cloudide-prod — Server Wiki

Property	Value
Hostname	cloudide-prod
IP	5.223.67.83
Provider	Hetzner VPS, Singapore
OS	Ubuntu 24.04.4 LTS
Kernel	6.8.0-110-generic
RAM	15Gi total, 14Gi used
Disk	301G total, 103G used, 186G free
Uptime	up 2 days, 5 hours, 10 minutes
Domain	hitcreate.io

Quick Links

Services — all running systemd services
Docker — all containers
Caddy Routes — all subdomains
Port Map — full port allocation
Projects — all active projects
Research Index — 200+ research docs
Incidents — incident history

Systemd Services

Service	Status	PID	Memory	Description
UNIT	ACTIVE (SUB)	0	—	DESCRIPTION
biz-intel	active (running)	1534297	26M	Biz Intel — Stripe webhook + invoice rail for FYI United Group Pty Ltd
bolt-diy	active (running)	1783851	772M	Bolt.diy preview server
bookii-api	active (running)	167221	44M	Bookii API — Booking & webhook handler
caddy	active (running)	1091	50M	Caddy
chatii	active (running)	1092	44M	Chatii — AI Command Center
closr-agent	active (running)	1157	105M	Closr Agent — Active AI for Closr (chat, morning huddle, tool execution)
code-server	active (running)	891784	38M	code-server
corpus-api	active (running)	1095	21M	Knowledge Library Corpus Search API
corpus-watcher	active (running)	1096	844K	Knowledge Library auto-ingest file watcher
docker	active (running)	1677	83M	Docker Application Container Engine
domain-api	active (running)	7309	13M	Domain API — Internal domain management API
domain-check	active (running)	7308	16M	Domain Check — Caddy on-demand TLS ask endpoint
domain-router	active (running)	7310	27M	Domain Router — serves custom domain content
dufs	active (running)	1109	840K	dufs WebDAV file server
fail2ban	active (running)	1112	24M	Fail2Ban Service
flickapply	active (running)	2069657	910M	Flick Apply — Next.js dev server (B1 demo, 2026-04-22)
founder-arcade-api	active (running)	1115	24M	Founder Arcade API Server
hands	active (running)	892845	296M	Hands — Autonomous Browser Execution (HitCreate)
hitcreate-app	active (running)	1706488	72M	HitCreate App — Next.js (intake + auth + project state)
hitcreate-dashboard	active (running)	1134	14M	HitCreate Command Dashboard API
hitcreate-review-api	active (running)	1139	139M	HitCreate Review API Server
hitcreate-site	active (running)	1142	43M	HitCreate Site (Astro SSR)
hitcreate-studio-api	active (running)	1148	31M	HitCreate Studio API shim — image/video generation router (muapi-compatible)
hitterm	active (running)	1149	101M	HitTerm (CloudCLI fork)
life-intel-api	active (running)	1151	15M	Life Intelligence API
litellm	active (running)	1155	1.1G	LiteLLM Proxy
lucky-gear	active (running)	3807444	26M	Lucky Gear Node Server
memory-agent	active (running)	1199	192M	Always-On Memory Agent (AGT-003)
openclaw	active (running)	904972	380M	OpenClaw Gateway
qemu-guest-agent	active (running)	1227	564K	QEMU Guest Agent
radar-api	active (running)	1233	17M	Radar Dashboard API
scout-api	active (running)	1235	48M	Scout Territory Intelligence API
snapd	active (running)	891525	15M	Snap Daemon
tailscaled	active (running)	1252	64M	Tailscale node agent
transcribe-api	active (running)	1296	275M	HitCreate Transcribe API (faster-whisper)
troveii-poller	active (running)	1271	90M	Troveii JMAP Poller — email-native CRM contact extraction
user@0	active (running)	1391	4.2M	User Manager for UID 0
vidcap	active (running)	1281	19M	VidCap — Video to Knowledge web UI
wakapi	active (running)	1282	20M	Wakapi - Self-hosted WakaTime API
Legend:	→ (Reflects)	0	—	whether the unit definition was properly loaded.
ACTIVE	The (high-level)	0	—	unit activation state, i.e. generalization of SUB.
SUB	The (low-level)	0	—	unit activation state, values depend on unit type.
60	units (listed.)	—	—

Docker Containers

Container	Image	Status	Ports
dozzle	`dozzle:latest`	Up 2 days	18812->8080/tcp
filestash	`filestash:latest`	Up 2 days	8334->8334/tcp
it-tools	`it-tools:latest`	Up 2 days	18810->80/tcp
mission-control	`mission-control-mission-control`	Up 2 days (healthy)
privatebin	`nginx-fpm-alpine:latest`	Up 2 days	18813->8080/tcp
realtime-dev.supabase-realtime	`realtime:v2.76.5`	Up 2 days (healthy)
sendii	`jmap-webmail:latest`	Up 2 days (healthy)	3210->3000/tcp
stalwart	`stalwart:latest`	Up 2 days (unhealthy)	110/tcp, 143/tcp, 25->25/tcp, 443/tcp, 465->465/tcp, 587/tcp, 995/tcp, 993->993/
supabase-auth	`gotrue:v2.186.0`	Up 2 days (healthy)
supabase-db	`postgres:15.8.1.085`	Up 2 days (healthy)	5433->5432/tcp
supabase-edge-functions	`edge-runtime:v1.70.3`	Up 2 days
supabase-imgproxy	`imgproxy:v3.30.1`	Up 2 days (healthy)	8080/tcp
supabase-kong	`kong:2.8.1`	Up 2 days (healthy)	8000->8000/tcp, 8001/tcp, 8443->8443/tcp, 8444/tcp
supabase-meta	`postgres-meta:v0.95.2`	Up 2 days (healthy)	8080/tcp
supabase-pooler	`supavisor:2.7.4`	Up 2 days (healthy)	5432->5432/tcp, 6543->6543/tcp
supabase-rest	`postgrest:v14.5`	Up 2 days	3000/tcp
supabase-storage	`storage-api:v1.37.8`	Up 2 days (healthy)	5000/tcp
supabase-studio	`studio:2026.02.16-sha-26c615c`	Up 2 days (healthy)	3000/tcp
supabase-vector	`vector:0.53.0-alpine`	Up 2 days (healthy)
vaultwarden	`server:latest`	Up 2 days (healthy)	18814->80/tcp
workspace-main-redis2-1	`redis:7-alpine`	Up 2 days	6379/tcp
workspace-main-redis-new-1	`redis:7-alpine`	Up 2 days	6379->6379/tcp

Caddy Routes

Subdomain	Backend	Auth	Notes
mail.hitcreate.io	127.0.0.1:8880	none	App: jmap-webmail fork (MIT) — Docker container on port 3210
sendii.hitcreate.io	static: /var/www/sendii-landing	none	Landing: Astro static site at /var/www/troveii-landing (source: /root/repos/troveii-landing)
troveii.hitcreate.io	static: /var/www/troveii-landing	Authelia SSO
hitcreate.io	127.0.0.1:18798 {	Authelia SSO
ide.hitcreate.io	127.0.0.1:8080	Authelia SSO	B1.6: VPS code-server failover (Aorus IDE primary, this is backup)
ide-backup.hitcreate.io	127.0.0.1:8080	Authelia SSO
nikkibikkies.hitcreate.io	static: /var/www/nikkibikkies	Authelia SSO
arcade.hitcreate.io	static: /var/www/founderarcade	Authelia SSO
founderarcade.hitcreate.io	static	none
fa.hitcreate.io	static: /var/www/fa-beta	none	}
db.hitcreate.io	127.0.0.1:8000	Authelia SSO	Supabase Studio moved off this subdomain — accessible via db.hitcreate.io
studio.hitcreate.io	static: /var/www/hitcreate-studio	Authelia SSO
playbet.hitcreate.io	static: /var/www/playbet	Authelia SSO
sovereigns-call.hitcreate.io	static: /var/www/sovereigns-call	Authelia SSO
aus-smb-connect-hub.hitcreate.io	static: /var/www/aus-smb-connect-hub	Authelia SSO
freshi-serene-home-web.hitcreate.io	static: /var/www/freshi-serene-home-web	Authelia SSO
freshi-solo-1.hitcreate.io	static: /var/www/freshi-solo-1	Authelia SSO
fyi-digital-revamp.hitcreate.io	static: /var/www/fyi-digital-revamp	Authelia SSO
homei-aussie-connect.hitcreate.io	static: /var/www/homei-aussie-connect	Authelia SSO
insights-lm-public.hitcreate.io	static: /var/www/insights-lm-public	Authelia SSO
journey-kit-builder.hitcreate.io	static: /var/www/journey-kit-builder	Authelia SSO
koala-glow-up-kit.hitcreate.io	static: /var/www/koala-glow-up-kit	Authelia SSO
market-momentum-watch.hitcreate.io	static: /var/www/market-momentum-watch	Authelia SSO
mytrove.hitcreate.io	static: /var/www/mytrove	Authelia SSO
nerang-hair-revamp-project.hitcreate.io	static: /var/www/nerang-hair-revamp-project	Authelia SSO
parakeet-api-helper.hitcreate.io	static: /var/www/parakeet-api-helper	Authelia SSO
quiet-stack-notes.hitcreate.io	static: /var/www/quiet-stack-notes	Authelia SSO
revenuance-dashboard-88.hitcreate.io	static: /var/www/revenuance-dashboard-88	Authelia SSO
rsvpmi.hitcreate.io	static: /var/www/rsvpmi	Authelia SSO
sales-buddy-land.hitcreate.io	static: /var/www/sales-buddy-land	Authelia SSO
spottah.hitcreate.io	static: /var/www/spottah	Authelia SSO
the-indie-lab.hitcreate.io	static: /var/www/the-indie-lab	Authelia SSO
thoughtleader-banter.hitcreate.io	static: /var/www/thoughtleader-banter	Authelia SSO
tradeai-smart-start.hitcreate.io	static: /var/www/tradeai-smart-start	Authelia SSO
vaultdrop-social-vibes.hitcreate.io	static: /var/www/vaultdrop-social-vibes	Authelia SSO
very-good-vibes-chain.hitcreate.io	static: /var/www/very-good-vibes-chain	Authelia SSO
wiki-tok-discover.hitcreate.io	static: /var/www/wiki-tok-discover	Authelia SSO
world-clock.hitcreate.io	static: /var/www/world-clock	Authelia SSO
candy-swap-frenzy.hitcreate.io	static: /var/www/candy-swap-frenzy	Authelia SSO
flickcv.hitcreate.io	localhost:3001	Authelia SSO
prestart.hitcreate.io	static: /var/www/prestart	Authelia SSO	}
reports.hitcreate.io	static: /var/www/reports	none
kartaway.hitcreate.io	static: /var/www/kartaway-bdm	Authelia SSO
closr.hitcreate.io	static: /var/www/closr	Authelia SSO
bdm.hitcreate.io	static: /var/www/mwebb-bdm	Authelia SSO
signature-social.hitcreate.io	static: /var/www/signature-social	Authelia SSO
penpot.hitcreate.io	127.0.0.1:9001	Authelia SSO
forms.hitcreate.io	static: /var/www/forms	none
shared.hitcreate.io	static: /var/www/shared	Authelia SSO
haa.hitcreate.io	static: /var/www/haa	Authelia SSO
a.hitcreate.io	static: /var/www/beta-a	none
1.hitcreate.io	static: /var/www/beta-1	none
aquapro.hitcreate.io	static: /var/www/aquapro	Authelia SSO
hearth.hitcreate.io	static: /var/www/hearth	Authelia SSO
emberfi.hitcreate.io	static: /var/www/emberfi	none
preview.hitcreate.io	static: /var/www/previews/{re.slug.1}	Authelia SSO
minmin.hitcreate.io	127.0.0.1:3456 {	Authelia SSO	301 preserves any existing bookmarks per RESEARCH-275 redirect strategy
bolt.hitcreate.io	static	none
scout.hitcreate.io	static: /var/www/scout	Authelia SSO
sec.hitcreate.io	static: /var/www/sentinel	Authelia SSO
radar.hitcreate.io	127.0.0.1:3800	Authelia SSO
techirl.hitcreate.io	static: /var/www/techirl	Authelia SSO
sentinel.hitcreate.io	static: /var/www/sentinel	Authelia SSO
upkeepco.hitcreate.io	static: /var/www/upkeepco	Authelia SSO
lovable.hitcreate.io	127.0.0.1:5175 {	Authelia SSO
cv.hitcreate.io	127.0.0.1:3101	Authelia SSO	Auth handled by Supabase JWT + RLS — no basic_auth needed
cvdb.hitcreate.io	127.0.0.1:8000	Authelia SSO
mc.hitcreate.io	127.0.0.1:3300 {	Authelia SSO
flickapply.hitcreate.io	127.0.0.1:3105 {	none
mweb-resume.flickapply.hitcreate.io	static: /var/www/mweb-resume	none
editor.hitcreate.io	127.0.0.1:5556 {	Authelia SSO	Canonical: safetii.org
safetii.org	static: /var/www/safetii	none	SW scope is the entire origin → no collision with marketing site at safetii.org/
app.safetii.org	static: /var/www/safetii	none	safetii.app → safetii.org (until PWA split is ready)
safetii.app	static	none	getsafetii.com → safetii.org
getsafetii.com	static	none	Old subdomain → 301 to new canonical
safetii.hitcreate.io	static	none	Wakapi — self-hosted WakaTime time tracking
wakapi.hitcreate.io	127.0.0.1:3420	Authelia SSO	Same codebase as Safetii — app detects domain and shows Speargo routes
speargo.hitcreate.io	static: /var/www/speargo	none	Local Trader — lead gen site for SEQ waste/trades
localtrader.net	static: /var/www/local-trader	none	Dashboard at /dashboard is still basic_auth protected internally by the app.
bookii.hitcreate.io	127.0.0.1:18800	Authelia SSO	Replaces Filestash (stopped, container kept for rollback)
library.hitcreate.io	127.0.0.1:8087	Authelia SSO	File Hub — Filestash (RESEARCH-246, 2026-04-14)
files.hitcreate.io	127.0.0.1:8334	none	Knowledge Library — Paperless-ngx document manager (2026-04-12)
docs.hitcreate.io	127.0.0.1:8086	Authelia SSO	Server Wiki — mdBook static site (B1, 2026-04-12)
wiki.hitcreate.io	static: /var/www/wiki	Authelia SSO	IT-Tools — 100+ developer utilities
it.hitcreate.io	127.0.0.1:18810	Authelia SSO	Excalidraw — whiteboard / diagramming
draw.hitcreate.io	127.0.0.1:18811 {	Authelia SSO	Dozzle — Docker container log viewer
logs.hitcreate.io	127.0.0.1:18812	Authelia SSO	PrivateBin — zero-knowledge encrypted pastebin
paste.hitcreate.io	127.0.0.1:18813	Authelia SSO	MP3 to Text — audio/video transcription tool
mp3totxt.hitcreate.io	static: /var/www/mp3totxt	Authelia SSO	CyberChef — data transformation Swiss Army knife (static files)
cyberchef.hitcreate.io	static: /var/www/cyberchef	Authelia SSO	HitTerm — CloudCLI fork (B0, 2026-04-04)
term.hitcreate.io	127.0.0.1:3010	Authelia SSO
chat.hitcreate.io	127.0.0.1:3201	Authelia SSO	HitCreate Review — Voice-first feedback tool (B1, 2026-04-14)
review.hitcreate.io	static: /var/www/hitcreate-review	Authelia SSO	VidCap — Video to Knowledge web UI (Video Ingest B1, 2026-04-14)
vidcap.hitcreate.io	127.0.0.1:18796	Authelia SSO	Interview Transcriber — live mic capture + Whisper + Claude summary (CAO interview, 2026-04-17)
transcribe.hitcreate.io	127.0.0.1:18800 {	Authelia SSO	── Lucky Gear waitlist preview (INCIDENT-058 interim — CF Pages deploy deferred) ──
luckygear.hitcreate.io	127.0.0.1:18799 {	none
lucky-gear.hitcreate.io	127.0.0.1:4321	Authelia SSO	Per security rule #8: Caddyfile changes require staged rollout.
books.hitcreate.io	127.0.0.1:18803	Authelia SSO

Port Map

Port	Bind	Process
22	0.0.0.0	sshd
22	[::]	sshd
25	0.0.0.0	dockerd
53	127.0.0.53%lo	systemd-resolve
53	127.0.0.54	systemd-resolve
80	*	caddy
443	*	caddy
465	0.0.0.0	dockerd
631	0.0.0.0	cupsd
631	[::]	cupsd
993	0.0.0.0	dockerd
2019	127.0.0.1	caddy
3010	127.0.0.1	node
3011	*
3090	127.0.0.1	node
3105	*
3201	*
3210	127.0.0.1	dockerd
3300	127.0.0.1
3420	127.0.0.1	wakapi
3420	[::1]	wakapi
3800	127.0.0.1	node
3900	127.0.0.1	python3
4000	127.0.0.1	litellm
4321	127.0.0.1	node
5174	127.0.0.1	workerd
5432	127.0.0.1	dockerd
5433	127.0.0.1	dockerd
5555	127.0.0.1	node
5556	127.0.0.1	node
5557	127.0.0.1	node
6379	127.0.0.1	dockerd
6543	127.0.0.1	dockerd
8000	127.0.0.1	dockerd
8080	127.0.0.1	node
8087	127.0.0.1	dufs
8334	127.0.0.1	dockerd
8336	127.0.0.1
8443	127.0.0.1	dockerd
8880	127.0.0.1	dockerd
8888	0.0.0.0	python3
9223	127.0.0.1	chrome
9229	127.0.0.1	workerd
11434	127.0.0.1	ssh
11434	[::1]	ssh
18789	127.0.0.1	openclaw-gatewa
18789	[::1]	openclaw-gatewa
18791	127.0.0.1	openclaw-gatewa
18793	127.0.0.1	python3
18794	127.0.0.1	node
18795	127.0.0.1	node
18796	127.0.0.1	python3
18797	127.0.0.1	transcribe-serv
18798	127.0.0.1	node
18799	127.0.0.1	node
18800	*	node
18801	127.0.0.1	node
18802	127.0.0.1	node
18803	127.0.0.1	node
18810	127.0.0.1	dockerd
18812	127.0.0.1	dockerd
18813	127.0.0.1	dockerd
18814	127.0.0.1	dockerd
18820	127.0.0.1	node
33081	127.0.0.1	workerd
33335	127.0.0.1	node
33785	127.0.0.1	node
35271	127.0.0.1	workerd
36085	127.0.0.1	workerd
37231	127.0.0.1	workerd
38523	127.0.0.1	openclaw-gatewa
39063	[::1]	workerd
39547	127.0.0.1	code-560a9dba96
39867	127.0.0.1	workerd
40835	127.0.0.1	node
43601	127.0.0.1	workerd
44791	127.0.0.1	code-560a9dba96
50529	[fd7a:115c:a1e0::3101:55ad]	tailscaled
55299	127.0.0.1	query-engine-de
63024	100.94.85.68	tailscaled
65415	127.0.0.1	node

Cron Jobs

Root Crontab

*/5 * * * * /usr/local/bin/watchdog-hitcreate.sh >> /var/log/watchdog-hitcreate.log 2>&1
0 15 * * * cd /root/.openclaw/workspace && git add -A && git commit -m 'nightly: auto-commit $(date +%Y-%m-%d)' && git push origin main >> /var/log/nightly-git.log 2>&1
0 15 * * * /root/haa/run-with-mem0.sh >> /root/haa/workspace/logs/cron.log 2>&1
0 4 * * * /usr/local/bin/preview-cleanup.sh >> /var/log/preview-cleanup.log 2>&1
50 20 * * * /usr/local/bin/validate-api-keys.sh >> /var/log/api-key-validation.log 2>&1
*/5 * * * * /usr/local/bin/litellm-error-monitor.sh >> /var/log/litellm-error-monitor.log 2>&1
55 20 * * * /usr/local/bin/briefing-data-collect.sh >> /var/log/briefing-data.log 2>&1
# Check credential expiry daily at 08:00 AEST (22:00 UTC)
0 22 * * * /usr/local/bin/check-token-expiry.sh
0 14 * * * /usr/local/bin/security-scan.sh >> /var/log/security-scan.log 2>&1
0 */6 * * * /usr/local/bin/backup-full.sh >> /var/log/backup-full.log 2>&1
0 3 1 * * /usr/local/bin/dr-test.sh >> /var/log/dr-test.log 2>&1
*/5 * * * * /usr/local/bin/sec-refresh.sh
*/15 * * * * /usr/local/bin/minmin-health-check.sh >> /var/log/minmin-health-check.log 2>&1
45 13 * * * /usr/local/bin/memory-ingest.sh --file /root/.openclaw/workspace/MEMORY.md 'nightly-memory-sync' > /dev/null 2>&1
*/5 * * * * /var/www/sentinel/health/generate.sh >/dev/null 2>&1
*/15 * * * * /usr/local/bin/session-reaper.sh >> /var/log/session-reaper.log 2>&1
# Custom Domains B2 — monitoring
0 6 * * * /usr/local/bin/cert-monitor.sh >> /var/log/cert-monitor.log 2>&1
*/15 * * * * /usr/local/bin/cs-cleanup.sh
*/5 * * * * /usr/local/bin/verification-watchdog.sh
# Radar — 4x/day scraping (B1)
0 7,11,15,19 * * * cd /usr/local/bin/scrapers && source /root/.openclaw/.env && node run-all.js >> /var/log/radar-run.log 2>&1 && node metrics.js >> /var/log/radar-metrics.log 2>&1 && node post-scrape-alerts.js >> /var/log/radar-alerts.log 2>&1
# Weekly accountability audit — every Friday 6pm AEST (08:00 UTC)
3 8 * * 5 /usr/local/bin/weekly-audit.sh 7 > /dev/null 2>&1 && /usr/local/bin/tg-alert.sh "Weekly audit ready. Run /audit in Claude Code or review /tmp/weekly-audit-$(date +\%Y-\%m-\%d).md"
*/5 * * * * . /root/.openclaw/.env && cd /root/repos/domain-services && /usr/bin/node domain-verify-cron.js >> /var/log/domain-verify.log 2>&1
0 4 * * 0 /usr/local/bin/code-server-cleanup.sh >> /var/log/code-server-cleanup.log 2>&1
# Monday 8am AEST (22:00 Sun UTC) — project index to Telegram
0 22 * * 0 /root/bin/project-index-telegram.sh --health >> /var/log/project-index.log 2>&1
# Friday alongside weekly audit — northstar + stale branch reports
5 8 * * 5 /root/bin/northstar-audit.sh >> /var/log/northstar-audit.log 2>&1
7 8 * * 5 /root/bin/stale-branch-report.sh --telegram >> /var/log/stale-branch.log 2>&1
10 15 * * * bash sync-to-repo.sh --commit 'nightly: auto-sync $(date +\%Y-\%m-\%d)' && git push origin main >> /var/log/nightly-ops-git.log 2>&1
# Nightly sync + commit hitcreate-ops (after openclaw workspace commit)
10 15 * * * cd /root/repos/hitcreate-ops && /root/repos/hitcreate-ops/sync-to-repo.sh --commit "nightly: auto-sync $(date +\%Y-\%m-\%d)" && git push origin main >> /var/log/nightly-ops-git.log 2>&1
# Domain expiry monitor — daily alert for expiring domains
13 8 * * * . /root/.openclaw/.env && cd /root/repos/domain-services && /usr/bin/node domain-expiry-monitor.js >> /var/log/domain-expiry.log 2>&1
*/15 * * * * /usr/local/bin/drive-watcher.sh >> /var/log/drive-watcher.log 2>&1
0 16 * * * /usr/local/bin/gmail-triage.sh scan --limit 2000 >> /var/log/gmail-triage.log 2>&1 && /usr/local/bin/tg-alert.sh "Gmail triage nightly batch complete. Run: gmail-triage.sh summary"
# Biweekly reality check — every other Monday 8am AEST (22:00 Sun UTC)
0 22 1-7,15-21 * 0 /usr/local/bin/reality-check.sh >> /var/log/reality-check.log 2>&1
*/5 * * * * /usr/local/bin/pid-monitor.sh 2>/dev/null
*/5 * * * * /usr/local/bin/memory-pressure.sh 2>/dev/null
*/5 * * * * /usr/local/bin/claude-process-reaper.sh >> /var/log/claude-process-reaper.log 2>&1
# Weekly memory audit — every Monday 6pm AEST (08:00 UTC)
0 8 * * 1 /usr/local/bin/memory-audit.sh --telegram > /dev/null 2>&1
*/5 * * * * /usr/local/bin/check-cmd-aorus.sh
# Daily memory v2 audit — 08:00 UTC (18:00 AEST)
0 8 * * * /root/repos/mem0-memory-layer/src-v2/audit.sh --telegram > /dev/null 2>&1
0 */6 * * * /usr/local/bin/wiki-generate.sh > /dev/null 2>&1
0 21 * * * /usr/local/bin/closr-huddle-cron.sh >> /var/log/closr-huddle-cron.log 2>&1

