# The Offer Is Built And The Button Is Not: Each Level Is The Level Below Plus One Thing, And The Post Sale Page Does Not Exist Yet

**version** v0.33.71
**date** 15 September 2026
**from** Human (project lead)
**to** Whoever issues the payment links, whoever writes the four post sale pages, and whoever re-reads two pages on the risk site for a price that may no longer be true

**type** Strategy brief (the four level offer as it stands on the two sites tonight, checked against the memo and the standing rulings, with the gaps listed and the one blocker named)

*First of 15 September, two days before the conference. The memo was read, and then both sites named in the request were read as they stand today, and the finding that reorganises this brief is that the memo describes a store that was built today: the store is at version zero point one point seven dated 15 September with exactly the four levels and the four prices the memo gives, and the risk site is at version one point nineteen dated the same day with its pricing page rewritten as those four levels and every buy link pointing at the store. So this brief does not define the offer. It verifies the built offer against the memo and against the rulings in force, and it lists what is still missing, which is shorter than it has been on any day since 10 September and contains one item that gates everything else. Limitations: the risk site was readable only through a summarising fetch and its quotations are indicative rather than verbatim, one reported price on it could not be confirmed and is flagged rather than asserted, and the store was read raw and is quoted exactly.*

---

## What This Is

The four level offer checked against the site that now carries it, and the short list of what stands between the site and a sale: **the memo says the offering is nailed and has settled into four deliveries, being a zip of the pack that is emailed and downloadable, a vault of the shape chosen with the options chosen, a customised pack produced from a prompt the buyer runs at their own end which maps the current grant and mandate in their environment and comes back as the pack with the visualisation and the vault, and two sessions with a consultant, one to brief and one to debrief, with a security professional signing off, at five, fifty, five hundred and fifteen hundred pounds respectively; it says each needs a post sale page with a clear definition of what you get, that this sells the vaults and the content together, that it has a clear definition of done, that the next steps are audience and use case specific examples and going to market, and that it is all paid online. The first finding is that the store already carries this, released today as version zero point one point seven, with fifteen shapes promoted from the risk site at build time under a content hash, four levels each at exactly the memo's four prices, a delivery page per level, a cart, and two payment rails, and with the four tiers of 10 September replaced by ruling while their identifiers were kept so that a printed code still lands. The second is that the ladder has a principle the memo describes and the store already implements, which is that each level is the level below plus exactly one thing, and the one thing is what the price is for. The third is that six gaps remain between the memo and the site, being that the memo says zip and the site says email, that the third level's delivery page does not say what the buyer does to get their situation to us although the risk site's pricing page does, that the memo's phrase sign off is carried on the fourth level's page with a carve out that the store wrote more carefully than the memo did, that a ten pound price may still be printed on two risk site pages that point at a five pound store, that the store's own delivery pages shorten the name to the two word form a ruling forbids, and that one add on has no delivery page at all. The fourth is that the memo's post sale page is a different object from the delivery page the store has, because the delivery page is read before paying and the post sale page after, and the second one does not exist for any level. The fifth is that the memo's definition of done exists nowhere on either site by that phrase and is best defined as a commit, one per level, checkable by the buyer from the vault's own history. The sixth is that the floor moved from ten pounds to five today by ruling, that the card fee arithmetic which set it at ten on 10 September is preserved on the store's offers page as the argument that lost, and that this is the right way to lose an argument. And the seventh is that no payment link exists on either rail for any of the six offers, that this has been true since 10 September, that the memo's it is all paid online is the one sentence in it that is not yet true, and that it is the only thing between the site and its first sale.** New contributions: **the plus one thing principle stated as the ladder's rule; the six gaps with a fix each; the distinction between a delivery page and a post sale page, and what the second carries; the definition of done as a commit per level; and the ordering for issuing the links, which is the two levels that exist and run first.**

## The Memo Describes The Site As It Stands Tonight

**The store's release note for today, verbatim:** the store proper. Fifteen Agent Behaviour Policy shapes promoted from riskmandate.ai at build time with a content hash, times four levels, the pack by email at five pounds, a working vault at fifty, corrected for your situation at five hundred, and two sessions with a security professional signing it at fifteen hundred, plus one for a deployment nobody has profiled, which starts at the third level because the first two deliver a template and for it there is not one. A catalogue with chip filters, a page per shape, an order that survives a reload, and two payment rails. The four tiers of the 10 September pack were replaced by ruling; the identifiers did not change, so a printed code still lands.

