{"app":"13flow","core_v1_boundary":{"change_rule":"prefer extending existing contracts over adding new surfaces","keep_out":["public account or payment collection","public prospect PII persistence","automated billing or CRM workflow","production x402 settlement","validated alpha, expected-return or probability claims","new dashboards when existing admin, buyer, onboarding or workspace surfaces can carry the need"],"operator_review_required":true,"pro_boundary":{"default_customer_scopes":["funds:read","quality:read","workspace:write"],"forbidden_customer_scopes":["admin:read"],"operator_issued_keys":true,"tokens_included_in_payloads":false,"web_worker_creates_tokens":false},"public_open_build":{"browser_accounts":false,"public_offer_usd_per_month":19,"public_submission_endpoint":false,"read_only":true,"sandbox_only_key":true,"self_serve_checkout":false,"token_collection":false},"required_gates":["pytest offline suite","public smoke","Pro workspace smoke","Pro key lifecycle smoke","encrypted Pro DB backup restore verification"],"routine_publication":{"manual_13f_review_required":false,"mode":"automated_fail_closed","signal_rule":"only trusted funds are eligible for scores, consensus and watchlist signals"},"sales_motion":"controlled_pilot_only","source":"docs/CORE_V1_BOUNDARY.md","status":"controlled_pilot_core_v1"},"default_limits":{"max_moves_per_fund_detail":2000,"max_positions_per_fund_detail":1000,"sandbox_rate_per_day":200,"sandbox_rate_per_min":20},"evidence_links":[{"href":"/sandbox","label":"Sandbox"},{"href":"/pilot","label":"Pilot intake page"},{"href":"/api/pilot-intake.md","label":"Pilot intake Markdown"},{"href":"/buyer-pack","label":"Research pack"},{"href":"/security","label":"Security posture"},{"href":"/readiness","label":"Research readiness"}],"generated_at":"2026-07-16T01:47:05+00:00","git_sha":"d002a2dd2ffce5d0fe1d0e8a1f742e18c3df0cfa","operator_note_schema":{"billing_contact":"required business contact","boundary_ack":"research screen; no investment advice; no public account or SLA","expected_volume":"requests per minute, requests per day, burst profile","organization":"required","package":"","requested_scopes":"least privilege; no admin:read for customers","rotation_due_at":"set before key delivery","security_requirements":"IP allow-listing, DPA, retention or custom terms if needed","token_delivery_channel":"secure channel selected by operator","workflow":"research desk | data pipeline | MCP agent | monitoring | internal dashboard"},"operator_note_template":["13FLOW PILOT INTAKE","package: <Open Research Surface>","organization: <legal or operating name>","billing_contact: <business contact>","security_contact: <optional business contact>","workflow: <agent | notebook | dashboard | research_ops | internal pipeline>","requested_scopes: <funds:read quality:read workspace:write>","expected_volume: <per minute / per day / burst profile>","token_delivery_channel: <secure channel>","rotation_due_at: <YYYY-MM-DD>","security_requirements: <IP allow-listing / DPA / retention / none>","boundary_ack: research screen; not investment advice; no public account or SLA","operator_decision: <decline | issue bounded pilot key | request more info>"],"pilot_packages":[],"pre_issue_checks":["Run public smoke and Pro workspace smoke on the deployed SHA.","Confirm /api/security-posture status is controlled_pilot_security_ready.","Confirm requested scopes are least-privilege and exclude admin:read for customers.","Set expiry and rotation_due_at before token delivery.","Record key id after the first successful /api/pro/v1/status call."],"privacy":{"browser_storage":"none required; the public page renders a copyable template only","recommended_channel":"operator-selected secure channel outside the public site","retention_note":"archive only the final operator note needed for pilot administration and legal evidence","secret_collection":false,"server_side_pii_storage":false,"token_collection":false},"public_form_submission":false,"public_submission_endpoint":null,"required_fields":[{"id":"organization","label":"Organization name","purpose":"research context and operator record","required":true,"sensitive":false},{"id":"billing_contact","label":"Billing/security contact","purpose":"manual pilot coordination, token delivery and rotation planning","required":true,"sensitive":"business_contact"},{"allowed_values":["research desk","data pipeline","MCP agent","monitoring","internal dashboard"],"id":"workflow","label":"Intended workflow","purpose":"scope the pilot and avoid unused permissions","required":true},{"allowed_values":["funds:read","quality:read","workspace:write","admin:read"],"id":"requested_scopes","label":"Requested scopes","purpose":"least-privilege key issuance","required":true},{"default_limits":{"max_moves_per_fund_detail":2000,"max_positions_per_fund_detail":1000,"sandbox_rate_per_day":200,"sandbox_rate_per_min":20},"id":"expected_volume","label":"Expected request volume","purpose":"quota sizing before any recurring access","required":true},{"id":"token_custody","label":"Token custody owner","purpose":"rotation, revocation and incident response","required":true},{"id":"legal_acknowledgement","label":"Research-screen acknowledgement","must_acknowledge":"13FLOW is a research screen, not investment advice, not a performance claim; private keys remain operator-reviewed and the public surface stays read-only.","required":true}],"sales_motion":"open_research_first","self_serve_checkout":false,"status":"operator_review_required"}