## A real policy on the front page, and the audience pages reach the store

**The hero card was an invented company with a score on it.** *Northgate Financial, 62 / 100,
Level L3 — Attested.* It sat beside a page saying we do not compute a number, on a site whose first
rule is that a behaviour policy carries no score, at a point where fifteen real policies exist and
can be read live. It is gone.

In its place is [Claude Code on the web, with one repository attached](abp-vault-claude-code-web.html)
— a template vault this site is actually maintained from. Four numbers, and each one comes out of
the vault's own `data/delta.json` rather than out of somebody's head: **15** capabilities it can
reach, **6** you asked for, **9** it can do that you did not ask, **7** with nothing real in the way.
The card links to the policy it reports, so the claim is one click from its evidence.

**And a test holds it there.** The card's four numbers are checked against `aligned + excess`,
`aligned + shortfall`, `excess` and `unbounded_excess` in the vault's delta, and the test fails if a
rebuild moves a count and leaves the front page stating the old one. It also refuses a rendered score
on that card. A number on a home page that nothing verifies is how the last one survived.

The `<rm-index-card>` component and its sample data have left the home page entirely; they live on
[the insurance page](insurance.html), where an illustrated design is what is being shown and says so.

**The audience pages now reach the checkout.** [You run agents today](for-corporate.html),
[you are a founder](for-founders.html), [you are a startup](for-startups.html) and
[Licence to Operate](licence-to-operate.html) each carry the four levels with the levels that fit
that reader first, taken from the store's own mapping of buyer to level rather than invented here.
Each says what the seam does: the store takes the order and hands you back to one page per level,
and at level one that page **is** the download — the zip, its size, its sha256 and a check that runs
in your own browser. Each also says that the payment rails are not built and that every checkout
button on the store says so rather than looking live.

**Checked while wiring it.** The store's catalogue carries sixteen entries against our fifteen
vaults; the sixteenth is `your-own`, the *something not on the list* route, not a shape we are
missing. The handover contract the store's walkthrough asserts —
`riskmandate.ai/paid-t[1-4].html?order=SG-XXXXXX` with `&shape=` on level one and not on level
three — is what our four pages already implement.