Projects

Project	NORTH-STAR	TRACKER	README	Status
ai-memory	Y	Y	Y	COMPLETE
ai-newsletter	Y	Y	Y	READY
aquapro	Y	Y	—	Photo-First AI Logging PWA
auth	Y	Y	Y	NEARLY COMPLETE
automations	Y	Y	Y	DONE
biz-intel	Y	Y	Y	IN PROGRESS
brand-collateral	Y	Y	Y	Brand Extraction Core: URL → brand-kit.json
caddy-migration	Y	Y	Y	DRAFT
cao-interview	—	—	—	—
cdn-speed	Y	Y	Y	COMPLETE
chatii	Y	Y	Y	READY
clients	—	—	—	—
closr	Y	Y	Y	Rebrand
cloudide	Y	Y	Y	Landing page + waitlist
cmd	Y	Y	Y	Shell + Navigation
cmd-aorus	Y	Y	Y	DONE
content-pipeline	Y	Y	Y	Content Engine (source selection + Claude API)
custom-domains	Y	Y	Y	Foundation: on-demand TLS + ask endpoint + routing + CLI
docgen	Y	Y	Y	Proposals + Capability Statements
domain-management	Y	Y	Y	COMPLETE
email	Y	Y	Y	IN PROGRESS
emberfi	—	—	—	—
file-hub	Y	Y	Y	—
fin-intel	Y	Y	Y	PLANNED
flick-apply	Y	Y	Y	Recruiter-side preference research (10 interviews)
forms	Y	Y	Y	PLANNED
founder-arcade	Y	Y	Y	Roast Generator
fyidigital	Y	Y	Y	COMPLETE
gws-integration	Y	Y	Y	DONE
hands	Y	Y	Y	IN PROGRESS
hitcreate	Y	Y	Y	SHIPPED 2026-04-22
hitcreate-booking	Y	Y	Y	NOT STARTED
hitcreate-config	Y	Y	Y	COMPLETE
hitcreate-review	Y	Y	Y	IN PROGRESS
hitcreate-tools	Y	Y	Y	Video Analysis Tool — `pip install google-generativeai`, deploy `analyze-recording` script, test with sample video
hitterm	Y	Y	Y	DONE
ide-session-mgmt	Y	Y	Y	Quick Wins: Settings, inotify, log cleanup, immediate kill
ignite	Y	Y	Y	—
infrastructure-scaling	Y	Y	Y	DONE
kartaway-bdm	Y	Y	—	Lead Scorer + Prospect List (original PWA)
knowledge-library	Y	Y	Y	DONE
leadgen	Y	Y	Y	COMPLETE
life-intel	Y	Y	Y	DONE
life-score	Y	Y	Y	`/root/projects/wheel-of-life/dev-docs/PRD.md`
local-trader	Y	Y	Y	NOT STARTED
lucky-gear	—	—	—	—
mem0-memory-layer	Y	Y	Y	COMPLETE
min-min	Y	Y	Y	COMPLETE
minmin-orchestrator	Y	Y	Y	READY
mwebb-bdm	Y	Y	Y	AWAITING APPROVAL
research-standards	Y	Y	Y	—
safetii	Y	Y	Y	COMPLETE
scout	Y	Y	Y	NOT STARTED
sendii	Y	Y	Y	READY
sentinel	Y	Y	—	VPS Posture Score
server-wiki	Y	Y	Y	DONE
signature-social	Y	—	—	—
speargo	Y	Y	—	NOT STARTED
stitch-mcp	Y	Y	Y	infra
supabase-cloud	Y	Y	Y	Collision (fired 2026-04-22)
swipe-library	Y	Y	Y	COMPLETE
techirl	Y	Y	Y	—
tradie-office	—	—	—	—
troveii	Y	Y	Y	Fix
trust-score	Y	Y	Y	AWAITING APPROVAL
veridian-chain	Y	—	Y	—
video-ingest	Y	Y	Y	DONE
visual-editor	Y	Y	Y	infra
wheel-of-life	—	—	Y	—

ai-memory

Booklet Status

Booklet	Status	Branch	Appetite	Deadline	Notes
B0	COMPLETE	N/A	1hr	2026-03-30	Inherited. MEMORY.md cleanup, dead systems removed
B1	COMPLETE	N/A	1 day	2026-03-30	Inherited. Mem0 + pgvector + MCP + 31 memories
B2	COMPLETE	N/A	1.5hr	2026-04-07	28→4 feedback files, 9 dead files killed (83→59), MEMORY.md 131→96, enforcement hook, Mem0 wired into session-manager.sh, mem0-cli.sh
B3	COMPLETE	—	45min	2026-04-07	Min Min verify-exec.ts wired (recall+remember), HAA run-with-mem0.sh (pre-fetch+post-store), claw_memory migrated (32→39), cross-agent test passed
B4	COMPLETE	—	20min	2026-04-07	memory-audit.sh, cron Monday 8UTC, TTL warning, mem0-cli list/delete
B5	CONFIRMED-WORKING	—	4hr	2026-04-12	v2: MCP memory server + Postgres schema + migration + auto-bootstrap. 102 memories, Grade A. All 6 MCP tools native-callable from Claude Code (verified 2026-04-13). INCIDENT-049 resolved.

Recent Decisions

Date	Decision	Rationale
------	----------	-----------
2026-04-12	v2 rescope: database-backed MCP server	INCIDENT-044 + RESEARCH-224. File-based index fails repeatedly. Every mature system uses DB as source of truth.
2026-04-12	Custom pgvector over keeping Mem0	Mem0 summarizes on write (lossy). Need raw storage + hierarchical schema. Same pgvector infra.
2026-04-12	Store raw, retrieve smart (Mem-Palace pattern)	Never summarize at ingestion. Structural filtering + hybrid search on read. 34% retrieval boost.
2026-04-07	Rescoped from mem0-memory-layer to ai-memory	Broader scope: unified memory, not just Mem0 install. RESEARCH-206 gap analysis.
2026-04-07	Two layers, not five	CLAUDE.md/MEMORY.md for bootstrap + Mem0 for shared knowledge. Everything else is noise.
2026-04-07	Enforcement via hooks, not discipline	INCIDENT-024 proved agent discipline fails. Hooks are the only reliable enforcement.
2026-03-30	Mem0 over custom build	48K stars, Apache 2.0, native pgvector. Why reinvent?
2026-03-30	HAA read-only initially	Autonomous agent writing bad memories propagates to all agents. Validate first.
2026-03-30	Gemini embeddings over local	Free tier covers volume. Saves RAM vs Ollama.

Source: /root/projects/ai-memory/

Booklet Status

Booklet	Status	Notes
B1: Platform Modules + Funnel	READY	Email Service, Subscriber Store, quiz landing page, email gate
B2: Newsletter Engine	PLANNED	AI content pipeline, send engine, templates
B3: Growth & Monetization	PLANNED	Referral engine, premium tier, analytics
ID	Type	Priority
---	---	---
B1-P01	platform	P0

Date	Decision	Rationale
---	---	---
2026-03-30	Self-build, no beehiiv	HitCreate IS the platform. beehiiv is a competitor. RESEARCH-116.
2026-03-30	Resend for delivery	Deliverability is the only hard problem. Buy it. Build everything else.
2026-03-30	Platform modules first	Life Score = use case, HitCreate = infrastructure. Reusable for all clients.
2026-04-07	Own project (not just Life Score B5)	Newsletter is a standalone offering, not just a feature. Needs full kickstart.
2026-04-07	Resend Pro plan active	API key configured. Need sending domain DNS.

aquapro

auth

Booklet Status

Booklet	Status	Branch	Notes
B1: Resend SMTP + Authelia	NEARLY COMPLETE	`booklet/auth-b1`	Authelia live server-wide, SMTP still TODO
B2: Product Auth (GoTrue)	PLANNED	—	Login pages, magic links, first product
B3: Multi-Tenant + White-Label	PLANNED	—	Org model, RLS, client-branded login
ID	Type	Deliverable	Priority
----	------	-------------	----------
B1-D1	infra	Resend SMTP configured in Supabase	P0
B1-D2	infra	Authelia deployed (Docker, 127.0.0.1:9091)	P0
B1-D3	infra	auth.hitcreate.io login portal live	P0

automations

Booklet Status

Booklet	Status	Notes
B0 Reality Check Loop	DONE	reality-check.sh + AI form gen + cron + first response collected
B1 Follow-up Engine	NOT STARTED	Response-triggered nudges + confidence trend
B2 Proposal Generator	NOT STARTED	TechIRL tier templates + branded PDF
B3 Portfolio Proof	NOT STARTED	Auto-screenshot deploys + proof page
B4 Cron Cleanup	NOT STARTED	Consolidate, logrotate, dead script audit
ID	Deliverable	Status
----	-------------	--------
B0-D1	reality-check.sh — biweekly data report to Telegram	DONE

biz-intel

Booklet Status

Booklet	Status	Branch	Notes
B1: R&D Capture + Airwallex + Invoicing Rail (Apr 2026)	IN PROGRESS	—	Stripe live 2026-04-22, webhook working E2E. R&D + Airwallex remain.
B2: Ledger + AI Classifier (May 2026)	QUEUED	—	Postgres `classifier_decisions`, rules-first, 100-txn test set, Xero integration
B3: AU Compliance Module (Jun 2026)	QUEUED	—	BAS prep, GST/Super register, R&D continuous capture, Peppol outbound, CFO digest
B4: Measure + Decision Gate (Jul 2026)	QUEUED	—	4 weeks data, Q4 FY26 BAS, Payday Super sim, go/no-go for productise
B5: Paid Concierge (Aug 2026 — if gate passes)	BLOCKED	—	5 SMB paid, AU lawyer consult, Privacy/Terms/DPA
B6: Accountant Pilots (Sep–Oct 2026 — if B5 ≥3 retained)	BLOCKED	—	2 firm pilots, multi-tenant, PI/Cyber insurance

brand-collateral

Booklet Status

Source: /root/projects/brand-collateral/

caddy-migration

Booklet Status

Booklet	Status	Branch	Notes
B1	DRAFT	`booklet/caddy-migration-b1`	Staged migration — 5 steps with verification gates
ID	Type	Deliverable	Priority
----	------	-------------	----------
B1-S0	prep	Archive dead `/var/www/` dirs to `/root/backups/archived-sites/`	P0
B1-S1	test	Add wildcard block serving `test.hitcreate.io` ONLY	P0
B1-S2	migrate	Remove 5 dead project blocks from Caddyfile	P0
B1-S3	migrate	Remove Bolt experiment blocks in batches of 5	P0
B1-S4	verify	Full verification pass	P0

Recent Decisions

Date	Decision	Rationale
------	----------	-----------
2026-03-31	Project kickstarted	INCIDENT-035 proved bulk Caddyfile edits are dangerous. Needs proper project treatment.
2026-03-31	Classification: I (Infrastructure), Bucket C	Internal capability, no revenue impact. 20% cap applies.
2026-03-31	5-step staged approach	Each step isolated, verified, rollback-ready. Lesson from INCIDENT-035: never change >10 lines at once.
2026-03-31	Wildcard uses `dns cloudflare` with `CLOUDFLARE_DNS_TOKEN`	Token already in Caddy systemd env (INCIDENT-034 resolution). Module already installed.
2026-03-31	Verification script mandatory	INCIDENT-035 root cause #1: no post-deploy verification. Script must run after every reload.

Source: /root/projects/caddy-migration/

cao-interview

Source: /root/projects/cao-interview/

cdn-speed

Booklet Status

Booklet	Status	Branch	Notes
B1	COMPLETE	N/A	All deliverables done
B1.1	COMPLETE	N/A	Deploy script fixes + stale cleanup
ID	Type	Deliverable	Priority
----	------	-------------	----------
B1-D1	config	Caddy `(performance)` snippet — `encode zstd gzip` + cache-control headers	P0
B1-D2	config	HTTP/3 — `ufw allow 443/udp`	P0
B1-D3	config	Cloudflare proxy — 15 subdomains switched to proxied via API	P0
B1-D4	config	Cloudflare settings — Brotli, Early Hints, HTTP/3, HTTPS, TLS 1.2	P0

chatii

Booklet Status

Booklet	Status	Branch	Appetite	Deadline	Notes
B1	READY	`booklet/chatii-b1`	1 week	2026-04-20	Command Center — Min Min's home
B2	QUEUED	—	1 week	2026-04-27	Agent integration + webhooks
B3	QUEUED	—	2 weeks	—	Web chat widget (embeddable)
B5	QUEUED	—	2 weeks	—	Instagram DM automation

clients

Source: /root/projects/clients/

closr

cloudide

cmd-aorus

Booklet Status

Booklet	Status	Appetite	Notes
B0	DONE	1 evening	Tailscale + SSH (port 2222 WSL2 proxy) + Ollama + dev tools
B1	IN PROGRESS	1 evening	AI layer — LiteLLM routing remaining
B1.5	DONE 2026-04-15	~2 hours	Windows-Native Agent Access (RESEARCH-257) — OpenSSH + Git Bash + Ollama NSSM service. All 16 deliverables complete. Reboot test passed.
B1.6	PLANNED	1 evening	cmdide — VS Code `code tunnel` on Aorus, `ide.hitcreate.io` via Cloudflare Tunnel. RESEARCH-262 + 269.
B1.7	PLANNED	2 evenings	Dev Container Sandbox — Docker Engine in WSL2, per-project `.devcontainer/`, AI agents run inside containers. See DEV-FLOW.md.
B2	BLOCKED	1 evening	GPU upgrade — blocked on RTX 5080 SUPER purchase
B3	PLANNED	2 evenings	Laptop node + monitoring + automation

cmd

content-pipeline

Booklet Status

Source: /root/projects/content-pipeline/

custom-domains

Booklet Status

Source: /root/projects/custom-domains/

docgen

domain-management

Booklet Status

Booklet	Status	Branch	Notes
B0	COMPLETE	N/A	Domain audit, data file, research
B1	NOT STARTED	N/A	Dashboard page + alerts
ID	Type	Deliverable	Priority
----	------	-------------	----------
B0-D1	data	domains.json — full 80-domain inventory	P0
B0-D2	research	RESEARCH-126 — domain reselling strategy	P0
B0-D3	audit	Portfolio analysis — tiers, risks, brand clusters	P0
ID	Type	Deliverable	Priority

Recent Decisions

Date	Decision	Rationale
------	----------	-----------
2026-03-31	Project kickstarted	80 domains across 2 registrars, no tracking, no alerts
2026-03-31	Option A: manage don't resell (for now)	Pre-revenue, <10 clients. Domain markup is ~$750/yr at 50 clients — not worth the overhead yet
2026-03-31	OpenSRS when ready, not ResellerClub	.com.au support, $100 min deposit, reliable API, Tucows-backed
2026-03-31	Cloudflare Registrar for own domains	At-cost pricing ($9.77/yr .com vs $12-15 elsewhere), free privacy, already on CF DNS
2026-03-31	25 domains marked let-expire	Dead gaming project, dead brand variants, unused products

Source: /root/projects/domain-management/

email

Booklet Status

Booklet	Status	Notes
B1: Stalwart + DNS	IN PROGRESS	Deploy Stalwart, fix all DNS, mailboxes working
B2: Min Min JMAP	PLANNED	AI agent email integration
B3: Listmonk + Campaigns	PLANNED	Client email marketing
ID	Type	Deliverable
----	------	-------------
B1-D1	infra	Remove Postfix (freeing port 25)
B1-D2	infra	Stalwart Docker deployed
B1-D3	infra	mail.hitcreate.io webmail live

emberfi

Source: /root/projects/emberfi/

file-hub

fin-intel

Booklet Status

Phase/Booklet	Status	Branch	Notes
Research	COMPLETE	N/A	RESEARCH-115 + 118
Phase 0: Validation	IN PROGRESS	N/A	CPA conversation + provider migration
B1: Core + Crypto	PLANNED	`booklet/fin-intel-b1`	Schema, API, Kraken, Telegram
B2: Banking + AU Tax	PLANNED	`booklet/fin-intel-b2`	Wise, CGT calculator
B3: AI Analysis	PLANNED	`booklet/fin-intel-b3`	Daily digest, anomaly detection
B4: Investments + Super + BAS	PLANNED	`booklet/fin-intel-b4`	IBKR, Sharesight, super, BAS prep
B5: Dashboard + Polish	PLANNED	`booklet/fin-intel-b5`	React UI, budget tracking
B6: Open Source Release	PLANNED	`booklet/fin-intel-b6`	GitHub, docs, r/fiaustralia launch

flick-apply

Date	Decision	Rationale
---	---	---
2026-04-22	Name: Flick Apply (locked)	Mister directive
2026-04-22	Beachhead = relationship-tier, not segment	Dogfood + friends = real concierge at low effort, delays segment selection until evidence
2026-04-22	Build-gated behind recruiter preference test	Flywheel is the moat; if recruiters don't prefer the format, the product has no defensible advantage
2026-04-22	flickcv repo parked, not deleted	Apply.AI v9.2 interview flow + Firebase code is salvageable IP for B4

forms

Booklet Status

Booklet	Status	Branch	Notes
B1	PLANNED	`booklet/forms-b1`	Form renderer + Nicole BDM survey + admin view
B2	PLANNED	—	AI survey generation, embed mode, device test integration
ID	Type	Deliverable	Priority
----	------	-------------	----------
B1-D1	infra	React/Vite scaffold + SurveyJS integration	P0
B1-D2	infra	Supabase client — read forms, write submissions	P0
B1-D3	feature	Public form renderer at `/:formId`	P0
B1-D4	feature	Thank-you page with configurable message	P1

founder-arcade

Booklet Status

Source: /root/projects/founder-arcade/

fyidigital

Booklet Status

Booklet	Status	Branch	Notes
B1: Research & Standards	COMPLETE	—	RESEARCH-221 (1,033 lines) + CLIENT-DELIVERY-PLAYBOOK.md
B2: Templates & Tooling	IN PROGRESS	—	Playbook written, tooling gaps identified below
B3: First Client Dry Run	NEXT	—	Mel (Signature Social Hire) = first real client
ID	Type	Deliverable	Priority
----	------	-------------	----------
B1-D1	research	Stack standardisation — decision tree	P0
B1-D2	research	Client repo template spec	P0
B1-D3	research	Deployment model decision tree	P0

gws-integration

Booklet Status

Booklet	Status	Notes
B9.1: Drive Input Pipe	DONE	All 9 deliverables complete. OAuth re-authed. E2E tested.
B9.2: Email Triage	IN PROGRESS	Triage tool built + tested. Full inbox run next.
B9.3: Swipe Extraction Pipeline	NOT STARTED	Extract structured intelligence → Swipe Library
ID	Type	Deliverable
----	------	-------------
B9.1-D1	infra	Wire gws as OpenClaw tool (context injection in verify-exec)
B9.1-D2	feature	Morning briefing upgrade (email + calendar + drive in HEALTH-REPORT)
B9.1-D3	infra	Kopia backup exclusion for `~/.config/gws/`

Recent Decisions

Date	Decision	Rationale
------	----------	-----------
2026-03-16	GWS CLI chosen over separate API integrations	Collapses 5+ APIs into 1 tool. RESEARCH-054 Wave 2.
2026-03-30	Drive input pipe prioritized over Gmail send	Closes multi-AI workflow gap immediately. Lower risk.
2026-03-30	ChatGPT/Gemini save to Drive root by default	Watcher scans root, filters by recency. Config optional.
2026-03-30	Bucket B (not C) — client comms = revenue enabler	Only B9.1 is arguably C. B9.2+ directly enable client workflows.
2026-03-30	B9.1 built (8/9 done) — blocked on OAuth re-auth	Token expired. Run `gws-reauth.sh` to fix.
2026-03-30	Created gws-reauth.sh for headless re-auth from iPad	Manual code exchange flow.
2026-03-31	RESCOPED: Gmail integration = agency intelligence	Not inbox mgmt. Feeds Swipe Library + Sendii + Fin Intel.
2026-03-31	B9.2 rescoped: Email Triage + Classification	gmail-triage.sh built, tested, benchmarked.
2026-03-31	B9.3 rescoped: Swipe Extraction Pipeline	Extract structured cards from marketing emails.

