KINETIC · ONE PLATFORM · THE VERB CODEX
Every verb. The signal it mints. The fear it removes.
Full panel, Stripe and Palantir co-chairing. 22 verbs across 9 namespaces. Status: 3 live, the rest already exist as processes, events, or locked ideation.
STRIPE · CO-CHAIR
A verb ships when it has three things: an idempotent output schema, a meter unit, and a webhook. The catalog IS the pricing page.
PALANTIR · CO-CHAIR
Every output must resolve to subject, actor, or edge in one ontology, or it does not ship. Verbs are how the graph grows.
INQTEL
Split the catalog on one line: verbs that READ the world are open and metered. Verbs that TOUCH the world stay operator-gated forever.
APPLE
Grammar is the product: subject.verb, always. Nine namespaces is the ceiling. Say no to verb number 25.
VERCEL
Ship read verbs to MCP first. The ephemeral app layer is distribution you never have to build or maintain.
LUX
Price the fear removed, never the compute. A wallet screen that stops one bad wire is worth 10,000x its API cost.
THE 360 BLUEPRINT · GROUND-UP ARCHITECTURE · LOCKED SECTION BY SECTION WITH M1K3D0W
| ROUND | SECTION | THE QUESTION IT ANSWERS | STATUS |
|---|
| R0 | Physics | 11 objects · verb→data→signal→pack→case · subject abstraction · source classes · exhaust | LOCKED 08·03 |
| R1 | Greenfield verdict | Start fresh or evolve? What code transplants, what rebuilds, what retires | IN PANEL — BELOW |
| R2 | The Ledger | Schema of the 11 objects, append-only rules, tenancy walls, source-class tags | QUEUED |
| R3 | Verb runtime | Registry, closed fleet, verb contract, how a new verb ships in a day | QUEUED |
| R4 | Synthesis & exhaust | Actor resolution, edges, patterns, signal minting — the only layer with the full graph | QUEUED |
| R5 | Surfaces | Desk shell, Anvil API, MCP, webhooks, packs — all thin, all reading one seam | QUEUED |
| R6 | Meter & money | 4 meters on the synthesis seam, entitlements, the invoice that writes itself | QUEUED |
| R7 | Trust fabric | Auth, gates, provenance chain, court-readiness, why matter.* stays operator-gated | QUEUED |
| R8 | Partner rails | Data · execution · authority · expertise-as-process, all behind the verb | QUEUED |
| R9 | Divisions & presets | 10 buyer types as 4-value presets, seeded plays as pre-seeded desks | QUEUED |
| R10 | Build sequence | Repo plan, milestones, cutover doctrine: nothing migrates, surfaces re-point | QUEUED |
R1 · GREENFIELD VERDICT · WHY START FRESH IS RIGHT — AND THE ONE RULE THAT KEEPS IT SAFE
STRIPE · CO-CHAIR
Rewrites die when they break contracts. Yours survive: the verb API, the taxonomy, the meters are all seams. Keep the contract byte-stable, replace everything behind it.
PALANTIR · CO-CHAIR
This is not a rewrite. Nothing you have today stores actors, edges, actions, or outcomes. You are giving the ontology its first home. Greenfield is the honest name for that.
INQTEL
Append-only, source-class tags, and custody must be birth properties of the ledger. You cannot retrofit provenance into a mutable store and take it to court.
VERCEL
One monorepo. Ledger ships dark next to prod; verbs keep running on Anvil untouched; every PR gets a preview. Cutover is a re-point, not a migration.
APPLE
The danger is the second-system: rebuilding is permission to add. Rule: the ledger is the only net-new code. Everything else must justify itself as a port.
LUX
Value milestone is not feature parity. It is the first exhaust signal minted end-to-end — the day one customer's run enriches another's. Sequence everything to hit that soonest.
Synthesized: start fresh — because the expensive parts already transplant. The verbs, taxonomy, and billing spine were built behind seams; the ledger they need has never existed. Anvil stays live in prod while the new spine grows beside it, then surfaces re-point. Guardrail: ledger is the only net-new code.