**The risk site's release for today says the same from the other side:** view a policy, buy a policy, the store linked, pricing as the four levels, the vault pages open on the vault itself. Its pricing page now reads four levels, one document, with the four prices and a buy link to the store's delivery page for each. Nine releases shipped on that site in two days, and among them are the things the memo lists as next: fifteen example policies in four categories, being coding agents, chat assistants, automation and continuous integration, and mail and file connectors, each delivered as a vault readable in the browser with a published read key; five connector vaults read from the vendors' own pages; and, in version one point fifteen, **a prompt that lets any agent measure its own grant**, which is the mechanism of the memo's third level.

**So the audience and use case specific examples the memo names as the next step exist, fifteen of them, and the go to market is gated by one thing, which is the last section of this brief.**

**One correction to the memo's own count.** The memo says four deliveries. The store carries six offers: the four levels and two add ons, the formats add on and the opinion add on. The memo's four are the ladder. The two add ons attach to a rung and have no checkout of their own.

## The Ladder's Rule: Each Level Is The Level Below Plus One Thing

**The memo calls them four different principles and four different deliveries. Read against the store's own delivery pages, they are one principle applied four times.**

| Level | Price | The level below, plus | What the store says arrives |
|---|---|---|---|
| **One, the pack** | GBP 5 | Nothing below it. **The files** | Every file in the vault for the shape you picked, sent to you: the policy, the grant and the mandate as markdown and as JSON, the pinned vocabulary, the prompts, the business case, and the two files you hand the agent |
| **Two, the vault** | GBP 50 | The pack, plus **keys and history** | A vault you hold the keys to: clone it, change it, commit, and the history is yours. Its own app, a read key you can hand to anybody who asks how you govern the agent, and a licence with your name on it and no public key |
| **Three, corrected** | GBP 500 | The vault, plus **your situation** | The mandate corrected against your situation rather than against a starting assumption, the delta recomputed with the barrier on every row, and a written note of what was changed and why, so the correction is checkable rather than trusted |
| **Four, with people** | GBP 1,500 | Corrected, plus **a person** | Two half hour sessions with your team, the policy built from the interview rather than from a form, and a security professional's review and sign off with a record of what was asked and answered |

**Each level is a superset of the one below, and each page says so in its first line.** That is what makes the ladder explainable in one breath: the pack is the files, the vault is the files with keys and history, corrected is the vault against your situation, and the fourth is corrected with a person in the room. **The price steps are ten, ten and three,** and the third step is smaller because the thing added is an hour of a person rather than a new kind of object.

**The store's own honesty line on each page is the other half of the principle.** Every delivery page carries two headings, what arrives, and what this is not and will not become. The how it works page explains why, and the sentence is worth keeping: a page that only says what you get is the half that gets somebody into trouble. The memo asks for a clear definition of what you get. The store already has one, and it has the half the memo did not ask for.

**And the memo's other point is now true on the page.** This sells the vaults. Levels two, three and four are a vault, and the store says of level one that it is not a vault, with no history, no app and no read key to hand anybody, and that this is the level above. The end to end memo of 11 September said the vault becomes the product. It is the product from fifty pounds up.

## Six Gaps Between The Memo And The Site

**One. The memo says zip. The site says email.** Level one's page says one email, with the whole pack. The word zip appears nowhere on either site. The memo wants something the buyer can download, and the estate's own packs have always been zips. **Fix: the email carries a download link to a zip, and the page says so.** A zip is the portable form of every file in the vault, it is what the dev packs already are, and a link outlives an attachment size limit.

