{ "note": "Every document, brief and instruction this site was built from, in the order it arrived. It exists for two jobs. First, nothing gets worked twice: `sha256` is the digest of the file exactly as received, so an identical file arriving again is recognisable before anybody starts reading it — `received` lists every time it turned up. Second, nothing gets missed: an agent producing these briefs can fetch this file, compare it against what it has sent, and name anything absent. `status` is the honest state of the work, not an intention. `produced` names what exists because of the item, with URLs that can be checked. Items given as speech, chat text or a link have no digest and are recorded under `informal` — they are the ones most easily lost, which is why they are in here at all.", "site": "https://riskmandate.ai", "register": "https://riskmandate.ai/briefs-register.json", "page": "https://riskmandate.ai/briefs.html", "maintained_by": "RiskMandate. Corrections and omissions: use the contact control on the page.", "statuses": { "processed": "Read in full, and something on this site exists because of it.", "partly": "Read in full; some of it is built and a named part is not.", "received": "Archived and read, and nothing has been built from it yet.", "superseded": "Later material replaced it. Kept because the reasoning is still the record." }, "documents": [ { "id": "D1", "title": "The Grant Is User Shaped And Not Data Shaped: Start With The Connectors, And The Template Vault Is The Product", "version": "v0.33.70", "type": "dev brief", "dated": "2026-09-12", "file": "assets/briefs/v0.33.70__dev-brief__the-grant-is-user-shaped-and-not-data-shaped.md", "bytes": 29886, "sha256": "1b2dfa45d228be6b0f6eb6a420090da160e979fe0b347048588565441a9f6e38", "received": [ "2026-09-12T12:52Z", "2026-09-12T18:07Z" ], "duplicate_of": null, "status": "processed", "produced": [ { "what": "Lab 01 — the grant is user-shaped, not data-shaped", "url": "lab-connector-grants.html" }, { "what": "Lab 02 — what buying a behaviour policy would look like, including the twelve-stage flow", "url": "lab-abp-flow.html" }, { "what": "Lab 03 — the request list against abp.sgit.ai, including the proposed `material` property", "url": "lab-abp-requests.html" } ], "not_done": [ "The five first policies themselves. Lab 01 documents the grants; no policy document exists for any of the five shapes.", "The template vault and the shape library — named in the brief as the actual product, and not started.", "The instrumentation table timing the first five, which the brief calls the only pricing input anybody will have." ], "notes": "Uploaded twice, byte-identical. The second arrival was in the same message as D3 and D4 and was not reprocessed." }, { "id": "D2", "title": "This Is The Tier One Application Nobody Could Find: The Connector List Alone Is Twenty Bits, So Compute Locally And Submit Banded", "version": "v0.33.70", "type": "dev brief", "dated": "2026-09-12", "file": "assets/briefs/v0.33.70__dev-brief__this-is-the-tier-one-application-nobody-could-find.md", "bytes": 31387, "sha256": "11ff8f5f9eebb9200d30694381ff27c7e53a59417dd92f1a0461bbfe1b65ad89", "received": [ "2026-09-12T17:22Z" ], "duplicate_of": null, "status": "processed", "produced": [ { "what": "Lab 04 — seven things to build, and one word we have not earned", "url": "lab-shape-collector.html" } ], "not_done": [ "All seven items on Lab 04's own build list. The page is the specification; none of it is built." ], "notes": "One correction to the brief is stated on the page and marked as ours: banding is the necessary first move and not the whole answer, because a banded submission still carries roughly the entropy of the fingerprint study the brief benchmarks against." }, { "id": "D3", "title": "The Commit Author Is A Free Text Field: A Prompt Shifts The Odds, And Every Documented Fix Was Architectural", "version": "v0.33.70", "type": "dev brief", "dated": "2026-09-12", "file": "assets/briefs/v0.33.70__dev-brief__the-commit-author-is-a-free-text-field.md", "bytes": 34370, "sha256": "b54eddae92bc88d8133c1e544c339433972ef6cf8cf8656ac4771b7ffbce7ccd", "received": [ "2026-09-12T18:07Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "Lab 05 — your agent can commit as you, and no instruction stops it", "url": "lab-commit-author.html" }, { "what": "The free/paid line on the pricing page, which now sends a reader to Lab 05's four free settings before asking for money", "url": "pricing.html" } ], "not_done": [ "The comparison experiment. Lab 05 specifies it — three arms, twenty runs each, violations counted as repository queries — and nobody has set up a repository to run it against.", "A signed-commits rule on this site's own repository. Lab 05 says in as many words that the argument is demonstrated and not adopted until that is on.", "The provider and connector pages the brief maps onto the four layers, and the community incident repository behind them." ], "notes": "Read in full; the finding and the prompt are built, the experiment is not. All six load-bearing quotations were fetched and checked against their sources rather than relayed, which produced two corrections to the brief that are stated on the page: the partially-verified state additionally requires the author to have enabled vigilant mode, and the claim that the attribution renders a profile picture and link could not be found on the page cited." }, { "id": "D4", "title": "The Urgency Is Not A Deadline But A State: You Already Connected It, And A Distributed Skill Cannot Carry A Control", "version": "v0.33.70", "type": "strategy brief", "dated": "2026-09-12", "file": "assets/briefs/v0.33.70__strategy-brief__the-urgency-is-not-a-deadline-but-a-state.md", "bytes": 29897, "sha256": "af73131b6a72bb5f6d8aad1563f124a016040833310df0fb8be717ec44bb0e56", "received": [ "2026-09-12T18:07Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "The urgency section on the front page — three vendor sentences with dates and no adjective, and the two dated changes of this year", "url": "index.html" }, { "what": "The free/paid line on the pricing page, with the mistakes-not-attacks label and the authorise question in place of the insurance word", "url": "pricing.html" } ], "not_done": [ "The price experiment as redesigned — charge one price and count, with a certainty question after. The pricing page states the approach; no price is set and nothing is charged.", "The generic prompt as a published, installable artefact. The pricing page says it is free and open; the file does not exist yet.", "The early access group: a dozen people running one of the five shapes, used for objections rather than numbers. No list