# The memo queue

> Every document, memo and instruction riskmandate.ai was built from, in the order it arrived, with what it produced and what it still owes — read off briefs-register.json.
> Source: https://riskmandate.ai/admin/memos/ · noindex · written by scripts/site/build-admin.mjs

**2**received, nothing built yet*Archived and read, and nothing has been built from it yet.*

**11**partly worked*read in full; a named part is not built*

**8**processed*something on the site exists because of it*

**0**superseded*kept because the reasoning is the record*

The queue. A document or a memo from the project lead arrives — a dev brief as a file, a voice memo as a transcript, an instruction in the thread — and is archived exactly as received: files by SHA-256 in [the register](../../briefs-register.json), so an identical file arriving again is recognised before anybody reads it; speech and chat as an entry with no digest. Then it is read into [a brief](../../admin/briefs/), and the brief is broken into [units of work](../../admin/work/). What was said and what we made of it are kept apart on purpose.

**[Voice memo: the next phase is users. The MVP is nailed and the vaults are more than most first users need, so find many smaller examples where a policy adds value now. The abp.sgit.ai/gmail prompt workflow - four steps, thirteen prompts, about twenty minutes - is the shareable artefact, already sent to a real group. KPIs and OKRs are the number of users who run the prompts and the number who create a policy; the pricing ladder exists, what is missing is a bigger free funnel above it. Nobody buys a full policy until they have made a smaller one. And the second frontier, beyond technical permissions: consequences in the user's own terms (relabelling destroys a mailbox's information architecture, marking read things unread, too many sends, drafts or moves), which messages should and should not be read or replied to, prompt injection, and rules of engagement for a single session.](#I11)**

voice memo, transcribed in the thread, with a screenshot of the Agentics Foundation London group, 21 Sept · 2 produced · 6 not done21 September 2026 · received

**[Voice memo: the multi-layer grant, and the vault opens on the audience. Map three storeys — what the Google OAuth permission allows, what Anthropic's connector exposes to the chat (code, which can have bugs and can change at any minute's notice), and what normal usage and Claude's own guardrails allow — then the layer above, which is what becomes possible with those mechanical capabilities. Use this vault as the case study and change whatever we want on it. Find good ways to visualise it, because that is where the gaps are and the question is whether people are aware. The vendor's own restriction is a control we can reverse engineer and make the business case for. On the vault: three audience folders (executive, operator, risk) as the main section of the left menu, the executive view being the whole thing in one line, a couple of diagrams and a couple of paragraphs; keep the packs and the how-to-use, but not centre stage.](#I10)**

voice memo, transcribed in the thread, 16 Sept · 1 produced · 5 not done16 September 2026 · received

**[Build a specific vault for Claude chat connected to a Gmail inbox; capture the connection screens (address obscured) in a folder for the connector; then map the whole customer workflow — the vault, its home page, the settings, the permissions, the prompts given to Claude — as the purchase workflow. Do not use the agent's name.](#I6)**

chat instruction with eight screenshots, 16 Sept · 5 produced · 2 not done16 September 2026 · partly

**[Where is the new Claude + Gmail section; publish the vault (the read key makes the publish automatic); create a page in the admin section for the Gmail workflow brief, in a way that takes many briefs; and refactor the admin section to the structure, layout and capabilities of store.sgit.ai/admin/ and pt.newsroom.sgit.ai/newsroom/.](#I7)**

chat instruction, 16 Sept · 3 produced · 0 not done16 September 2026 · processed

**[Make the Gmail-connector vault oc433z3m the first MVP vault, with a solid end-to-end experience and the design template every other vault will reuse; global changes to the code vault are fine, and backwards compatibility with vaults nobody uses is not worth buying. Start from the store's V3 marketplace mock-up (the vault panel with its left navigation, the positioning of the vault) and the store's comparison table of what each level gets you, including the dual licence.](#I8)**

chat instruction with a PDF and a link, 16 Sept · 2 produced · 1 not done16 September 2026 · partly