WHAT CROSSES OVER · THE CODE INVENTORY, DISPOSITION BY DISPOSITION
| ASSET | WHAT IT IS TODAY | DISPOSITION | WHY |
|---|
| taxonomy v2 | canonical provider-neutral element tree, live on all 3 verbs, zero vendor strings | COPY AS-IS | the output contract; already the hardest thing to get right |
| verb workers | anvil-tracer fleet: crypto.trace / crypto.monitor / impersonation detector + Elliptic adapter | COPY AS-IS | workers rebind to the new queue; prod-proven, E2E-verified |
| sanitizer + signing | recursive provider scrubber, signed webhooks, source-privacy smoke tests | COPY AS-IS | trust fabric that already passed hostile review |
| anvil-api protocol plane | 45 ops, 23 webhooks, jobs, idempotency, scopes, usage | PORT | contract stays byte-stable; internals re-point to the ledger |
| billing spine | catalog-as-code, append-only stripe_events, entitlement fan-out | PORT | meter moves to the synthesis seam; event store pattern is already correct |
| Desk shell | kinetic-desk app: hyperminimal UI, Better Auth, invites, vault | REBUILD THIN | surfaces are disposable; keep the design system and auth pattern, drop the private store |
| Dragnet · VEIL · screening · LODESTAR | live processes with their own consoles and scripts | REBUILD AS VERBS | processes become verbs + presets; their consoles become Desk views |
| standalone consoles | Dragnet console, Nexus mock, portal experiments, per-client desks | RETIRE | every surface that doesn't read the seam dies at cutover |
OPEN DECISIONS · ROUND 1 · ANSWER IN THREAD, PAGE LOCKS ON YOUR WORD
1 · Verdict — a) ⭐ greenfield monorepo, Anvil untouched in prod, transplant per table above · b) evolve anvil-api in place · c) total rewrite including verbs
2 · Round order — a) ⭐ foundation-up as listed (R2→R10) · b) money first (pull Meter to R3) · c) your order
3 · Cadence — a) ⭐ one section per round: panel drafts → you answer 1a2b → page locks green · b) two per round · c) draft all, one big review
THE FLOW · VERB RUN TO DELIVERED OUTPUT · JUST LIKE STRIPE
01
DispatchRUN created
POST /v1/jobs {verb:"crypto.trace", subject:{...}} with idempotency key. Entitlement + meter checked at the door; instant 202 {job_id, status:queued}. Unentitled verb returns 422 verb_not_available.
Stripe parallel · creating a PaymentIntent: instant object back, work continues async, card declined at the door
02
Claim + executeRUN running
Closed fleet claims the job. Tools fire: OSINT pulls, licensed feeds, customer evidence joined from the Vault. Server stays closed; runners never exposed.
Stripe parallel · the network hop nobody sees: issuer, rails, risk checks
03
Raw dataDATA (internal)
Provider outputs land and are sanitized. Never shown, never sold, never leaves the engine. Each fact tagged by source class for court.
Stripe parallel · raw network responses: customers never see ISO 8583
04
CanonicalizeRUN succeeded
Taxonomy v2: one provider-neutral element tree (elements, nodes, edges, stable IDs). This IS the Anvil-tier output. Webhook job.succeeded fires.
Stripe parallel · the clean Charge object: one schema no matter which rail ran it
05
SynthesizeSIGNALS minted
Engine joins the exhaust: actors resolved, edges drawn, patterns applied, severity graded. Signals minted append-only. Desk tier only; structurally impossible on raw API output.
Stripe parallel · Radar: the score you cannot compute yourself because you do not have everyone's traffic
06
Deliverfan-out below
The user chooses where output lands: Desk, webhook, API, MCP, or an assembled pack. Same objects on every surface.
Stripe parallel · Dashboard, webhooks, API, Sigma: one ledger, many windows
07
Watch + meterWATCH · OUTCOME
If cadence is set the verb re-runs; only deltas mint new signals (MX dropped = an Outcome). Meter records usage at dispatch and at read; the invoice writes itself.