exists." ], "notes": "Read in full. Its two rulings are now on the site: the entry product says it reduces accidents and does not stop an attacker, and the behaviour policy is not sold as a skill — the skill is the free half, because the portable frontmatter cannot carry a constraint. The word for the narrowing cover does not appear on the page carrying a price; the authorise question stands in its place." }, { "id": "D5", "title": "Startup Summit 2026 — exhibitor booth guide", "version": null, "type": "organiser document", "dated": "2026-09-12", "file": "assets/summit/startup-booth-guide.pdf", "bytes": 2490263, "sha256": "d13e3f08729fa8ffaab7f4e1d247535fb0782c5182df67e365ef61d52ca0cf3d", "received": [ "2026-09-12T11:56Z" ], "duplicate_of": null, "status": "processed", "produced": [ { "what": "The booth working page, with the guide embedded and the materials to hand over", "url": "summit-booth.html" }, { "what": "Three corrections to the Lisbon messaging brief: no banner, the portal rather than email, and power must be requested", "url": "summit.html" } ], "not_done": [ "Logo and name into the exhibitor portal — the organisers' own deadline was 15 September.", "The power request, which goes through the portal and not by email." ], "notes": "Third-party material, republished on a working page rather than a public one. Whether it stays fetchable under site/ is an open decision." }, { "id": "D6", "title": "Every Routable Address Is In The Grant: Do Not Attack Anyone Is The One Rule Everybody Signs, And It Is The One With No Barrier", "version": "v0.33.70", "type": "dev brief", "dated": "2026-09-12", "file": "assets/briefs/v0.33.70__dev-brief__every-routable-address-is-in-the-grant.md", "bytes": 69590, "sha256": "b85fdbcb235b352150d5b806e58b4d525414a8c0a7ac11382a697f2f78127eb7", "received": [ "2026-09-12T19:05Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "Lab 06 — every routable address is in the grant, and the one rule everybody signs has no barrier", "url": "lab-network-reach.html" } ], "not_done": [ "The two proposals to the model site — the barrier's companion fields (above whom, deterministic, what voids it, evidenceable) and the six composition rules. Lab 06 states them; they are not yet on the request list in Lab 03.", "The provider comparison table, which the brief says writes itself from the sources: network on by default locally and hosted, allow list present, all egress paths or one, survives being written into a repository, fails open or closed, resolution covered, and a log the operator can read.", "The reconciliation tool between an agent's several destination lists — open question 3, and possibly the smallest useful thing we could ship on this capability.", "The generic pasteable document as an artefact. Lab 06 drafts it in a table; open question 4 is whether it should be published before the custom generator exists." ], "notes": "Seven load-bearing quotations were fetched and checked rather than relayed, including the reference container's firewall script. Two departures from the brief are stated on the page: the brief reports observing the two egress paths diverge in one session, and in ours they did not — both reached every host tried — so the finding rests on the vendor's own sentences rather than on that observation; and we published our own measurement of this machine's egress instead, which found a raw outbound socket to an arbitrary public address and working name resolution with no allow list in either path." }, { "id": "D7", "title": "ABP Graph and Stakeholder Views — the policy is a graph, and every stakeholder gets a projection of it", "version": null, "type": "voice memo (Otter transcript)", "dated": "2026-09-15", "file": "assets/briefs/2026-09-15__voice-memo__abp-graph-and-stakeholder-views__otter-transcript.txt", "bytes": 4026, "sha256": "d93b0fdc381a166dd0044b024031c9ee60a789533f7efc91ff3dafe4248afa90", "received": [ "2026-09-15T11:40Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "The direction brief: the policy is a graph, and every stakeholder gets a projection of it (docs/briefs/direction__abp-as-a-graph-and-stakeholder-views.md)", "url": "https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/direction__abp-as-a-graph-and-stakeholder-views.md" }, { "what": "The by-behaviour facet on the library: one click answers which policies can delete files", "url": "agent-behaviour-policy.html" } ], "not_done": [ "One page per behaviour, generated from the catalogue", "Edges per path rather than per row, in every vault", "Metrics (speed, volume, blast) and outward links (ATT&CK, GDPR) on the 23 primitives", "Views per audience — CEO, CFO, CTO, investor, buyer, operator, engineer, project manager — with the prompt and the script shipped in the vault so the projection can be regenerated", "The two asks to the model site, on Lab 03" ], "notes": "The memo was worked from the transcript on 15 September before the file itself was registered; the file arrived the same day with D8. The transcriber writes the acronym as \"ADP\" throughout; it is the spoken \"ABP\", and the archived bytes are kept as received. The task briefs for the unbuilt items are in the repository under .claude/briefs/ (T01–T04, T07)." }, { "id": "D8", "title": "Use Case Driven ABP Policy Strategy — a policy per use case, and the £500 level is a prompt the customer runs", "version": null, "type": "voice memo (Otter transcript)", "dated": "2026-09-15", "file": "assets/briefs/2026-09-15__voice-memo__use-case-driven-abp-strategy__otter-transcript.txt", "bytes": 3874, "sha256": "8457a6637e212c0b91b2186efda1857836dc660deed3e328e796a267ab9e45ac", "received": [ "2026-09-15T11:40Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "The direction brief: a policy per use case, and the £500 level is a prompt the customer runs (docs/briefs/direction__use-case-driven-policies-and-the-prompt-workflow.md)", "url": "https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/direction__use-case-driven-policies-and-the-prompt-workflow.md" }, { "what": "The pricing page rebuilt around the four levels, with the level-3 prompt workflow written out step by step and every level linked to the store", "url": "pricing.html#prompt" }, { "what": "The homepage and every vault page point at viewing a policy and buying one at the store", "url": "index.html" } ], "not_done": [ "The two Voice Debrief use-case vaults (the web flow through a model-routing service; the WhatsApp flow through n8n), written by the agent that knows those workflows and packaged here", "A page of its own for the £500 workflow, once the store's side has a return address that is not a mailbox", "A use-case group on the library