**[Voice memo: the material to add to the Gmail-connector vault. Go back to first principles on the grant and map its side effects: a grant is the union of capabilities, and the reader needs the consequences, each explicit and each tied to the asset that makes it real (secrets in mail, reset links, mail from others); count the routes out; the authorisation to read is not the authorisation to forward; harvesting, mass send and what makes a platform suspend an account; mass change to the inbox's filing; realistic scenarios on the mandate; standards as mini-graphs in the vault; the vault navigated as a website with materials per audience.](#I9)**

voice memo (Otter transcript, about nine minutes), 16 Sept · 3 produced · 2 not done16 September 2026 · partly

**[Risk Mandate Website Repositioning Strategy](#D10)**

spoken brief, transcribed · 7 produced · 4 not done15 September 2026 · partly

**[ABP Graph and Stakeholder Views — the policy is a graph, and every stakeholder gets a projection of it](#D7)**

voice memo (Otter transcript) · 2 produced · 5 not done15 September 2026 · partly

**[Use Case Driven ABP Policy Strategy — a policy per use case, and the £500 level is a prompt the customer runs](#D8)**

voice memo (Otter transcript) · 3 produced · 5 not done15 September 2026 · partly

**[The offer is built and the button is not — each level is the level below plus one thing, and the post-sale page does not exist yet](#D9)**

strategy brief · 6 produced · 3 not done15 September 2026 · partly

**[Add a section answering the questions people actually ask in public — with the standing rule that the site never names who asked. Answers that outgrow a section get their own page.](#I5)**

chat instruction, with two public comments supplied as the first two questions · 1 produced · 1 not done13 September 2026 · processed

**[The Grant Is User Shaped And Not Data Shaped: Start With The Connectors, And The Template Vault Is The Product](#D1)**

dev brief · 3 produced · 3 not done12 September 2026 · processed

**[This Is The Tier One Application Nobody Could Find: The Connector List Alone Is Twenty Bits, So Compute Locally And Submit Banded](#D2)**

dev brief · 1 produced · 1 not done12 September 2026 · processed

**[The Commit Author Is A Free Text Field: A Prompt Shifts The Odds, And Every Documented Fix Was Architectural](#D3)**

dev brief · 2 produced · 3 not done12 September 2026 · partly

**[The Urgency Is Not A Deadline But A State: You Already Connected It, And A Distributed Skill Cannot Carry A Control](#D4)**

strategy brief · 2 produced · 3 not done12 September 2026 · partly

**[Startup Summit 2026 — exhibitor booth guide](#D5)**

organiser document · 2 produced · 2 not done12 September 2026 · processed

**[Every Routable Address Is In The Grant: Do Not Attack Anyone Is The One Rule Everybody Signs, And It Is The One With No Barrier](#D6)**

dev brief · 1 produced · 4 not done12 September 2026 · partly

**[Voice memo: put the Agent Behaviour Policy at the centre of the site. The ABP is the fundamental primitive; the grant is calculated from reality via digital twins; RiskMandate drives the sale of ABPs; corporate users, investors and founders are the audiences; and a security vendor whose controls reduce the delta has a business case we can make for them.](#I1)**

voice memo, transcribed in the thread · 3 produced · 1 not done12 September 2026 · partly

**[Hire a freelancer who also works through agents; give them a page and a first prompt focused on sales online and at Lisbon, and make their first task being a power user and tester of ABPs.](#I3)**

chat instruction · 2 produced · 1 not done12 September 2026 · processed

**[Preserve the Lab's thinking as it changes, and publish it as PDFs that can be sent through a chat app rather than linked.](#I4)**

chat instruction · 2 produced · 0 not done12 September 2026 · processed

**[The Startup Summit exhibitor pack and the event site, for a strategy document and the materials to submit.](#I2)**

link, in the thread · 2 produced · 0 not done11 September 2026 · processed

## The four steps

- **1 · Capture**

The file goes into `site/assets/briefs/` byte for byte and its digest into `briefs-register.json` the moment it arrives. Speech is transcribed and archived the same way; nothing is trimmed.

- **2 · Read**

A brief under `docs/briefs/`: what was asked, what it changes, what it contradicts, and what is not yet decidable. One page each, [here](../../admin/briefs/).