Source: /root/projects/gws-integration/

hands

Booklet Status

Booklet	Status	Branch	Appetite	Deadline	Notes
B1 — Core Service	IN PROGRESS	`booklet/hands-b1`	1 day	2026-04-19	Stagehand v3 + Express + systemd
B2 — Profile Persistence	NOT STARTED	`booklet/hands-b2`	1 day	2026-04-20	Per-site Chromium profiles
B3 — Integration + Guardrails	NOT STARTED	`booklet/hands-b3`	1 day	2026-04-21	Min Min queue, prompt-injection defenses, Caddy

hitcreate-agency

Booklet Status

Booklet	Status	Branch	Notes
B1: Research & Standards	COMPLETE	—	RESEARCH-221 (1,033 lines) + CLIENT-DELIVERY-PLAYBOOK.md
B2: Templates & Tooling	IN PROGRESS	—	Playbook written, tooling gaps identified below
B3: First Client Dry Run	NEXT	—	Mel (Signature Social Hire) = first real client
ID	Type	Deliverable	Priority
----	------	-------------	----------
B1-D1	research	Stack standardisation — decision tree	P0
B1-D2	research	Client repo template spec	P0
B1-D3	research	Deployment model decision tree	P0

Recent Decisions

Date	Decision	Rationale
------	----------	-----------
2026-04-01	Project kickstarted	No standardised delivery pipeline exists
2026-04-01	Absorbs custom-domains + domain-management	All parts of the same pipeline
2026-04-01	Synergy Wholesale for .com.au client domains	RESEARCH-166 — AU-native, AUD, white-label
2026-04-01	Cloudflare Registrar for non-AU domains	RESEARCH-166 — at-cost, seamless DNS
2026-04-01	B1 is research-only	Need standards before building tooling
2026-04-12	B1 COMPLETE	RESEARCH-221 (1,033 lines) + CLIENT-DELIVERY-PLAYBOOK.md written
2026-04-12	Stack: Penpot + Lovable/v0 + Claude Code + Next.js	Mister: no Figma subscription, pioneer Penpot
2026-04-12	"Instant Preview" model adopted	5-question intake → 3 live previews in <24hrs → iterate → launch in 5-10 days
2026-04-12	Min Min runs 60% of client touchpoints	Mister approves pricing, Claude Code builds

Source: /root/projects/hitcreate-agency/

hitcreate-booking

Booklet Status

Booklet	Status	Notes
B1: Core Engine + TechIRL Widget	✅ COMPLETE (2026-04-20)	API + widget live, Resend confirmations with ICS attached, rate limiting, honeypot, preflight syntax check, TechIRL /book deployed.
B2: Notifications + Polish	NOT STARTED	Resend, SMS, reminders, Temporal timezone rewrite
B3: Developer API	NOT STARTED	Future. Blocked by B2.

Source: /root/projects/hitcreate-booking/

hitcreate-config

Booklet Status

Booklet	Status	Branch	Notes
B1: Core Configs	COMPLETE	`main`	v1.0.1 published to GitHub Packages
B2: Rollout	IN PROGRESS	—	Safetii validated, remaining repos pending
ID	Type	Deliverable	Priority
----	------	-------------	----------
B1-D1	task	Create GitHub repo (hitcreate/hitcreate-config)	P0
B1-D2	task	Write `tsconfig/base.json` (strict + 3 extra flags)	P0
B1-D3	task	Write `tsconfig/react-app.json` (extends base + JSX/DOM)	P0
B1-D4	task	Write `tsconfig/nextjs-app.json` (extends base + Next.js)	P1

Recent Decisions

Date	Decision	Rationale
------	----------	-----------
2026-04-01	Project kickstarted	RESEARCH-163 found 0/18 repos with formatter, config drift visible
2026-04-01	GitHub Packages not npm registry	Private packages, already have hitcreate GitHub org
2026-04-01	Single repo, multiple exports	Simpler than separate repos per config type
2026-04-01	Classification O/I	Config files only, no product code
2026-04-01	B1 COMPLETE	v1.0.1 published, validated in safetii (zero type errors)
2026-04-01	exactOptionalPropertyTypes fix	v1.0.0 had wrong option name, patched in v1.0.1

Source: /root/projects/hitcreate-config/

hitcreate

Booklet	Status	Appetite	Target	Notes
B0	SHIPPED 2026-04-22	~2 hours	Immediate	v3.1 site alignment complete — scorecard → zero-party data reframe live on `/`, `/pricing`, `/services`, `/services/website-design`. See `booklets/B0-v3.1-site-alignment.md`
B5	AWAITING APPROVAL	1-2 weeks	Ship first	RESCOPED 2026-04-22 — App Surface v0 (DIY + hand-off on bolt.diy). Unblocks from B1-B4. See `booklets/B5-app-surface-v0.md`
B1	READY (post-B5)	1 week	Week 2-3	Platform foundation: Brand System Agent v1 + project data model. Seeds bolt.diy with HitCreate brand context
B2	BLOCKED on B1	1 week	Week 3-4	Landing Page Agent + deploy pipeline
B3	BLOCKED on B2	1 week	Week 4-5	Ad Creative Agent (internal dogfooding)
B4	BLOCKED on B1	1 week	Week 5	Email Sequence Agent + contact primitive
B6	BLOCKED on B5	2 weeks	Q3	Agent Surface MVP (SMS + WhatsApp)
B7	PARALLEL	Ongoing	Q1-Q4	Ecosystem seeding (SKILL.md, DESIGN.md, MCP contributions)

hitcreate-review

Booklet Status

Booklet	Status	Branch	Appetite	Deadline	Notes
B1	IN PROGRESS	`main`	2 sessions	—	Widget deployed, dashboard built, device testing in progress
B2	PLANNED	—	2 sessions	—	Dashboard + AI pipeline
B3	PLANNED	—	1 session	—	Accessibility + viewport + polish
ID	Type	Deliverable	Priority	Status	Notes

Recent Decisions

Date	Decision	Rationale
------	----------	-----------
2026-04-14	Project kickstarted	Gap identified: Ruttl has UX, GiveFeedback has voice-first, neither has API/data ownership
2026-04-14	React + Vite for dashboard	HitCreate standard stack (CODE-STANDARDS)
2026-04-14	Vanilla JS for widget	No framework dependency on client sites
2026-04-14	rrweb for replay (not custom)	17K stars, PostHog/Sentry use it, well-maintained
2026-04-14	Raw Replayer API, not rrweb-player	rrweb-player is Svelte; build React wrapper (PostHog pattern)
2026-04-14	Batch AI processing	Industry standard (GiveFeedback, Marker.io). Simpler architecture.
2026-04-14	Subdomain: review.hitcreate.io	Standalone product, white-label later
2026-04-14	Monorepo: packages/widget + packages/dashboard	Widget and dashboard are separate builds, shared types
2026-04-14	Browse&Talk + Inspect Mode UX	Default: voice+click always on. Inspect: opt-in hover outlines. Mister feedback.

Source: /root/projects/hitcreate-review/

hitcreate-tools

Booklet Status

Source: /root/projects/hitcreate-tools/

hitterm

Booklet Status

Booklet	Status	Branch	Notes
B0	DONE	`booklet/hitterm-b0`	Fork setup, strip, configure, deploy, Authelia
B1	SKIPPED	—	tmux not installed on Aorus Git Bash; CloudCLI's 30-min PTY_SESSION_TIMEOUT is sufficient durability. Value not worth the MSYS2 install complexity. Revisit if backend restarts become frequent.
B2	PLANNED	—	SSE reconnection + push notifications + diff summaries
B3	NEXT (ELEVATED)	—	Multi-node session allocation (VPS ↔ CMD-AORUS). RESEARCH-271 + RESEARCH-272. Unblocks 6-8 concurrent Claude Code sessions.
B4	FUTURE	—	Rust server rewrite (axum + portable-pty)

ide-session-mgmt

Booklet Status

Source: /root/projects/ide-session-mgmt/

ignite

infrastructure-scaling

Booklet Status

Booklet	Status	Branch	Notes
B1: Server Cleanup	DONE	`booklet/infra-scaling-b1`	+1.6GB RAM, -11GB disk, process reaper at max 7
B2: Safetii Production Split	RESEARCHED	`booklet/infra-scaling-b2`	RESEARCH-165 ready. 30min execution. Trigger: demo-ready.
B3: Mac Mini Migration	NOT STARTED	—	When hardware acquired
B4: Multi-Tenant Automation	NOT STARTED	—	When 10+ clients
ID	Type	Deliverable	Priority
----	------	-------------	----------
B1-D1	task	Stop Open WebUI container	P0
B1-D2	task	Stop open-lovable service	P0

Recent Decisions

Date	Decision	Rationale
------	----------	-----------
2026-04-01	Project kickstarted	RESEARCH-162 identified server at 75-80% RAM, 3.4GB swap, 46 services
2026-04-01	No Kubernetes	Solo founder, premature complexity
2026-04-01	No hyperscaler	3-5x cost, no revenue to justify
2026-04-01	Supabase Cloud for production	$0-40/mo, managed backups, dev/prod isolation
2026-04-01	Cloudflare R2 for photos	Zero egress fees, <$2/mo at Safetii scale
2026-04-01	Home hardware = dev only	NBN uptime insufficient for production SLA
2026-04-01	Domain registrar: Synergy Wholesale for client .com.au, Cloudflare for own non-AU	RESEARCH-166. Cloudflare doesn't support .com.au. OpenSRS is USD/overkill. Open Synergy account when first client needs domain.
2026-04-01	R2 deferred — ship with Supabase Storage first	RESEARCH-165. 1GB free = ~5 weeks. Add R2 at 800MB. Avoids scope creep.

Source: /root/projects/infrastructure-scaling/

kartaway-bdm

knowledge-library

Booklet Status

Booklet	Status	Appetite	Notes
B0	DONE	30 min	File Browser deployed (replaced in B1)
B1	DONE	30 min	Filestash deployed, dirs restructured, File Browser removed
B2	DONE	2 hours	181 docs, 2632 chunks. pgvector schema, hybrid search RPC, corpus-ingest.py, corpus-api (systemd:18793), corpus-search CLI
B3	P0 DONE, P1 PENDING	2 hours	dufs WebDAV live, auto-ingest working. Syncthing pending. Mister iPad test pending.
B4	PLANNED	3 hours	Datasette explorer + Radar bridge + auto-sourcing
B5	PLANNED	3 hours	Contextual retrieval, reranking, RAGAS evaluation
B6	PLANNED	3 hours	Fine-tuning data prep + Google migration (rclone)

Recent Decisions

Date	Decision	Rationale
------	----------	-----------
2026-04-12	Project kickstarted	CAO client workflow needs central reference library
2026-04-12	Filestash over File Browser	Beautiful UI, 30MB RAM, direct filesystem access
2026-04-12	No Nextcloud/Seafile/JVM tools	Bloated, proprietary storage, INCIDENT-039
2026-04-12	RESHAPED: file browser → LLM training corpus	Primary purpose is agent grounding + fine-tuning, not file browsing
2026-04-12	pgvector over ChromaDB/Qdrant/Weaviate	Already running, zero new RAM (RESEARCH-223)
2026-04-12	Docling over Unstructured.io	MIT, lighter, no Docker (RESEARCH-223)
2026-04-12	nomic-embed-text on cmd-aorus	768-dim matches mem0, free, offloads VPS
2026-04-12	Bucket C → B reclassified	Corpus grounds agents for revenue work (Safetii, CAO)
2026-04-12	Paperless-ngx deferred	Docling handles PDF/OCR; Paperless adds 400MB for marginal gain

Source: /root/projects/knowledge-library/

leadgen

Booklet Status

Booklet	Status	Notes
B0	COMPLETE	Engine built: batch_audit.py, publish_web_report.py, industry_profiles.py, report tracking
B1	PLANNED	Cold outreach infrastructure: domain, Instantly, warm-up, first 50-business batch
B2	PLANNED	Nurture automation: email sequences, behaviour triggers, expiry re-engagement
B3	PLANNED	Scale: weekly automated batches, dashboard, conversion tracking
Component	File	Status
-----------	------	--------
Trust Score Engine	trust_score_engine.py	BUILT (8 dims, --industry flag)
15 Industry Profiles	industry_profiles.py	BUILT

life-intel

Booklet Status

Booklet	Status	Notes
B9.1: Drive Input Pipe	DONE	Inherited from GWS Integration
B9.2: Email Triage (single account)	DONE	8,200+ triaged. Nightly cron running.
B1: Tiller/Basiq + Finance Visibility	NOT STARTED	Decision pending: Basiq vs Tiller
B2: Multi-Account Email	DONE	4 Gmail connected. Proton parked (needs Bridge).
B3: Batch Gmail Engine	NOT STARTED	Replace gws CLI with googleapis SDK. 50K in 5 min
B4: Finance APIs (Wise + Kraken)	NOT STARTED	Direct API — free, no aggregator needed
B5: Real-Time Email (Pub/Sub + IDLE)	NOT STARTED	5-second classification
B6: Finance APIs (IBKR + Xero + Sharesight)	NOT STARTED	Portfolio + accounting + CGT

life-score

local-trader

Booklet Status

Booklet	Status	Branch	Appetite	Deadline	Notes
B1	NOT STARTED	`booklet/local-trader-b1`	2 weeks	2026-04-21	Content-first SEO site
B2	PLANNED	--	2 weeks	--	Operator profiles + lead selling
B3	PLANNED	--	3 weeks	--	Verified directory + retainer packages
B4	PLANNED	--	TBD	--	Local marketplace (product listings, Phase 3)

lucky-gear

Source: /root/projects/lucky-gear/

mem0-memory-layer

Booklet Status

Booklet	Status	Branch	Notes
B0	COMPLETE	N/A	Cleanup — MEMORY.md 206→89 lines, 5 topic files, dead systems removed
B1	COMPLETE	`booklet/mem0-memory-layer-b1`	Mem0 1.0.9 + pgvector + MCP server + 31 memories seeded
B2	NOT STARTED	`booklet/mem0-memory-layer-b2`	Min Min + HAA integration + migration
B3	NOT STARTED	`booklet/mem0-memory-layer-b3`	Pruning, monitoring, cross-agent validation
ID	Type	Deliverable	Priority
----	------	-------------	----------
B0-D1	deliverable	MEMORY.md rewritten as pure 89-line index	P0
B0-D2	deliverable	5 new topic files created	P0

Recent Decisions

Date	Decision	Rationale
------	----------	-----------
2026-03-30	Project kickstarted	5 fragmented memory systems, multiple failed prior attempts, industry moving to shared memory layers
2026-03-30	Mem0 over custom build	48K stars, Apache 2.0, native pgvector/Supabase support, 26% accuracy boost. Why reinvent?
2026-03-30	B0 cleanup before B1	Risk analysis: adding 5th memory system on top of 4 broken ones = worse. Clean first.
2026-03-30	HAA read-only initially	Risk: autonomous agent writing bad memories propagates to all agents. Validate first.
2026-03-30	Gemini embeddings over local model	Free tier covers volume (~200 ops/day). Saves ~1-2GB RAM vs Ollama. Fallback: OpenAI key in .env.
2026-03-30	Embeddings through LiteLLM	Security rule (INCIDENT-016): all AI API calls must route through LiteLLM proxy.
2026-03-30	MCP stdio not systemd	Claude Code spawns MCP servers via stdio. No persistent process needed for Claude Code access. systemd only if Min Min/HAA need HTTP API.
2026-03-30	OPENROUTER_API_KEY must be excluded	Mem0's OpenAI LLM checks OPENROUTER_API_KEY first, bypasses LiteLLM. config.py only loads required keys + explicitly removes OPENROUTER.
2026-03-30	Port 5433 not 5432	pgBouncer on 5432 returns "Tenant or user not found". Port 5433 is direct DB access.

Source: /root/projects/mem0-memory-layer/

min-min

Booklet Status

Booklet	Status	Branch	Appetite	Deadline	Notes
B0-B7.1	COMPLETE	N/A	—	—	OpenClaw era. Telegram, Discord, skills, autonomy, chat redesign
B8	BLOCKED	`booklet/min-min-b8`	2 weeks	2026-04-26	Runtime migration: ZeroClaw live but webhook doesn't pass tools (INCIDENT-052). Decision needed: expand proxy / adopt nanobot / fork ZeroClaw
B9	DONE	—	1 week	2026-04-21	RESCOPED + COMPLETE Memory architecture (L0+L1+L2 injection + tool exec proxy). RESEARCH-250.
B9.5	QUEUED	—	3 days	—	Fix remaining broken capabilities (deferred from B9)
B9.6	DECISION DONE, EXEC PENDING	—	8 hrs exec	2026-04-21	RESEARCH-273 (2026-04-18): Expand minmin-proxy into full runtime (Option A). 11 deliverables A1-A11. Awaiting Mister go-ahead to execute.
B10	QUEUED	—	2 weeks	2026-05-17	Life Intelligence (morning briefing)
B11	QUEUED	—	2 weeks	2026-05-31	Client delivery automation

minmin-orchestrator

Booklet Status

Booklet	Status	Appetite	Notes
B1	READY	1 evening	ZeroClaw native + retire OpenClaw
B2	BLOCKED on B1	1 evening	CMD-AORUS as execution node
B3	BLOCKED on B2	1 evening	Min Min intent routing
B4	BLOCKED on B3	1 evening	Deploy pipelines + HitCreate button

Recent Decisions

Date	Decision	Rationale
------	----------	-----------
2026-04-22	Project kickstarted	VPS overload (load 178), need orchestration not manual SSH
2026-04-22	ZeroClaw-first, retire OpenClaw	ZeroClaw already has nodes, skills, claude_code_runner, Discord — OpenClaw duplicates at 500MB+ cost
2026-04-22	4 booklets, 1 evening each	Small bets. Each booklet is independently useful. Circuit breakers prevent scope creep.

Source: /root/projects/minmin-orchestrator/

mwebb-bdm

Booklet Status

Booklet	Status	Branch	Notes
B1: Core App + Pipeline	AWAITING APPROVAL	`booklet/mwebb-bdm-b1`	React scaffold + Supabase + pipeline kanban + home screen
B2: Clients + Delivery	PLANNED	-	Client cards, delivery checklists, health scores
B3: Revenue + Trust Integration	PLANNED	-	MRR dashboard, Trust Score one-tap audit from pipeline
ID	Type	Deliverable	Priority
----	------	-------------	----------
B1-D1	Scaffold	React/Vite/TS/Tailwind app at /root/repos/mwebb-bdm	P0

research-standards

Booklet Status

Source: /root/projects/research-standards/

safetii

Booklet Status

Booklet	Status	Notes
B1	COMPLETE	Take 5 PWA — live at safetii.org
B1-FIX	NEEDED	iOS voice hotfix (Web Speech API silent fail in PWA standalone)
B2	NOT STARTED	AI layer — voice capture + hazard intelligence (was B5)
B3	NOT STARTED	JSA (Job Safety Analysis) — built on AI layer
B4	NOT STARTED	SWMS + HRCW detection — built on AI layer
B5	NOT STARTED	SOP + version control
B6	NOT STARTED	Org rollout (dashboards, billing)

scout

Booklet Status

Booklet	Status	Branch	Notes
B1	NOT STARTED	`booklet/scout-b1`
ID	Type	Deliverable	Priority
----	------	-------------	----------
B1-D1	deliverable		P0
Date	Decision	Rationale
------	----------	-----------
2026-03-26	Project kickstarted

sendii

Booklet Status

Booklet	Status	Notes
B1: Branded Webmail	READY	React/Vite, JMAP client, GoTrue auth, mobile-first
B2: AI Triage	PLANNED	Min Min JMAP integration
B3: Client Comms	PLANNED	Needs concierge validation first
B4: Campaigns	PLANNED	Listmonk integration
ID	Type	Deliverable
----	------	-------------
B1-D1	setup	React/Vite project scaffolded
B1-D2	auth	GoTrue login page (magic link + password)

sentinel

server-wiki

Booklet Status

Booklet	Status	Appetite	Notes
B1	DONE	2 hours	71 pages. mdBook + wiki-generate.sh + Caddy + cron (6h). wiki.hitcreate.io live.
ID	Type	Deliverable	Priority
----	------	-------------	----------
B1-D1	infra	Install mdBook binary	P0
B1-D2	code	Scaffold wiki/src/ directory structure	P0
B1-D3	code	wiki-generate.sh — systemd service discovery	P0

Recent Decisions

Date	Decision	Rationale
------	----------	-----------
2026-04-12	Project kickstarted	Need single-pane server knowledge for agents + Mister
2026-04-12	mdBook over Wiki.js/MkDocs	6MB binary, 0MB runtime, built-in search (RESEARCH-231)
2026-04-12	Hybrid auto-gen + manual annotations	Auto: always fresh. Manual: preserved in annotations.yaml
2026-04-12	Bucket C	Infrastructure, 20% cap. Reclassify to B if agents deliver faster