**Two. Level three's delivery page does not say what the buyer does.** The memo is explicit: we give you a prompt, you run it at your end, it maps the current grant and mandate, and we send you back the pack. The risk site's pricing page says it in one line, you run a prompt and we turn what it finds into your policy. **The store's level three page says corrected against your situation and does not say how your situation reaches us.** It says, correctly, that nobody interviews you at this level, which makes the omission worse, because the buyer is left with no route. **Fix: a what you do section on that page, being run the prompt, send back what it produces, and here is what we keep and what we do not.** The shape collector brief of 12 September established that the thing sent back is identifying, a connector list alone carrying about twenty bits, so the page also says that the result is computed locally and submitted banded, and that is a selling line rather than a caveat.

**Three. The memo says a security professional signs off, and the store carries that phrase with a carve out the memo does not have.** Level four's page says reviewed and signed off by a security professional, and then, under what this is not: not a signed opinion as a formal instrument, because a professional reviewing and signing off the work is not the same thing as the company issuing a signed opinion, and the wording for that does not exist yet. **That carve out is correct and it is load bearing.** The rulings in force are that the company issues every opinion with an express non assumption of responsibility on its face, that no form of the word certify appears, that the people who sell do not sign, and that a named opinion is a legal act. The memo's own phrasing would breach the first of those if printed alone. **Fix: none to the page; keep the store's wording and not the memo's, and make sure the person who signs off level four is not the person who sold it.**

**Four. A ten pound price may still be printed on two risk site pages.** On 13 September both the library page and the summit page carried a ten pound call to action for a draft policy. Today the store's level one is five pounds. A summarising read of the library page today reported a ten pound link to the store's level one; a second read of the same page's markdown found no price at all. **This could not be settled from here and it must be settled by a person reading both pages in a browser**, because the summit page is what the booth points at, and a printed ten beside a store that charges five is a mismatch on the one page that matters this week.

**Five. The store's own delivery pages shorten the name to the form the ruling forbids.** Level one's page lists the policy, the grant and the mandate, and level four's says the policy built from the interview. The ruling of 11 September is that the name is never shortened to the two word form, because the licence to operate demonstration uses that word for the insurance instrument, and the store's own strapline is every agent needs a licence to operate, which puts both meanings on one site. The quotations in this brief carry the store's wording because they are quotations. **Fix: the pages say the behaviour policy, or the full name, wherever the store now says the two word form.** It is a search and replace on a data file, since the pages are built from one.

**Six. The opinion add on has no delivery page.** Its address returns not found. The offers table lists it as not for sale yet, with no wording and no code, which is honest. A row that is listed and cannot be bought should still land somewhere. **Fix: a page at that address saying what the offers table says, or the row removed until the wording exists.** The memo does not mention a separate opinion product at all, which suggests the memo's author has folded it into level four, and the store's carve out on level four is why it cannot be folded silently.

## The Post Sale Page Is A Different Page From The Delivery Page

**The memo asks for a post sale page per level. The store has a delivery page per level. They are not the same thing and the second one does not exist.**

**The delivery page is read before paying.** It says what arrives and what this is not. It is the offer.

**The post sale page is read after paying, and it answers a different question, which is what happens now.** It is where a payment link's success address lands, and it exists for none of the four levels. The success address of a payment link today would land on the delivery page the buyer has already read, which is the wrong page at the wrong moment.

**What the post sale page carries, per level:**

| Item | Level one | Level two | Level three | Level four |
|---|---|---|---|---|
| **The order reference and the product code**, so the buyer can quote it | Yes | Yes | Yes | Yes |
| **What arrives and when** | The email with the download link, within a stated time | The vault, within a stated time | After you send the prompt result | After the first session |
| **What you do next** | Nothing | Nothing | **Run this prompt, send back what it produces**, with the prompt on the page | **Book the first session**, with the booking route on the page |
| **How the key reaches you** | Not applicable | **Out of band, never on this page.** A vault key is never published and never committed; the page says the key arrives separately and by what route | Same | Same |
| **The definition of done** | One line, below | One line | One line | One line |
| **Who to write to if it does not arrive** | A person, not a form | Same | Same | Same |

**The key row is the one that matters, and it is a standing rule rather than a design choice.** The estate's operating rules say a vault key is never committed to anything, that a read key may be published and a vault key may never be, and that a key appearing in a committed file is a security incident. A post sale page is a committed file. So the page says how the key arrives and never carries it.