- **3 · Break**

Task briefs under `.claude/briefs/`, each sized for one agent and naming the files it touches, and a row in the queue.

- **4 · Track**

The row moves on [the board](../../admin/work/); the register's *status* and *not done* say what the memo still owes.

## What happened to each of them

I11 · voice memo, transcribed in the thread, with a screenshot of the Agentics Foundation London group, 21 Sept · 21 September 2026

## Voice memo: the next phase is users. The MVP is nailed and the vaults are more than most first users need, so find many smaller examples where a policy adds value now. The abp.sgit.ai/gmail prompt workflow - four steps, thirteen prompts, about twenty minutes - is the shareable artefact, already sent to a real group. KPIs and OKRs are the number of users who run the prompts and the number who create a policy; the pricing ladder exists, what is missing is a bigger free funnel above it. Nobody buys a full policy until they have made a smaller one. And the second frontier, beyond technical permissions: consequences in the user's own terms (relabelling destroys a mailbox's information architecture, marking read things unread, too many sends, drafts or moves), which messages should and should not be read or replied to, prompt injection, and rules of engagement for a single session.

received

*voice memo, transcribed in the thread, with a screenshot of the Agentics Foundation London group, 21 Sept* — no digest; given as speech, chat text or a link

**Produced.** [The direction brief: the free rung below the ladder, why a small policy is not a small vault, the six things the memo names beyond permissions mapped against the model, the build order and five decisions](https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/direction__the-next-phase-is-users.md) · [Try it - the seventh top-level section: the four steps, what you end up with, what it honestly is not, the four layers, and where to say it broke](../../try-it.html)

**Not done.**

- A prompt workflow per shape we already have (T13) - the Gmail one is published at abp.sgit.ai and the other fifteen have only MAP-A-GRANT.md, inside the vault
- A feedback path from the workflow's last step that survives a stranger
- What we count, and where it is published - the site collects nothing, so the honest measure needs the lead
- Volume and instances on the consequence layer (T14): the relabelling, the mass send, the draft flood, the mailbox's state as an asset
- The session-scoped mandate, and the instance-scoped mandate - proposed as a Lab ask rather than a change to the published vocabulary
- Waiting on the lead: the seventh menu slot, what is counted, whether a user-made policy gets published, and how far the free rung goes

I10 · voice memo, transcribed in the thread, 16 Sept · 16 September 2026

## Voice memo: the multi-layer grant, and the vault opens on the audience. Map three storeys — what the Google OAuth permission allows, what Anthropic's connector exposes to the chat (code, which can have bugs and can change at any minute's notice), and what normal usage and Claude's own guardrails allow — then the layer above, which is what becomes possible with those mechanical capabilities. Use this vault as the case study and change whatever we want on it. Find good ways to visualise it, because that is where the gaps are and the question is whether people are aware. The vendor's own restriction is a control we can reverse engineer and make the business case for. On the vault: three audience folders (executive, operator, risk) as the main section of the left menu, the executive view being the whole thing in one line, a couple of diagrams and a couple of paragraphs; keep the packs and the how-to-use, but not centre stage.

received

*voice memo, transcribed in the thread, 16 Sept* — no digest; given as speech, chat text or a link

**Produced.** [The direction brief: the four storeys (permitted, exposed, practised, consequences), latent capability as the gap between the first two, the barrier gaining a holder and whether it moves without you, the audience spine, the build order and four decisions](https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/direction__the-grant-has-storeys-and-the-vault-opens-on-the-audience.md)

**Not done.**

- Storey one for this shape (data/permitted.json, the scopes and the methods they unlock)
- held_by and moves_without_you on every barrier; splitting not_reachable into bounded and not exposed
- The audience spine in the reading app, with the executive view authored
- The storeys drawn as one diagram
- Waiting on the lead: whether `grant` keeps naming storey two, and the audience names

I6 · chat instruction with eight screenshots, 16 Sept · 16 September 2026

## Build a specific vault for Claude chat connected to a Gmail inbox; capture the connection screens (address obscured) in a folder for the connector; then map the whole customer workflow — the vault, its home page, the settings, the permissions, the prompts given to Claude — as the purchase workflow. Do not use the agent's name.