Source: /root/projects/server-wiki/

North Star

Source: /root/projects/signature-social/

speargo

Booklet Status

Booklet	Status	Branch	Appetite	Notes
B1	NOT STARTED	`booklet/speargo-b1`	2 weeks	The complete loop: Quote → Schedule → Safety → Execute → Invoice
B2	PLANNED	—	2 weeks	Xero integration + AI quoting improvements + offline-first
B3	PLANNED	—	2 weeks	V2 prep: Min Min draft-and-approve + managed service tier
Gate	Status	Evidence
------	--------	----------
L4-L5 Problem	PASS	Simpro/ServiceM8/Tradify/paper all have paying customers
Domain expertise	PASS	20yr field ops, QLD State Manager, Dreamworld engineering
WTP Signal	PASS	3 warm prospects identified

stitch-mcp

supabase-cloud

swipe-library

Booklet Status

Booklet	Status	Branch	Notes
B1	COMPLETE	`booklet/swipe-library-b1`	CLI capture engine + DB + basic search. 8 swipes captured.
B2	COMPLETE	—	Unified dashboard at radar.hitcreate.io (Library tab)
B3	PLANNED	—	Min Min integration + bulk import
ID	Type	Deliverable	Priority
----	------	-------------	----------
B1-D1	infra	Supabase schema (swipes table + storage bucket)	P0
B1-D2	core	`swipe-capture` CLI script	P0
B1-D3	core	AI extraction prompt (layout, copy, CTAs, patterns)	P0

techirl

tradie-office

Source: /root/projects/tradie-office/

troveii

trust-score

Booklet Status

Booklet	Status	Branch	Notes
B1: Core Scoring Engine	AWAITING APPROVAL	`booklet/trust-score-b1`	4 new modules + engine + PDF
B2: Automation + Monitoring	PLANNED	-	Supabase, weekly re-checks, alerts
B3: Dashboard + Self-Serve	PLANNED (Phase 2)	-	Only if agency use validates demand
ID	Type	Deliverable	Priority

veridian-chain

North Star

Source: /root/projects/veridian-chain/

video-ingest

Booklet Status

Booklet	Status	Appetite	Notes
B1	DONE	3 hours	Core pipeline working. YouTube captions via cmd-aorus, summary via LiteLLM, corpus indexed.
B2	PLANNED	3 hours	Min Min /ingest command + MeTube web UI + media file watcher
B3	PLANNED	3 hours	RSS auto-ingest + playlist batch + speaker diarization
ID	Type	Deliverable	Priority
----	------	-------------	----------
B1-D1	infra	Install yt-dlp + youtube-transcript-api + ffmpeg on VPS	P0

visual-editor

wheel-of-life

Source: /root/projects/wheel-of-life/

Research Index

ID	Title	Date
RESEARCH-038-AI-AUTONOMY-PERSONALITY-EVOLUTION	RESEARCH-038: AI Agent Autonomy, Personality, and Skill Evolution	** 2026-03
RESEARCH-039-MINMIN-COMPANION-APP-VISION	RESEARCH-039: Min Min — Companion App Vision	** 2026-03
RESEARCH-040-SANDBOX-SAAS-OPPORTUNITY	RESEARCH-040: SandboxOS — AI Agent Code Execution SaaS	** 2026-03
RESEARCH-041-AGENT-ARCHITECTURE-THEORY	RESEARCH-041: Deep Theory Behind the Jarvis/Simon Playbook	2026-03-14
RESEARCH-041-AI-SAFETY-PLATFORM-MARKET	RESEARCH-041: AI Safety Platform — SMB, Vibe Coders, and the Bigger Picture	** 2026-03
RESEARCH-042-AI-SAFETY-INVERSION	RESEARCH-042: Gaps, Feasibility, and Inversion — AI Safety Platform Thesis	** 2026-03
RESEARCH-043-HITCREATE-INTERNAL-SECURITY-ARCHITECTURE	RESEARCH-043: HitCreate Internal Security Architecture	** 2026-03
RESEARCH-043	RESEARCH-043: Local GPU Inference — Needs Analysis & Upgrade Proposal	** 2026-03
RESEARCH-044	RESEARCH-044: Sovereign AI, Australian AI Landscape, Startups, VC, Grants & Trends	** 2026-03
RESEARCH-045	RESEARCH-045: Building What People Want, Will Pay For, and Fund	** 2026-03
RESEARCH-046	RESEARCH-046: Effort Allocation — Internal Capability vs Revenue Generation	** 2026-03
RESEARCH-047-guardrail-hardening-evidence-based-audits	RESEARCH-047 — Guardrail Hardening + Evidence-Based Security Audits
RESEARCH-049-code-server-session-management	RESEARCH-049: code-server Session & Process Management	** 2026-03
RESEARCH-057-founder-arcade-strategic-assessment	RESEARCH-057: Founder Arcade — Strategic Assessment & Challenge	** 2026-03
RESEARCH-059-ecommerce-viability-assessment	RESEARCH-059: Ecommerce Viability Assessment for HitCreate	** 2026-03
RESEARCH-060-geo-audit-hitcreate	RESEARCH-060 — GEO Audit: HitCreate.io	** 2026-03
RESEARCH-061-product-hunt-landing-page-anatomy	RESEARCH-061: Product Hunt Landing Page Anatomy -- Winning Patterns	** 2026-03
RESEARCH-064-trades-mining-resume-saas	RESEARCH-064: AI Resume Builder for Trades, Mining & Executive Careers	** 2026-03
RESEARCH-066-agentic-economy-infrastructure-volatility	RESEARCH-066: The Agentic Economy — Infrastructure Volatility, Asymmetrical Risk, and the One-Pers	** 2026-03
RESEARCH-067-claude-code-channels-deep-dive	(untitled)
RESEARCH-068-cloud-ide-remote-dev-2026	RESEARCH-068: Cloud IDEs & Remote Development — 2026 State of the Art	** 2026-03
RESEARCH-069-voice-dictation-steam-deck	(untitled)
RESEARCH-072-ide-session-management	RESEARCH-072 -- IDE Session Management & Resource Cleanup	2026-03-23
RESEARCH-073-open-source-virality-lead-magnet-strategy	RESEARCH-073: Open Source Virality & Lead Magnet Strategy	** 2026-03
RESEARCH-074-emberfi-life-score-pmf-thesis-gtm	RESEARCH-074: EmberFi Life Score — PMF Thesis, Viral Lead Magnet Strategy & Go-to-Market Plan	** 2026-03
RESEARCH-077-visual-first-product-design	RESEARCH-077: Visual-First Product Design — Why We Must Stop Defaulting to Text	** 2026-03
RESEARCH-078-open-source-distribution-strategy	RESEARCH-078: Open Source Distribution Strategy — Two-Channel Thesis	** 2026-03
RESEARCH-079-radar-distribution-intelligence	RESEARCH-079: Radar as a Distribution-First Intelligence System
RESEARCH-080-future-ux-product-design-trends	RESEARCH-080: Future UX/Product Design Trends 2026-2028	** 2026-03
RESEARCH-081-visual-first-design-enforcement	RESEARCH-081: Visual-First Design Enforcement for AI Agents	** 2026-03
RESEARCH-083-distribution-lead-magnet-strategy-thesis	RESEARCH-083: Distribution & Lead Magnet Strategy Thesis	** 2026-03
RESEARCH-084-minmin-dashboard-tool-evaluation	(untitled)
RESEARCH-085-funnel-email-platforms	(untitled)	2026-03-23
RESEARCH-086-hitcreate-platform-lessons	(untitled)	2026-03-23
RESEARCH-087-hitcreate-platform-architecture	(untitled)	2026-03-23
RESEARCH-088-ai-agent-command-centre-dashboard	RESEARCH-088: AI Agent Command Centre Dashboard Evaluation	** 2026-03
RESEARCH-088-booking-availability-systems	(untitled)	2026-03-23
RESEARCH-090-life-score-replayable-quiz-psychometrics	RESEARCH-090: Life Score Replayable Quiz — Psychometrics, IRT, Question Pool Algorithm, Demographi	** 2026-03
RESEARCH-091	RESEARCH-091: Google Stitch MCP — Capabilities, Ecosystem Fit & Benchmark Results	** 2026-03
RESEARCH-092-hitcreate-master-thesis-north-star	RESEARCH-092: HitCreate Master Thesis & North Star	** 2026-03
RESEARCH-093-project-taxonomy-tiered-gates	RESEARCH-093: Project Taxonomy & Tiered Pre-Code Gates	2026-03-24
RESEARCH-094-domain-management-strategy	RESEARCH-094: Domain Management & Reselling Strategy for HitCreate	** 2026-03
RESEARCH-095-cloudide-command-dashboard-thesis	RESEARCH-095: CloudIDE Command Dashboard — Vision, Thesis, Inversions & Validation Path	** 2026-03
RESEARCH-096	RESEARCH-096: Design Refinement Pipeline — Closing the Gap Between AI Generation and Non-Technical	** 2026-03
RESEARCH-097-founder-arcade-upgrade	RESEARCH-097: Founder Arcade Upgrade — From Viral Quiz to Productised Validation Framework	2026-03-24
RESEARCH-098	RESEARCH-098: AI-Powered Business Intelligence Scanner — Full-Spectrum Online Presence Intelligenc	** 2026-03
RESEARCH-099-idea-taxonomy	RESEARCH-099: Idea Taxonomy — Classifying the Universe of Business Ideas into Core Patterns	2026-03-24
RESEARCH-100	RESEARCH-100: Building Our Own Visual Editor — The 20% of Figma That Delivers 80%	** 2026-03
RESEARCH-101-beyond-founders-buyer-types	RESEARCH-101: Beyond Founders — Who Pays the Most for Structured Validation?	2026-03-24
RESEARCH-102	RESEARCH-102: Territory Intelligence OS — Sales Methodology Deep Dive, Product Vision, Gap Analysi	** 2026-03
RESEARCH-103	RESEARCH-103: Visual Editor Platform — GrapesJS Integration, Project Kickstart	** 2026-03
RESEARCH-104-life-score-adaptive-tone	RESEARCH-104: Life Score Adaptive Tone — Life-Stage Variants, Inclusive Assessment, Qualifying-as-	** 2026-03
RESEARCH-105	RESEARCH-105: Scout Strategic Thesis — Platform Risk, Inversion Analysis, Monetisation, Build vs K	** 2026-03
RESEARCH-106-life-score-completion-psychology	RESEARCH-106: Life Score Completion Psychology — Flow State, Micro-Dopamine Loops, Why People Quit	** 2026-03
RESEARCH-107-hitcreate-product-architecture	RESEARCH-107: HitCreate Product Architecture — Page Map, Layer Separation & Wiring	** 2026-03
RESEARCH-109-founder-arcade-universal-language	RESEARCH-109: Founder Arcade Universal Language — Rewriting Gates for All Business Types	2026-03-24
RESEARCH-111-authentication-strategy	RESEARCH-111: Authentication Strategy for Self-Hosted Platform	** 2026-03
RESEARCH-112-addendum-2-trust-antiagency-whereu	RESEARCH-112 Addendum 2: Trust Validation, Anti-Agency Movement & WhereU Analysis	** 2026-03
RESEARCH-112-addendum-3-trust-tools-landscape	RESEARCH-112 Addendum 3: Trust Validation Tools — Complete Landscape	** 2026-03
RESEARCH-112-addendum-funnel-is-dead	RESEARCH-112 Addendum: The Funnel Is Dead — What This Changes	** 2026-03
RESEARCH-112-competitive-analysis-ai-agency-gtm	RESEARCH-112: Competitive Analysis — AI Agency Landscape, SEQ Market & GTM Strategy	** 2026-03
RESEARCH-113-emberfi-newsletter-strategy	RESEARCH-113: EmberFi Newsletter & Email Capture Strategy	** 2026-03
RESEARCH-114-client-customer-authentication	RESEARCH-114: Client & Customer Authentication -- Product-Level Auth Strategy	** 2026-03
RESEARCH-115-financial-ai-agent-feasibility	RESEARCH-115: Financial AI Agent Feasibility	** 2026-03
RESEARCH-116-beehiiv-competitive-intel	RESEARCH-116: beehiiv Competitive Intelligence & HitCreate Newsletter Platform Strategy	** 2026-03
RESEARCH-117-aquapro-market	RESEARCH-117 — AquaPro Market Analysis	** 2026-03
RESEARCH-118-neobank-autopsy-odoo-play	RESEARCH-118: AU Neobank Autopsy + The Odoo Play for Financial Services	** 2026-03
RESEARCH-119-competitive-landscape	RESEARCH-119: Competitive Landscape — ScoreApp, ClickFunnels, Mailchimp, SmashSend + Emerging Play	** 2026-03
RESEARCH-120-odoo-partnership-ecosystem-fit	RESEARCH-120: Odoo Partnership & Ecosystem Fit	** 2026-03
RESEARCH-121-email-infrastructure	RESEARCH-121: Email Infrastructure -- Receiving, Sending, and Domain Configuration for HitCreate
RESEARCH-122	RESEARCH-122: CDN & Speed Optimization for cloudide-prod	** 2026-03
RESEARCH-123-email-platform-strategy	RESEARCH-123: Email Platform Strategy for HitCreate
RESEARCH-124-hitcreate-trust-layer-strategy	RESEARCH-124: HitCreate as the Trust Layer — Product Strategy & Capabilities Audit	** 2026-03
RESEARCH-125-cdn-speed-optimization	RESEARCH-125: CDN & Speed Optimization — Deep Research	** 2026-03
RESEARCH-125-email-deliverability	RESEARCH-125: Email Deliverability -- IP Reputation, Blacklisting, Warm-Up, and Risk Management for
RESEARCH-126-business-presence-api-stack	RESEARCH-126: Business Presence API Stack	** 2026-03
RESEARCH-126-domain-management-strategy	RESEARCH-126: Domain Management & Reselling Strategy	** 2026-03
RESEARCH-127-email-as-a-service	RESEARCH-127: Email as a Service -- Should HitCreate Productize Email?
RESEARCH-127-veridian-chain-feasibility	RESEARCH-127: Veridian Chain / VeryGoodCoin — Deep Feasibility Analysis	** 2026-03
RESEARCH-128-bdm-dashboard-solo-agency-operations	RESEARCH-128: BDM Dashboard — Solo Agency Operations Tool Design	** 2026-03
RESEARCH-129	RESEARCH-129: Google Workspace Integration — Drive Input Pipe + Gmail Automation + Useful Addition	** 2026-03
RESEARCH-130-aquapro-ux-flows	RESEARCH-130 — AquaPro UX Research: How Hobbyists Track Water Parameters	** 2026-03
RESEARCH-131	RESEARCH-131: Sentinel Product Expansion Deep Dive	** 2026-03
RESEARCH-132	RESEARCH-132: Industry-Specific Trust Score Weighting	** 2026-03
RESEARCH-132-user-success-product-love	RESEARCH-132: User Success & Product Love — Come, Return, Refer	** 2026-03
RESEARCH-133	RESEARCH-133: First Principles Challenge — Trust Score Audit	** 2026-03
RESEARCH-133-sendii-vision	RESEARCH-133: Sendii -- Vision, Product Definition, and Architecture for HitCreate's Communications
RESEARCH-134-SENTINEL-MARKET-REALITY	RESEARCH-134: Sentinel Market Reality — Deployment Landscape & Strategic Pivot Analysis	** 2026-03
RESEARCH-135-audit-at-scale-lead-qualification	RESEARCH-135: Audit-at-Scale Lead Qualification -- Viability Analysis for Agency Growth	** 2026-03
RESEARCH-135	RESEARCH-135: Audit-at-Scale Lead Qualification Model	** 2026-03
RESEARCH-136-anti-canva-brand-autopilot	RESEARCH-136: Anti-Canva — Brand Autopilot & Physical Fulfillment for Under-Resourced Professional	** 2026-03
RESEARCH-137-hitcreate-brand-identity	RESEARCH-137: HitCreate Brand Identity — Competitive Landscape & Brand Love	** 2026-03
RESEARCH-138	RESEARCH-138: Trust-Building Audit Report Design — Psychology, Structure, and Conversion	** 2026-03
RESEARCH-139-ai-automations-packaged-service	RESEARCH-139: AI Automations & Integrations as a Packaged Service	** 2026-03
RESEARCH-140-celebrating-founders-bdms	RESEARCH-140: HitCreate Brand — Celebrating Founders & BDMs	** 2026-03
RESEARCH-141	RESEARCH-141: Free Tool Lead Magnets — Feasibility, Technical Stack, Competitive Landscape & GTM S	** 2026-03
RESEARCH-142	RESEARCH-142: AI Search Readiness Score — Scoring Methodology, Credibility Strategy & Technical Bl	** 2026-03
RESEARCH-143	RESEARCH-143: AI Infrastructure Landscape — VC Thesis, Revenue Reality, Agent Era & What to Build	** 2026-03
RESEARCH-144-email-nurture-strategy	RESEARCH-144: Email Nurture Strategy for Audit Report Conversion	** 2026-03
RESEARCH-144	RESEARCH-144: The So What — HitCreate Strategic Synthesis & 5-Move Action Plan	** 2026-03
RESEARCH-145-seo-crisis-multi-page-playbook	RESEARCH-145 — HitCreate Single-Page SEO Crisis: Why One Page Fails and the Multi-Page Playbook	** 2026-03
RESEARCH-146-site-architecture	HitCreate.io Site Architecture for SEO + GEO
RESEARCH-147	RESEARCH-147: Subdomain Scaling Architecture — Caddy, Wildcard TLS, Client Site Management	** 2026-03
RESEARCH-148	RESEARCH-148: Sentinel vs Lynis vs Wazuh — Competitive Deep Dive
RESEARCH-149	RESEARCH-149: Build vs Buy — Cold Email Outreach for HitCreate	** 2026-03
RESEARCH-150-SENTINEL-EDUCATION-FUNNEL	RESEARCH-150: Sentinel Education Funnel — Security Scanner as Learning Gateway	** 2026-03
RESEARCH-151	RESEARCH-151: Free Tool to Agency Conversion - Unified GTM Strategy	** 2026-03
RESEARCH-152-sendii-technical-implementation	RESEARCH-152: Sendii Technical Implementation — JMAP Webmail Research	** 2026-03
RESEARCH-153	RESEARCH-153: Free Tool + Education + Agency Conversion — Unified GTM Playbook for HitCreate	** 2026-03
RESEARCH-154	RESEARCH-154: AU Digital Agency Competitor Landscape + FYI Digital Site Architecture	** 2026-03
RESEARCH-155-content-repurposing-pipeline	RESEARCH-155: Content Repurposing Pipeline — Automated Content Atomization for AI-First Agency	** 2026-03
RESEARCH-158	RESEARCH-158: Safetii — Take 5 Safety PWA Deep Research	** 2026-04
RESEARCH-159	RESEARCH-159: Safetii — AI Intelligence, Grants, Charity Structure & Data Strategy	** 2026-04
RESEARCH-160	RESEARCH-160: Safetii Two-Phase Take 5 — Solving Compliance Theatre with AI-Assisted Reassessment	** 2026-04
RESEARCH-161	RESEARCH-161: Safety Assessment App Competitor Website Analysis	** 2026-04
RESEARCH-162	RESEARCH-162: Infrastructure Scaling Strategy	** 2026-04
RESEARCH-163	RESEARCH-163: Code Standards, Language Policy & Deployment Procedures	** 2026-04
RESEARCH-164	RESEARCH-164: Safetii Org Rollout -- Multi-Tenant Architecture, User Hierarchy, Dashboard UX, and Mi	** 2026-04
RESEARCH-165	RESEARCH-165: Safetii Cloud Migration — Supabase Cloud + Cloudflare R2	** 2026-04
RESEARCH-166	RESEARCH-166: Domain Registrar Strategy — OpenSRS vs Cloudflare vs Synergy Wholesale	** 2026-04
RESEARCH-167	RESEARCH-167: UX Flow Quality Gate -- Systematic UI/UX Validation for Feature Additions and Multi-Pa	** 2026-04
RESEARCH-168	RESEARCH-168: Open Source AI Infrastructure — Power Concentration, Developer Rights, and HitCreate	** 2026-04
RESEARCH-169	RESEARCH-169: Global Deployment Gate -- Security Audit, Vulnerability Assessment, and Going-Live Che	** 2026-04
RESEARCH-171	RESEARCH-171: CI Pipeline Hardening — Private Package Auth, Secret Management, and Workflow Templa	** 2026-04
RESEARCH-172	RESEARCH-172: AI Agent Security & Architecture Improvements	** 2026-04
RESEARCH-174	RESEARCH-174: Safetii Brand Identity, Domain Strategy, App Store Naming & Distribution Optimisation	** 2026-04
RESEARCH-175-addendum-ux-persistence	RESEARCH-175 Addendum — UX, Persistence & Min Min Convergence	** 2026-04
RESEARCH-175-lightweight-ide-pwa	RESEARCH-175: Lightweight IDE PWA — Replace code-server with Custom Terminal	** 2026-04
RESEARCH-177	RESEARCH-177: Safetii AI Integration Options -- Voice Input & Smart Safety Suggestions	** 2026-04
RESEARCH-179	RESEARCH-179: Voice Capture Integration for Safetii PWA	** 2026-04
RESEARCH-180	RESEARCH-180: Safetii — Smart AI Pipeline for Hazard Identification & Control Suggestions	** 2026-04
RESEARCH-181	RESEARCH-181: Safetii JSA/SWMS/SOP Implementation — Data Model, UI Architecture, AI Generation Eng	** 2026-04
RESEARCH-182	RESEARCH-182: Project Kickstart v2 — Multi-Project Architecture, AI-Agent Scaffolding, and Sprint	** YYYY-MM
RESEARCH-183	RESEARCH-183: AI-Native Field Service — Org Charts, Task Maps, Competitive Gaps, AI Disruption
RESEARCH-184	RESEARCH-184: SafetyCulture Competitive Intelligence (2025-2026)	** 2026-04
RESEARCH-185	RESEARCH-185: Tool & Method Audit — SEO Machine, BlitzMetrics SOPs, Loongclaw, Finance Repos	** 2026-04
RESEARCH-193	RESEARCH-193: The Implementation Wedge — AI Operator Model for Field Service
RESEARCH-198	RESEARCH-198: Windows 11 Pro Remote Dev Workstation Setup	** 2026-04
RESEARCH-199-bookii-chatii-embed	RESEARCH-199: Availability Stack — Booking & Chat Embed First Principles	** 2026-04
RESEARCH-200-addendum-implementation	RESEARCH-200 Addendum: Availability Stack — Implementation & Build Guide	** 2026-04
RESEARCH-200-chatii-messaging-automations	RESEARCH-200: Chatii Deep Dive — Meta DM, WhatsApp, SMS, Call-Back Automations	** 2026-04
RESEARCH-200-local-trader	(untitled)	2026-04-06
RESEARCH-201-howtodothat	(untitled)	2026-04-06
RESEARCH-202-spottah	(untitled)	2026-04-06
RESEARCH-203-obl-freebizguide	(untitled)	2026-04-06
RESEARCH-205	RESEARCH-205: Australian CLBG as Sole Founder — Full Legal Analysis	** 2026-04
RESEARCH-206-memory-systems-gap-analysis	RESEARCH-206: Memory Systems — Gap Analysis & Path Forward	** 2026-04
RESEARCH-207	RESEARCH-207: Two-Node Workflow Architecture for Solo AI-First Agency	** 2026-04
RESEARCH-208	RESEARCH-208: Unified Intelligence Ingestion — Email + Finance + Distributed Compute	** 2026-04
RESEARCH-209	RESEARCH-209: The Mobile-First AI Development Workflow -- What Mister Actually Needs	** 2026-04
RESEARCH-210-local-trader-seq-landscape	(untitled)	2026-04-07
RESEARCH-211-local-trader-marketplace-evolution	(untitled)	2026-04-07
RESEARCH-212-local-trader-ux-design	(untitled)	2026-04-07
RESEARCH-214	RESEARCH-214: Local AI for a Solo Agency — Open Models, GPU Investment, and Whether It's Worth It	** 2026-04
RESEARCH-215	RESEARCH-215: Compute Strategy — Edge AI Lease Model, GPU Farm, Mac Mini, and the HitCreate Hardwa	** 2026-04
RESEARCH-216	RESEARCH-216: Edge AI Lease Model — Objections, Spare Compute Monetisation, and Why Not Just Use A	** 2026-04
RESEARCH-217	RESEARCH-217: The CAO Gap — From Chief Agent Officer to Edge AI Managed Service Provider	** 2026-04
RESEARCH-218-addendum-competitors	RESEARCH-218 Addendum: Extended Competitor Analysis — Timely, ServiceTitan, simPRO, Tradify, Jobbe	** 2026-04
RESEARCH-218-addendum-jobber-calendly	RESEARCH-218 Addendum: Jobber & Calendly Deep Dive	** 2026-04
RESEARCH-218-availability-stack-competitive	RESEARCH-218: Availability Stack — Competitive Deep Dive	** 2026-04
RESEARCH-219	RESEARCH-219: Privacy Act AI Compliance Product — The Door-Opener for Edge AI	** 2026-04
RESEARCH-220	RESEARCH-220: Product Validation Comparative — 5 Ideas Deep Research	** 2026-04
RESEARCH-221	RESEARCH-221: Website Builder Market Analysis — Competitive Landscape, Pricing, AI Quality, and Hi	** 2026-04
RESEARCH-222	RESEARCH-222: Knowledge Library — Self-Hosted Tooling Deep Research	** 2026-04
RESEARCH-223	RESEARCH-223: LLM Training Corpus Management — Self-Hosted Architecture	** 2026-04
RESEARCH-223-SUPPLEMENT	RESEARCH-223 Supplement: Automation Layer — Practical Gaps Filled	** 2026-04
RESEARCH-224	RESEARCH-224: Memory Architecture v2 — From Flat Files to Intelligent Store	** 2026-04
RESEARCH-225	RESEARCH-225: Self-Hosted File Storage & Sync -- Cross-Platform Architecture for 5-Device Ecosystem	** 2026-04
RESEARCH-226	RESEARCH-226: Agent Runtime Migration — OpenClaw to ZeroClaw	** 2026-04
RESEARCH-227	RESEARCH-227: Self-Hosted File Tools — Data Sovereignty, Technical Feasibility, Architecture	** 2026-04
RESEARCH-228	RESEARCH-228: The AI Agent Landscape — Living Reference Document
RESEARCH-229-addendum-1-agent-control	RESEARCH-229 Addendum 1: Agent Control Layer — MCP + API Coverage	** 2026-04
RESEARCH-229	RESEARCH-229: Self-Hosted Agency Toolbox — Beyond File Tools	** 2026-04
RESEARCH-230	RESEARCH-230: Min Min Enhancement Roadmap	** 2026-04
RESEARCH-231	RESEARCH-231: Server Knowledge Wiki — Auto-Discovery Architecture for Solo Operator Infrastructure	** 2026-04
RESEARCH-232	RESEARCH-232: Video & Screen Recording Analysis Pipeline — Reverse Engineering Competitor UX with	** 2026-04
RESEARCH-233	RESEARCH-233: Live Iteration Architecture — How Lovable, Replit, Bolt & v0 Handle Preview, Edit &	** 2026-04
RESEARCH-234	RESEARCH-234: The 3-Concept Presentation Model — Safe, Elevated, Wildcard for Client Web Design De	** 2026-04
RESEARCH-235	RESEARCH-235: Client Feedback, Annotations, Asset Management & Revision Pipeline — Implementation	** 2026-04
RESEARCH-236	RESEARCH-236: Auth Architecture First-Principles Evaluation	** 2026-04
RESEARCH-237	RESEARCH-237: CAO Deployment Architecture — Dedicated AI Agent for Micro-Business Clients	** 2026-04
RESEARCH-238	RESEARCH-238: Comprehensive Auth Architecture — 2FA, Device Trust, Session Management, and SaaS Pa	** 2026-04
RESEARCH-239	RESEARCH-239: CAO as a Service — Full Implementation Architecture	** 2026-04
RESEARCH-240	RESEARCH-240: Authelia Production Hardening — Redis Sessions, Bot Blocking, WebDAV Fix, 2FA, iPad	** 2026-04
RESEARCH-242	RESEARCH-242: AI as Persistent Business Partner	** 2026-04
RESEARCH-243	RESEARCH-243: Troveii Product Redefinition — Email-Native CRM with Multi-Provider Connector Archit
RESEARCH-244	RESEARCH-244: Visual Client Feedback Tools — Build vs Buy for HitCreate Agency	** 2026-04
RESEARCH-245	RESEARCH-245: Visual Feedback Tool — Deep UX/UI Research for Non-Technical Client Feedback Flows	** 2026-04
RESEARCH-246	RESEARCH-246: File Hub — Self-Hosted Drive Replacement
RESEARCH-247	RESEARCH-247: Video-to-Knowledge Pipeline — Automated Transcription, Summarization & Corpus Integr	** 2026-04
RESEARCH-248-compute-migration	(untitled)
RESEARCH-248	RESEARCH-248: HitCreate Review — Visual Feedback Tool Architecture	** 2026-04
RESEARCH-249	RESEARCH-249: Incident Reporting & After-Action Review Framework for Kartaway	** 2026-04
RESEARCH-250	RESEARCH-250: Agent Memory Architecture — Why Tool-Based Memory Fails and What Replaces It	** 2026-04
RESEARCH-251	RESEARCH-251: SaaS Meltdown — Indie Dev Playbook When AI Eats Software	** 2026-04
RESEARCH-252	RESEARCH-252: Nicole's Sales Intelligence OS — Architecture Decision & PRD	** 2026-04
RESEARCH-253-content-automation-pipeline	RESEARCH-253: Content Automation Pipeline — Daily Publishing at Scale for Solo Agency	** 2026-04
RESEARCH-254	RESEARCH-254: Document Engine — AI-Automated Agency Deliverables	** 2026-04
RESEARCH-255	RESEARCH-255: Sales Intelligence Tools — Setter/Closer Frameworks, Market Landscape & Product Stra
RESEARCH-256	RESEARCH-256: HitCreate Backend Architecture — Auth, Waitlist, Forms, Beta Access	** 2026-04
RESEARCH-257	(untitled)
RESEARCH-258	RESEARCH-258 — HitCreate Delivery Platform: Unified Autonomous Deploy Architecture	** 2026-04
RESEARCH-259	RESEARCH-259: Trust Audit 2.0 — Data Sources, Real Measurements, Scoring Methodology	** 2026-04
RESEARCH-260	RESEARCH-260: Lead Magnet Strategy — What Converts, Audit as Door-Opener	** 2026-04
RESEARCH-261	RESEARCH-261: Deployment Discipline — Scripts, Automation, Cache Busting, When-To-Add Guardrails
RESEARCH-262	(untitled)
RESEARCH-263	(untitled)
RESEARCH-264	RESEARCH-264 — HitCreate Media Generation Pipeline	** 2026-04
RESEARCH-265-hitcreate-stack-fit-12-month-plan	(untitled)	2026-04-17
RESEARCH-266	RESEARCH-266: Active AI Agent Architecture for Closr — Autonomous Sales Workflow, Chat Co-pilot, V
RESEARCH-267	RESEARCH-267 — Sovereign Agent Stack: Provider-Neutral Architecture, Prompt Injection Defense, MCP	** 2026-04
RESEARCH-268-hitcreate-internal-operating-plan	(untitled)	2026-04-18
RESEARCH-269	(untitled)
RESEARCH-270	(untitled)
RESEARCH-271	(untitled)
RESEARCH-273	(untitled)
RESEARCH-274	(untitled)
RESEARCH-275	RESEARCH-275: HitCreate Domain Architecture — Lovable-Style Consolidation
RESEARCH-276	RESEARCH-276: VPS Load Management — IDE Process Isolation, cgroups, Offload Architecture	** 2026-04
RESEARCH-277	RESEARCH-277: Unified Agent Memory — Architecture, External Landscape, Consolidation Plan	** 2026-04
RESEARCH-278-ai-cfo-au-remittance-landscape	RESEARCH-278 — AI CFO Agent + AU Remittance Landscape Scan
RESEARCH-279-loop-closure-thesis	(untitled)
RESEARCH-AI-APP-BUILDERS-2026	AI App/Product Builder Tools: Competitive Landscape Analysis
RESEARCH-BRIEFS-4PROJECTS	(untitled)	2026-04-06
RESEARCH-CHAT-ARCHITECTURE	RESEARCH-051 — Discord-Style Chat Architecture for Min Min PWA	2026-03-14
RESEARCH-COMPETITORS-2026-03-24	Competitor & Platform Research: Obsidian MCP, Google Stitch, Cuttable	** 2026-03
RESEARCH-NEWSLETTER-INDUSTRY	Newsletter Industry & Email-First Media Companies: Deep Research Brief	** 2026-03
RESEARCH-newsletter-signup-growth	Newsletter Signup & Growth Research for EmberFi Life Score	** 2026-03
RESEARCH-SEO-SAFETII-MARKETING	RESEARCH: SEO Strategy for Safetii Marketing Site	** 2026-04
RESEARCH-STANDARDS-v2	(untitled)	2026-04-06

