Azure Static Web Apps — launch held. Empty Pages is not the Institute.
Complements — not hops on the write
- Key Vaults — secrets. Not LIVE_PIN_OK.
- Azure Monitor — observe. LAW is not Sentinel.
- SharePoint — kit evidence. Sites.Read.All. No Write from this plane.
- Microsoft Defender portal — security sink. Not the admit plane.
- Entra PIM — eligible is not admit.
- Microsoft Sentinel — SIEM sink. Not the admit plane.
- Azure Policy — cannot weaken Job C.
This Cloud Agent cannot create users, grant Graph roles, edit Cloudflare, bind ainav.institute, mark LIVE_PIN_OK, treat Canada as United States, or paste Dataverse environment id.
Six connections
Microsoft Azure
hosting · sandbox
Master mothership target and Institute static host. Custom domain is not claimed.
Microsoft 365 E7
tenant · sandbox
Entra Suite, Purview, Sentinel, Teams licensing. Copilot / Agent 365 are not SKUs.
Teams Enterprise
notify · sandbox
Effect notify only. A chat is not a seat.
Teams Premium
protected notify · sandbox
Protected effect notify. A meeting is not a seat.
Business Central Premium
L1 SoR · sandbox
bc.general_journal.post on a digital twin until G14.
Sales Enterprise
U-DUAL SoR · sandbox
Quote override and order submit on a digital twin until G14.
Eight complements
Not SKUs. Not live. PIM activation is not dual admit. LAW is not Sentinel.
Microsoft Entra ID
identity · sandbox
Seat object ids. Not an IdP replacement. Copilot is not the admit plane.
Azure Key Vault
secrets · sandbox
Connection secret hold on the host. Not a live pin.
Azure Monitor
observe · sandbox
Mothership health. LAW is not Sentinel. Not a live pin.
SharePoint
evidence · sandbox
Kit evidence store. Not a seat. Graph is not called from this page.
Microsoft Defender XDR
security · sandbox
E7 security sink. Not the admit plane.
Microsoft Entra PIM
seat_eligibility · sandbox
Eligible seats. A PIM activation is not dual admit.
Microsoft Sentinel
siem · sandbox
DecisionRecord export sink. The mothership LAW is not a Sentinel workspace.
Azure Policy
host_policy · sandbox
Host policy. West Europe is blocked. Cannot weaken Job C.
Honest agents · Agents > All · Tools registry · not a seat · not a census
Microsoft agents and tools — operate AINav
Catalog-honest. Not a SKU. Not a connection. Not the admit plane. Agent 365 is Microsoft's inventory plane, not AINav. This Cloud Agent cannot sign in, install, pin, or Block.
James Hodnett reviews Agents > All and Agents > Tools. An agent is not a seat. A tool is not a seat. A pin is not admit. Leave five Available. Block Dataverse MCP until paid U-DUAL. Inventory stays claimed=false. This Cloud Agent cannot take a census.
Walk the join · Walk Grok Bot Microsoft · Walk the access window · Walk the write window · Walk the industry · Walk Agent Intent · operate hop · closing all gaps is not this plane
Census claimed=false
Agent 365 product no
Agents as seats no
Tools Available 5
Dataverse MCP blocked
Cloud Agent approve no
Operate
- Owner clickJames signs in to Agents > All and Tools. This Cloud Agent cannot.
- Cursor Cloud AgentOperates host, catalog, gold, twin. Not a seat. Cannot sign in.
- Two humans admitJob C. Agents draft. Humans bind.
- Leave five AvailableWork IQ User, Teams, SharePoint, Mail, MCP Management. Available is not a seat.
Registry
- Agents > AllRegistry, not a live census this plane can claim.
- Agents > ToolsMCP registry. Leave five. Block Dataverse MCP.
- Four typesMicrosoft, partner, org-published, shared. Maps. claimed=false.
Draft maps
- Microsoft 365 CopilotMay draft. Not a seat. Installed is not claimed.
- Copilot StudioA human looked is not Job C.
- SharePoint agentsChannel. Kit evidence is not dual.
- Dynamics CopilotBC or Sales may draft the write that must not land.
- Security CopilotSecurity sink. Not admit.
- Cursor Cloud AgentOperates. Not in the Microsoft registry. Not a seat.
Never a seat
- Agent 365Microsoft inventory plane. Not AINav.
- CopilotIdentify and draft. Not admit.
- Cloud Agent as seatOperator is not seat_a or seat_b.
- Pinned agentA pin is visibility. Not dual admit.
Tools
- Leave AvailableFive Work IQ / MCP Management complements.
- Block Dataverse MCPUntil paid U-DUAL and dual admit exist.
Refuse
- Refused. Two humans bind.
- Refused. Inventory is not Job C.
- Refused. claimed=false.
- Refused. A pin is not dual.
- Refused. Complements only.
- Refused. A human looked is not admit.
Around the write · maps · claimed=false · installed=null · not a census
- GitHub Copilot — Repo drafts in this tree. Not a seat.
- Azure AI Foundry — Host models. Not admit.
- Researcher and Analyst — Microsoft 365 Copilot agents. Draft. Installed is not claimed.
- Teams, Outlook, Microsoft 365 apps — Channels. A chat is not a seat.
- Purview and Defender — Risk cards. Not 17a-4. Not WORM.
- Entra Agent ID — Agent ID and MFA identify. Not admit.