partly

*chat instruction with eight screenshots, 16 Sept* — no digest; given as speech, chat text or a link

**Produced.** [The template vault claude-gmail-connector: six rows, four measured on the deployer's own account, the evidence transcribed with the address redacted; pushed as vault oc433z3m and read live on its own page](../../abp-vault-claude-gmail-connector.html) · [The customer's draft instance, anonymised, with a question on every mandate line (vaults-instances/)](https://github.com/Risk-Mandate/riskmandate.ai/tree/dev/vaults-instances) · [The purchase workflow, run once: the brief](https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/workflow__buying-a-policy-for-claude-on-gmail.md) · [The tile in the library, in Mail & files connectors, measured 4 of 6](../../agent-behaviour-policy.html) · [The customer's draft instance pushed as a private vault (xjir6m0c); the key handed to the lead in the session, never on a page](https://github.com/Risk-Mandate/riskmandate.ai/tree/dev/vaults-instances)

**Not done.**

- The twelve screenshots as redacted image files in evidence/: they arrived inline and could not be edited from the session; the transcriptions stand in for them
- The customer's correction of the mandate, and the signed licence

I7 · chat instruction, 16 Sept · 16 September 2026

## Where is the new Claude + Gmail section; publish the vault (the read key makes the publish automatic); create a page in the admin section for the Gmail workflow brief, in a way that takes many briefs; and refactor the admin section to the structure, layout and capabilities of store.sgit.ai/admin/ and pt.newsroom.sgit.ai/newsroom/.

processed

*chat instruction, 16 Sept* — no digest; given as speech, chat text or a link

**Produced.** [The Gmail-connector vault pushed (oc433z3m) and read live on its page and in the library](../../abp-vault-claude-gmail-connector.html) · [The admin console: a rail with counts, what needs the lead, the board, the memo queue, every brief as a page, the vaults, the records, the tooling — written by build-admin.mjs from the repository](../../admin/) · [The Gmail workflow brief as a console page, one of every document under docs/](../../admin/briefs/workflow__buying-a-policy-for-claude-on-gmail/)

I8 · chat instruction with a PDF and a link, 16 Sept · 16 September 2026

## Make the Gmail-connector vault oc433z3m the first MVP vault, with a solid end-to-end experience and the design template every other vault will reuse; global changes to the code vault are fine, and backwards compatibility with vaults nobody uses is not worth buying. Start from the store's V3 marketplace mock-up (the vault panel with its left navigation, the positioning of the vault) and the store's comparison table of what each level gets you, including the dual licence.

partly

*chat instruction with a PDF and a link, 16 Sept* — no digest; given as speech, chat text or a link

**Produced.** [The direction brief: what the mock-up says about the vault, the feature list read off the store's table, the dual licence as a file and a data block, the redesign of the reading app with a left navigation, what changes globally, four decisions for the lead, and the plan](https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/direction__mvp-vault-and-the-reading-app.md) · [Built: the dual licence in the build and LICENCE.md; the v5 left-navigation reading app in a new app vault (vbhmlulo); oc433z3m rebuilt and re-pushed; the vault page repositioned (v1.24.0)](../../abp-vault-claude-gmail-connector.html)

**Not done.**

- The live host view of oc433z3m was still resolving the new sub-vault mount at merge; the vault data is verified correct and the renderer proven via a static preview

I9 · voice memo (Otter transcript, about nine minutes), 16 Sept · 16 September 2026

## Voice memo: the material to add to the Gmail-connector vault. Go back to first principles on the grant and map its side effects: a grant is the union of capabilities, and the reader needs the consequences, each explicit and each tied to the asset that makes it real (secrets in mail, reset links, mail from others); count the routes out; the authorisation to read is not the authorisation to forward; harvesting, mass send and what makes a platform suspend an account; mass change to the inbox's filing; realistic scenarios on the mandate; standards as mini-graphs in the vault; the vault navigated as a website with materials per audience.

partly

*voice memo (Otter transcript, about nine minutes), 16 Sept* — no digest; given as speech, chat text or a link