HitCreate — Whitepaper v3.2

AI-Native Marketing Infrastructure — the Platform That Closes the Loop A portfolio brand of FYI United Group Pty Ltd (ACN 665 393 546)

Document version: 3.2 (DRAFT — 2026-04-22) Status: Draft, pending founder sign-off on twenty open decisions (see §13) Supersedes: v3.1 amendment + v3.0 (both archived; changelog §14) Informed by: RESEARCH-279 (/root/.openclaw/workspace/docs/RESEARCH-279-loop-closure-thesis.md) and its seven underlying research tracks.

0. Purpose & what changed

v3.0 framed HitCreate as a headless agentic platform with three Surfaces (App / Agent / Ecosystem), Agency retainer as revenue anchor, and five defensible pillars (headless multi-surface, agentic orchestration core, primitive compounding, ecosystem-native, vertical context).

v3.1 concretised the App Surface V1 — seven primitives, eight-step intake, setup-fee concierge phase, two-archetype validation-gated rollout.

v3.2 is a structural reframe, driven by RESEARCH-279 findings:

Loop closure is promoted from "one of five pillars" to the singular moat claim. All other pillars are enablers, not standalone moats. This is a sharpening, not a contradiction — v3.0 already listed loop closure as pillar two; v3.2 centres on it.
Agency retainer is de-anchored. v3.0's 60% Agency target was an economic argument (most-predictable revenue). With loop closure as the moat, self-serve App + Ecosystem (MCP/SKILL distribution) + opt-in white-label reseller carry the revenue shape. Agency becomes opportunistic (NISARD-flagship pattern), not strategic. Target mix flips to 55% self-serve / 20% white-label / 15% ecosystem / 10% Agency.
Vertical scope narrows from aspirational breadth to two named verticals: SEQ waste operators (via Nicole) and AU fractional-professional services (via Nisbet). Everything else is templated horizontal capability added after both verticals validate.
NISARD is recast as a process-validation engagement, not a vertical-depth proof. Honest framing.
Phase B gate is time-boxed at 90 days from NISARD completion. Calendar-agnostic "we'll know when we know" framing is removed.
Seven canonical market shifts replace six (email deliverability crisis promoted; v3.1 numbers on ChatGPT Ads and Gen Z corrected). Three additional shifts flagged (browser agents, LinkedIn specifically, AU Privacy Act ADM deadlines).
Competitive threat model rewritten. Real threats are Klaviyo (5/5, loop-closed + public-company pressure to expand horizontally) and HubSpot Breeze (4/5). Lovable, GHL, Bolt, v0 are positioning-noise, not strategic threats. Frontier labs are going up-market (enterprise + GSI), not down into SMB — the compression risk is the skill-marketplace channel, not lab direct products.
Technical feasibility is affirmed at V1 scale (solo + contractor friends can ship the 7-primitive loop-closure platform in 6 months). "Compete with GHL head-on" explicitly requires $2-5M AUD + 15-25 FT + 18 months — not this thesis.

Sections of v3.0 / v3.1 not changed here remain load-bearing and unchanged.

0.5 Status (April 2026)

What exists: Min Min agent deployed on Hetzner CX42 Singapore, 17+ Docker containers (self-hosted Supabase, LiteLLM, Redis, n8n, Caddy, code-server). Four-tier autonomy ladder. Three-tier memory architecture. ORBIT AI effort-tracking wired to LiteLLM + Supabase. Domain architecture secured: hitcreate.io marketing, hitcreate.dev dev/tooling, hitcreate.app user content (per RESEARCH-275).

What is in flight: NISARD Pty Ltd — external prototype engagement for a fractional CFO practice. Recast as process-validation engagement (not first commercial customer, not first vertical proof). Validates the 8-step intake, DeploymentSpec output, 7-primitive generation chain, Bookii + Claude Design + Canva orchestration.

What is not yet built: The full App Surface. The Agent Surface. The ecosystem MCP servers. The agent library beyond Brand System Agent. The loop-closure infrastructure. The PLG acquisition funnel across any surface. White-label reseller tier.

What changed since v3.1 (2026-04-22): RESEARCH-279 synthesis of 7 parallel research tracks sharpened the thesis and competitive read. Key external events since v3.1: Klaviyo Composer launch (March 2026), HubSpot Spring 2026 Spotlight "Loop Marketing" framework + outcome-based agent pricing, Shopify Agentic Storefronts defaulted-on across 5.6M merchants (24 Mar 2026), ChatGPT Ad CPMs compressed from $60 → $25-35 with minimum cut to $50K, Canva AI 2.0 scaling. The compression window narrowed from v3.0's "12-24 months" to an evidence-weighted ~18 months to Q4 2027 for prosumer end-to-end compression, with ~24-30 months for vertical + loop-closure defensibility.

1. Thesis

HitCreate is the AI-native marketing infrastructure platform that closes the loop. Every other AI marketing tool generates and walks away. HitCreate generates, deploys, measures, and compounds — within a specific customer archetype, across customers, with anonymised pattern extraction, validated by a falsifiable compounding metric.

1.1 The load-bearing claim

In an AI-era marketing stack, generation is commodity. Claude, GPT-5, Gemini, Llama all produce comparable copy, pages, sequences, visuals. What separates durable products from wrappers is whether deployed-asset performance flows back into the generator to make the next iteration measurably better. Without that loop, every tool is a prompt template over a frontier model.

Loop closure is operationally definable (§3). It is architecturally testable (§3.3). It is falsifiable at scale thresholds (§3.6). It compounds superlinearly with deployment volume within an archetype. It cannot be replicated by a frontier-lab orchestrator alone because the lab does not own the deployments.

This is the singular moat claim. Everything else in this whitepaper is how we build, market, and defend it.

1.2 The founder's earlier framing, sharpened

The founder's working thesis — "LLMs need loop closure, everyone else is a wrapper in a vertical" — is directionally correct but half-right on "wrapper." RESEARCH-279 Track 4 found ~60% of named competitors have real moats (Lovable's distribution+capital, Bolt's WebContainers, Canva's 265M MAU, Replit's infra depth). The sharpened form:

This is forward-pointing, sellable, and testable. "They're wrappers" is a private mental model; it is not the public pitch.

1.3 The strategic bet — updated

HitCreate wagers five things:

Generation is commodity and will remain commodity. Closed-loop generation is not commodity because it requires deployments the frontier labs do not own.
Attribution at single-small-business scale is structurally broken. Cookies unreliable, MTA dead, iOS LTP stripping UTMs. The only way a loop can be closed honestly at SMB scale is through cross-customer pooling within a specific archetype.
Vertical context is a ~20% moat, not an 80% moat. The durable 20%: warm relationships inside the vertical + deployed-customer benchmark data. HitCreate invests in two verticals deeply (SEQ waste + AU fractional-professional) rather than spreading across five.
Frontier labs go up, not down. Anthropic, OpenAI, Google, Meta are building for enterprise + GSI partnerships. The SMB vertical layer is being left open deliberately. The compression risk is the skill-marketplace channel (when a "Skill: SMB marketing funnel" + MCP Apps reach 70% of HitCreate's value), not direct lab products.
A solo founder + rotating technical friends can ship V1. RESEARCH-279 Track 7 validates this at 6-month horizon for 7 primitives + per-customer loop closure + one archetype. It does NOT support "compete with GHL head-on" — that is a $2-5M / 15-25 FT / 18-month bet.

1.4 The structural advantage

HitCreate's advantage over incumbents (GoHighLevel, HubSpot, Jasper, Klaviyo) is zero legacy architecture. Event-stream first data model from day one. Ecosystem-standard artefacts from day one. No proprietary format to unwind, no pre-agentic UI debt, no AI feature bolted onto a legacy core.

This advantage is real but not permanent. The ~18-month window is the time to establish category position before either (a) incumbents ship coherent agentic rebuilds (Klaviyo already has — Composer, March 2026), or (b) frontier-lab skill marketplaces reach "good enough" for SMB horizontal use. Watch §11 for monitoring signals.

2. What HitCreate is, and isn't

2.1 Is

HitCreate is AI-native marketing infrastructure that sits on top of whatever the customer's business actually is. It generates, deploys, measures, and iterates across seven primitives (pages, forms, scorecards, email sequences, SMS sequences, unified inbox, CRM + pipeline). It closes the loop between deployed-asset performance and future generation, within an archetype, across anonymised customer patterns.

2.2 Isn't

HitCreate does not build:

Full apps (Lovable, Bolt, v0, Replit, Base44 own that category)
Dev tools (Cursor, Windsurf own that category)
Operations platforms / industry ERPs (ServiceM8, Simpro, HubSpot CRM at enterprise scale own that)
Video generation (Sora, Veo, Runway)
Ad buying / ad account management (Meta Ads Manager, Google Ads, ChatGPT Ads — HitCreate stays upstream of the buy)
Social media scheduling (Buffer, Later, Hootsuite — low-margin, crowded)
Scale-up CRM at 100K+ contacts (HubSpot owns; HitCreate stays at pipeline-view-for-builders)
Influencer marketplaces (Aspire, GRIN, Creator.co)
Agency services business as anchor revenue (see §8)

2.3 The integration posture

HitCreate sits on top of the customer's business:

Ecom on Shopify? HitCreate generates the cart-recovery + quiz + zero-party scorecard.
SaaS on Next.js / their-own-Lovable-app? HitCreate generates waitlist → trial → activation.
Service business on ServiceM8 / Simpro? HitCreate generates lead-gen + booking + review.

HitCreate calls Claude Design for polished visuals, Canva for templated visuals, Resend for email, Twilio for SMS, Cloudflare Pages for deploy, Stripe for billing, Bookii for scheduling. HitCreate does not rebuild any of these — it orchestrates, instruments, and closes the loop on them.

3. The loop, operationally

3.1 Definition — the four criteria

A deployment pipeline is loop-closed if and only if all four are true:

Deployed asset emits a performance signal. Event captured, attributed to the specific asset version.
Signal is normalised across runs into a metric comparable across customers/deployments (conversion rate, click rate — not raw count).
Signal updates generator behaviour for the next generation via context injection, performance-weighted retrieval, fine-tuning, or reward modelling.
Next generation is measurably better on the same metric, compounding across iterations (not a one-shot improvement).

Missing any of the four and it's not loop closure — it's a component of loop closure. Analytics dashboards miss #3. Standard A/B tools miss #3. Personalisation engines miss #4 unless the selection signal updates the generator. RAG without performance weighting misses #2/#3. Only a system with all four closes the loop.

3.2 Architecture by phase

Phase	Months	Architecture	Primitives closed	Data threshold
V1	0–6	Prompt-context injection + Thompson-sampling bandits	Email/SMS subject-line bandits; page/form/scorecard context injection	5 winners per archetype
V1.5	6–12	Performance-weighted retrieval (pgvector + conversion-weighted RRF)	Pages, scorecards, email bodies	50 winners per archetype
V2	12–24	LoRA adapters per archetype	Per-vertical fine-tuned generators	200+ winners per archetype
V3+	24+	Reward models / RLAIF (if data volume supports)	Cross-vertical optimisation	1,000+ winners

HitCreate will not claim V3 architecture while shipping V1 implementation. Honest scale-of-claim is the credibility play: "We close the loop within-customer on email/SMS subject lines today. We are building toward cross-customer compounding; measurable improvement at customer #20 per archetype." That is defensible in a technical diligence conversation. "Our AI learns from your data" is not.