page, and the combination of several vaults' grants into one", "The per-shape header on MAP-A-GRANT.md naming the vocabulary and the order reference", "Synchronising the level-3 wording with the store agent's page" ], "notes": "Received with D7 on 15 September. The store's four levels went live the same day (store.sgit.ai v0.1.7); the memo's four price points match them." }, { "id": "D9", "title": "The offer is built and the button is not — each level is the level below plus one thing, and the post-sale page does not exist yet", "version": "v0.33.71", "type": "strategy brief", "dated": "2026-09-15", "file": "assets/briefs/v0.33.71__strategy-brief__the-offer-is-built-and-the-button-is-not.md", "bytes": 32167, "sha256": "99e75be33f0989f6060b5acec058c34a13531b3d6bf54fc53e9cb5e65a23f3ff", "received": [ "2026-09-15T12:20Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "Level 1 after payment: the page a £5 buyer lands on, where the zip of the template vault for the shape bought is downloaded, with its size and sha256 stamped from the file by the build and checked in CI; the page hashes the download in the browser on request. Unlisted and noindex; the payment link's success address, with ?shape=", "url": "paid-t1.html" }, { "what": "Level 2 after payment: a working vault; a person follows up within 24 hours", "url": "paid-t2.html" }, { "what": "Level 3 after payment: the prompt step and where to send what it produced; a person follows up within 24 hours", "url": "paid-t3.html" }, { "what": "Level 4 after payment: the first session booked by a follow-up within 24 hours", "url": "paid-t4.html" }, { "what": "Pricing: the plus-one-thing rule stated on the page, and an after-you-pay section with a definition of done per level, linking the four pages", "url": "pricing.html#after" }, { "what": "The homepage: a four-level strip in the behaviour-policy section, and the £10 that was still on two pages corrected to £5", "url": "index.html#policy" } ], "not_done": [ "The payment links themselves, and the success address set on each of them (level 1 passes ?shape=) — the store's, not this site's", "The level-3 what-you-do text on the store's own product page, and the opinion add-on page", "The A5 and the physical stand" ], "notes": "Received in chat on 15 September. The brief's site-side items are built; its store-side items are named and left to the store. The lead's follow-up the same day set the two things the brief left open: the £5 sale lands on a download, and levels 2–4 are a follow-up within 24 hours." }, { "id": "D10", "title": "Risk Mandate Website Repositioning Strategy", "version": null, "type": "spoken brief, transcribed", "dated": "2026-09-15", "file": "assets/briefs/2026-09-15__transcript__website-repositioning-strategy.txt", "bytes": 2716, "sha256": "ab6f9486ecae99de444ff7bfe0aa4c7a95badcdd01fb12b795eec7ec852984eb", "received": [ "2026-09-15T00:00Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "The home page rebuilt around who is arriving and what is sold, with the insurance argument moved off it", "url": "index.html" }, { "what": "Make agents insurable — the whole insurance argument kept in full on a page of its own", "url": "insurance.html" }, { "what": "Licence to Operate — the middle rung, given the page the brief asked for", "url": "licence-to-operate.html" }, { "what": "You run agents today", "url": "for-corporate.html" }, { "what": "You are a founder", "url": "for-founders.html" }, { "what": "You are a startup", "url": "for-startups.html" }, { "what": "The menu restructured to seven top-level entries with Behaviour policy, Who it's for and Insurance as groups", "url": "index.html" } ], "not_done": [ "MULTILINGUAL DELIVERY FOR TIER 3 AND TIER 4. The brief asks for the £500 correction and the £1,500 session to be deliverable in the buyer's own language, since both have a person in the loop. Nothing is built and nothing is claimed anywhere on the site. It is recorded here so it is not lost.", "The four offerings are not yet listed on the site as offerings. The store publishes four tiers and two add-ons; pricing.html still describes the free/paid line rather than the ladder.", "An investor page. The brief names three audiences; the printed sheets, the store and the Lisbon page all carry a fourth (investors, or 'you back companies that do'). Three pages were built and the fourth is flagged on the home page as missing.", "The vault's per-audience views are described on the home page as the reason for audience pages, but no ABP vault is published on this site yet." ] }, { "id": "D11", "title": "The named professional, and the assignment of the individual who does the £1,500 review", "version": null, "type": "spoken brief, transcribed", "dated": "2026-09-22", "file": "assets/briefs/2026-09-22__transcript__the-named-professional-and-the-assignment.txt", "bytes": 1845, "sha256": "d376355f1747cc88986a623b91592bee5a5ec3b73f3ac838c43687f7a8fb53eb", "received": [ "2026-09-22T00:00Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "The reviewed level — the workflow, the expectations and the figures with their sources", "url": "abp-reviewed.html" }, { "what": "Who runs your review — the list, and the rule about what gets published", "url": "reviewers.html" }, { "what": "The first reviewer's page, every line read off a published page", "url": "reviewer-dinis-cruz.html" }, { "what": "The shape of a reviewer page, labelled a placeholder", "url": "reviewer-ciso-xyz.html" }, { "what": "The manifest the store can build its chooser from", "url": "reviewers.json" } ], "not_done": [ "A second, named reviewer: nothing about them is published until they have read their own page and agreed to it. The placeholder stands in the meantime.", "The chooser at checkout, which is the store's workflow rather than ours. The manifest is published for it; the arrangement is written up for the store team and nothing is agreed yet.", "Comments and testimonials. Asked for; none exist, and none will be composed here.", "Availability, a queue or a throughput number: none can be honoured yet, so the pages carry a status and the date it was confirmed instead.", "What the reviewer is paid — agreed in the brief and deliberately not published. A commercial term, and the lead's call." ] }, { "id": "D12", "title": "How it technically works: prompts first, then hope is not a control, then fit, integrate, graph, and the vault as provenance", "version": null, "type": "spoken brief, transcribed", "dated": "2026-09-24", "file": "assets/briefs/2026-09-24__transcript__how-it-technically-works.txt", "bytes": 2299, "sha256": "dadd026e61c5653ea7789c5f8e852900cc4d1bef8f852ea9846719bd9ba91791", "received": [ "2026-09-24T09:00Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "How it works, rebuilt in the order the memo gives: six steps with the status of each on the step", "url": "how-it-works.html" } ], "not_done": [ "Connectors to a customer's own control planes (identity provider, cloud IAM, proxy, CI). Described as built per engagement and productised as they mature; none exists as a product and the page says so.", "The graph's edges upward to risks and the board, and sideways to a customer's internal policies and documents. Standards edges run today; these are marked in design.", "Execution logs and evidence held in the vault beside the policy, as the memo's provenance store. Marked as where this goes, not as something that exists." ] }, { "id": "D13", "title": "UK support, in the open: consolidate what the UK offers a startup at go-to-market, ask people what is missing, and let other founders use it", "version": null, "type": "spoken brief, transcribed", "dated": "2026-09-24", "file": "assets/briefs/2026-09-24__transcript__uk-support-in-the-open.txt", "bytes": 2854, "sha256": "0c528b8c5736930b4a4a87b5e816f38af0758a2cd42eb1ad9df6e0904eceeecc", "received": [ "2026-09-24T12:00Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "UK support, in the open: 79 programmes, events, schemes and networks, each read on its official page and dated, with our own status on every row", "url": "uk-support.html" }, { "what": "The same register as data, for other founders to copy", "url": "uk-support.json" } ], "not_done": [ "Applying to anything. Every row says not started except Web Summit; which doors to try, starting with the Sovereign AI procurement challenge, is the lead's decision.", "A matching page on sgit.ai's partnerships section. That site is not in this repository; it can link here.", "Pages that refused an automated read (British Business Bank, london.gov.uk, blackhat.com, rsaconference.com, the Turing, the ABI) are marked unclear rather than filled from search results." ] }, { "id": "D14", "title": "Pilots do not stay in production: the business sees the gap between mandate and reach, at machine speed, and declines to sign for it", "version": null, "type": "spoken brief, transcribed", "dated": "2026-09-24", "file": "assets/briefs/2026-09-24__transcript__pilots-do-not-stay-in-production.txt", "bytes": 7036, "sha256": "762fd1ea85c2d701f304331d507374b7668ec41bae90788498c2221cd7ac6e53", "received": [ "2026-09-24T13:00Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "The pilot worked. Then somebody asked what else it could do: fourteen surveys and forecasts with the causes each names, seven cases, five variables the lethal trifecta leaves out, and what the data does not show", "url": "article-pilots-do-not-stay-in-production.html" } ], "not_done": [ "Data that tests the hypothesis. No survey found asks whether the gap between reach and mandate stopped sign-off; the article says so and asks readers for cases.", "The credit approval at two in the morning has no public source. It is told as an anecdote the author was told, and nothing more.", "The operating limit, headroom and hard maximum the memo recalls from an insurance vault were not found in the published demo vaults; the article presents the shape with invented numbers, labelled as such." ] }, { "id": "D15", "title": "Calendar edits cannot be undone: integrity risk, and why the edit permission is the dangerous one", "version": null, "type": "spoken brief, transcribed", "dated": "2026-09-24", "file": "assets/briefs/2026-09-24__transcript__calendar-edits-cannot-be-undone.txt", "bytes": 4998, "sha256": "0349fc94e7df55c387bd3a2a1e8adb413c0bd742759ff671ad47d7ef7979df84", "received": [ "2026-09-24T14:00Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "A deleted meeting comes back. An edited one does not: what Google keeps after each action, in its own words, for personal and Workspace accounts; three contradictions in Google's pages; and the draft Calendar rows of a behaviour policy", "url": "article-calendar-edits-cannot-be-undone.html" } ], "not_done": [ "The Calendar behaviour policies themselves. They are in draft; the article quotes their rows and says so.", "A restore for edited events. Google documents none for users; Workspace with Vault keeps earlier versions an admin can export, and the article says the memo's claim holds for personal accounts and needs that qualification for Workspace.", "The early-user conversation (calendar over email) is reported as a handful of conversations, not a survey." ] }, { "id": "D16", "title": "Business cases by risk reduced: the register without a security product and with it, from the operator to the board, starting with our own", "version": null, "type": "spoken brief, transcribed", "dated": "2026-09-24", "file": "assets/briefs/2026-09-24__transcript__business-case-by-risk-reduced.txt", "bytes": 6092, "sha256": "1dabf7f55b1cef3af6cacef62d5fcd0c46d0adb58ea96277cff8e7e79926dade", "received": [ "2026-09-24T15:00Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "Business cases, by the risk they change: the method, the rules, and twelve categories computed against the typical deployment", "url": "business-cases.html" }, { "what": "The first case, our own: an Agent Behaviour Policy retires two risks, names one hidden one, and lists three expectations as reductions, never retirements", "url": "business-case-riskmandate-abp.html" }, { "what": "The engine and a copy of the RiskGraph Explorer model with its provenance, so every register is computed rather than written", "url": "business-case/model/PROVENANCE.md" } ], "not_done": [ "The two named cases (agentgateway; Auth0 for AI Agents) are built as drafts, unlisted and marked noindex, until the lead decides to send them to the vendors.", "A semantic graph per product beyond the model's sixteen questions. A case is written as the answers a product changes; products that act on things the questions do not ask about cannot yet be expressed.", "Outreach to the vendors. It is the lead's, after review." ] }, { "id": "D17", "title": "OWASP and open source first: a semantic graph of OWASP, business cases for the open-source projects that reduce risk, and the companies built on open source", "version": null, "type": "spoken brief, transcribed", "dated": "2026-09-24", "file": "assets/briefs/2026-09-24__transcript__owasp-and-open-source-first.txt", "bytes": 3011, "sha256": "3686c72fb430e18cf55612574ae81e302b61475c4f207bec62a2bbd780a42ca8", "received": [ "2026-09-24T16:00Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "OWASP, as a graph: the foundation, four families, 52 projects and documents, 110 items of eleven lists by title, and the