**Produced.** [The direction brief: the memo in its own order, where the vault already is, the consequence layer (assets, consequences, standards mini-graphs, the triple), eleven first consequences for oc433z3m, what it settles for the MVP brief, the build order, what needs the lead](https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/direction__consequences-assets-and-the-vault-as-a-website.md) · [Task briefs T11 (consequences and assets) and T12 (standards mini-graphs); T04 amended with Who are you?](https://github.com/Risk-Mandate/riskmandate.ai/tree/dev/.claude/briefs) · [Built: assets.json and consequences.json for oc433z3m (eleven consequences, six assets, two routes out), CONSEQUENCES.md derived, the What follows view, the standards mini-graphs, two scenarios (v1.24.0)](../../abp-vault-claude-gmail-connector.html)

**Not done.**

- The research list documented from Google's pages — sending limits, suspension, the modify tools — is still open (T05/research-vault)
- Who are you? ships as a live filter; the authored per-audience views and projections remain T04

D10 · spoken brief, transcribed · 15 September 2026

## Risk Mandate Website Repositioning Strategy

partly

[the file as received](../../assets/briefs/2026-09-15__transcript__website-repositioning-strategy.txt) · `ab6f9486ecae…` · 3 KB

**Produced.** [The home page rebuilt around who is arriving and what is sold, with the insurance argument moved off it](../../index.html) · [Make agents insurable — the whole insurance argument kept in full on a page of its own](../../insurance.html) · [Licence to Operate — the middle rung, given the page the brief asked for](../../licence-to-operate.html) · [You run agents today](../../for-corporate.html) · [You are a founder](../../for-founders.html) · [You are a startup](../../for-startups.html) · [The menu restructured to seven top-level entries with Behaviour policy, Who it's for and Insurance as groups](../../index.html)

**Not done.**

- MULTILINGUAL DELIVERY FOR TIER 3 AND TIER 4. The brief asks for the £500 correction and the £1,500 session to be deliverable in the buyer's own language, since both have a person in the loop. Nothing is built and nothing is claimed anywhere on the site. It is recorded here so it is not lost.
- The four offerings are not yet listed on the site as offerings. The store publishes four tiers and two add-ons; pricing.html still describes the free/paid line rather than the ladder.
- An investor page. The brief names three audiences; the printed sheets, the store and the Lisbon page all carry a fourth (investors, or 'you back companies that do'). Three pages were built and the fourth is flagged on the home page as missing.
- The vault's per-audience views are described on the home page as the reason for audience pages, but no ABP vault is published on this site yet.

D7 · voice memo (Otter transcript) · 15 September 2026

## ABP Graph and Stakeholder Views — the policy is a graph, and every stakeholder gets a projection of it

partly

[the file as received](../../assets/briefs/2026-09-15__voice-memo__abp-graph-and-stakeholder-views__otter-transcript.txt) · `d93b0fdc381a…` · 4 KB

**Produced.** [The direction brief: the policy is a graph, and every stakeholder gets a projection of it (docs/briefs/direction__abp-as-a-graph-and-stakeholder-views.md)](https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/direction__abp-as-a-graph-and-stakeholder-views.md) · [The by-behaviour facet on the library: one click answers which policies can delete files](../../agent-behaviour-policy.html)

**Not done.**

- One page per behaviour, generated from the catalogue
- Edges per path rather than per row, in every vault
- Metrics (speed, volume, blast) and outward links (ATT&CK, GDPR) on the 23 primitives
- Views per audience — CEO, CFO, CTO, investor, buyer, operator, engineer, project manager — with the prompt and the script shipped in the vault so the projection can be regenerated
- The two asks to the model site, on Lab 03

**Notes.** The memo was worked from the transcript on 15 September before the file itself was registered; the file arrived the same day with D8. The transcriber writes the acronym as "ADP" throughout; it is the spoken "ABP", and the archived bytes are kept as received. The task briefs for the unbuilt items are in the repository under .claude/briefs/ (T01–T04, T07).