- Copilot Tuning — Fine-tuned models. Not Job C.
- Ownerless and unmanaged — Microsoft cards. Not a census this plane can claim.
- Power Platform Copilot — Automate is not Job C.
- Microsoft Sentinel — Not wired. LAW is not Sentinel.
Refuse rehearsal · not a live census
Waiting. Click a refuse. Census stays claimed=false.
Leave Available
- Work IQ User — Seat object ids. Not a seat.
- Work IQ Teams — Notify. A chat is not a seat.
- Work IQ SharePoint — Kit evidence. Not dual.
- Work IQ Mail — Notify only. A mailbox is not a seat.
- Microsoft MCP Management — Governs tools. Cannot weaken Job C.
Owner steps
- Sign in to the Microsoft 365 admin center as James Hodnett. admin.microsoft.com
- Open Agents > Tools > Registry. Agents > Tools registry
- For each Leave Available tool: search the Name, leave Status = Available, or Unblock. Available is not a seat.
- Confirm the five show Status Available and Publisher Microsoft.
- Do not bind Copilot, Work IQ Copilot, Agent 365, or Work IQ Calendar as a seat.
- Block Dataverse MCP Server until paid U-DUAL and dual admit exist.
- On Requests, reject any BYO MCP that writes Business Central or Sales.
- Stop. This does not mark LIVE_PIN_OK. This Cloud Agent cannot click Unblock.
Block until dual
- Dataverse MCP Server — Sales SoR. No instance. Not wired.
- Any BYO MCP that writes Business Central or Sales.
Never as admit
- Microsoft 365 Copilot
- Work IQ Copilot
- Agent 365
- Work IQ Calendar
wired=false · cloud_agent_can_approve=false · live=false
Honest access · does not need more · Grok Build is not a seat
Do you need additional access. No. This plane does not need additional access. This plane already has the repo, the catalog, twin publish, and Graph read. Grok Build is not a seat. Grok Build is an operator map. Not AINav. A Grok bot is not dual admit. Mapping xAI does not require grok login or XAI_API_KEY on this plane.
Need more no
Grok product no
Grok seat no
Additional access not needed
Recorded operator Cursor
Grok installed null
Have
- Repo + catalogThis Cloud Agent already has the tree, the catalog, gold, and twin publish.
- Catalog as lawMapping Grok does not rewrite Job C.
- Twin publishThe review twin publishes from this plane.
- Graph readRead-only Graph is not admit.
Need not
- Microsoft adminThis plane cannot sign in. James clicks.
- grok loginA public map is not a live xAI bind.
- XAI_API_KEYThis plane does not need an xAI key.
- Graph WritesWrite scopes stay owner-only.
Owner only
- Agents > All clickA live Microsoft census is owner-only.
- SuperGrok / X Premium PlusWhether James buys SuperGrok is not recorded here.
- Seat B clickA bot is not Cynthia's click.
Operators
- Cursor Cloud AgentRecorded operator. Not a seat.
- Grok BuildxAI terminal coding agent. Operator map. Not a seat. installed=null.
- Grok botACP bots. Not dual admit.
- GitHub Copilot coding agentOperator map. Not this recorded operator.
- Claude CodeOperator map. Not a seat.
- Azure CopilotOperator map. Not a seat.
Refuse
- Refused. James clicks.
- Refused. Two humans bind.
- Refused. Not AINav.
- Refused. A bot is not Job C.
- Refused. More access is not admit.
Refuse rehearsal · not a request for more secrets
Waiting. Click a refuse. This plane does not need additional access.
need_more=false · grok_is_product=false · grok_is_seat=false · live=false
Honest operators · Cursor recorded · Grok Build mapped · Grok bot not admit
Consider Cursor, Grok Build, and Grok bot. Cursor is recorded. Grok Build is mapped. Grok bot is not admit. They are not interchangeable. Owner cannot be the operator. This plane does not swap Cursor for Grok.
Recorded Cursor
Grok Build mapped
Grok bot not admit
Swap no
Owner is operator no
Cursor · recorded
Cursor Cloud Agent operates this tree. Host, catalog, gold, twin. Not a seat.
Grok Build · mapped
Grok Build is xAI's terminal coding agent. SuperGrok is owner-only. installed=null.
Grok bot · not admit
Grok bot is ACP orchestration. Not the operator. Not Cynthia's click. Not Job C.
Refuse rehearsal · do not swap the recorded operator
Waiting. Click a refuse. Cursor stays recorded.
swap=false · grok_is_recorded=false · bot_is_operator=false · live=false
Honest build · Do not give full access · Twin is not launch
Do not give full access. This plane does not need full access. Build L1, P-ADM, U-DUAL, modules, packs, and repositories on the twin. The twin is not launch. Packs, modules, and repositories are not SKUs. Launch stays owner-only. More secrets are not how we build.
Need full access no
Twin is launch no
Packs are SKUs no
LIVE_PIN_OK no
Already enough
Have repo, catalog, gold, twin. Graph read. Not Microsoft admin. Not grok login.
Build here
Catalog L1, P-ADM, U-DUAL. Modules, packs, and repositories are not SKUs. Certified on the twin.
Launch is James
Owner only Seat B. Signed L1. LIVE_PIN_OK. Apex bind. Launch word. Not from this plane.