Stripe parallel · subscriptions + balance transactions: recurring by construction, billed from the ledger
DESK
Signal cards land in the Receiver, evidence files into the Vault, the subject timeline updates live
WEBHOOK
signal.minted and movement events to their endpoint, signed
API
GET the run, query signals by subject. Structured JSON, stable IDs, source-class tags
MCP
Read-only resolvers: their AI answers from your signals. Never dispatches
PACK
Signals assembled into a Brief or sealed Dossier, delivered to Vault or counsel
FIRST PRINCIPLES · WHAT WE FOLLOW, COINCIDE WITH, AND GUARDRAIL WITH · CITED
APPEND-ONLY LEDGER
Immutability + double-entry
Pacioli, Summa de Arithmetica, 1494 · Helland, "Immutability Changes Everything," CIDR 2015
Nothing is edited, only appended. Disputes are settled by replaying history, exactly how a balance sheet defends itself.
ENTITLEMENT AT THE DOOR · READ/WORLD GATE
Complete mediation + least privilege
Saltzer & Schroeder, "The Protection of Information in Computer Systems," Proc. IEEE, 1975
Every dispatch is checked, no path around the check. Verbs that touch the world stay operator-gated; MCP reads and never dispatches.
CANONICAL TAXONOMY
Information hiding + data independence
Parnas, CACM 1972 · Codd, "A Relational Model of Data," CACM 1970
Customers bind to our schema, never to providers. Swapping Elliptic for a rival breaks nobody: the interface hides the decision.
ACTOR ATTRIBUTION
Probabilistic record linkage
Fellegi & Sunter, "A Theory for Record Linkage," JASA, 1969
Entity resolution is scored, never asserted flat. An actor cluster carries a match confidence, and it stays in the engine, not the customer UI.
GRADED SEVERITY
Estimative language + analytic standards
Kent, "Words of Estimative Probability," 1964 · ODNI ICD 203, Analytic Standards, rev. 2015
A fixed severity vocabulary, never inflated. Facts stated, advice never given. The same discipline the IC grades its own product against.
SYNTHESIS DISCIPLINE
Analysis of competing hypotheses
Heuer, Psychology of Intelligence Analysis, CIA CSI, 1999
A signal ships only if it survives the alternative explanation. Parked domain or armed storefront: the synthesis must eliminate the innocent reading first.
SOURCE-CLASS TAGS · HASHED PACKS
Provenance + evidentiary admissibility
W3C PROV-DM, 2013 · Daubert v. Merrell Dow, 509 U.S. 579 (1993) · FRE 902(13)-(14), 2017
Every fact carries its origin; packs are hashed and timestamped. Court-ready by construction, not by cleanup.
WHY WATCHING WORKS
Routine activity theory
Cohen & Felson, "Social Change and Crime Rate Trends," Am. Soc. Rev., 1979
Crime needs an offender, a target, and an absent guardian. The watch is the guardian: we remove the third condition and the economics of the scam collapse.
CASE TO PATTERN
Adversary behavior taxonomy
MITRE ATT&CK, 2015
Actors rotate infrastructure but keep their behavior. Cracked schemes are minted as detectors and applied fleet-wide, the way TTPs outlive any single IOC.
WATCH CADENCE · DELTAS ONLY
Feedback control + decision tempo
Wiener, Cybernetics, 1948 · Boyd, OODA, "Patterns of Conflict," 1976-86
Alert on change, never on state. Enforcement is won on tempo: the freeze window is an OODA race against the mule network.
EXHAUST MOAT
Increasing returns + data network effects
Arthur, "Increasing Returns and the New World of Business," HBR, 1996 · Metcalfe's law
Every case raises the value of every other. Exhaust is never sold raw: it compounds inside synthesis, where it cannot be copied out.
NINE NAMESPACES · FOUR METERS
Parsimony
William of Ockham, c. 1320 · Unix philosophy, McIlroy, 1978
Entities are not multiplied without necessity. Small composable verbs, a ceiling on namespaces, four meter shapes, fewer names every quarter.
