Twenty-four screens in four phases, drawn in the ruled Calm Canvas register. Together they are the complete v1 surface: nothing else exists until these ship. Under each screen, its state ledger: every condition the screen can be in, planned before a line of build.
The green line is the happy path: a stranger becomes a paying operator with a sealed File. Hairlines are navigation. Dashed lines are the same record seen from another door. Click any screen here or anywhere below to see it full screen.
Exit proof: a stranger takes a seat, adds a card, activates Deep Screen, and reaches Home with no help.
Exit proof: one real Deep Screen run at the Newlin benchmark returns typed Components, run twice with zero differences.
Exit proof: a complete Record is composed, styled, exported in all six forms, and its sealed manifest verifies.
Exit proof: the Sean test end to end. Seat, card, Deep Screen, sealed File, in one sitting, with a beautiful experience.
Doctrine: prove the product core before the commerce wrap. The Sean test is the only acceptance test.
| STEP | LANE | SCREENS | SCOPE | DEPENDS ON | EXIT PROOF |
|---|---|---|---|---|---|
| 01 | Foundation | ALL | Calm Canvas design system as code: tokens, type, Dark/Light, shell chrome, component primitives. One package every screen imports. | D42 ruling | Home renders in both modes from tokens alone |
| 02 | Run core | S06–S08, S12, S13 | Subject intake, run orchestration seam to the verb runtime, universal Subject shell, Sources and Custody views, typed Component contracts. | 01 · verb runtime seam | Real Deep Screen run returns verified Components; run twice, zero differences |
| 03 | Native views | S09–S11 | Trace map, Timeline, Entity renderers inside the same shell. Each view is a Component that moves to the File unchanged. | 02 | All six views render the benchmark run |
| 04 | File spine | S14–S18 | File rail, pin-at-binding, Builder, plain Record, restrained styling, six export forms, sealing and manifest verification. | 02 | Sealed File exports in all six forms; manifest re-verifies |
| 05 | Commerce wrap | S01–S05 | Auth, workspace, card on file, capability activation, Home. Ports the billing spine as a contract, no new billing code. | 01 · billing spine | Stranger reaches Home paid and activated, no help |
| 06 | Daily home | S19–S22, S24 | Files library, Subjects, capability management, plain-line usage with dispute lane, settings and seats. | 04, 05 | Thirty days of real usage reads clean and true |
| 07 | Machine door | S23 | API keys, runs and files endpoints, MCP tool surface over the identical Verb contracts, metered at the same door. | 04 | An agent produces the same sealed File the app produces |
| 08 | Acceptance | ALL | The Sean test. Take a seat, add a card, turn on Deep Screen, run a real counterparty, receive a sealed File at the Newlin benchmark, in one sitting. | 02–07 | He pays. That is the proof. |
Engineering substrate (ledger, runtime, synthesis seams) follows the architecture register D01–D08, still awaiting ruling in BLUEPRINT R2. This plan is substrate-independent above the verb runtime seam. Every screen ships empty, loading, error, and denied states before it counts as done.