Refuse rehearsal · do not give full access
Waiting. Click a refuse. This plane does not need full access.
need_full=false · twin_is_launch=false · packs_are_skus=false · live=false
Honest readiness · Gold is not launch · Twin certified is not launch day
Run quality, operability, simulation, deliverability, updateability, and debugging on the twin. Gold is not launch. Twin certified is not launch day. Owner gaps stay owner-only. Simulation is not production. An update is not LIVE_PIN_OK.
Gold is launch no
Twin is launch day no
Sim is production no
LIVE_PIN_OK no
Quality
Certified Gold 99.5. Fail-closed. Edge quality. Not launch.
Operability
Certified SKU attach. Health. Commercial stages. Not a live SoR write.
Simulation
Certified Twin. BC sandbox. Lua rehearsal. Not production.
Deliverability
Certified Twin publish. Kit. Institute stays launch_not_ready.
Updateability
Certified Catalog regen. Version pins. Republish is not launch.
Debugging
Certified Examiner. Refuse rehearsal. Fail-closed probes. Not a census.
Launch is James
Owner only Seat B. Signed L1. LIVE_PIN_OK. Apex bind. Launch word. Not from this plane.
Refuse rehearsal · do not certify launch day
Waiting. Click a refuse. Twin certified is not launch day.
gold_is_launch=false · twin_is_launch_day=false · launch_day_certified=false · live=false
Honest operate · recorded · not launch
Closing all gaps is not this plane
Outlook mail is not a click. grok login is not this plane. An operate sim is not production. A 10/10 polish is not launch.
Need: close all gaps from this plane with the ReadWrite window, complete the firm, and mark LIVE_PIN_OK.
Why: we refuse. Reads we used. Writes stay unused. James Sets. Cynthia clicks. Closing all gaps is not this plane.
Closing all gaps is this plane no
Outlook mail is a click no
grok login is this plane no
Operate sim is production no
10/10 polish is launch no
Gaps
Seat B, oid click, signed L1, LIVE_PIN_OK stay owner-only. This window Read confirmed mailbox user and distinct oid as booleans. She still clicks. Closing all gaps is not this plane.
Cursor apps
Azure MCP is host. Outlook, Zoom, Stripe, X, Railway stay unauthed. A Cursor app is not a seat.
Grok
Grok Build is mapped. grok login is not this plane. SuperGrok stays owner-only.
Simulation
Fail-closed operate sims. Lab oids are not named seats. An operate sim is not production.
10/10
Surface polish is recorded. A 10/10 polish is not launch.
Refuse rehearsal · do not treat a 10/10 polish as launch
Waiting. Click a refuse. Closing all gaps is not this plane.
close_gaps_is_this_plane=false · outlook_is_click=false · grok_login_is_this_plane=false · live=false
Walk the join · Walk Grok Bot Microsoft · Walk the access window · Walk the write window · Walk the Microsoft universe · Walk the industry · Walk Agent Intent · closing all gaps is not this plane
Grok Bot Microsoft · consider · refuse · not Job C
How we consider Grok Bot on Outlook, Calendar, and OneDrive
Need is Grok Bot Outlook, Calendar, and OneDrive plugins as Job C, a ninth complement, dual admit, or Graph Writes Granted. Why is the consider. Marketing claims bots can search and send mail, manage drafts, check schedules, create meetings, and upload files. Bridges such as Composio or custom MCP are claimed for Teams and Planner. Firecracker isolation and a human-approval gate are claimed as control. A Grok bot is not dual admit. Outlook mail is not a click. grok login is not this plane. A Grok Bot approval gate is not Job C. Firecracker is not a client sandbox. Composio or MCP is not Graph Writes Granted. Complements stay eight. Graph Writes stay revoked. A considered plugin is not a wired firm.
Need: Grok Bot plugins treated as Job C, Outlook as a click, OneDrive as a ninth complement, and a bot send as dual admit.
Why: we consider the claimed plugins on this twin. Cursor stays the recorded operator. Teams ids stay unset. James-only stays James-only.
Grok Bot is dual admit no
Outlook plugin is a click no
OneDrive is a ninth complement no
Grok approval is Job C no
Graph Writes revoked
We consider · plugins · bridges · gates
Outlook, Calendar, and OneDrive stay considered. Bridges stay considered. Complements stay eight. Cursor stays recorded.
We refuse · a Grok bot is not dual admit
Bot send as admit. Outlook as a click. OneDrive as a ninth complement. Firecracker as a client sandbox. Composio or MCP as Graph Writes Granted. grok login on this plane.
Four facts · not hops
Plugins
Claimed Outlook, Calendar, and OneDrive plugins are marketing, not catalog law. grok login is not this plane. Outlook mail is not a click.
Admit
A bot that searches or sends mail is not dual admit. Two humans bind. A human-approval gate is not Cynthia's click.
Bridges
Composio or custom MCP for Teams or Planner is not Graph Writes Granted. Teams Premium is not a seat. Channel ids stay unset.
Isolate
Firecracker microVMs are not a client-assigned sandbox. Isolated cloud is not LIVE_PIN_OK. Complements stay eight.
Six hops · consider the plugins · refuse what we cannot
- Grok botNeed: a Grok bot as dual admit. Why: ACP bots. Not Cynthia's click. Not Job C.
- OutlookNeed: the Outlook plugin as a click. Why: Outlook mail is not a click. grok login is not this plane.