1320 Ockham1494 Pacioli1948 Wiener1964 Kent1969 Fellegi-Sunter1970 Codd1972 Parnas1975 Saltzer-Schroeder1979 Cohen-Felson1993 Daubert1996 Arthur1999 Heuer2013 W3C PROV2015 Helland · ATT&CK · ICD 2032017 FRE 902(14)
CRYPTO · FUNDS AND WALLETS
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| crypto.trace | LIVE | Canonical element tree: nodes, edges, hops, endpoints. Provider-neutral, stable IDs | custodial endpoint reached · mixer entry · exposure concentration | Firm, principal: "where did the money go" answered in minutes, in evidence grammar |
| crypto.monitor | LIVE | Standing watch on addresses, movement webhooks | funds moved · dormancy broke · threshold crossed | Firm: never miss the one moment a freeze is possible |
| crypto.screen | PARKED | Risk verdict on a wallet before money moves | sanctioned exposure · mixer proximity · scam-cluster contact | Principal, fund: the wire that never happened. Cheapest insurance that exists |
| crypto.attribute | NEW · EXHAUST | Wallet resolved to an operator cluster | named actor cluster · infrastructure overlap | Everyone: turns "where" into "who". Desk tier only, cannot be replicated on raw API |
| crypto.expose | NEW | Net exposure map across a portfolio of addresses | tainted inflow share · counterparty concentration | Fund, family office: portfolio-grade answer to "how dirty is our book" |
IMPERSONATION · BRAND AND DOMAIN
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| impersonation.scan | PROCESS · DRAGNET | Full permutation sweep: registered, hostile, mail-armed, live commerce | live storefront on your brand · shared money rail · operator cluster | Brand: the free snapshot that opens every deal. PopSockets ran on this |
| impersonation.monitor | LIVE | Standing registry watch, movement webhooks | new registration · MX armed · store went live · MX dropped | Brand: the watch that keeps the snapshot alive. Recurring by nature |
SANCTIONS · LISTS AND PARTIES
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| sanctions.screen | PROCESS · LIVE DESK | Multi-list verdict with per-list hits and near-matches | match · near-match · clear with conditions | Principal, family office: screen before the handshake. Runs by hand today on a private desk |
| sanctions.watch | NEW | Re-screen on every list update | counterparty newly listed | Fund, firm: yesterday's clear is today's hit. Nobody re-screens manually |
ENTITY · COUNTERPARTIES
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| entity.screen | PROCESS · DESK V1 | Corporate graph: officers, filings, litigation, adverse media | shell indicators · undisclosed control · litigation trail | Deal principal: the Desk wedge itself. Commodity, energy, maritime |
| entity.resolve | NEW | Beneficial-owner path behind a name | nominee pattern · control chain resolved | Family office, fund: who you are actually in business with |
LEAK · CREATORS AND TALENT
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| leak.scan | BUILT · VEIL | Index of leaked and reuploaded content per identity | new leak site · reupload wave · monetized theft | Creator, agency: per protected identity. Portal exists, unsold |
| leak.monitor | BUILT · VEIL | Continuous re-scan and takedown-state tracking | content returned · takedown held | Creator: the watch is the subscription |
JUDGMENT · CREDITORS
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| judgment.locate | PIPELINE · LODESTAR | Debtor asset and wallet map | reachable assets · wallet linkage · income trail | Creditor, receiver: paper is worthless until this verb runs |
| judgment.monitor | NEW | Standing debtor watch | asset moved · new filing · new wallet activity | Creditor: enforcement timing is everything |
EVIDENCE · COURT-GRADE TRANSFORMS
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| evidence.assemble | PARKED · FIRM-SCALE | Exhibit-ready packet: hashed, timestamped, sourced | transformation verb: signals in, exhibits out | Firm, public office: the deliverable that goes in front of a judge |
| evidence.seal | SPEC'D · WRIT | Sealed court-grade dossier, chain of custody | apex transformation, qualification-gated | Qualified matters: the top of the price ladder |
ACTOR · EXHAUST TIER, DESK ONLY, NEVER RAW API
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| actor.profile | NEW · EXHAUST | Operator cluster dossier: infra, rails, cross-brand footprint | your attacker in full · 40 domains on other brands | Everyone: the enrichment nobody can rebuild on raw output. The renewal engine |
