# 13FLOW Pilot Intake

Generated: 2026-07-16T01:48:06+00:00
Git SHA: d002a2dd2ffce5d0fe1d0e8a1f742e18c3df0cfa
Status: operator_review_required
Read-only surface: true
Public account creation: false
Public form submission: false

## Privacy Boundary

- Server-side PII storage: false
- Token collection: false
- Secret collection: false
- Recommended channel: operator-selected secure channel outside the public site

## Required Fields

- organization: Organization name (required)
- billing_contact: Billing/security contact (required; sensitive=business_contact)
- workflow: Intended workflow (required)
- requested_scopes: Requested scopes (required)
- expected_volume: Expected request volume (required)
- token_custody: Token custody owner (required)
- legal_acknowledgement: Research-screen acknowledgement (required)

## Operator Note Template

```text
13FLOW PILOT INTAKE
package: <Open Research Surface>
organization: <legal or operating name>
billing_contact: <business contact>
security_contact: <optional business contact>
workflow: <agent | notebook | dashboard | research_ops | internal pipeline>
requested_scopes: <funds:read quality:read workspace:write>
expected_volume: <per minute / per day / burst profile>
token_delivery_channel: <secure channel>
rotation_due_at: <YYYY-MM-DD>
security_requirements: <IP allow-listing / DPA / retention / none>
boundary_ack: research screen; not investment advice; no public account or SLA
operator_decision: <decline | issue bounded pilot key | request more info>
```

## Pre-Issue Checks

- Run public smoke and Pro workspace smoke on the deployed SHA.
- Confirm /api/security-posture status is controlled_pilot_security_ready.
- Confirm requested scopes are least-privilege and exclude admin:read for customers.
- Set expiry and rotation_due_at before token delivery.
- Record key id after the first successful /api/pro/v1/status call.

## Evidence Links

- [Sandbox](/sandbox)
- [Pilot intake page](/pilot)
- [Pilot intake Markdown](/api/pilot-intake.md)
- [Research pack](/buyer-pack)
- [Security posture](/security)
- [Research readiness](/readiness)