**One page template, four instances, rendered from the same offers data the store already builds from.** The identifiers are stable and the store says its host is not, so the post sale address is the delivery address with a state, not a new tree.

## Definition Of Done Is A Commit

**The memo says this has a very clear definition of done. The phrase appears on neither site.** The closest thing is the what arrives heading, which is a description and not a test.

**The definition that fits the product is that done is a commit, and the buyer can check it from the vault's own history.**

| Level | Done when | Checked by |
|---|---|---|
| **One** | The email has been sent carrying a link to a zip whose content hash matches the shape's published hash | The buyer compares the hash on the page with the hash of what they downloaded |
| **Two** | A vault exists, the licence file in it carries the buyer's name, the public key is off it, and the buyer has opened it with their key | The buyer's first clone; the licence file is in the tree |
| **Three** | The corrected mandate and the recomputed delta are committed, and the note of what changed and why is committed beside them | The commit is in the history and the note names every changed row |
| **Four** | Both sessions have been held, the record of what was asked and answered is committed, and the sign off file is committed with the professional's name and the date | Three files in the tree, and the sessions dated in the record |

**This is the estate's own method applied to its own product.** The shape collector's first proposal in May was that the commit diff is the canonical record of one cycle of work. A level is done when its commit is in the buyer's history, and the buyer does not have to take anybody's word for it.

## The Floor Moved, And The Store Kept The Argument That Lost

**On 10 September the floor was ten pounds, on card fee arithmetic:** at five pounds the fixed card fee alone is about four per cent of the transaction. **On 15 September the floor was set at five pounds by ruling.** The store's offers page records both, verbatim: the fee did not change, the judgement did, and the old reasoning stays on the page rather than being quietly dropped, because a store that deletes the argument it lost is a store you cannot check.

**That is the right way to lose an argument and it should be the estate's standard.** The why now brief of 12 September proposed a price experiment at one, ten, fifty and a hundred pounds. Today's ladder is five, fifty, five hundred, fifteen hundred. The experiment was never run and the ladder was set by judgement. That is fine, provided the page says so, and it does.

**One consequence for the print run.** The 10 September catalogue sheet, the A5, carried the four tiers of the 10 September pack at their prices. **Those tiers were replaced today.** Any A5 artwork made from the 10 September pack is wrong on every price and on two of the four descriptions, and the identifiers being stable does not help a printed sheet that says ten where the store says five. If the A5 has not gone to the printer, it is remade from today's offers page. If it has, it is not handed out.

## The Button Is The Only Blocker

**The memo's last clause is that it is all paid online. It is not, yet.** The store's offers page, verbatim: no link has been created on either rail. Every card shows its code and its delivery page instead of a live button, and your order names which rail is missing. The machine readable index says the same in one line: every checkout address in the offers data is empty.

**This has been the state since 10 September, and the summit pack's success criterion of that day is precise about what it means:** a stranger at the summit reaches the end of the free flow without narration, pays for something on their own phone, and receives a file they keep. Everything else is secondary. **Without a link, the flow ends one step before the criterion.**

**The order for issuing the links is given by the store's own state column.** Levels one and two are marked exists and runs. Levels three and four are marked specified, and never run for a paying buyer, with the honest line that the buyer would be the first. **So the links for levels one and two are issued first, today, because there is nothing behind them that has not been tested.** The links for three and four follow, and their delivery pages already carry the sentence that makes a first sale honest.

**Two rails, and the store's own page on them says they never meet.** The card link rail and the in person rail. For the conference, the card link is the one that matters, because the 10 September finding was that no reader would work and the answer was four printed codes.

## Who Sells It: One Store, And Every Site Links To It

**The memo says the platform site should sell it too, and even others.** The rule already in force is scope by domain and link across: one site says one thing properly and points elsewhere. The store says it in its own terms: offer identifiers are stable and the host is not, a payment code redirects to the delivery page, so the site can move host without reprinting a card or reissuing a link.