| actor.watch | NEW · EXHAUST | Alert when your actor moves anywhere on the graph | actor resurfaced · new rail, new brand | Brand, firm: cross-client early warning. Pure network effect |
MATTER · TOUCHES THE WORLD · OPERATOR-GATED FOREVER · NEVER MCP, NEVER SELF-SERVE
| VERB | STATUS | OUTPUT OBJECT | SIGNALS IT MINTS | VALUE TO THE USER |
|---|
| matter.freeze | IDEATED · GATED | Freeze request package dispatched to VASPs and processors | freeze honored · funds held (an OUTCOME) | Firm, public office: the verb the whole company points at |
| matter.demand | IDEATED · GATED | Demand letter package with evidence attached | response received · settlement opened | Firm: pressure with a paper trail |
| matter.enforce | IDEATED · GATED | Enforcement filing support package | filing accepted · order issued | Firm, public office: litigation support, never case-taking |
SEEDED DIVISIONS · THE HIGH-REVENUE PLAYS, SAME LOOP · PRE-SEED THE INSTANCE, LET THEM CLAIM IT
| PLAY | SUBJECT | SEED (PUBLIC RECORD) | SIGNALS IT MINTS | REVENUE LANES |
|---|
| Trucking CSA LEAD | Carrier (DOT #), ~500k owner-ops | FMCSA monthly dump: inspections, violations. Recomputing the hidden percentiles IS the product | score moved · top premium drag · dispute window open | SaaS $29-249 → dispute desk → broker books $500-2k/mo → score API to insurers $2-10k/mo. ≈$2M ARR before the API lane |
| Vape stores | Retail license, NC/CA registries live | State license registries × directories (Kinetic Verified retrofit) | unlisted SKU on shelf · deadline exposure (PA Oct '26, TN Jan '27) | Store claim = sensor on-ramp; distributor mandate stays the money. Cheapest test on the board |
| Movers / charter buses | FMCSA carrier, ~8k + ~3.5k | Same FMCSA pipeline as trucking, zero new plumbing | complaint filed · safety rating moved | Same lanes, smaller ponds, consumers already check the record |
| Buildings · nursing homes · nonprofits · contractors | Building (LL97) · facility (CMS stars) · org (990s) · license/bond | Public scoring regimes that already cost the subject money | fine exposure · star moved · filing lapsed | Banked bench, same claim-your-instance hook |
Same physics, consumer scale: a seeded play is a pre-seeded desk. Subject from the public record, watch already running, signals already minted — the claim link is the invite link. PopSockets #001 and a trucker's CSA claim are the same move at two price points.
WHO RUNS WHAT · TEN BUYER TYPES, ONE CATALOG
| USER TYPE | THEIR VERB STACK | THE FEAR REMOVED |
|---|
| Deal principal | entity.screen · sanctions.screen · crypto.screen · watch | Wiring money to someone who was never who they said they were |
| Law / recovery firm | crypto.trace · crypto.monitor · evidence.assemble · matter.* | Missing the freeze window, walking into court under-documented |
| Brand | impersonation.scan · impersonation.monitor · actor.watch | Customers robbed under your logo while you find out from Twitter |
| Public office | crypto.trace · evidence.assemble · matter.freeze · actor.profile | National-scale programs stalled on evidence that will not hold |
| Family office | entity.resolve · sanctions.screen · crypto.screen · leak.scan | The family name in the wrong deal, or the wrong photos, forever |
| Hedge fund | crypto.expose · entity.screen · sanctions.watch | LP letter that starts with "regarding our exposure to..." |
| Creator / talent agency | leak.scan · leak.monitor · impersonation.monitor | Your body or your name monetized by someone else tonight |
| Receiver / trustee | judgment.locate · crypto.trace · judgment.monitor | Closing an estate while the assets sit one subpoena away |
| Insurer / underwriter | crypto.expose · entity.screen · actor.profile | Underwriting crypto-crime risk blind, pricing policies on vibes |
| Exchange / platform | crypto.screen · sanctions.watch · actor.watch | Being the rail the scam ran through, and the headline that follows |
STRIPE VERDICT
22 verbs, 4 meters, one catalog. Read verbs price per call. Watch verbs price per subject per month. Transform verbs price per pack. World verbs price per matter. The pricing page writes itself from the registry.
PALANTIR VERDICT
Every row above emits subjects, actors, and edges into one graph. Ten buyer types funding one ontology that none of them could afford alone. The catalog is the collection mechanism; the graph is the company.
Pick your subject. Turn on your verbs. Pay per what you protect. You get these signals. You pay X per Y.