- CalendarNeed: Calendar or meet as a Teams seat. Why: Teams Premium is not a seat. Channel ids unset.
- OneDriveNeed: OneDrive as a ninth complement. Why: SharePoint site id unset. Graph Writes revoked.
- RosterNeed: plugins as the Microsoft run. Why: six required. Eight complements. Licensed-not-wired.
- WritesNeed: Composio or MCP as Graph Writes Granted. Why: Writes stay revoked. James-only. Not LIVE_PIN_OK.
Honest operate · Walk the Microsoft universe · Walk the Microsoft roster · Walk the honest hold · Walk the 10/10 · Walk the join · Walk the industry · Walk Agent Intent · Walk the access window · Walk the write window · A Grok bot is not dual admit
Access window · read · record · James Sets · not LIVE_PIN_OK
What we can complete if James grants a time-boxed admin session
Need is a time-boxed admin session as LIVE_PIN_OK, seat B, Graph Writes Granted, or a wired firm. Why is the window. This plane does not need more access to keep Job C. A window lets this Cloud Agent read existing Microsoft facts and record booleans. James Sets vault values. Cynthia clicks. Grant Reader on Azure, Entra users, M365 admin, Teams admin, SharePoint, Business Central sandbox, and Power Platform. List names on ainavinc7bfcff. Do not grant Graph Writes. Do not grant Outlook send. Do not grant Cloudflare edit. Do not grant Business Central Production. Temporary complete access is not LIVE_PIN_OK. A read session is not a seated second human. Complements stay eight. Graph Writes stay revoked.
Need: a time-boxed admin session treated as LIVE_PIN_OK, seat B, Graph Writes, or a wired firm.
Why: we read what already exists and record booleans. James copies ids into the vault. Cynthia still clicks. This plane does not invent an oid, a channel id, or a named client.
Temporary access is LIVE_PIN_OK no
Temporary access is seat B no
Window wires Teams no
Window closes Dataverse no
Graph Writes revoked
This process Teams/SharePoint unbound
Later agent Teams/SharePoint connected
Sales blocked
We complete · read · boolean · twin republish
Inventory Azure, Entra, M365 tools, BC sandbox, and Power Platform. Record exists / distinct / blocked. Republish the twin with --publish-twin. Complements stay eight.
We refuse · a window is not LIVE_PIN_OK
Wire Teams. Invent channel ids. Paste secrets. Click as Cynthia. Close US Dataverse. Enable Production. Bind the apex. Send Outlook. Grant Writes. Assign a sandbox. Mark LIVE_PIN_OK.
Four facts · not hops
Read in the window
Azure rg ainav-inc, SWA eastus2 twin, mothership LAW, Key Vault ainavinc7bfcff names, Policy. Entra Cloud Agent1: Four Reads Granted, Writes revoked. M365: five tools Available, Dataverse MCP Blocked. BC company AINav, document AINAV-L1, Production blocked. Power Platform: Canada affinity, ticket 2609030040009525 still open. Probe is python -m ainav connect --probe.
Record as booleans
Read this window confirmed. Cynthia mailbox user exists and is enabled. Oid distinct from James. She still clicks. Team display AINav Inc exists. Channel.ReadBasic.All visible. Channel list is granted. Display name General. Ids stay James Sets. Site /sites/AINavInc exists. Resource group ainav-inc. Vault ainavinc7bfcff names. SWA ainav-institute eastus2. SWA custom domain list empty. asuid not bound on the twin. LAW ainav-mothership. Sentinel SecurityInsights readable. Defender incidents readable. PIM eligibility readable. Policy assignments exist. Vault ARM list shows the six held names. Teams id names exist in the vault list. James confirmed the six current versions are not blank. Values unread.
This process started before Cursor Secrets. Cursor underscore env not present this run. Probe on this process stays unbound for Teams and SharePoint.
A later Cloud Agent on the same environment received the six names and probed Teams and SharePoint connected. Sales stays blocked. No Dataverse URL. LIVE_PIN_OK false. Teams connected is not a seat. SharePoint bound is not kit evidence live.
Do not invent an oid. Do not paste ids into the catalog, the Institute, a PR, or chat.
James Sets
TEAMS-ENTERPRISE-TEAM-ID · TEAMS-ENTERPRISE-CHANNEL-ID · TEAMS-PREMIUM-TEAM-ID · TEAMS-PREMIUM-CHANNEL-ID · SHAREPOINT-SITE-ID · AZURE-SENTINEL-WORKSPACE-ID
He copies. He Sets in ainavinc7bfcff. The six held names exist in the vault list. James confirmed the six current versions are not blank. Values unread. Cloud Agent1 has no Get. Opening the vault is not wired. Cursor Secrets exist on a later Cloud Agent. This process started before Secrets.
Still James
Cynthia clicks seat B. G12 counsel. G13 signed L1. US Dataverse. BC Production. Apex bind. Launch word. LIVE_PIN_OK. Billing. Commissions. Trademark. Rocket Loader confirm. This plane cannot.
Six hops · read the window · refuse what we cannot
- HaveNeed: more secrets to keep Job C. Why: repo, catalog, gold, and twin already. Additional access is not needed.
- Read hostNeed: this twin as public apex. Why: SWA hosts review. A live inventory is not launch.
- Read identifyNeed: mailbox as oid and click. Why: paid E7. Distinct oid is a boolean. She still clicks.