**So nothing is duplicated.** The risk site links every buy to the store's delivery page, as of today. The library site says it has no checkout and will not have one. The platform site, the open source site and the founder handouts of 13 September link to the same four addresses. One store, one set of identifiers, any number of doors.

**The standing contradiction is recorded and not resolved.** The 10 September ruling was that the storefront belongs under the risk product. The store is on the platform domain. The ruling and the instruction disagree and the store was built as instructed. The stable identifier design means this can be revisited without breaking a printed code, which is the best that can be said about it this week.

## The Startup Buyer Has Nothing Built For Them

**The store's own buyer mapping says so.** For agent operators, levels one and two are built for them. For investors, levels three and four. For startups, the page shows levels three, four and two, and the store states that none was built for them and every offer shown there was built for another buyer.

**The 13 September handout brief already framed the startup offer**, as the reverse sale: what their diligence will find, before it runs. That is level three or four with a different question on the front. It needs no new product. It needs the startups page to carry that question and to say which level answers it, and it needs the founder handout's second page to point at it.

## What This Does Not Try To Be

**It is not a redesign of the offer.** The offer was ruled today and built today, and it matches the memo. This brief checks it and lists gaps.

**It is not a pricing argument.** The floor moved by judgement and the page records the arithmetic that lost. Nothing here reopens that.

**It is not the copy for the post sale pages.** It says what they carry and why the key row is a rule. The words are the store's to write in its own voice, which is more careful than this corpus's.

**It is not a legal position on sign off.** The store's carve out on level four is the position, and it was written more carefully than the memo. This brief only says keep it.

## Honest Tensions

**The store is more careful than the memo, and the memo is the sales pitch.** The memo says a security professional signs off; the store says reviewed and signed off, not a signed opinion as a formal instrument. In a conversation the memo's phrasing will be used and the store's carve out will not be. The exposure is in the conversation rather than on the page.

**Levels three and four have never run for a paying buyer and both pages say so.** That honesty is right and it is also a reason for a buyer to choose level two. The first sale at level three is a test with a customer in it, and the page says that in plain words.

**The plus one thing principle is clean and level four's one thing is not one thing.** It adds two sessions, a policy built from interview rather than form, and a professional's review. Three things, priced as one. The ladder reads well and the fourth rung carries more than the others.

**The A5 is wrong and may already be printed.** The 10 September plan had artwork done yesterday and print today. If the sheet was made from the 10 September tiers, it says ten pounds and four questions that were replaced this morning. This brief could not check whether it went to the printer.

**Two days.** The links, the post sale pages, the level three what you do section and the re-read of two pages for a stale price are four tasks. The links are the only one that gates a sale, and the other three are what makes the sale honest.

## Open Questions

**Did the ten pound price survive on the library and summit pages?** Two reads disagreed. One person, one browser, five minutes.

**What is the stated delivery time for levels one and two?** The post sale page needs a number, and nothing on either site gives one. Minutes, hours, or a working day, and the answer determines whether a buyer at the booth sees the email before they leave the stand.

**Where does the level three prompt result go?** Email, a write only intake link, or an upload on the post sale page. The write only link is the estate's own primitive and has never been sold; using it here would be its first production use.

**Has the A5 gone to print?** If yes, it is withdrawn. If no, it is remade from today's offers page.

**Should the opinion add on stay in the offers table at all this week?** It is listed, not for sale, and its address is not found. Removing it costs nothing and removes a dead end; keeping it records that the wording is owed.

## Relationship To Previous Briefs

**From the summit and store packs of 10 September**, it takes the success criterion, the four tier catalogue that was replaced today, the hard rules on sign off and certification, and the A5 ruling, and it records that the catalogue and the A5 are superseded.

**From the storefront ruling of 10 September**, it takes the unresolved contradiction on domain and records that stable identifiers make it survivable.

**From the end to end brief of 11 September**, it takes the vault becomes the product, and records that it is the product from fifty pounds up.