D8 · voice memo (Otter transcript) · 15 September 2026

## Use Case Driven ABP Policy Strategy — a policy per use case, and the £500 level is a prompt the customer runs

partly

[the file as received](../../assets/briefs/2026-09-15__voice-memo__use-case-driven-abp-strategy__otter-transcript.txt) · `8457a6637e21…` · 4 KB

**Produced.** [The direction brief: a policy per use case, and the £500 level is a prompt the customer runs (docs/briefs/direction__use-case-driven-policies-and-the-prompt-workflow.md)](https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/direction__use-case-driven-policies-and-the-prompt-workflow.md) · [The pricing page rebuilt around the four levels, with the level-3 prompt workflow written out step by step and every level linked to the store](../../pricing.html#prompt) · [The homepage and every vault page point at viewing a policy and buying one at the store](../../index.html)

**Not done.**

- The two Voice Debrief use-case vaults (the web flow through a model-routing service; the WhatsApp flow through n8n), written by the agent that knows those workflows and packaged here
- A page of its own for the £500 workflow, once the store's side has a return address that is not a mailbox
- A use-case group on the library page, and the combination of several vaults' grants into one
- The per-shape header on MAP-A-GRANT.md naming the vocabulary and the order reference
- Synchronising the level-3 wording with the store agent's page

**Notes.** Received with D7 on 15 September. The store's four levels went live the same day (store.sgit.ai v0.1.7); the memo's four price points match them.

D9 · strategy brief · 15 September 2026

## The offer is built and the button is not — each level is the level below plus one thing, and the post-sale page does not exist yet

partly

[the file as received](../../assets/briefs/v0.33.71__strategy-brief__the-offer-is-built-and-the-button-is-not.md) · `99e75be33f09…` · 31 KB · v0.33.71

**Produced.** [Level 1 after payment: the page a £5 buyer lands on, where the zip of the template vault for the shape bought is downloaded, with its size and sha256 stamped from the file by the build and checked in CI; the page hashes the download in the browser on request. Unlisted and noindex; the payment link's success address, with ?shape=<slug>](../../paid-t1.html) · [Level 2 after payment: a working vault; a person follows up within 24 hours](../../paid-t2.html) · [Level 3 after payment: the prompt step and where to send what it produced; a person follows up within 24 hours](../../paid-t3.html) · [Level 4 after payment: the first session booked by a follow-up within 24 hours](../../paid-t4.html) · [Pricing: the plus-one-thing rule stated on the page, and an after-you-pay section with a definition of done per level, linking the four pages](../../pricing.html#after) · [The homepage: a four-level strip in the behaviour-policy section, and the £10 that was still on two pages corrected to £5](../../index.html#policy)

**Not done.**

- The payment links themselves, and the success address set on each of them (level 1 passes ?shape=<slug>) — the store's, not this site's
- The level-3 what-you-do text on the store's own product page, and the opinion add-on page
- The A5 and the physical stand

**Notes.** Received in chat on 15 September. The brief's site-side items are built; its store-side items are named and left to the store. The lead's follow-up the same day set the two things the brief left open: the £5 sale lands on a download, and levels 2–4 are a follow-up within 24 hours.

I5 · chat instruction, with two public comments supplied as the first two questions · 13 September 2026

## Add a section answering the questions people actually ask in public — with the standing rule that the site never names who asked. Answers that outgrow a section get their own page.

processed

*chat instruction, with two public comments supplied as the first two questions* — no digest; given as speech, chat text or a link

**Produced.** [Questions — real questions, answered with a date and no name attached](../../questions.html)

**Not done.**

- A third-party screenshot convention. The instruction anticipated detailed examples and screenshots; screenshots of our own demos are fine, and screenshots of anybody else's product run into the no-probing and no-verdicts rules, so the Lab's drawn mockups remain the pattern until that is decided.

D1 · dev brief · 12 September 2026

## The Grant Is User Shaped And Not Data Shaped: Start With The Connectors, And The Template Vault Is The Product

processed

[the file as received](../../assets/briefs/v0.33.70__dev-brief__the-grant-is-user-shaped-and-not-data-shaped.md) · `1b2dfa45d228…` · 29 KB · v0.33.70

**Produced.** [Lab 01 — the grant is user-shaped, not data-shaped](../../lab-connector-grants.html) · [Lab 02 — what buying a behaviour policy would look like, including the twelve-stage flow](../../lab-abp-flow.html) · [Lab 03 — the request list against abp.sgit.ai, including the proposed `material` property](../../lab-abp-requests.html)

**Not done.**

- The five first policies themselves. Lab 01 documents the grants; no policy document exists for any of the five shapes.
- The template vault and the shape library — named in the brief as the actual product, and not started.
- The instrumentation table timing the first five, which the brief calls the only pricing input anybody will have.