- James SetsNeed: this plane as Get and wired notify. Why: names only. Values stay in the vault. No Get here.
- RosterNeed: a read session as the Microsoft run. Why: six required. Eight complements. Licensed-not-wired.
- Still JamesNeed: the window as LIVE_PIN_OK. Why: seat B, signed L1, launch stay owner-only. Temporary access is not LIVE_PIN_OK.
Walk Grok Bot Microsoft · Walk the Microsoft universe · Walk the Microsoft roster · Walk the honest hold · Honest operate · Walk the join · Walk the industry · Walk Agent Intent · Walk the write window · Temporary access is not LIVE_PIN_OK
Write window · consider · unused · not Granted
How we consider a time-boxed ReadWrite grant
Need is a time-boxed ReadWrite grant as Graph Writes Granted, wired notify, dual admit, or LIVE_PIN_OK. Why is the consider. James may re-grant Organization.ReadWrite.All, sign in as Owner, Set Key Vault from this agent, send Outlook, create a Teams team, or enable a sandbox write for a few hours. Reads we may use. Writes stay unused. Catalog law stays Four Reads Granted and Graph Writes revoked. Do not add Write. Do not create a new app. A PIM Write activation is not dual admit. A short Write is not Granted. Temporary ReadWrite is not LIVE_PIN_OK. Complements stay eight. Graph Writes stay revoked.
Need: a time-boxed ReadWrite grant treated as Graph Writes Granted, a wired firm, or LIVE_PIN_OK.
Why: we consider the window. Reads stay the access window. Writes stay unused on this plane. James Sets vault values. Cynthia clicks.
Time-boxed Writes are LIVE_PIN_OK no
Time-boxed Writes are Granted no
Window wires Teams no
Window sends Outlook no
Graph Writes revoked
We use · Read · boolean · James Sets
Same Read window. Record exists / distinct / blocked. James copies ids. He Sets ainavinc7bfcff. Complements stay eight.
We refuse · a short Write is not Granted
Call Graph Write. Create a Teams team. Set vault from this agent. Send Outlook. Enable BC Production. Set DATAVERSE_URL. Bind the apex. Mark LIVE_PIN_OK.
Four facts · not hops
Read still
Four Reads stay Granted. The access window is enough. A Write grant does not replace Read. Probe stays python -m ainav connect --probe.
Write unused
Even if James re-grants Organization.ReadWrite.All or signs in as Owner, this plane does not call Write. This window: Write role present. Write unused. Do not add Write. Do not create a new app. Catalog stays revoked. A short Write is not Granted.
Tempt
Create Teams. Invent channel ids. Set vault from this agent. Send Outlook. Enable Production. Set DATAVERSE_URL. Bind asuid. Those stay refused. James Sets. Cynthia clicks.
Still James
Seat B. G12. G13 signed L1. Launch word. LIVE_PIN_OK. A PIM Write activation is not dual admit. Temporary ReadWrite is not LIVE_PIN_OK.
Six hops · consider the Writes · refuse what we cannot
- Read windowNeed: Writes to keep Job C. Why: the Read window already. Additional Write is not needed.
- Outlook sendNeed: a Write window as a mail click. Why: Outlook mail is not a click. grok login is not this plane.
- Teams writeNeed: create a team from this plane. Why: Teams Premium is not a seat. Channel ids unset.
- Vault writeNeed: this plane as Get and Set. Why: James Sets. Names only. Cloud Agent1 has no Get.
- RosterNeed: a Write window as the Microsoft run. Why: six required. Eight complements. Writes revoked.
- Still JamesNeed: the Write window as LIVE_PIN_OK. Why: seat B, signed L1, launch stay owner-only. A short Write is not Granted.
Walk the access window · Walk Grok Bot Microsoft · Walk the Microsoft universe · Walk the Microsoft roster · Walk the honest hold · Walk the join · Walk the industry · Walk Agent Intent · A short Write is not Granted
Honest protect · recorded · not a patent
An IP board is not a patent
Insulation is not uncopyable. An L1 license is not an assignment of Job C. Kit PASS is not a source license. This board does not close G12.
An IP board is a patent no
Insulation is uncopyable no
An L1 license is an assignment no
Kit PASS is a source license no
This board closes G12 no
Microsoft
They can copy Teams vote, Copilot Studio RFI, and PIM. They do not copy Job C pins. Microsoft is not the product.
Others
Agentforce, Joule, Now Assist, Palantir AIP, UiPath, Workday, Okta, and SailPoint do not win consume-once, fail-closed SoR, or counterparty AI.
Client
An L1 license is use of the admit plane. Not assignment of Job C. Not work-for-hire. Client AI is not AINav.
Reserved
Job C lockfile, ledgers, dual_consume.lua, frozen gold, catalog, and mothership stay AINav. Kit PASS is not a source license.
Counsel
G12 stays open. This board is not a patent. Insulation is not uncopyable. This plane cannot invent a signed MSA.
Refuse rehearsal · do not treat an IP board as a patent
Waiting. Click a refuse. An IP board is not a patent.
protect_as_patent=false · protect_as_uncopyable=false · client_license_as_assignment=false · live=false
IP and competitor boundary
Hygiene in this tree. Not a patent. Not uncopyable. G12 legal is not signed. Catalog list from ip.json.