relationships OWASP states, joined to the risk model through the Agentic Top 10", "url": "owasp-graph.html" }, { "what": "Eighteen open-source business cases, OWASP first, each change backed by the project's own words and each with what adopting it takes", "url": "business-cases.html#cases" }, { "what": "Eighteen companies built on or beside an open-source project, with only the quotes that were checked word for word", "url": "business-cases.html#built-on-open-source" } ], "not_done": [ "Business cases for OWASP documents such as the Top 10s, ASVS and SAMM. They change what a team knows, not what an agent can reach, so they sit in the graph rather than as cases; the bridge shows which cases change the answers each Agentic Top 10 item depends on.", "Three Agentic Top 10 items touch nothing in the model: supply chain, memory and context, and agents talking to agents. The model has to grow for those.", "Outreach to OWASP projects, maintainers and the companies. The lead's, after review." ] }, { "id": "D18", "title": "A behaviour policy for everybody the lead talks to: a brief and a zip for a new agent, three vaults, and controls so nothing leaks across", "version": null, "type": "spoken brief, transcribed", "dated": "2026-09-24", "file": "assets/briefs/2026-09-24__transcript__abp-vaults-for-people-we-know.txt", "bytes": 1786, "sha256": "db4b98aef049e05716c3789105ce4a56e4e96fd0939774fd912bea329c8b7624", "received": [ "2026-09-24T17:00Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "The brief: three vaults (the existing app vault as the UI, a private keys vault, one vault per person), the controls against leaking across, the workflow, and what the feedback loop is meant to learn", "url": "admin/briefs/workflow__abp-vaults-for-people-we-know/index.html" }, { "what": "The pack for the new agent: instructions, templates, a scaffolder, a leak gate proved against six planted leaks, the site's own builder and every catalogue deployment, and one fictional example built and checked; kept in the repository at packs/dist/, not on the site", "url": "briefs.html" } ], "not_done": [ "The keys vault itself. The first session creates it and gives its key to the lead, so the steps are exercised once with the lead watching.", "A way for a person to send corrections from inside their vault. Today they reply to the lead; a form is a question for the app vault.", "Any person's vault. The pack has been run end to end on a fictional organisation only." ] }, { "id": "D19", "title": "An interview page, and a ChatGPT voice prompt to run it: a reusable pattern, and the first page, for a founder who knows UK events and marketing", "version": "sgit.ai v0.6.7", "type": "build brief from the sgit.ai site team, the page as served, kept byte for byte", "dated": "2026-09-24", "source_url": "https://sgit.ai/docs/briefs/riskmandate-interview-page-and-voice-prompt.html", "file": "assets/briefs/2026-09-24__sgit-brief__riskmandate-interview-page-and-voice-prompt.html.txt", "bytes": 25621, "sha256": "c4734574a34364f4e5837a05197a207430ed8429e8fa17bf64332f73219910c4", "received": [ "2026-09-24T18:00Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "The first interview page, with the six parts in the brief's order, a copy button that copies the prompt exactly, and nothing loaded or sent", "url": "interview-founder-marketing.html" }, { "what": "The pattern as a template: site/interviews/_template.json and scripts/site/build-interview-pages.mjs, so the next page is a JSON file", "url": "admin/agents/05-workflows/index.html" } ], "not_done": [ "Running the prompt once in ChatGPT voice mode. This agent has no ChatGPT account; the lead runs it and checks the summary has all ten sections.", "The prompt is the brief's, with two phrases corrected to what the site states: the home page names the CEO, CTO and CISO, not an insurer; and the Licence to Operate page makes the behaviour policy the instrument, not the evidence.", "Sending the summary back into a vault through a write-only lane, which the brief marks as later." ] }, { "id": "D20", "title": "Ask the ABP questions in the interview, and answer a LinkedIn role map as a stand-alone article: a generic framework, adjusted in every company, with accountability that holds on the way up", "version": null, "type": "spoken brief, transcribed", "dated": "2026-09-24", "file": "assets/briefs/2026-09-24__transcript__who-owns-what-in-ai-and-abp-interview-questions.txt", "bytes": 1252, "sha256": "2219d9a051791da925288f494be02fdbcf9a05709b12a70acc42ec4ff565d6ab", "received": [ "2026-09-24T20:00Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "The founder interview's first part: six questions on the Agent Behaviour Policy (its name, explaining it back after one hearing, what it adds, whether the market understands the problem, its value to the people who would use it, whether it should sell); thirty minutes, sixteen summary sections", "url": "interview-founder-marketing.html" }, { "what": "The article: the infographic's thirteen rows quoted and credited; what each company sets and what stays fixed; the middle column as a routing table and the organisation chart as the escalation path; one invented agent from eight ABP rows to the board; seven rules; six weeks; the model as nodes, edges with inverses and computations", "url": "article-who-owns-what-in-ai.html" } ], "not_done": [ "The LinkedIn post's own address and date. The article credits the infographic by title and author and says when it reached us; the link is the lead's to add.", "Running the longer interview prompt once in ChatGPT voice mode, and checking the summary has all sixteen sections.", "The seven roles the article needs and the model lacks (COO, CIO / Data, Legal, HR, Marketing, Sales, all employees), authority as data, and an engine that runs the clocks. The article says so in its section 10." ] }, { "id": "D21", "title": "Graph visualisations for the role-ownership article: the blast radius as the employee connects and disconnects, the flows played out, the evidence, and the settings a mail scope cannot narrow", "version": null, "type": "spoken brief, transcribed", "dated": "2026-09-24", "file": "assets/briefs/2026-09-24__transcript__graph-visualisations-for-the-role-ownership-article.txt", "bytes": 1957, "sha256": "524b59f30d4407f354272061f0e9c10e0ed45d5161d9ef19ad8007324a03bf5f", "received": [ "2026-09-24T23:00Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "Three figures drawn by the page's own script from the article's data: the blast radius, which plays the six weeks or takes the reader's own changes (connect, disconnect, boundaries, instructions) and recomputes the rows, the risks, their