**Notes.** Uploaded twice, byte-identical. The second arrival was in the same message as D3 and D4 and was not reprocessed.

D2 · dev brief · 12 September 2026

## This Is The Tier One Application Nobody Could Find: The Connector List Alone Is Twenty Bits, So Compute Locally And Submit Banded

processed

[the file as received](../../assets/briefs/v0.33.70__dev-brief__this-is-the-tier-one-application-nobody-could-find.md) · `11ff8f5f9eeb…` · 31 KB · v0.33.70

**Produced.** [Lab 04 — seven things to build, and one word we have not earned](../../lab-shape-collector.html)

**Not done.**

- All seven items on Lab 04's own build list. The page is the specification; none of it is built.

**Notes.** One correction to the brief is stated on the page and marked as ours: banding is the necessary first move and not the whole answer, because a banded submission still carries roughly the entropy of the fingerprint study the brief benchmarks against.

D3 · dev brief · 12 September 2026

## The Commit Author Is A Free Text Field: A Prompt Shifts The Odds, And Every Documented Fix Was Architectural

partly

[the file as received](../../assets/briefs/v0.33.70__dev-brief__the-commit-author-is-a-free-text-field.md) · `b54eddae92bc…` · 34 KB · v0.33.70

**Produced.** [Lab 05 — your agent can commit as you, and no instruction stops it](../../lab-commit-author.html) · [The free/paid line on the pricing page, which now sends a reader to Lab 05's four free settings before asking for money](../../pricing.html)

**Not done.**

- The comparison experiment. Lab 05 specifies it — three arms, twenty runs each, violations counted as repository queries — and nobody has set up a repository to run it against.
- A signed-commits rule on this site's own repository. Lab 05 says in as many words that the argument is demonstrated and not adopted until that is on.
- The provider and connector pages the brief maps onto the four layers, and the community incident repository behind them.

**Notes.** Read in full; the finding and the prompt are built, the experiment is not. All six load-bearing quotations were fetched and checked against their sources rather than relayed, which produced two corrections to the brief that are stated on the page: the partially-verified state additionally requires the author to have enabled vigilant mode, and the claim that the attribution renders a profile picture and link could not be found on the page cited.

D4 · strategy brief · 12 September 2026

## The Urgency Is Not A Deadline But A State: You Already Connected It, And A Distributed Skill Cannot Carry A Control

partly

[the file as received](../../assets/briefs/v0.33.70__strategy-brief__the-urgency-is-not-a-deadline-but-a-state.md) · `af73131b6a72…` · 29 KB · v0.33.70

**Produced.** [The urgency section on the front page — three vendor sentences with dates and no adjective, and the two dated changes of this year](../../index.html) · [The free/paid line on the pricing page, with the mistakes-not-attacks label and the authorise question in place of the insurance word](../../pricing.html)

**Not done.**

- The price experiment as redesigned — charge one price and count, with a certainty question after. The pricing page states the approach; no price is set and nothing is charged.
- The generic prompt as a published, installable artefact. The pricing page says it is free and open; the file does not exist yet.
- The early access group: a dozen people running one of the five shapes, used for objections rather than numbers. No list exists.

**Notes.** Read in full. Its two rulings are now on the site: the entry product says it reduces accidents and does not stop an attacker, and the behaviour policy is not sold as a skill — the skill is the free half, because the portable frontmatter cannot carry a constraint. The word for the narrowing cover does not appear on the page carrying a price; the authorise question stands in its place.