3.3 Per-primitive signal discipline

Primitive	V1 signal	V1 feedback mechanism	Reliable-signal threshold
Pages	Form-submit rate (7-day rolling)	Context injection of top-5 past winners in archetype	≥500 pageviews/deployment
Forms	Conversion rate (submit ÷ view)	Pattern library — top-quartile field configs per archetype × use-case	≥200 views/month
Scorecards	Completion rate	Question-bank library per vertical	≥50 completions
Email sequences	Click rate + reply rate	Thompson-sampling MAB on subject; context injection on body	≥1,000 deliveries
SMS sequences	Reply rate > click rate	MAB on opener; context injection on body	≥500 deliveries
Unified inbox	Draft-edit-distance per reply	Per-customer style capture (never cross-pooled — voice = brand IP)	per-customer always
CRM + pipeline	Pipeline-stage transitions (logged V1, feedback V2)	V2: full-funnel attribution to upstream primitives	50+ deals per archetype

Email subject-line bandit is the one primitive where V1 loop closure is legitimately high-quality from day 1. Ship this first. Prove it inside one customer in one campaign. Every prospect pitch demonstrates real compounding. Beats hand-waving.

3.4 Attribution reality — the hardest honesty cost

Per RESEARCH-279 Track 1 §4:

Third-party cookies unreliable (Google reversed deprecation April 2025; but Safari+Firefox ~50% of web cookieless, consent rates collapsing).
Multi-touch attribution broken (channel tools all overcount).
iOS 17 Link Tracking Protection strips UTM parameters.
Multi-touch attribution (MTA) structurally unreliable.

What survives at 2026:

First-party + server-side tracking (Meta CAPI, Google Enhanced Conversions) — partial; fails on cold traffic.
Geo-lift incrementality — gold standard; needs national ad spend (fails at SMB scale).
MMM — needs ≥2 years of clean channel data (fails at SMB scale).
AI-citation share-of-voice — measurable but upstream; doesn't drive signup-level signal directly.

At single-small-business scale (300-1,000 pageviews/week, 2-5% conversion):

Per-customer attribution is directionally informative but not clean enough for automated feedback loops.
A 5% → 7% per-iteration improvement on 100 visits is almost always statistical artefact.
Cross-customer aggregation within archetype is not optional. It is the only path to statistical power.

HitCreate's posture: publicly admit the attribution blind spots. Competitors either don't close the loop (Jasper, Copy.ai) or claim more than they can prove (most "AI marketing platforms"). HitCreate claiming less than competitors while proving more is the credibility differentiator.

3.5 Cross-customer pooling — privacy posture

Four patterns evaluated in RESEARCH-279 Track 1 §5.3:

Pattern A — raw pooling under T&C cover (Klaviyo, Attentive, Shopify Magic do this). Rejected at HitCreate's current scale; legal risk not tolerable until we're big.
Pattern B — anonymised pattern extraction. Brand names, PII stripped; only structural/stylistic patterns pooled. Recommended default.
Pattern C — federated learning / differential privacy. V2+ (too much engineering overhead for V1).
Pattern D — opt-in aggregate benchmarks. Customers opt-in; their anonymised metrics contribute to vertical-aggregate benchmarks. Recommended enhancement.

V1 posture: Pattern B default + Pattern D opt-in. This is the privacy moat HitCreate gets that Klaviyo/Attentive/Shopify Magic can't articulate cleanly — they are Pattern A under T&C cover. HitCreate's "anonymised + opt-in benchmarks" is cleaner to explain to a sceptical scorecard-completing prospect.

3.6 Falsification bar

The primary test: for a given primitive × vertical archetype, plot rolling-median conversion across rolling 10-deployment windows. Loop closure is confirmed if the slope is positive at p<0.10 over N≥50 deployments and a feedback-off control arm is flat or negative on the same cohort (synthetic-control via LLM-as-judge is acceptable where RCT is ethically unavailable).

At realistic V1 volumes (3-10 concierge customers by month 6):

Email subject MAB convergence within customer: feasible today. 1 customer, 1 campaign.
Per-customer loop closure on pages: borderline. Needs 3+ months + ≥500 visits/week.
Cross-customer within-vertical loop closure on pages: not feasible until V2. Needs ≥20 customers × 6 months per archetype.
Platform-wide cross-vertical: V3+ only. Needs 100+ customers, 12+ months.

HitCreate commits to publishing the falsification methodology. If the metric doesn't compound by the threshold promised, we say so publicly. That's how you beat incumbents who claim more than they can prove.

3.7 The one-paragraph pitch

Truthful, technically defensible, falsifiable. This paragraph beats any "our AI learns from your data" pitch in a technical diligence conversation.

4. Competitive positioning

4.1 The threat matrix (from RESEARCH-279 Track 3 + 4)

Rank	Competitor	Threat	Kind
1	Klaviyo	5/5	Strategic — Composer live, 0.5T interactions, public-market pressure to expand horizontally
2	HubSpot Breeze	4/5	Strategic — outcome-based pricing, Spring 2026 "Loop Marketing" framing
3	Canva AI 2.0	4/5	Strategic + positioning — 265M MAU sleeper, if they pivot to SMB marketing infra
4	Attentive	3/5	Strategic (adjacent) — SMS loop-closed, ecom-only today
5	Shopify Sidekick/Magic	3/5	Adjacent / partner-candidate — ecom-only
6	GoHighLevel	3/5	Positioning — price anchor ($97-497/mo); pre-agentic architecture
7	Typeface + AI-native (Jasper, Copy.ai, Writer)	3/5 collectively	Positioning — none loop-closed yet
8	Braze	2/5	Reference architecture (study) — enterprise only
9	Bird, Sierra, Zapier, n8n, Make, Salesforce	1-2/5	Monitor / deprioritise
10	Lovable, Bolt, v0, Replit, Base44	1/5 as competitors; high as positioning noise	Different stack layer

4.2 Positioning lines — the five that cut through

vs Lovable: "Lovable builds the app. HitCreate builds the marketing system on top of whatever your app is."
vs GoHighLevel: "GHL is a pre-agentic platform with AI bolted on. HitCreate is agent-native from day one — primitives generated, deployment automatic, and the loop closes."
vs Canva AI 2.0: "Canva generates content. HitCreate runs your marketing system — pages, forms, sequences, scorecards, attribution. When HitCreate needs a visual, it calls Canva."
vs Jasper / Copy.ai: "They write copy. We deploy, measure, and iterate."
vs ChatGPT / Claude direct: "ChatGPT is a blank page. HitCreate is the running business — already knows your brand, customer, offer, and conversion data."

4.3 The compression window — 18 months median

Evidence-weighted probability distribution (RESEARCH-279 Track 2):

10% — compression starts in 9-12 months
30% — compression starts in 12-18 months
35% (base case) — compression starts in 18-24 months
20% — 24-36 months
5% — 36+ months

Median: ~18 months to Q4 2027 for prosumer "tell Claude to build my funnel" end-to-end capability. ~24-30 months for the vertical + loop-closure defensibility that HitCreate is building.

4.4 Weekly signal monitoring

Three signals to watch every week:

Frontier-lab "deploy-to-domain" primitive. Any lab shipping native landing-page deploy to a customer's domain in a consumer tier. This is the missing link that makes SMB end-to-end work today.
Vertical SMB skill / pack from a frontier lab. E.g. "Skill: SMB marketing funnel" in anthropics/skills, OpenAI App Directory, or Gemini release notes. Or explicit "Claude for Small Business" / "Gemini for Small Business" tier at sub-$100/mo.
Incumbent SMB-agent price collapse. HubSpot Breeze, GoHighLevel, Sierra, or Canva AI 2.0 shipping agent-first tiers under $100/mo aimed at solo operators.

Min Min will automate this monitoring (assigned: open decision #20).

4.5 The Klaviyo-specific risk

Klaviyo is HitCreate's #1 strategic threat. One narrative pivot (beyond ecom into services/B2C) would compress HitCreate's TAM materially. Klaviyo has:

The data (0.5T interactions, 193K brands).
The loop-closed product (Composer, March 2026).
The ecosystem posture (MCP server + ChatGPT app).
The public-market pressure (stock down 40% from IPO, growth-narrative need).

HitCreate's temporary shelter is non-ecom vertical focus. The 18-month window is the time to build cross-customer benchmark data in waste + fractional-CFO before Klaviyo pivots horizontal. If Klaviyo announces "Klaviyo for services" or "Klaviyo for B2C subscription," HitCreate's scope and sequencing change immediately (open decision #20 owner will flag).

5. Market context — the seven canonical shifts (updated)

Updated from v3.1 §8 with RESEARCH-279 Track 5 data.

5.1 Shift 1 — Search → Answer economy

AI referral traffic growing 130-150% YoY at Q1 2026 (not the v3.1 +805% Black Friday spike). On track for 20-28% of total web traffic by end of 2026. AI Overviews trigger on ~25% of Google queries. GEO is now a commercial category with Semrush AI Visibility Toolkit, Ahrefs Brand Radar, Otterly, Scrunch, Stackmatix all shipped.

Correction to v3.1: Gen Z TikTok-over-Google preference fell from 8% to 4% in 2026 (Adobe data). "50%+ of Gen Z skip Google" is wrong. The shift is query redistribution, not abandonment.

Implication: GEO-native output is the right call for every page. The OSS GEO audit tool (v3.1 §10 Drop 1) now competes with commercial incumbents — reposition as lead-magnet for the generator, not a standalone product.

5.2 Shift 2 — ChatGPT Ads live (9 Feb 2026)

CPM compressed from $60 → $25-35 in 9 weeks. Minimum spend cut from $250K → $50K (now SMB-reachable). Criteo is the ad-tech pipe (addressable base of ~17K retailers, not direct advertisers). Conversion 1.5x other channels. Retail + grocery = 44% of spend.

Perplexity killed ads (Feb 2026). Anthropic committed Claude stays ad-free ("no ads, ever" — Super Bowl spot). AI ad monetisation is OpenAI + Google, not a four-horse race.

Implication: v3.1 §11's "wait for self-serve" window is zero. High-intent LLM traffic + HitCreate conversion infra = defensible wedge. HitCreate stays upstream of the buy but generates the landing pages + scorecards ChatGPT-ad traffic lands on.

Instagram organic reach 3.5% of followers (down 30-40% YoY). LinkedIn personal-profile reach -50% YoY; company pages -60 to -66%; external links -60%. Document posts (PDF carousels) outperform video 278%. TikTok USDS deal closed Jan 2026 but regulatory uncertainty parks enterprise spend.

Implication: founder-consultancy archetype (Phase B target) cannot rely on LinkedIn company pages. Scorecard-result share image (internal PDF carousel) is a V1 feature — LinkedIn-native distribution. Email sequences more valuable than ever given organic social collapse.

5.4 Shift 4 — Agentic commerce, default-on

Shopify Agentic Storefronts defaulted-on 24 Mar 2026 across 5.6M merchants (4% OpenAI fee + 2.9% Shopify). OpenAI ACP + Google UCP as open standards. Amazon Rufus: 250M users, $10B sales lift, 60% conversion uplift per engaged session. McKinsey projects $3-5T global agentic commerce by 2030.

Implication: HitCreate explicitly excludes ecom (v3.1 §2). This shift validates that exclusion. Non-ecom agentic commerce (services, B2B) is the genuine opportunity — no "ACP for services" standard yet. HitCreate's scorecard + structured schema could position as the service-business agent-readable layer before an incumbent standardises. V1.5+ opportunity.

5.5 Shift 5 — Zero-party > first-party > third-party (reframed)

Correction: cookies didn't die (Google reversed April 2025). But Safari+Firefox ~50% of web cookieless, consent rates collapsing, AU Privacy Act 2024 automated-decision-making disclosures mandatory 10 Dec 2026, EU AI Act enforcement 2 Aug 2026.

Implication: scorecard-as-zero-party-engine is structurally correct. Scorecards that tier/price/route leads are "automated decision making" under AU Act — HitCreate ships ADM-disclosure copy + audit logs by default. Competitors (ScoreApp, Interact, Outgrow, Typeform) don't. Feature, not burden.

5.6 Shift 6 — Measurement permanently broken

46.9% of US marketers investing more in MMM. AI-citation SoV tooling commercialised (Semrush AI Visibility Toolkit, Ahrefs Brand Radar — both live Q4 2025 / Q1 2026). "AI SoV" is the new rankings report category.

Implication: HitCreate builds AI-citation SoV visibility into the GEO-native primitive (not as a standalone product). Tracks which queries HitCreate-generated pages are cited on.

5.7 Shift 7 — Email deliverability crisis (new)

Gmail/Yahoo strict DMARC enforcement live Nov 2025. 30% of bulk senders still non-compliant. 22-34% spam placement for non-compliant senders. Every HitCreate email sequence hits this.

Implication: DMARC setup, domain warm-up, suppression lists, Gmail/Yahoo postmaster monitoring are V1 infrastructure — not V2 features. Without this, HitCreate sequences go to spam and the loop breaks on the first step.

5.8 Additional material shifts (watch, don't promote to canonical)

Browser agents (Operator, Mariner, Dia). 72% enterprise AI-agent adoption (Gartner). HitCreate pages must be agent-readable — forms parseable, CTAs structured.
AU Privacy Act ADM + EU AI Act marketing deadlines. Covered in Shift 5.
Voice-first interfaces. Premature; watch but don't build.
Creator newsletter economy (Substack, Beehiiv, Kit). Adjacent to HitCreate's email primitive; partnership opportunity, not competition.

6. Vertical strategy

6.1 The honest decomposition (from RESEARCH-279 Track 6)

"Vertical priors" decomposes into five components with wildly different compounding properties:

Component	Compounding	Replicable by frontier agent + 6-mo eng
Terminology / language	No (one-time)	Yes, trivially
Workflow templates	Weak	Mostly yes
Compliance / regulatory rules	Treadmill	Yes, with retrieval
Pricing / commercial norms	Some (proprietary)	Partially
Decision heuristics / KPIs	Partial	Mostly yes
Relationships	Linear with trust	No — structurally unreplicable
Deployed-customer benchmark data	Superlinear with N	No — requires N deployments

~75% of any vertical prior is replicable. ~15% requires customer-specific data. ~10% is structurally unreplicable — specifically, warm relationships and deployed-customer benchmark data. The moat is concentrated in that 10%, not the feature set.

6.2 The two verticals — locked

Vertical	Relationship	Regulatory anchor	First 12 months
AU fractional-professional services	Matthew Nisbet (NISARD, peer network 15+)	AU accounting + fractional-CFO compliance, BAS, Div 7A, R&D	Phase B (concierge 20 interviews + 3 paying + WTP)
SEQ waste operators	Nicole's network (25+ operators)	NSW POEO, QLD ERA-60, VIC EPA Act, interstate transport	Phase C (after Phase B validates)

Everything else is templated horizontal capability. Not dismissed, but deferred until Phase D (after two archetypes validate independently).

Verticals explicitly NOT invested in during V1:

Workplace safety (Safetii — separate brand, different product)
Generic field service (ServiceTitan's surface — no warm-relationship asset)
SMB founders / SaaS (7/25 moat score — no unique angle)
AU-generic SMB (geography is not a vertical)

6.3 NISARD — recast

NISARD is a process-validation engagement, not a vertical-depth proof. It validates:

The 8-step intake (v3.1 §4) produces a parseable DeploymentSpec.
The 7-primitive generation chain works end-to-end.
The Brand System Agent + Claude Design + Canva + Bookii orchestration holds together.
The loop-closure infrastructure (event capture, feedback store, context injection) works in production.

NISARD does not prove the "fractional-CFO vertical prior" claim. That only compounds after 20+ deployments with loop-closed performance data.

NISARD is currently a co-op / services-exchange engagement, not a paying commercial customer (RESEARCH-268 §9.1). It becomes Bucket A revenue only if/when it converts to paid. Until then, NISARD is Bucket B (product build via real use case).

6.4 Third archetype — deferred

Third archetype selection waits for Phase C completion. Candidate verticals depend on warmer-pipeline signals — likely founder-SaaS (via Indie Hackers / X) or Australian B2B services. Decision is gated on Phase B + C outcomes, not speculated now.

7. Architecture

7.1 The Platform + three Surfaces framing is retained

v3.0 §3's framing — one headless Platform, three client Surfaces (App / Agent / Ecosystem) — remains correct. The change in v3.2 is surface priority.

v3.0 priority: App → Agent → Ecosystem. v3.2 priority: Ecosystem seeding begins Phase A (OSS drops); App Surface ships Phase B; Agent Surface ships Phase D. The reason: ecosystem distribution compounds, App polish depreciates against frontier-lab generation, and Agent Surface requires sufficient App-Surface state to handle-off cleanly.

7.2 The skinny stack — locked

Per RESEARCH-279 Track 7. Build almost nothing; orchestrate everything.

Layer	V1 pick	Rationale
Customer page hosting	Cloudflare Pages (per-customer)	Exportable, edge-CDN, free tier generous
App frontend	Next.js on Vercel	CLAUDE.md default, Vercel is the least-surprise deploy
App backend / orchestration	Next.js API routes + Node workers on Hetzner (systemd)	DEV-FLOW compliance: edit on Aorus, GitHub fence, VPS deploy
DB + vector + auth + storage	Supabase Cloud Pro Sydney	AU residency pre-emptive, avoids Flick-Apply-style self-hosted collision
LLM routing	LiteLLM self-hosted (Rule 6)	All AI API calls route through LiteLLM
LLM observability	Langfuse Cloud	Prompt versioning, cost attribution per customer
Event tracking + experiments + feature flags	PostHog Cloud EU	One tool, not three
Feature store	Postgres tables	No Feast / no Tecton — overkill for V1
Attribution	PostHog + hand-rolled MMM-lite in Postgres	No Dreamdata; build as needed
Email	Resend	Transactional + broadcast; DMARC-native
SMS	Twilio + MessageMedia (AU fallback at volume)	Standard CPaaS
Booking	Bookii (owned)	v3.0 primitive; already in flight
Payments	Stripe (Checkout + Billing + metered)	Default; setup fees + subscriptions + credits
Queue	Postgres + `pg_cron` → Inngest at ~100 customers	No Redis as queue; no SQS
Monitoring	Better Stack	Uptime + logs + status page

Non-negotiables from CLAUDE.md:

Rule 6 (all LLM through LiteLLM)
Postgres only (code standards)
Docker 127.0.0.1 port binding (Rule 1)
NODE_OPTIONS heap cap on builds (Rule 12)
Edit on Aorus + GitHub fence + VPS pulls (DEV-FLOW)
Sub-agent sanity check + scoped allowlist (Rule 11)

7.3 The loop-closure data model

The spine. If this schema is right in month 1, contractors can ship surfaces. If it's wrong, no amount of surface polish saves it.

customers
  id, archetype, consent_pool_b, opt_in_pool_d

deployments
  id, customer_id, primitive_type, archetype, generation_context,
  deployed_content_hash, deployed_url, deployed_at, model_version

events
  id, deployment_id, event_type, timestamp, metadata

variants
  id, deployment_id, variant_hash, allocation_pct, alpha, beta  -- for MAB

outcomes
  id, deployment_id, variant_id, metric_name, metric_value,
  window_start, window_end, sample_size

feature_signals
  id, archetype, primitive_type, signal_key, signal_value,
  updated_at, source_deployment_count

llm_calls
  id, customer_id, deployment_id, prompt_hash, model_version,
  input_tokens, output_tokens, latency_ms, cost_usd

The rest of the schema (pages, forms, scorecards, sequences, contacts, pipeline stages) is primitive-specific and grows around the spine.

7.4 The artefact contract (kept from v3.0 §3.1)

Every primitive emits ecosystem-standard portable artefacts:

Primitive	Artefacts emitted
Brand (visual)	`DESIGN.md` (9-section, Claude Design compatible)
Brand (voice / corpus)	`VOICE.md`, `PERSONAS.md`, `OFFERS.md`
Brand (portable summoning)	`SKILL.md` (Anthropic Agent Skills standard)
Agent capability	`SKILL.md` + MCP server
Scheduling	MCP server (Bookii) + iCal/CalDAV
Contact / Audience	Standard CRM export + MCP server
GEO	`llms.txt`, JSON-LD structured data, OpenAPI tool indexes
Delivery targets	HTML, PPTX, PDF, direct platform APIs

Ecosystem-native artefacts are the distribution play (§9) and the hedge against frontier-lab compression (§4.3).

8. Business model

8.1 The revenue-mix flip

v3.0 target (24-month steady state): 60% Agency / 25% self-serve / 15% Ecosystem. v3.2 target: 55% Self-serve App+Agent / 20% White-label reseller / 15% Ecosystem / 10% Agency (flagship only).

Rationale: with loop closure as the singular moat, the product is the business. Agency retainer is labour-capped, not compounding; self-serve + reseller + ecosystem are all compounding. Agency retained at 10% for flagship / process-validation engagements (NISARD-pattern) — not as revenue anchor.

This directly answers the founder's 2026-04-22 pushback: "I don't want Agency as anchor. I want the product to be the business." v3.2 reflects that.

8.2 Tier structure

Tier	Target	Surfaces	Price band (AUD)	Credits
Free / Ecosystem	Ecosystem power users, trial	Surface C only	$0	Small API/MCP allowance
Starter	Solo founder / consultant	App + Agent	$79–99/mo	Small pool
Pro	Growing business	App + Agent + Ecosystem	$199–299/mo	Meaningful pool
Business	Small team	All three	$599–999/mo	Large pool, rollover
Reseller / White-label	Agency reselling HitCreate to their clients	All three + white-label	$1,499–2,999/mo + per-sub-account	Large shared pool
Agency flagship	Opportunistic only (3-5 clients max)	All three + delivery pod	Negotiated (typically $3-8K/mo)	Topups at cost

Base agents included all paid tiers: Brand System Agent (foundational), Min Min orchestration (App + Agent surfaces), Landing Page, Email Sequence, Social Post, SEO/GEO Content, basic Contact.

Add-on agents ($29-99/mo at Starter/Pro; baked into Business+): Video, Ad Creative, SMS, WhatsApp, Outreach, Chatbot, Review/Reputation, Scorecard.

Credits meter: LLM tokens, image generation (Claude Design API), video generation, render minutes, voice cloning, SMS sends, email overage, data scraping, platform posting over threshold. External API costs pass through transparently.

8.3 Concierge setup fees — phase-out plan

During the concierge phase (Phase A + early Phase B), setup fees compensate Mister's time:

Tier	Setup fee (concierge only)
Starter	$499
Pro	$1,500
Business	$3,500
Reseller / Agency	Negotiated per engagement

Phase-out trigger: 3 consecutive deploys complete the Phase-8 intake-to-live pipeline in <60 minutes with no human touch. When that holds, setup fees drop to $0 (or become optional "white-glove onboarding" at the customer's election). Open decision #7.