holders and the counts; the six weeks as a strip; and the ontology, every verb readable from both ends", "url": "article-who-owns-what-in-ai.html" }, { "what": "The instruction switch: the mandate becomes precise about the business process, every row in the gap gains an expectation, and unbounded excess does not move. The mail scope fact is cited from the Gmail record: three consent lines, each for the whole account", "url": "article-who-owns-what-in-ai.html" } ], "not_done": [ "Blast radius as a number. The figure shows which roles a risk reaches and who holds it; it does not size the consequence, because the article scores nothing.", "Real grants. The figure runs on the article's invented agent; wiring it to a published ABP vault, so a real grant drives the same picture, is the next step.", "The flows of evidence downward. A ceased risk cites its ABP version in text; the figure does not yet animate the evidence travelling back to the version." ] }, { "id": "D22", "title": "Risks always flow upwards: the roles above carry the aggregate, click a role to see what it holds, list every risk that holds now, and show the level of risk the business already accepts against the gap outside it", "version": null, "type": "spoken brief, transcribed", "dated": "2026-09-24", "file": "assets/briefs/2026-09-24__transcript__risks-flow-upwards-and-the-accepted-level.txt", "bytes": 4635, "sha256": "19de617c22e7226307413fbee045912c6af4fe56c453db8010d98209747c31a1", "received": [ "2026-09-24T23:30Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "The blast radius rebuilt: every live risk lights the path from its holder to the board, every role above carries a count, a role's panel lists what it holds, carries and is informed of, and a table lists every risk that holds at that moment with the chain it reaches, its consequence in words and whether it can be undone", "url": "article-who-owns-what-in-ai.html" }, { "what": "The accepted level: row 1 is the rep's own mail and establishes R0, inside the rep's authority and accepted on connecting; a new row 9, the shared sales inbox, is outside the mandate and establishes R7. The article's tables, counts and six weeks follow: nine rows, five in the gap, unbounded excess five, then four, then three", "url": "article-who-owns-what-in-ai.html" }, { "what": "Marketing, Product and HR leave the figure; Legal and the CFO are informed of every risk that touches customer data or a customer. A compound risk is drawn larger by the number of facts it needs", "url": "article-who-owns-what-in-ai.html" } ], "not_done": [ "A quantity of impact or potential loss on a risk. The figure gives each risk a consequence in words and an undo property, and no number: the article's own rule is that kinds of consequence do the work of a score, and a loss figure is the lead's decision.", "Other scenarios. The figure runs one agent; the lead said to keep it so for now." ] }, { "id": "D23", "title": "Red travels up the path, and a control does not make a risk zero: it leaves a green one. Enough controls, including a proxy in the middle, to make every path green; risks for the CFO and Legal", "version": null, "type": "spoken brief, transcribed", "dated": "2026-09-24", "file": "assets/briefs/2026-09-24__transcript__red-travels-up-and-controls-leave-green-risks.txt", "bytes": 2510, "sha256": "d47dbfda7dd3e53314dc72b41922ae0a723cfd13202722bd468488be5ff2560a", "received": [ "2026-09-25T00:30Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "The colour travels up: while anything below a role is unaccepted, that role's path, halo and count are red. Four more controls, one of them an execution proxy that carries out every write under the ABP's rules and bounds every write row at once; two fact controls, processing terms with the provider and the insurer's written answer, which end Legal's and the CFO's risks. Every control has a residual risk, green, inside its holder's authority, accepted when it appears; with every control on, every path to the board is green and nine green risks remain. A button does it in one click", "url": "article-who-owns-what-in-ai.html" }, { "what": "Two more held risks in the article: RL with Legal (customer mail goes to the model provider, and the notice does not say so) and RC with the CFO (nothing in the cover says whether an act of the agent as staff is covered). The tables, the six weeks and the strip follow: nine risks on day 0, nine open and none unaccepted on day 42", "url": "article-who-owns-what-in-ai.html" } ], "not_done": [ "The effectiveness of a control. The figure takes every control as working, as the lead said to for now; a control that is on and not working is a fact the ABP's evidence tiers exist to record, and it is not modelled here.", "Residual risks are drawn from a fixed list. In a real record they would be written by each holder in their own words when the control lands." ] }, { "id": "D24", "title": "An article on the risk propagation visualiser: user stories first, then the story, business analysis, and the technical analysis last, with captures of the figure at every step, each connection alone and combined, each control alone and all of them", "version": null, "type": "spoken brief, transcribed", "dated": "2026-09-25", "file": "assets/briefs/2026-09-25__transcript__an-article-on-the-risk-propagation-visualiser.txt", "bytes": 1110, "sha256": "f3849c17c9fb3a451428040b20b47921d738abab0224c49e961758cf7548ae65", "received": [ "2026-09-25T02:00Z" ], "duplicate_of": null, "status": "partly", "produced": [ { "what": "The article, in the order asked: seven user stories; the six weeks as a story; how to read the six bands, the two colours and a click; each connection alone (CRM, Mail, Calendar), then combined, where the trifecta appears; eight controls one at a time and then all of them, with a table of what each ends and leaves; the business analysis and five questions for a room; the technical analysis down to the one-way walk. Thirty-four captures, each taken by script in the state its caption names", "url": "article-risk-propagation-visualiser.html" } ], "not_done": [ "Captures of a real agent. Every picture is of the invented example; running the figure on a published ABP vault is the next step the article names.", "A capture per role for all thirteen of the map's roles: the article shows the ones the argument needs (the rep, Sales, Legal, the CIO, the CEO, the board), not each one." ] } ], "informal": [ { "id": "I1", "what": "Voice memo: put the Agent Behaviour Policy at the centre of the site. The ABP is the fundamental primitive; the grant is calculated from reality via digital twins; RiskMandate drives the sale of