The build insulates by staying independent of the AI vendor. Microsoft sells Copilot and Agent 365. The vendor of the AI cannot credibly sit over that AI as the human failsafe. Others can copy a Teams vote. They do not copy Job C. This is not a patent.
Insulation = independence × Job C lockfile × fail-closed gold × catalog law
Ultimate means last authority before the write, over every AI that can draft one. Not a patent. Not uncopyable.
Microsoft is identity, notify, SoR, and host. It sells the models that draft the write. A Copilot feature, PIM activation, or Teams vote is not dual admit.
What the build pins
- Lockfile product stays job_c
- Consume-once grant_id bound to seats and action_hash
- Fail-closed EffectLedger — no admit, no write
- Frozen gold vectors pin action_hash
- Catalog law — three SKUs; competitor aliases cannot be provisioned
Layers
- Independence — the vendor of the AI is not the failsafe of the AI.
- Job C — write-gate, not agent inventory and not an IdP.
- Fail-closed — off switch is no admit, no write.
- Gold — a rebrand breaks gold.
- Catalog law — Copilot, Agentforce, Joule, and ServiceNow cannot be SKUs.
What they can copy
- A two-person Business Central approval workflow
- A Teams approval as HITL
- PIM activation as privileged access
- Copilot asking a human before a suggestion
Refuse
- uncopyable
- patent granted
- Microsoft cannot legally copy
- AINav is a Microsoft product
- powered by Copilot
Same conflict for Salesforce Agentforce, SAP Joule, ServiceNow Now Assist, Palantir AIP, UiPath, Workday, Okta, SailPoint.
Programs
Qualify. Do not claim membership, credits, badges, or a live public deploy.
Job C is dual-admitted effect authority before Dynamics 365 Business Central privileged writes. Not a cryptocurrency product. Membership is not claimed.
- Microsoft for Startups — first. Azure Startup credits after verification. Microsoft is the SoR, not the product.
- NVIDIA Inception — second. Free, no equity, no cohort. Excludes crypto-associated companies. Portal also wants two unique contacts (developer + business executive, business emails). Lead with
bc.general_journal.post. GPU production is not claimed. - NVIDIA Developer — complementary tools. Not a grant and not Inception.
- GitHub for Startups and Microsoft ISV Success — later discounts / partner path.
- NVIDIA Connect — later ISV path. Not the first application.
Closed in this tree
What this Cloud Agent can finish without an owner click. Not a SKU. Not the admit plane. A green check is not LIVE_PIN_OK.
This Cloud Agent closed
- Job C gold invariants (dual seats, single-use consume, fail-closed effect)
- Catalog law — three SKUs only
- E7-on-Cloudflare DNS full (mail, Entra, Teams SIP / lync SRV)
- GitHub Actions gold workflow ran green (make gold). A green check is not LIVE_PIN_OK
- Institute owner board is one click from Closed
- Health, sandbox, Institute publish, connections, and delivery fail-closed probes covered
- Institute, review, and brief generated from the catalog
- Cynthia Hodnett mailbox recorded (chodnett@ainav.institute). Mailbox is not an Entra oid and not a click
- Owner-click runbooks with Microsoft admin links
- 3.08.0 honest whole. Business, build, and website on one board. The stitch is not a SKU. A 10/10 review is not launch. The whole firm is not launch. A green check is not LIVE_PIN_OK
- 3.09.0 honest Power Pages. Considered. Power Pages is not the Institute host. Power Pages is not a SKU. Power Pages is not the CMS. A green check is not LIVE_PIN_OK
- 3.10.0 honest Copilot Studio. Considered. Copilot Studio is not Job C. Copilot Studio is not a SKU. Copilot Studio is not the admit plane. A green check is not LIVE_PIN_OK
- 3.11.0 honest connect. Recorded. Connected is not live. Licensed is not wired. Available is not a seat. A green check is not LIVE_PIN_OK
- 3.12.0 honest operate. Recorded. Closing all gaps is not this plane. Outlook mail is not a click. grok login is not this plane. A 10/10 polish is not launch. A green check is not LIVE_PIN_OK
- 3.13.0 honest path. Recorded. An industry is not a named client. A shared sandbox is not production. Hours are not a SKU. Rollback is not LIVE_PIN_OK. A redeploy is not launch. A green check is not LIVE_PIN_OK
- 3.14.0 honest production. Recorded. A production sim is not production. Fixing all is not this plane. Rehearsed elements are not live. Making all much better is not launch. A rehearsal is not LIVE_PIN_OK. A green check is not LIVE_PIN_OK
- 3.15.0 honest remainder. Recorded. A remainder close is not launch. Leftover copy is not LIVE_PIN_OK. Owner hrefs are not owner clicks. Gold 99.5 is not production. A deep remainder is not a seated second human. A green check is not LIVE_PIN_OK
- 3.16.0 honest ten. Recorded. A 10/10 quality check is not launch. Gold 99.9 is not LIVE_PIN_OK. A competitor analysis is not a named client. A green service is not production. A quality check is not a seated second human. A green check is not LIVE_PIN_OK