8.4 Why self-serve + reseller + ecosystem is a defensible anchor

Self-serve scales with marketing spend, not headcount. Loop-closure + vertical wedge + OSS distribution drives CAC down over time.
White-label reseller is agency-channel play without running an agency. Agencies take HitCreate, rebrand, resell. HitCreate captures per-sub-account revenue + loop-closure data from reseller clients (with consent).
Ecosystem (Surface C) is low-marginal-cost distribution into frontier agents. Every MCP call + skill-triggered use is revenue + distribution + signal.

Agency retainer — the thing v3.0 leaned on as "defensible" — is labour-capped. It doesn't compound. It doesn't scale past headcount. Retained for flagship pattern validation only.

8.5 Failure modes to guard against

SKU bloat — three-decision pricing (tier, add-ons, credits), never a matrix.
Credit anxiety — upfront cost disclosure on expensive operations.
Capability gap mid-task — Min Min surfaces gaps at planning time, not execution time.
Tier cliffs — add-ons and top-ups let users grow within tier.
Reseller cannibalising Agency flagship — clear scope: reseller is platform-access + branding-rights; flagship is delivery-pod.
Setup fees never phasing out — 3-consecutive-deploys trigger must be enforced.

9. Go-to-market

9.1 Three funnels feed the product, not an anchor

v3.0 framed three funnels feeding an Agency anchor. v3.2 frames three funnels feeding product revenue directly, with Agency as flagship pattern-generator, not anchor.

Funnel A — Self-serve App. Content + SEO/GEO + paid ads (when Phase B validates). OSS GEO audit tool as lead magnet (Phase A seeding).
Funnel B — Agent Surface. SMS / WhatsApp / email inbound. Opens Phase D+ when App Surface is mature enough to hand off cleanly.
Funnel C — Ecosystem. Community repo contributions (awesome-claude-design, awesome-agent-skills, awesome-claude-code-subagents). MCP server listings. SKILL.md bundles. Free tier as top-of-funnel.

9.2 Phase-gated rollout (90-day gate on Phase B)

Phase	Target dates	Focus	Success gate
A — NISARD end-to-end	Now → +60 days	Validate pipeline on NISARD as process-validation. Basic loop-closure infra (email MAB + Pattern B context injection).	NISARD deployed with working loop on at least email primitive. Pipeline documented.
B — Fractional-CFO archetype validation	+60 → +150 days	20 interviews + 3 concierge paying customers (fractional-CFO archetype via Nisbet's network) + Van Westendorp WTP + 40% disappointment test.	QUICKREF-001 gates 1-5 passed. If gate fails at day 90, iterate archetype/primitives — do NOT stall.
C — Waste-operator archetype validation	+150 → +330 days	Nicole's network entry. Same gates as Phase B. First ecosystem drops (GEO audit OSS + Brand System SKILL.md bundle + Bookii MCP spec). First self-serve subscribers.	QUICKREF-001 gates passed on waste archetype. First full-time engineering hire.
D — Horizontal expansion	+330 → +540 days	Third archetype (warmer-pipeline-determined). White-label reseller tier opens. Agent Surface (SMS/WhatsApp) ships.	Two archetypes independently validated. ≥1 reseller agency onboarded.

9.3 OSS distribution drops — Phase A seeding (concrete)

Per v3.1 §10, updated for v3.2:

GEO audit tool (hitcreate.dev). "See what ChatGPT sees when it looks at your site, and what HitCreate would generate differently." Free, email-gated, open-sourced. Repositioned as lead-magnet for the generator, not as category-defining product — incumbents (Semrush, Ahrefs, Otterly) own the "audit" category commercially. HitCreate's angle: generation-quality preview.
Brand System Agent SKILL.md bundle. Published to awesome-claude-design / awesome-agent-skills / anthropics/skills. Installable into Claude Code, Cursor, Claude Desktop, ChatGPT Apps, Gemini CLI. Costs near-zero to produce after NISARD ships.
Bookii MCP spec. Published to awesome-agent-skills once Bookii MVP ships. Establishes HitCreate as ecosystem-native before paid ads run.

Each drop precedes paid ads. They establish ecosystem-native credibility before spend starts.

9.4 Paid ads budget

Initial test budget $500-1,500 AUD/week across creative variants, capped at quarterly FYI United discretionary spend. Funded from Mister's Dreamworld income. Kills fast if CAC is clearly off. No hope-propping. First ads deferred until Phase B gate passes (no point driving traffic to an unvalidated archetype).

9.5 Dogfooding advantage

HitCreate's Ad Creative Agent generates HitCreate's own launch campaign. Internal use first (prove it on HitCreate campaigns), customer add-on second. Credibility + structural advantage — HitCreate can test more creative variants faster and cheaper than competitors using agencies.

9.6 Brand boundary — HitCreate vs FYI Digital vs M-Webb

Retained from v3.1 §6, with v3.2 update:

Brand	Scope	Revenue shape
HitCreate	Platform-native product (self-serve + reseller + ecosystem) + Platform-native Agency flagship (10% of mix, opportunistic)	Subscription + reseller fees + metered credits + flagship retainer
FYI Digital	Boutique custom agency work that doesn't fit Platform constraints	Project + retainer, human-delivered
M-Webb	Senior strategy + boutique agency work, Matt Webb's existing brand	Project + retainer, human-delivered

Rule: if the engagement fits the 7 primitives and the HitCreate constraint (marketing infra only), it runs through HitCreate. If it needs custom apps, ops platforms, or bespoke scope, it routes to FYI Digital or M-Webb.

10. Technical feasibility & team shape

10.1 The four disciplines that make V1 achievable

Per RESEARCH-279 Track 7:

Buy at the edge, build the spine. PostHog, Langfuse, Resend, Twilio, Stripe, Cloudflare Pages, Supabase. Build the generation → deploy → signal capture → feedback → regeneration loop.
Loop-closure data model in month 1. The Deployment → Event → Variant → Outcome → FeatureSignal schema. If right, contractors ship surfaces cleanly. If wrong, no polish saves it.
One spine owner. Founder (or single FT engineer) owns the generation → deployment → feedback loop end-to-end. Contractors ship surfaces, not loops.
Contractor model breaks at 300-500 customers. First full-time hire needed at Phase B → C transition (~month 6-9 post-kickoff).

10.2 Team shape timeline

Month	Team	What they do
0-6	Founder + rotating contractor friends	V1 platform build, NISARD, Phase B concierge
6-9	Founder + 1 full-time engineer + contractors	Phase B → C transition. Full-stack engineer owns spine. Contractors ship primitive polish.
9-18	Founder + 2-3 FT + contractors	Phase C + D. Possibly first non-engineer hire (delivery / CS).
18-36	Founder + 4-8 FT	Category growth; raise capital if thesis validates and "compete with GHL head-on" becomes real option.

10.3 Cost model at four scale points

Scale	Infra + tools + LLM	MRR	Gross margin	Monthly team cost	Net
10 customers (concierge)	~$550/mo	~$8K (with setup fees)	93%	$0 (founder only, Dreamworld income)	~$7.4K
100 customers (PMF zone)	~$2.15K/mo	~$20K	89%	~$12K (founder + 1 FT)	~$5.8K
1,000 customers (scale)	~$11K/mo	~$200K	95%	~$75K (founder + 3 FT + 2 contractors)	~$114K
10,000 customers (category leader)	~$95K/mo	~$1.5M	94%	~$500K (15-25 FT)	~$905K

10.4 The "compete with GHL head-on" feasibility check

GoHighLevel scale: ~$200M+ ARR, 70K agency accounts, 600+ headcount. Lovable scale: $400M ARR, $530M raised, 100+ headcount.

Competing head-on at that scale requires $2-5M AUD funding + 15-25 FT inside 18 months + abandonment of the headless-Platform framing (both GHL and Lovable are full-stack vertically integrated).

Current capacity — 20-30 hrs/week + rotating contractor friends — cannot fund that fight. Dreamworld income + agency revenue is sufficient to run the product bet at V1 scale. Not sufficient to pick a war with 600-person competitors.

The honest posture: HitCreate doesn't need to compete with GHL head-on to succeed. GHL's moat is agency-channel distribution. HitCreate's moat is loop closure within specific archetypes. Different products, different buyers (agencies reselling vs builders direct). Take the window, build the moat, raise capital only when thesis validates. Open decision #16.

11. Risks — updated

11.1 Primary risk — Klaviyo horizontal expansion

If Klaviyo announces "Klaviyo for services" / "Klaviyo for B2C subscription" or ships a native landing-page + scorecard primitive in the next 12 months, HitCreate's TAM compresses materially. Klaviyo already has the data scale, the shipped loop-closure product (Composer), the ecosystem-native posture (MCP + ChatGPT app), and the public-market pressure to expand.

Mitigation: Own the non-ecom vertical context deeply in the 18-month window. Build cross-customer benchmark data in waste + fractional-CFO before Klaviyo pivots. Monitor Klaviyo quarterly earnings, roadmap signals, Composer GA announcements, blog posts mentioning non-ecom verticals.

11.2 Secondary — HubSpot Breeze autonomous generation agent

If HubSpot ships a Breeze agent that autonomously generates + deploys + measures + regenerates landing pages or email sequences, HitCreate's SMB segment squeezes. Spring 2026 Spotlight signalled this direction ("Loop Marketing" framework).

Mitigation: HitCreate's "owned code, own your data, deploy to your domain" posture differentiates against HubSpot's walled garden for the builder archetype. Architectural debt slows HubSpot vs Klaviyo. Monitor HubSpot Spotlights (Spring/Fall).

11.3 Frontier-lab vertical extension — softer than v3.0 implied

Frontier labs are going up (enterprise + GSI), not down (SMB direct). Lower direct risk than v3.0 framed.

Actual risk path: skill-marketplace channel. A "Skill: SMB marketing funnel" bundle in Anthropic Skills + MCP Apps + Claude Design could reach 70% of HitCreate's App Surface value at user-installable cost.

Mitigation: HitCreate ships into the skill marketplaces itself (hitcreate-funnel-builder SKILL.md, Bookii MCP, GEO audit MCP). Being in the winner's marketplace beats trying to keep users out of it.

11.4 Canva AI 2.0 agentic SMB pivot

Canva has 265M MAU and $4B ARR. If they ship "agentic marketing infra for SMBs," HitCreate has no distribution answer.

Mitigation: Loop closure is not Canva's culture (they are design-first). The Canva AI 2.0 product surface remains content-generation-centric through 2026 public roadmap. Watch for acquisition announcements; Canva has M&A firepower and could buy a loop-closure player.

11.5 Email deliverability

Gmail/Yahoo DMARC enforcement + ~34% spam placement for non-compliant senders means HitCreate's email sequences will go to spam without proper infrastructure.

Mitigation: DMARC + SPF + DKIM setup is V1 infrastructure, not V2 feature. Per-customer domain warm-up, suppression list discipline, Google Postmaster + Yahoo Sender Hub monitoring. Resend handles most of this but requires correct setup.

11.6 AU Privacy Act 2024 ADM compliance

Scorecards that tier/price/route leads are ADM. Disclosure mandatory by 10 Dec 2026.

Mitigation: ADM disclosure copy + audit logs shipped by default. Feature differentiator, not compliance burden. See §5.5.

11.7 Scope / bandwidth

20-30 hrs/week + contractors is tight for 7 primitives + loop-closure infra + two vertical beachheads + ecosystem drops + NISARD delivery.

Mitigation: Phase-gated rollout per §9.2. Contractor-absorbable booklets only in Phase A + B. First FT hire explicitly time-boxed at Phase B → C transition. Declining good-but-not-top opportunities is the operating discipline.

11.8 Agency unit economics on flagship engagements

10% of revenue mix at flagship retainer pricing requires margin to work. First 3-5 flagship engagements determine whether this is viable.

Mitigation: Treat flagships as process-validation + reference-customer generation. Accept lower margin in exchange for marketing asset. Gate new flagships on prior delivery SOPs being documented.

11.9 Credits margin compression

Frontier model pricing may not continue falling linearly. Per-credit cost watch.

Mitigation: Monitor per-customer LLM cost; pass through expensive external API costs transparently.

11.10 Waste beachhead dependency

Nicole's Kartaway restraint clause must be reviewed before Local Trader waste outreach. SEQ waste is the beachhead, not the whole model.

Mitigation: Legal review of restraint clause before Phase C Nicole engagement. Other waste geographies exist as fallbacks.

11.11 Single-operator key-person risk

FYI United, HitCreate, Platform architecture all depend on Mister.

Mitigation: Documentation discipline already in place (CLAUDE.md, MEMORY.md, DEV-FLOW, RESEARCH-* index). Second operator with Agency-flagship tier open. External advisors engaged (Matthew Nisbet, Matt Webb). First FT engineering hire at Phase B → C.

12. Ecosystem posture (retained from v3.0 §9, sharpened)

12.1 The standards HitCreate emits

SKILL.md (Anthropic Agent Skills) — adopted by VoltAgent, Google Labs, MiniMax, DuckDB, OpenAI Codex CLI.
DESIGN.md — 9-section brand design system, 68+ published brand systems, Claude Design consumable.
MCP — Linux Foundation (donated by Anthropic Dec 2025). De facto across Canva, Asana, Google Workspace, Slack, GitHub, Klaviyo, HubSpot.
Subagent specs — Claude Code / Cursor / Gemini CLI / OpenCode compatible.
llms.txt, tools indexes, JSON-LD — LLM-discoverable content and tool standards.
ACP-compatible product feeds + UCP-compatible (for V1.5 service-business use case, per §5.4).

12.2 Posture

Ecosystem-native. Every primitive emits a standard artefact. Every agent is installable as a subagent or skill. Every external tool accessed via its standard interface (API, MCP), not custom integrations.

Consequences:

Free distribution. Every HitCreate artefact in a community repo is a marketing surface.
Low switching cost in. User's existing SKILL.md bundle + MCP integrations work inside HitCreate immediately.
Low switching cost out. Users can export and leave. Strategically correct — retention on real value compounds.

12.3 Relationship to frontier labs

Anthropic, OpenAI, Google, xAI, Meta are the orchestration layer HitCreate plugs into via Surface C. Customers, not competitors. HitCreate publishes SKILL.md, subagent, and MCP artefacts consumable in each.

HitCreate does not try to build a better orchestration agent than Claude or ChatGPT. HitCreate builds the vertical capability those orchestrators call when the user's request crosses into customer acquisition.

12.4 Organising principle (retained)

Every external AI service is either a primitive HitCreate calls, a distribution surface HitCreate ships into, or a competitor HitCreate orchestrates above. No service is treated as strategic infrastructure HitCreate cannot swap out.

13. Open decisions — twenty items pending

Consolidated from RESEARCH-279. These are questions only the founder can answer. Resolved answers move into §1-12 as commitments; unresolved remain flagged until addressed.

Loop-closure architecture

Customer consent posture for cross-customer pooling. Pattern B (anonymised) default + Pattern D (opt-in benchmarks) — agree? NISARD is first test case: does Nisbet consent?
Regulated-industry strategy. Explicitly exclude healthcare / legal / financial-services from cross-customer pooling in V1, or ship per-tenant-only as premium tier?
Control-arm ethics for falsification. Commit to internal synthetic-control validation, or skip the experiment?
AU residency pipeline constraint. V1 requirement or V2?
Model-version drift handling. Version-lock in experiments, factor as control variable, or accept as noise?

Business model

Agency-tier final disposition. v3.2 proposes opportunistic-only (3-5 flagship max, 10% of revenue mix). Agree?
Setup-fee phase-out trigger. v3.2 proposes: 3 consecutive deploys complete Phase-8 intake-to-live in <60 minutes with no human touch. Agree?
White-label reseller tier. Committed in v3.2 at 20% of revenue mix. Design decisions: commission structure, branding controls, sub-account management. Drop or commit?
Pricing — setup fee amounts. $499 / $1,500 / $3,500 / negotiated. Pressure-test against NISARD hours.

GTM

Phase B 90-day gate. v3.2 proposes hard gate. Agree?
Second archetype sequencing. v3.2 proposes fractional-CFO Phase B, waste Phase C. Invert?
FYI Digital / M-Webb handoff mechanics. Inbound qualification script + routing rules.
AU-first vs global. v3.2 locks AU-first given Privacy Act deadline. Confirm?

Technical / team

First full-time hire timing + shape. v3.2 proposes Phase B → C transition, full-stack engineer. Agree?
Budget for V2 LoRA infra. ~$20-30K/year from V2. Plan now or defer?
"Compete with GHL" explicit abandonment (unless $2-5M raised). v3.2 proposes yes; commit?

Positioning / public-facing

Honest attribution disclosure public. Admit blind spots (differentiator) or hedge?
"Wrapper" framing public. v3.2 drops from public pitch; keeps as private mental model. Agree?
NISARD framing rewrite. Recast as "process-validation engagement" (honest) vs v3.0's framing. Agree?
Klaviyo weekly monitoring. Auto-flag Klaviyo horizontal expansion signals. Who owns? (v3.2 proposes: Min Min automated news monitoring.)

14. Changelog

v3.2 (2026-04-22, this document — DRAFT pending founder sign-off on §13 decisions). Structural reframe. Loop closure promoted to singular moat claim. Agency tier de-anchored (60% → 10% of revenue mix). Vertical scope narrowed to two named verticals. NISARD recast as process-validation. Phase B 90-day hard gate. Seven canonical market shifts replacing six (+ three missed shifts flagged). Competitive threat matrix rewritten (Klaviyo + HubSpot as real threats; Lovable/GHL as positioning-noise). Technical feasibility grounded with cost model at 4 scale points. Explicit "compete with GHL head-on" feasibility requires $2-5M + 15-25 FT (abandoned at current capacity). Informed by RESEARCH-279 (seven parallel research tracks, ~52K words underlying research).
v3.1 (April 2026, superseded by v3.2). App Surface amendment. Defined V1 primitive set (7 primitives). Setup-fee + monthly structure. Validation-gated rollout. Brand boundary (HitCreate / FYI Digital / M-Webb). Six market shifts. Scorecard-as-zero-party-engine reframe.
v3.0 (April 2026, superseded by v3.2). Headless Platform + three Surfaces framing. Agency retainer as revenue anchor (contradicted by v3.2). Five defensible pillars (loop closure elevated to singular moat in v3.2).
v2.2 (April 2026, superseded). Ecosystem-native positioning as fourth strategic leg. Surface C added.
v2.1 (April 2026, superseded). Post Claude Design launch. Thesis reframed from "produces finished assets" to "orchestrates generation primitives."
v2.0 (April 2026, superseded). Horizontal agentic creation platform. Pre-Claude-Design launch. Destination-app framing.
v1.0 (superseded). "AI-native all-in-one for service businesses." Vertical framing, trades/waste focus.

15. Execution notes

15.1 Operating plan reference

Detailed execution plan at /root/projects/hitcreate/docs/hitcreate-build-plan.md (to be updated to match v3.2 sequencing) and Mister's internal operating plan at RESEARCH-268.

15.2 Effort allocation per QUICKREF-002

Bucket A (Revenue Now): NISARD (when converts to paid), client work via FYI Digital / M-Webb.
Bucket B (Revenue Later): HitCreate Platform V1 build, Phase B concierge customers, ecosystem drops.
Bucket C (Internal): capped at 20%. Infrastructure (DEV-FLOW, server wiki, knowledge library) lives here.

Effort check before new internal work: is Bucket C currently under 20%? If not, defer.

15.3 Monitoring cadence

Weekly: Klaviyo signals, HubSpot Spotlight + blog, Canva AI roadmap, frontier-lab skill marketplaces, compression signals (§4.4).
Monthly: Revenue mix tracking vs §8.1 target; effort allocation vs QUICKREF-002; Phase-gate status.
Quarterly: Whitepaper review; risk matrix update; compression-window re-estimate.

End of whitepaper v3.2 DRAFT. Pending founder sign-off on §13 open decisions. Informed by RESEARCH-279 (/root/.openclaw/workspace/docs/RESEARCH-279-loop-closure-thesis.md) and 7 parallel research tracks (/root/.openclaw/workspace/docs/RESEARCH-279-tracks/).

id: RESEARCH-279 title: HitCreate Loop Closure Thesis — Agentic AI Landscape, Real Competitors, Moat Architecture author: Claude Code (Opus 4.7, synthesis of 7 parallel research tracks) date: 2026-04-22 status: Draft 1 — synthesis complete, v3.2 whitepaper drafted in parallel supersedes: n/a (informs v3.2 whitepaper; does not supersede v3.0/v3.1) related_docs:

/root/.openclaw/workspace/docs/RESEARCH-279-tracks/track-1-loop-closure-operationalised.md
/root/.openclaw/workspace/docs/RESEARCH-279-tracks/track-2-agentic-ai-trajectory.md
/root/.openclaw/workspace/docs/RESEARCH-279-tracks/track-3-strategic-competitors.md
/root/.openclaw/workspace/docs/RESEARCH-279-tracks/track-4-wrapper-competitors.md
/root/.openclaw/workspace/docs/RESEARCH-279-tracks/track-5-market-shifts.md
/root/.openclaw/workspace/docs/RESEARCH-279-tracks/track-6-vertical-context.md
/root/.openclaw/workspace/docs/RESEARCH-279-tracks/track-7-technical-feasibility.md
/root/projects/hitcreate/docs/hitcreate-whitepaper-v3.2.md (drafted with this research)

RESEARCH-279 — HitCreate Loop Closure Thesis

Synthesis of 7 parallel research tracks (~52,000 words of underlying research). Purpose: answer whether the founder's thesis — "LLMs need loop closure, everyone else is a wrapper in a vertical" — is defensible in the April 2026 market, and if so, what HitCreate must concretely build, measure, and avoid to own it.

0. Purpose

The founder (Mister / Matthew Thompson) is at a strategic fork. The v3.0 whitepaper frames HitCreate as a headless agentic platform with three Surfaces and Agency retainer as revenue anchor. The v3.1 amendment narrows V1 to seven marketing-infrastructure primitives. Neither explicitly commits to loop closure as the moat; both list it as one pillar among five.

