Pilot intake

Operator Review Intake

Operator-side checklist for issuing a bounded private key. The public site does not submit this data, store visitor PII, collect tokens or create accounts.

falsepublic accounts

falsepublic submit

falsetoken collection

falsesecret collection

Review Scope

Required Fields

ID	Field	Required	Purpose
`organization`	Organization name	required:true	research context and operator record
`billing_contact`	Billing/security contact	required:true	manual pilot coordination, token delivery and rotation planning
`workflow`	Intended workflow	required:true	scope the pilot and avoid unused permissions
`requested_scopes`	Requested scopes	required:true	least-privilege key issuance
`expected_volume`	Expected request volume	required:true	quota sizing before any recurring access
`token_custody`	Token custody owner	required:true	rotation, revocation and incident response
`legal_acknowledgement`	Research-screen acknowledgement	required:true	13FLOW is a research screen, not investment advice, not a performance claim; private keys remain operator-reviewed and the public surface stays read-only.

Pre-Issue Checks

Run public smoke and Pro workspace smoke on the deployed SHA.
Confirm /api/security-posture status is controlled_pilot_security_ready.
Confirm requested scopes are least-privilege and exclude admin:read for customers.
Set expiry and rotation_due_at before token delivery.
Record key id after the first successful /api/pro/v1/status call.

Privacy Boundary

storage:none required; the public page renders a copyable template only

archive only the final operator note needed for pilot administration and legal evidence

recommended_channel=operator-selected secure channel outside the public site

Operator Note Template

13FLOW PILOT INTAKE
package: <Open Research Surface>
organization: <legal or operating name>
billing_contact: <business contact>
security_contact: <optional business contact>
workflow: <agent | notebook | dashboard | research_ops | internal pipeline>
requested_scopes: <funds:read quality:read workspace:write>
expected_volume: <per minute / per day / burst profile>
token_delivery_channel: <secure channel>
rotation_due_at: <YYYY-MM-DD>
security_requirements: <IP allow-listing / DPA / retention / none>
boundary_ack: research screen; not investment advice; no public account or SLA
operator_decision: <decline | issue bounded pilot key | request more info>

Evidence Links

Boundary

The sandbox key is instant. Operator review is required before any production key is issued. This page is not a contract and not investment advice.

Machine-readable pilot intake Markdown export Trust artifact Security posture