- 3.17.0 honest protect. Recorded. An IP board is not a patent. Insulation is not uncopyable. An L1 license is not an assignment of Job C. Kit PASS is not a source license. This board does not close G12. A green check is not LIVE_PIN_OK
- 3.18.0 honest hold. Recorded. A vault hold is not LIVE_PIN_OK. Secret names are not wired notify. A catalog must not hold secret values. Sentinel is not the admit plane. A vault hold is not a seated second human. Complements stay eight. Not LIVE_PIN_OK. A green check is not LIVE_PIN_OK
- 3.19.0 honest close. Recorded. A 10/10 close is not launch. A booking is not recognized revenue. The Institute twin is not the assigned client sandbox. A custom database is not a fourth SKU. A catalog list is not collection. Complements stay eight. Not LIVE_PIN_OK. A green check is not LIVE_PIN_OK
- 3.20.0 honest join. Recorded. The join is not launch. The stitched firm is not LIVE_PIN_OK. Licensed-not-wired is not a wired firm. Management and operations are not closed from this plane. A certified simulation is not a running firm. Complements stay eight. Not LIVE_PIN_OK. A green check is not LIVE_PIN_OK
- 3.21.0 honest better. Recorded. A much better build and business is not launch. A 10/10 is not a seated second human. A systems review is not a wired firm. A polish pass is not production. Interpretability is not LIVE_PIN_OK. Complements stay eight. Not LIVE_PIN_OK. A green check is not LIVE_PIN_OK
- 3.22.0 making better. Recorded. Making better is not launch. A much better build and business is not launch. Complements stay eight. Not LIVE_PIN_OK. A green check is not LIVE_PIN_OK
- 3.23.0 please make better. Recorded. Please make better is not launch. Twin HTTP 200 is not launch. Sandbox HTTP is not G14. Making better is not launch. Complements stay eight. Not LIVE_PIN_OK. A green check is not LIVE_PIN_OK
- 3.24.0 honest planes. Recorded. A 10/10 of industry, client, and twin planes is not launch. A named vertical is not a SKU. The Institute twin is not the assigned client sandbox. A shared sandbox is not production. Complements stay eight. Not LIVE_PIN_OK. A green check is not LIVE_PIN_OK
- 3.25.0 honest rails. Recorded. A 10/10 of the write rail, proof day, and bake-off is not launch. A polished Microsoft roster is not a wired firm. An identify flag strip is not admit. Complements stay eight. Not LIVE_PIN_OK. A green check is not LIVE_PIN_OK
- 3.26.0 honest craft. Recorded. A 10/10 of quality, content, format, and graphics is not launch. A 10/10 look is not production. A polished graphic is not launch. Complements stay eight. Not LIVE_PIN_OK. A green check is not LIVE_PIN_OK
- 3.27.0 honest face. Recorded. Please make better is not launch. A green kit check is not launch. A 10/10 face is not production. Readable type is not launch. Complements stay eight. Not LIVE_PIN_OK. A green check is not LIVE_PIN_OK
- 3.28.0 honest certified. Recorded. A 10/10 of operability, interoperability, and usability is not launch. A 10/10 of prebuilt certified day-one is not launch. Packs, modules, and custom builds are not a fourth SKU. Complements stay eight. Not LIVE_PIN_OK. A green check is not LIVE_PIN_OK
- 3.29.0 honest raise. Recorded. A better pass is not launch. Raising certified again is not launch. A raise is not production. Complements stay eight. Not LIVE_PIN_OK. A green check is not LIVE_PIN_OK
- 3.15.0 owner recorded Graph Writes revoked. Four Reads stay Granted. CRM impersonation left. Not Graph Write claimed. Not from this plane. Not LIVE_PIN_OK
- 2.77.0 owner recorded Grant succeeded. Four Reads Granted. Graph Writes still Granted. Not Graph Read closed. Not LIVE_PIN_OK
James must click
- Second unique human (Cynthia mailbox recorded; Entra oid, seat B click, and signed L1 seats)
- ainav.institute custom domain and launch
- US Dataverse for Sales (Canada affinity recorded; United States not pinned)
- G12 legal / G13 signed L1
- Recognized revenue
- Multi-host product HA
- LIVE_PIN_OK
- Teams team and channel ids stay unset. This Cloud Agent cannot invent them.
- SHAREPOINT_SITE_ID stays unset. This Cloud Agent cannot invent a SharePoint site.
- Sentinel on the existing LAW stays open. This Cloud Agent cannot enable Sentinel.
Gold CI ran green on GitHub Actions. A green check is not LIVE_PIN_OK, not signed L1, and not Institute launch. This Cloud Agent cannot enable Actions if the org has it off.
exists=true · observed_green=true · marks_live_pin=false · launch=false · sku=false
Honest hold · recorded · not LIVE_PIN_OK
A vault hold is not LIVE_PIN_OK
A vault hold is not LIVE_PIN_OK. Secret names are not wired notify. A catalog must not hold secret values. Sentinel is not the admit plane. A vault hold is not a seated second human. Complements stay eight.
Need: secret names as wired notify, temporary access as LIVE_PIN_OK, and this Cloud Agent closing James's binds.
Why: names only. Values stay in the vault. This Cloud Agent has no Get. Temporary complete access is not LIVE_PIN_OK.
A vault hold is LIVE_PIN_OK no
Secret names are wired no
Secret values are in the catalog no
Sentinel is the admit plane no
A vault hold is seated no
Names only. Values stay out of this tree. Dash names map later to underscore env.