ABPs; corporate users, investors and founders are the audiences; and a security vendor whose controls reduce the delta has a business case we can make for them.", "how": "voice memo, transcribed in the thread", "dated": "2026-09-12", "status": "partly", "produced": [ { "what": "The direction brief", "url": "https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/direction__abp-at-the-centre.md" }, { "what": "The Agent Behaviour Policy page", "url": "abp.html" }, { "what": "Pricing, rebuilt around the store's four levels and linked to it (v1.19.0)", "url": "pricing.html" } ], "not_done": [ "The homepage's second panel, which should become \"the grant you did not enumerate\" and still does not." ] }, { "id": "I2", "what": "The Startup Summit exhibitor pack and the event site, for a strategy document and the materials to submit.", "how": "link, in the thread", "dated": "2026-09-11", "status": "processed", "produced": [ { "what": "The Lisbon 2026 page", "url": "summit.html" }, { "what": "The messaging and strategy briefs", "url": "https://github.com/Risk-Mandate/riskmandate.ai/tree/dev/docs/briefs" } ], "not_done": [] }, { "id": "I3", "what": "Hire a freelancer who also works through agents; give them a page and a first prompt focused on sales online and at Lisbon, and make their first task being a power user and tester of ABPs.", "how": "chat instruction", "dated": "2026-09-12", "status": "processed", "produced": [ { "what": "Working with us", "url": "work.html" }, { "what": "Brief B1 — power user and tester of Agent Behaviour Policies", "url": "work-abp-power-user.html" } ], "not_done": [ "Rate, hours, start date, escalation route, publication rules and repository access — deliberately absent because the page is public, and listed on it as owed." ] }, { "id": "I4", "what": "Preserve the Lab's thinking as it changes, and publish it as PDFs that can be sent through a chat app rather than linked.", "how": "chat instruction", "dated": "2026-09-12", "status": "processed", "produced": [ { "what": "Dated PDF editions of every Lab entry, and the whole Lab as one file", "url": "lab.html" }, { "what": "The edition register", "url": "lab-editions.json" } ], "not_done": [] }, { "id": "I5", "what": "Add a section answering the questions people actually ask in public — with the standing rule that the site never names who asked. Answers that outgrow a section get their own page.", "how": "chat instruction, with two public comments supplied as the first two questions", "dated": "2026-09-13", "status": "processed", "produced": [ { "what": "Questions — real questions, answered with a date and no name attached", "url": "questions.html" } ], "not_done": [ "A third-party screenshot convention. The instruction anticipated detailed examples and screenshots; screenshots of our own demos are fine, and screenshots of anybody else's product run into the no-probing and no-verdicts rules, so the Lab's drawn mockups remain the pattern until that is decided." ] }, { "id": "I6", "what": "Build a specific vault for Claude chat connected to a Gmail inbox; capture the connection screens (address obscured) in a folder for the connector; then map the whole customer workflow — the vault, its home page, the settings, the permissions, the prompts given to Claude — as the purchase workflow. Do not use the agent's name.", "how": "chat instruction with eight screenshots, 16 Sept", "dated": "2026-09-16", "status": "partly", "produced": [ { "what": "The template vault claude-gmail-connector: six rows, four measured on the deployer's own account, the evidence transcribed with the address redacted; pushed as vault oc433z3m and read live on its own page", "url": "abp-vault-claude-gmail-connector.html" }, { "what": "The customer's draft instance, anonymised, with a question on every mandate line (vaults-instances/)", "url": "https://github.com/Risk-Mandate/riskmandate.ai/tree/dev/vaults-instances" }, { "what": "The purchase workflow, run once: the brief", "url": "https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/workflow__buying-a-policy-for-claude-on-gmail.md" }, { "what": "The tile in the library, in Mail & files connectors, measured 4 of 6", "url": "agent-behaviour-policy.html" }, { "what": "The customer's draft instance pushed as a private vault (xjir6m0c); the key handed to the lead in the session, never on a page", "url": "https://github.com/Risk-Mandate/riskmandate.ai/tree/dev/vaults-instances" } ], "not_done": [ "The twelve screenshots as redacted image files in evidence/: they arrived inline and could not be edited from the session; the transcriptions stand in for them", "The customer's correction of the mandate, and the signed licence" ] }, { "id": "I7", "what": "Where is the new Claude + Gmail section; publish the vault (the read key makes the publish automatic); create a page in the admin section for the Gmail workflow brief, in a way that takes many briefs; and refactor the admin section to the structure, layout and capabilities of store.sgit.ai/admin/ and pt.newsroom.sgit.ai/newsroom/.", "how": "chat instruction, 16 Sept", "dated": "2026-09-16", "status": "processed", "produced": [ { "what": "The Gmail-connector vault pushed (oc433z3m) and read live on its page and in the library", "url": "abp-vault-claude-gmail-connector.html" }, { "what": "The admin console: a rail with counts, what needs the lead, the board, the memo queue, every brief as a page, the vaults, the records, the tooling — written by build-admin.mjs from the repository", "url": "admin/" }, { "what": "The Gmail workflow brief as a console page, one of every document under docs/", "url": "admin/briefs/workflow__buying-a-policy-for-claude-on-gmail/" } ], "not_done": [] }, { "id": "I8", "what": "Make the Gmail-connector vault oc433z3m the first MVP vault, with a solid end-to-end experience and the design template every other vault will reuse; global changes to the code vault are fine, and backwards compatibility with vaults nobody uses is not worth buying. Start from the store's V3 marketplace mock-up (the vault panel with its left navigation, the positioning of the vault) and the store's comparison table of what each level gets you, including the dual licence.", "how": "chat instruction with a PDF and a link, 16 Sept", "dated": "2026-09-16", "status": "partly", "produced": [ { "what": "The direction brief: what the mock-up says about the vault, the feature list read off the store's table, the dual licence as a file and a data block, the redesign of the reading app with a left navigation, what changes globally, four decisions for the lead, and the plan", "url": "https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/direction__mvp-vault-and-the-reading-app.md" }, { "what": "Built: the dual licence in the build and LICENCE.md; the v5 left-navigation reading app in a new app vault (vbhmlulo); oc433z3m rebuilt and re-pushed; the vault page repositioned (v1.24.0)", "url": "abp-vault-claude-gmail-connector.html" } ], "not_done": [ "The live host view of oc433z3m was still resolving the new sub-vault mount at merge; the vault data is verified correct and the renderer proven via a static preview" ] }, { "id": "I9", "what": "Voice memo: the material to add to the Gmail-connector vault. Go back to first principles on the grant and map its side effects: a grant is the union of capabilities, and the reader needs the consequences, each explicit and each tied to the asset that makes it real (secrets in mail, reset links, mail from others); count the routes out; the authorisation to read is not the authorisation to forward; harvesting, mass send and what makes a platform suspend an account; mass change to the inbox's filing; realistic scenarios on the mandate; standards as mini-graphs in the vault; the vault navigated as a website with materials per audience.", "how": "voice memo (Otter transcript, about nine minutes), 16 Sept", "dated": "2026-09-16", "status": "partly", "produced": [ { "what": "The direction brief: the memo in its own order, where the vault already is, the consequence layer (assets, consequences, standards mini-graphs, the triple), eleven first consequences for oc433z3m, what it settles for the MVP brief, the build order, what needs the lead", "url": "https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/direction__consequences-assets-and-the-vault-as-a-website.md" }, { "what": "Task briefs T11 (consequences and assets) and T12 (standards mini-graphs); T04 amended with Who are you?", "url": "https://github.com/Risk-Mandate/riskmandate.ai/tree/dev/.claude/briefs" }, { "what": "Built: assets.json and consequences.json for oc433z3m (eleven consequences, six assets, two routes out), CONSEQUENCES.md derived, the What follows view, the standards mini-graphs, two scenarios (v1.24.0)", "url": "abp-vault-claude-gmail-connector.html" } ], "not_done": [ "The research list documented from Google's pages — sending limits, suspension, the modify tools — is still open (T05/research-vault)", "Who are you? ships as a live filter; the authored per-audience views and projections remain T04" ] }, { "id": "I10", "what": "Voice memo: the multi-layer grant, and the vault opens on the audience. Map three storeys — what the Google OAuth permission allows, what Anthropic's connector exposes to the chat (code, which can have bugs and can change at any minute's notice), and what normal usage and Claude's own guardrails allow — then the layer above, which is what becomes possible with those mechanical capabilities. Use this vault as the case study and change whatever we want on it. Find good ways to visualise it, because that is where the gaps are and the question is whether people are aware. The vendor's own restriction is a control we can reverse engineer and make the business case for. On the vault: three audience folders (executive, operator, risk) as the main section of the left menu, the executive view being the whole thing in one line, a couple of diagrams and a couple of paragraphs; keep the packs and the how-to-use, but not centre stage.", "how": "voice memo, transcribed in the thread, 16 Sept", "dated": "2026-09-16", "status": "received", "produced": [ { "what": "The direction brief: the four storeys (permitted, exposed, practised, consequences), latent capability as the gap between the first two, the barrier gaining a holder and whether it moves without you, the audience spine, the build order and four decisions", "url": "https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/direction__the-grant-has-storeys-and-the-vault-opens-on-the-audience.md" } ], "not_done": [ "Storey one for this shape (data/permitted.json, the scopes and the methods they unlock)", "held_by and moves_without_you on every barrier; splitting not_reachable into bounded and not exposed", "The audience spine in the reading app, with the executive view authored", "The storeys drawn as one diagram", "Waiting on the lead: whether `grant` keeps naming storey two, and the audience names" ] }, { "id": "I11", "what": "Voice memo: the next phase is users. The MVP is nailed and the vaults are more than most first users need, so find many smaller examples where a policy adds value now. The abp.sgit.ai/gmail prompt workflow - four steps, thirteen prompts, about twenty minutes - is the shareable artefact, already sent to a real group. KPIs and OKRs are the number of users who run the prompts and the number who create a policy; the pricing ladder exists, what is missing is a bigger free funnel above it. Nobody buys a full policy until they have made a smaller one. And the second frontier, beyond technical permissions: consequences in the user's own terms (relabelling destroys a mailbox's information architecture, marking read things unread, too many sends, drafts or moves), which messages should and should not be read or replied to, prompt injection, and rules of engagement for a single session.", "how": "voice memo, transcribed in the thread, with a screenshot of the Agentics Foundation London group, 21 Sept", "dated": "2026-09-21", "status": "received", "produced": [ { "what": "The direction brief: the free rung below the ladder, why a small policy is not a small vault, the six things the memo names beyond permissions mapped against the model, the build order and five decisions", "url": "https://github.com/Risk-Mandate/riskmandate.ai/blob/dev/docs/briefs/direction__the-next-phase-is-users.md" }, { "what": "Try it - the seventh top-level section: the four steps, what you end up with, what it honestly is not, the four layers, and where to say it broke", "url": "try-it.html" } ], "not_done": [ "A prompt workflow per shape we already have (T13) - the Gmail one is published at abp.sgit.ai and the other fifteen have only MAP-A-GRANT.md, inside the vault", "A feedback path from the workflow's last step that survives a stranger", "What we count, and where it is published - the site collects nothing, so the honest measure needs the lead", "Volume and instances on the consequence layer (T14): the relabelling, the mass send, the draft flood, the mailbox's state as an asset", "The session-scoped mandate, and the instance-scoped mandate - proposed as a Lab ask rather than a change to the published vocabulary", "Waiting on the lead: the seventh menu slot, what is counted, whether a user-made policy gets published, and how far the free rung goes" ] } ] }