**From the why now brief of 12 September**, it takes the price experiment and records that judgement replaced it and the page says so.

**From the shape collector brief of 12 September**, it takes compute locally and submit banded, and applies it to level three's what you do section.

**From the handout brief of 13 September**, it takes the startup reverse sale and the four A4 pages, and records that the pages carry no price and are unaffected by today's repricing while the A5 is.

**From the delta correction of 11 September**, it takes the rule that the delta is derived and never authored, which is why level three's page says recomputed rather than rewritten.

## Key Claims

| # | Claim |
|---|-------|
| 1 | The store at version zero point one point seven of 15 September carries the memo's four levels at the memo's four prices, with the 10 September tiers replaced by ruling and their identifiers kept so a printed code still lands |
| 2 | The risk site at version one point nineteen of the same day links every buy to the store and rewrites its pricing page as the four levels, and its fifteen example policies are the audience and use case examples the memo names as next |
| 3 | Each level is the level below plus exactly one thing, the files, then keys and history, then your situation, then a person, and the price steps are ten, ten and three |
| 4 | Every delivery page carries what arrives and what this is not, and the store's stated reason is that a page that only says what you get is the half that gets somebody into trouble |
| 5 | The memo says zip and the site says email, and the fix is an email carrying a download link to a zip whose hash matches the shape's published hash |
| 6 | Level three's delivery page does not say what the buyer does to get their situation to us, although the risk site's pricing page does, and the missing section is the prompt, the send back, and the local and banded computation |
| 7 | Level four's carve out, that a professional's sign off is not a signed opinion as a formal instrument, is correct under the rulings in force and must be kept over the memo's phrasing |
| 8 | A post sale page is read after paying, answers what happens now, carries the key row as a rule rather than a choice, and exists for none of the four levels |
| 9 | Definition of done is a commit per level, checkable by the buyer from the vault's own history |
| 10 | The floor moved from ten to five pounds by ruling today and the store preserved the card fee arithmetic that lost, which is the right way to lose an argument |
| 11 | Any A5 made from the 10 September tiers is wrong on every price and two descriptions and is withdrawn or remade |
| 12 | No payment link exists on either rail for any offer, it has been so since 10 September, and it is the only thing between the site and its first sale, with levels one and two to be linked first because they exist and run |

---

## Sources

All read 15 September 2026.

**The store, read raw.** The offers page at https://store.sgit.ai/offers/ for the price table, the state column, the buyer mapping, the floor paragraph and the statement that no link exists on either rail. The four delivery pages at https://store.sgit.ai/d/t1/, https://store.sgit.ai/d/t2/, https://store.sgit.ai/d/t3/ and https://store.sgit.ai/d/t4/ for what arrives and what this is not. The formats add on at https://store.sgit.ai/d/add-formats/ and the not found result at the opinion add on's address. The how it works page at https://store.sgit.ai/how-it-works/ for the sentence on what you get. The release history at https://store.sgit.ai/versions/ and its machine readable form for version v0.1.7 of 15 September 2026 and its summary. The machine readable index at https://store.sgit.ai/llms.txt for the page list, the empty checkout addresses and the stable identifier statement.

**The risk site, read through a summarising fetch.** The policy library at https://riskmandate.ai/agent-behaviour-policy.html for the fifteen shapes and four categories. The pricing page at https://riskmandate.ai/pricing.html for the four levels, the buy links and the line that you run a prompt and we turn what it finds into your policy. The library page at https://riskmandate.ai/abp.html, whose price could not be confirmed. The release history at https://riskmandate.ai/versions/index.json for versions v1.11.0 through v1.19.0 of 14 and 15 September 2026. The machine readable index at https://riskmandate.ai/llms.txt for the page list and the absence of any post sale page.

**The rulings.** The summit pack and store pack of 10 September 2026 for the success criterion, the hard rules and the A5. The storefront ruling of 10 September 2026. The operating rules on vault keys and share tokens in the repository's agent instructions. The shape collector brief of 12 September 2026. The handout brief of 13 September 2026.

---

This document is released under the Creative Commons Attribution 4.0 International licence (CC BY 4.0).