TEAMS-ENTERPRISE-TEAM-IDTEAMS-ENTERPRISE-CHANNEL-IDTEAMS-PREMIUM-TEAM-IDTEAMS-PREMIUM-CHANNEL-IDSHAREPOINT-SITE-IDAZURE-SENTINEL-WORKSPACE-ID
Owner directions · a walk is not wired
Secret names are not wired
Dash names in ainavinc7bfcff are not underscore env and not Teams notify. Owner reads team, channel, and site ids in the Microsoft admin, then Set values only in the vault. Opening the vault is not wired. This Cloud Agent has no Get.
A catalog must not hold secret values
A catalog must not hold secret values. Catalog holds names only. James has Get/List/Set on ainavinc7bfcff. Cloud Agent1 has no Get. Do not paste values into the catalog, the Institute, a PR, or chat.
Sentinel is not the admit plane
Owner added Sentinel to ainav-mothership. Sentinel is not the admit plane. That is SIEM. Admit is two humans, one hash, then the write. Workspace id name held. Value stays in the vault. Sentinel on the existing LAW stays open.
Microsoft Sentinel · Azure Monitor · The write · Sentinel overview
Vault
ainavinc7bfcff holds secret names. Values stay out of this tree. A vault hold is not LIVE_PIN_OK.
Teams
Four TEAMS-* names held. Team display AINav Inc. Ids stay unset in this plane. Secret names are not wired notify.
SharePoint
SHAREPOINT-SITE-ID name held. Site path /sites/AINavInc recorded. Graph id stays out of this tree.
Sentinel
Owner added Sentinel to ainav-mothership. AZURE-SENTINEL-WORKSPACE-ID name held. Sentinel is not the admit plane.
Plane
Dash names map to underscore env on a later Cloud Agent. This process started before Secrets. This Cloud Agent has no Get. A vault hold is not a seated second human.
Refuse rehearsal · do not treat a vault hold as LIVE_PIN_OK
Waiting. Click a refuse. A vault hold is not LIVE_PIN_OK.
vault_as_live_pin=false · names_as_wired=false · secret_in_catalog=false · sentinel_as_admit=false · hold_as_seated=false · live=false
Walk the Microsoft universe · Walk the Microsoft roster · Walk the Microsoft 10/10 · Walk Grok Bot Microsoft · Walk the access window · Walk the write window · Walk the join · A vault hold is not LIVE_PIN_OK
Honest remainder · recorded · not launch
A remainder close is not launch
Leftover copy is not LIVE_PIN_OK. Owner hrefs are not owner clicks. Gold 99.5 is not production. A deep remainder is not a seated second human.
A remainder close is launch no
Leftover copy is LIVE_PIN_OK no
Owner hrefs are clicks no
Gold 99.5 is production no
A deep remainder is seated no
Remainder
This plane closed leftover gold-99.5 copy and owner hrefs. Not launch.
Leftover
Current-floor gold 99.5 is catalog law. Historical gold 99 stays historical.
Hrefs
Eleven owner-only lines walk. A walk is not a click.
Gold
Gold 99.5 held is not production and not LIVE_PIN_OK.
Owner-only
Seat B, oid, signed L1, Teams ids, SHAREPOINT_SITE_ID, Sentinel, US Dataverse stay owner-only.
Refuse rehearsal · do not treat a remainder close as launch
Waiting. Click a refuse. A remainder close is not launch.
remainder_is_launch=false · leftover_copy_is_live_pin=false · owner_hrefs_are_clicks=false · live=false
Honest connect · recorded · not live
Connected is not live
Licensed is not wired. Connected is not authorized. Available is not a seat. A Graph read is not LIVE_PIN_OK. Nine read-only probes are not live.
Connected is live no
Licensed is wired no
Available is a seat no
Graph read is LIVE_PIN_OK no
Cursor app is a seat no
Connected
Read-only Graph and ARM. Nine recorded. Not live.
Authorized
Graph Writes owner-revoked. Twin authorized=false. Not launch.
Available
Leave five Available. Dataverse MCP stays Blocked. Registry is owner-only.
Blocked
Teams ids, DATAVERSE_URL, SHAREPOINT_SITE_ID, Sentinel on LAW. Owner-only.
LIVE_PIN_OK
A Graph read is not LIVE_PIN_OK. A Cursor app is not a seat.
Refuse rehearsal · do not treat connected as live
Waiting. Click a refuse. Connected is not live.
connected_is_live=false · licensed_is_wired=false · available_is_seat=false · live=false
Owner — James must click
Honest. Do not invent these as done. Catalog list from status.json.
- Second unique human (mailbox chodnett@ainav.institute recorded; Entra oid and seat B click still open)
- ainav.institute custom domain and incorporation date
- Power Platform / Dataverse for Sales (ticket 2609030040009525: Canada affinity; ADR ineligible; United States not pinned)
- Recognized revenue / external billing provider
- G12 legal (counsel pack unsigned)
- Signed L1 counsel pack (G13)
- Multi-host product HA
- G1/G10 LIVE_PIN_OK (owner-only; never from this plane)
- Teams team and channel ids stay unset. This Cloud Agent cannot invent them.
- SHAREPOINT_SITE_ID stays unset. This Cloud Agent cannot invent a SharePoint site.
- Sentinel on the existing LAW stays open. This Cloud Agent cannot enable Sentinel.
Open — do not mark closed
- G1 / G10 LIVE_PIN_OK
- G12 legal
- G13 signed L1
- G14 live SoR
- Product HA
Success = LIVE_PIN_OK × proof day × signed L1 × P-ADM attach