D5 · organiser document · 12 September 2026

## Startup Summit 2026 — exhibitor booth guide

processed

[the file as received](../../assets/summit/startup-booth-guide.pdf) · `d13e3f08729f…` · 2432 KB

**Produced.** [The booth working page, with the guide embedded and the materials to hand over](../../summit-booth.html) · [Three corrections to the Lisbon messaging brief: no banner, the portal rather than email, and power must be requested](../../summit.html)

**Not done.**

- Logo and name into the exhibitor portal — the organisers' own deadline was 15 September.
- The power request, which goes through the portal and not by email.

**Notes.** Third-party material, republished on a working page rather than a public one. Whether it stays fetchable under site/ is an open decision.

D6 · dev brief · 12 September 2026

## Every Routable Address Is In The Grant: Do Not Attack Anyone Is The One Rule Everybody Signs, And It Is The One With No Barrier

partly

[the file as received](../../assets/briefs/v0.33.70__dev-brief__every-routable-address-is-in-the-grant.md) · `b85fdbcb235b…` · 68 KB · v0.33.70

**Produced.** [Lab 06 — every routable address is in the grant, and the one rule everybody signs has no barrier](../../lab-network-reach.html)

**Not done.**

- The two proposals to the model site — the barrier's companion fields (above whom, deterministic, what voids it, evidenceable) and the six composition rules. Lab 06 states them; they are not yet on the request list in Lab 03.
- The provider comparison table, which the brief says writes itself from the sources: network on by default locally and hosted, allow list present, all egress paths or one, survives being written into a repository, fails open or closed, resolution covered, and a log the operator can read.
- The reconciliation tool between an agent's several destination lists — open question 3, and possibly the smallest useful thing we could ship on this capability.
- The generic pasteable document as an artefact. Lab 06 drafts it in a table; open question 4 is whether it should be published before the custom generator exists.

**Notes.** Seven load-bearing quotations were fetched and checked rather than relayed, including the reference container's firewall script. Two departures from the brief are stated on the page: the brief reports observing the two egress paths diverge in one session, and in ours they did not — both reached every host tried — so the finding rests on the vendor's own sentences rather than on that observation; and we published our own measurement of this machine's egress instead, which found a raw outbound socket to an arbitrary public address and working name resolution with no allow list in either path.

I1 · voice memo, transcribed in the thread · 12 September 2026

## Voice memo: put the Agent Behaviour Policy at the centre of the site. The ABP is the fundamental primitive; the grant is calculated from reality via digital twins; RiskMandate drives the sale of ABPs; corporate users, investors and founders are the audiences; and a security vendor whose controls reduce the delta has a business case we can make for them.

partly

*voice memo, transcribed in the thread* — no digest; given as speech, chat text or a link

**Produced.** [The direction brief](https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/direction__abp-at-the-centre.md) · [The Agent Behaviour Policy page](../../abp.html) · [Pricing, rebuilt around the store's four levels and linked to it (v1.19.0)](../../pricing.html)

**Not done.**

- The homepage's second panel, which should become "the grant you did not enumerate" and still does not.

I3 · chat instruction · 12 September 2026

## Hire a freelancer who also works through agents; give them a page and a first prompt focused on sales online and at Lisbon, and make their first task being a power user and tester of ABPs.

processed

*chat instruction* — no digest; given as speech, chat text or a link

**Produced.** [Working with us](../../work.html) · [Brief B1 — power user and tester of Agent Behaviour Policies](../../work-abp-power-user.html)

**Not done.**

- Rate, hours, start date, escalation route, publication rules and repository access — deliberately absent because the page is public, and listed on it as owed.

I4 · chat instruction · 12 September 2026

## Preserve the Lab's thinking as it changes, and publish it as PDFs that can be sent through a chat app rather than linked.

processed

*chat instruction* — no digest; given as speech, chat text or a link

**Produced.** [Dated PDF editions of every Lab entry, and the whole Lab as one file](../../lab.html) · [The edition register](../../lab-editions.json)

I2 · link, in the thread · 11 September 2026

## The Startup Summit exhibitor pack and the event site, for a strategy document and the materials to submit.

processed

*link, in the thread* — no digest; given as speech, chat text or a link

**Produced.** [The Lisbon 2026 page](../../summit.html) · [The messaging and strategy briefs](https://github.com/Risk-Mandate/riskmandate.ai/tree/dev/docs/briefs)