In a 2026-04-22 strategy session, the founder pushed back on two framings in the current whitepaper:

He does not want Agency retainer as the anchor. The product must be the business.
He wants to compete with GoHighLevel and Lovable head-on, with the wedge being "LLMs need loop closure, everyone else is a wrapper."

This research validates, sharpens, or corrects that thesis with 2026 market data, stress-tests it against credible competitors, operationalises it architecturally, and grounds it in a feasibility model matched to current capacity (20-30 hrs/week + rotating technical contractor friends).

The result informs a proposed v3.2 whitepaper drafted alongside this research doc: /root/projects/hitcreate/docs/hitcreate-whitepaper-v3.2.md.

1. TL;DR — the verdict in twelve bullets

The loop-closure thesis is correct, but the framing needs sharpening. "Everyone else is a wrapper" is half right — about 60% of named competitors have real moats (Lovable's distribution+capital, Bolt's WebContainers, Canva's 265M MAU, Replit's infra depth). Don't pitch "they're wrappers" in public. Pitch "we close the loop" — it's a sharper, truer, more sellable line.
Loop closure is operationally definable (Track 1 §1.5): a deployed asset emits a signal, the signal is normalised across runs, the signal updates the generator, and the next generation is measurably better on the same metric. Missing any of the four and it's not loop closure — it's a component. This is the falsification test.
The hybrid architecture ships in phases. Prompt-context injection of past winners is the V1 floor for all 7 primitives. Thompson-sampling bandits ship email/SMS subject lines. Weighted RAG enters at V1.5 (corpus >50 per archetype). LoRA waits for V2 (200+ examples). RLAIF is V3+ at earliest. Anyone claiming "our AI learns from your data" with none of these is hand-waving.
Attribution at single-small-business scale is structurally broken in 2026. Cookies unreliable (not dead — Google reversed April 2025), MTA dead, iOS Link Tracking Protection strips UTMs. A customer's landing page with 300 views/week cannot produce reliable per-iteration conversion signal. Cross-customer pooling is not optional — it is the workaround. Within-archetype aggregation (all fractional-CFO customers, anonymised) is how the loop gets enough statistical power to close honestly.
The real threats are Klaviyo and HubSpot, not Lovable or GHL. Klaviyo shipped Composer in March 2026 — a loop-closed agentic campaign generator trained on 0.5T interactions across 193K brands. HubSpot shipped outcome-based pricing on Customer Agent + Prospecting Agent in April 2026 and is explicitly framing "Loop Marketing" in its Spring 2026 Spotlight. These are the companies that already have the data to close the loop and are shipping the product. Klaviyo is ecom-constrained today; if they expand horizontally into services/B2C, HitCreate's TAM compresses materially.
Frontier labs (Anthropic, OpenAI, Google, xAI, Meta) are going UP into enterprise + GSI partners, not DOWN into SMB. This is material good news for HitCreate's thesis. The real compression risk is the skill-marketplace channel — when a "Skill: SMB marketing funnel" in the Anthropic Skills repo + MCP Apps + Claude Design together reach 70% of HitCreate's App Surface value, the window tightens. Evidence-weighted median: 18 months to Q4 2027 for prosumer end-to-end compression; 24-30 months for vertical + loop-closure defensibility.
Canva AI 2.0 is the sleeper threat. 265M MAU + agentic features + $4B ARR + M&A firepower + visual-taste brand. If Canva decides "agentic marketing infra for SMBs" is a market, HitCreate has little defence on distribution. Monitor weekly.
"Vertical priors" are ~80% rhetorical and ~20% real. Track 6 is the sharpest finding. Testing three operational tasks against frontier-lab replication, ~75% of any vertical prior's components are replicable by a well-prompted Claude 4.x + web access + 6 months of engineering. The durable 20%: warm relationships (Nicole for waste, Nisbet for fractional-CFO) and deployed-customer benchmark data (which you only get after N deployments). NISARD is a process-validation engagement, not a vertical-depth proof. Prioritise waste + AU fractional-professional; de-prioritise generic SMB, safety (it's adjacency not vertical), and horizontal ambition.
The six 2026 market shifts in v3.1 §8 are mostly confirmed, but three numbers are wrong and four shifts were missed. Corrections: AI referral +130-150% YoY (not the +805% Black Friday spike); ChatGPT Ad CPM $25-35 (not $60); ChatGPT Ad minimum $50K (not $200K — already SMB-reachable); Gen Z TikTok-over-Google preference fell from 8% to 4% (v3.1 claimed 50%+ skip Google, wrong). Missed shifts: email deliverability crisis (Gmail/Yahoo DMARC enforcement, 30% bulk senders non-compliant), browser agents (Operator/Mariner/Dia as demand-side buyer agent), LinkedIn specifically collapsing (personal -50%, company -66%, external links -60%), and AU Privacy Act 2024 automated-decision-making disclosures mandatory by 10 Dec 2026.
Technical feasibility is real for V1 (solo + contractors). Skinny stack: Next.js/Vercel + Cloudflare Pages + Supabase Cloud Sydney + LiteLLM + Langfuse + PostHog + Resend + Twilio + Bookii + Stripe. Infra+tools+LLM cost at 100 customers: ~$2.1K/mo against ~$20K MRR (89% gross margin). Contractor model breaks between 300-500 paying customers. First full-time engineering hire needed at Phase B→C transition, not later. "Compete with GHL head-on" is a different thesis requiring $2-5M AUD and 15-25 FT inside 18 months. That's not currently fundable from Dreamworld + agency revenue.
Agency retainer does NOT need to be the anchor. The founder's push-back is defensible. v3.0 framed Agency as anchor for economic reasons (most-predictable revenue). But with loop closure as the moat, self-serve App + ecosystem (MCP/SKILL distribution) + opt-in white-label reseller can carry the revenue shape. Agency retainer becomes optional (opportunistic / NISARD-style flagships), not strategic. This is the v3.2 rewrite.
The one-line positioning that cuts through: "Every AI marketing tool generates. HitCreate generates, deploys, measures, and compounds. The longer you use it, the better it gets at your business." This beats "we compete with Lovable and GHL" (framing you against incumbents), beats "AI-native marketing platform" (generic), and beats "we're not a wrapper" (defensive). It's forward-pointing and falsifiable — which makes it sellable.

2. The founder's thesis, restated and tested

2.1 What the founder is claiming

2.2 Is this true? Component-by-component

Sub-claim	Verdict	Evidence
"LLMs generate but don't close the loop"	True.	Claude, GPT-5, Gemini 2.5 all generate and walk away unless integrated into a loop-closed product. They are the substrate, not the loop. (Track 2)
"Everyone else is a wrapper"	Half true.	~60% of competitors have real moats: Lovable ($530M raised + distribution + Supabase depth), Bolt (WebContainers), Replit (decade of infra), Canva (265M MAU + visual taste), HubSpot (enterprise CRM gravity). But: none of them close the loop for marketing infrastructure generation, which is the narrower claim that holds. (Track 3, Track 4)
"Loop closure is the durable moat"	True, with discipline.	Architecturally defensible (Track 1). Historical precedent: Toast, ServiceTitan, Shopify all won vertically partially via deployed-customer data compounding. Contested by Klaviyo Composer (March 2026) which already does this for ecom email/SMS. (Track 3, Track 6)
"Technical friends are enough to build it"	True for V1, false for scale.	Solo + contractors can ship the 7 primitives + per-customer loop closure in 6 months. Cross-customer compounding + multi-archetype + production ops at 300+ customers requires one full-time engineering owner. (Track 7)

2.3 The sharpened version of the thesis

Changes from the founder's version:

Drops "everyone else is a wrapper" (false of ~60% of named competitors).
Adds "within a specific archetype, across customers" (loop closure without cross-customer pooling is table-stakes A/B testing).
Adds "anonymised pattern extraction" (privacy posture is strategic).
Adds "falsifiable compounding metric" (Track 1 §6 falsification bar — without this, it's marketing).
Names the two verticals explicitly (Track 6 — rhetorical vertical ambition is what v3.0 got wrong).

This is the v3.2 thesis.

3. Loop closure — from rhetoric to architecture

Full detail in Track 1. This section synthesises the load-bearing decisions.

3.1 Operational definition (four criteria)

A deployment pipeline is loop-closed if and only if all four are true:

Deployed asset emits a performance signal (event captured, attributed to the specific asset version).
Signal is normalised across runs into a metric comparable across customers/deployments (conversion rate, not raw count).
Signal updates generator behaviour for the next generation via context injection, retrieval weighting, fine-tuning, or reward modelling.
Next generation is measurably better on the same metric, compounding across iterations (not a one-shot improvement).

Operational test: plot rolling-median conversion across rolling 10-deployment windows. If the slope is positive at p<0.10 over N≥50 deployments and a feedback-off control is flat or negative on the same cohort, loop closure is confirmed.

3.2 Architecture by phase

Phase	Months	Architecture	Primitives closed	Data threshold
V1	0-6	Prompt-context injection + Thompson-sampling bandits	Email/SMS subject bandits, page/form/scorecard context injection	5 winners per archetype
V1.5	6-12	Performance-weighted RAG	Pages, scorecards, email bodies	50 winners per archetype
V2	12-24	LoRA adapters per archetype	Per-vertical fine-tuned generators	200+ winners per archetype
V3+	24+	Reward models / RLAIF	Cross-vertical optimisation	1000+ winners

Critical: the whitepaper must not claim V3 architecture while shipping V1 implementation. Honest scale-of-claim is the credibility play.

3.3 Per-primitive signal discipline

Primitive	V1 signal	Feedback mechanism	Reliable-signal threshold
Pages	Form-submit rate	Context injection of top 5 past winners	≥500 pageviews per deployment
Forms	Conversion rate	Pattern library (top-quartile field configs)	≥200 views/month
Scorecards	Completion rate	Question-bank library per vertical	≥50 completions
Email sequences	Click rate + reply rate	MAB on subject; context-injection on body	≥1000 deliveries
SMS sequences	Reply rate > click rate	MAB on opener; context-injection on body	≥500 deliveries
Unified inbox	Draft-edit-distance per reply	Per-customer style capture (never cross-pooled)	per-customer always
CRM / pipeline	N/A V1	Log transitions only; close loop V2	50+ deals in archetype

Email subject-line MAB is the one primitive where V1 loop closure is legitimately high-quality from day 1. Ship this first. Prove it works. Use it as the demo of loop closure to every prospect. Everything else is V1 infrastructure that becomes loop-closed over months.

3.4 Attribution reality (the hardest honesty cost)

Per Track 1 §4, at single-small-business scale (300-1,000 pageviews/week, 2-5% conversion):

Tier 1 — first-party + server-side tracking works partially (~50-70% coverage).
Tier 2 — geo-lift incrementality doesn't work (no spend volume).
Tier 3 — MMM doesn't work (no data volume).
Tier 4 — AI-citation SoV is measurable but upstream (not conversion signal).

Conclusion: per-customer attribution is directionally informative but not clean enough for automated feedback loops. A customer's "5% week 1 → 7% week 2" on 100 visits is almost always statistical artefact.

This forces the cross-customer pooling architecture. It is not a feature choice. It is the only way the loop can be closed honestly at SMB scale.

3.5 Cross-customer pooling posture

Four patterns evaluated (Track 1 §5.3):

Pattern A — raw pooling under T&C cover (how Klaviyo, Attentive, Shopify Magic operate). Rejected for HitCreate at current scale; legal risk not yet tolerable.
Pattern B — anonymised pattern extraction (brand names, PII stripped; only structural/stylistic patterns pooled). Recommended as default.
Pattern C — federated learning / differential privacy. Deferred to V2+ — engineering overhead too high for V1.
Pattern D — opt-in aggregate benchmarks. Recommended as enhancement (customers opt-in; their anonymised metrics contribute to vertical-aggregate benchmarks).

V1 posture: Pattern B default + Pattern D opt-in. Differentiator vs Pattern-A incumbents (who are quietly doing it but can't talk about it cleanly).

3.6 Falsification bar

At realistic V1 volumes (3-10 concierge customers by month 6):

Email subject bandit convergence within customer — feasible today (1 customer, 1 campaign).
Per-customer loop closure on pages — borderline (1 customer, 3+ months, ≥500 visits/week).
Cross-customer within-vertical loop closure on pages — not feasible until V2 (≥20 customers × 6 months).
Platform-wide cross-vertical — V3+ (100+ customers, 12+ months).

What HitCreate can honestly claim in V1: "We close the loop within-customer on selection problems (email/SMS) today. We are building toward cross-customer compounding; measurable improvement expected at customer #20 per archetype." Anything stronger is hand-waving.

4. Who actually threatens HitCreate

Full detail in Tracks 2, 3, 4. This section ranks threats honestly.

4.1 The threat matrix

Rank	Competitor	Threat level	Why
1	Klaviyo	5/5	Composer live (March 2026), 0.5T interactions/yr across 193K brands, MCP server + ChatGPT app, public-market pressure to expand horizontally. One narrative pivot (beyond ecom) away from eating HitCreate's TAM.
2	HubSpot Breeze	4/5	Spring 2026 Spotlight explicitly framed "Loop Marketing." Outcome-based pricing (April 2026) on Customer Agent + Prospecting Agent. Architectural debt (contact-property not event-stream) slows them vs Klaviyo.
3	Canva AI 2.0	4/5 positioning + strategic	265M MAU + agentic features + M&A firepower. Not a loop-closure competitor today, but if they decide to ship "agentic marketing infra for SMBs," HitCreate has no distribution answer. Watch quarterly keynotes.
4	Attentive	3/5	SMS loop-closed with 2T datapoints. Vertical (ecom retail) adjacency only; expansion into B2B/services unlikely but watched.
5	Shopify Sidekick/Magic	3/5 (adjacent, partner-candidate)	Agentic Storefronts default-on 24 Mar 2026 for 5.6M merchants. For ecom customers, HitCreate has no wedge. For non-ecom, Shopify is irrelevant. Could be partner surface via Sidekick App Extensions.
6	GoHighLevel	3/5 (distribution not tech)	70K agency accounts, Agent Studio March 2026. Pre-agentic architecture; retrofit has structural limits. Real threat via price anchor ($97-497/mo) for builder archetype.
7	Typeface + AI-native cohort (Jasper, Copy.ai, Writer)	3/5 collectively	Typeface "Marketing Orchestration Engine" (March 2026) is closest; Jasper pivoted upmarket; Copy.ai's GTM Workflows is platform-shaped. None have loop closure yet.
8	Braze	2/5 (enterprise only)	Decisioning Studio uses reinforcement learning — most technically complete loop closure shipped by anyone. Enterprise-only pricing keeps them out of HitCreate's TAM. Study their architecture; don't fear them.
9	Bird, Sierra, Zapier, n8n, Make, Salesforce	1-2/5	Either adjacent-category, enterprise-only, or structurally un-positioned to close the loop for HitCreate's buyer. Monitor but deprioritise.
10	Lovable, Bolt, v0, Replit, Base44	1/5 as competitors; high as positioning noise	Full-app generators. Different stack layer. The positioning answer: "They build the app; we build the marketing system on top of whatever your app is." No direct competition.

4.2 Frontier labs — the compression window

Per Track 2, the "12-24 month window" in v3.0 is defensible. Evidence-weighted median: ~18 months to Q4 2027 for prosumer end-to-end compression; ~24-30 months for vertical + loop-closure defensibility.

Key finding: frontier labs are going up, not down:

Anthropic → PwC, Accenture, Deloitte, Thomson Reuters partnerships
OpenAI → Frontier enterprise platform (Feb 2026), Uber/State Farm/Intuit customers
Google → UCP + enterprise commerce rails
xAI → raw-capability depth
Meta → WhatsApp business-agent tooling (adjacent to HitCreate's Surface B)

Implication: the frontier labs are not building "Anthropic for marketing." They are leaving the vertical layer open — exactly HitCreate's thesis slot. The compression comes through ecosystem primitives (skill marketplaces, MCP Apps, Claude Design) reaching "good enough" for SMB use cases, not through direct lab products.

4.3 Three compression signals to monitor weekly

A frontier-lab "deploy this funnel to my domain" end-to-end demo (the missing primitive that makes SMB end-to-end work).
Templated SMB vertical skills in the Anthropic Skills repo or OpenAI App Directory (e.g. "Skill: SMB marketing funnel").
A major incumbent — HubSpot Breeze, GHL, Sierra, Canva — shipping a consumer-tier agent-first tier under $100/mo aimed at solo operators.

4.4 The "wrapper" framing problem

The founder's "everyone else is a wrapper" framing is 60% wrong on the named competitors (Track 4). Real moats held by "wrappers":

Lovable: $530M raised, CapitalG/HubSpot/Salesforce/Nvidia on cap table, $400M ARR, Supabase integration depth.
Bolt: WebContainers (6+ years of R&D).
v0: Vercel/Next.js ecosystem gravity + enterprise compliance.
Replit: decade of infra depth + 50M users + 85% Fortune 500 penetration.
Canva AI 2.0: 265M MAU + visual-taste brand + M&A history.
Jasper: declining but still has brand-voice codification IP.

Strategic implication: "wrapper" is a private mental model, not a public pitch. The public pitch is "we close the loop." That's forward-pointing, testable, and doesn't require publicly mocking competitors who have real moats.

5. Market shifts, sharpened

Full detail in Track 5. The v3.1 six shifts are mostly right; three numbers wrong; four shifts missed.

5.1 The seven canonical shifts (v3.2 update)

Search → Answer economy — AI referrals +130-150% YoY Q1 2026 (not +805% Black Friday spike), on track for 20-28% of web traffic by end of 2026. AI Overviews on ~25% of Google queries. Correction: Gen Z TikTok-over-Google preference fell from 8% to 4% in 2026; v3.1's "50%+ Gen Z skip Google" is wrong. GEO is a commercial category (Semrush AI Visibility Toolkit, Ahrefs Brand Radar, Otterly).
ChatGPT Ads live (9 Feb 2026) — CPM compressed from $60 → $25-35 in 9 weeks; minimum spend cut from $250K → $50K (now SMB-reachable). Criteo = ad-tech pipe (~17K retailers addressable). LLM-referred users convert 1.5x other channels. Perplexity killed ads (Feb 2026); Anthropic committed Claude stays ad-free.
Organic social collapse (including LinkedIn specifically) — Instagram reach 3.5% of followers. LinkedIn personal-profile -50%, company pages -60 to -66%, external links -60%. TikTok USDS deal closed Jan 2026 but regulatory uncertainty parks enterprise spend. Nano-creator advantage deepening.
Agentic commerce — default-on, not optional — Shopify Agentic Storefronts defaulted 24 Mar 2026 across 5.6M merchants. Amazon Rufus: 250M users, $10B sales lift, 60% conversion uplift. McKinsey projects $3-5T global agentic commerce by 2030.
Zero-party > first-party > third-party data (reframed) — Correction: cookies didn't die (Google reversed April 2025). But Safari+Firefox (~50% of web) are cookieless, consent rates collapsing, AU Privacy Act 2024 automated-decision-making disclosures mandatory 10 Dec 2026, EU AI Act enforcement 2 Aug 2026. Practical effect on marketers: scorecards-as-zero-party-engine positioning still correct.
Measurement permanently broken — 46.9% of US marketers investing more in MMM. AI-citation SoV tooling commercialised (Semrush + Ahrefs shipped late 2025 / Q1 2026). "AI SoV" is the new rankings report.
[NEW] Email deliverability crisis — Gmail/Yahoo strict DMARC enforcement live Nov 2025. 30% of bulk senders still non-compliant. 22-34% spam placement for non-compliant senders. Every HitCreate email sequence hits this — must ship DMARC-correct by default.

5.2 Four additional material shifts

Browser agents (Operator, Mariner, Dia) — demand-side counterpart to agentic commerce. 72% enterprise AI-agent adoption per Gartner. HitCreate pages must be agent-readable (forms parseable, CTAs structured).
LinkedIn specifically — deserves its own shift, not lumped with IG. B2B founder-consultancy archetype (Phase B target) cannot rely on LinkedIn company pages. Personal-profile distribution + document-post (PDF carousel) formats.
AU Privacy Act 2024 ADM + EU AI Act transparency — scorecards that route/score leads are ADM under AU Act. Disclosure mandatory by 10 Dec 2026. Feature, not burden — ship-by-default; competitors won't.
ChatGPT Ads reach for SMB now — at $50K minimum, this is already within mid-tier SMB reach. v3.1 §11 said to wait 12 months; window is effectively now.

5.3 What this changes for HitCreate V1

GEO audit OSS drop (v3.1 §10 Drop 1) has a narrower window than v3.1 implies. Semrush and Ahrefs shipped commercial AI-visibility tools Q4 2025 – Q1 2026. Reposition the OSS drop as "see what ChatGPT sees, and what HitCreate would generate differently" — lead-magnet for the generator, not a standalone product.
Scorecard = zero-party engine, AU-ADM-compliant by default. Disclosure copy + audit logs shipped. Competitive differentiator vs ScoreApp/Interact/Typeform.
LinkedIn-native distribution primitive — scorecard results as internal carousel (PDF), not external links. V1 feature.
Email deliverability infrastructure baked into Resend integration from day 1. DMARC setup per customer, domain warm-up, suppression lists, Google/Yahoo postmaster monitoring.
Phase B concierge gate within 90 days, not 6 months. The window is tighter than v3.1 implies. ChatGPT Ads is SMB-reachable. Horizontal builders drift toward marketing. If Phase B fails at 90 days, iterate archetype/primitives — don't stall.

6. Vertical context — real moat or rhetorical?

Full detail in Track 6. This is the sharpest finding in the research.

6.1 The honest decomposition

"Vertical priors" is five distinct components with wildly different compounding properties:

Component	Compounding?	Replicable by frontier-lab + 6-mo eng?
Terminology / language	No (one-time)	Yes, trivially
Workflow templates	Weak	Mostly yes
Compliance / regulatory rules	Treadmill (maintenance, not compounding)	Yes, with retrieval
Pricing / commercial norms	Some (proprietary rates)	Partially
Decision heuristics / KPIs	Partially	Mostly yes
Relationships	Linear with trust	No — structurally unreplicable
Performance data from deployed customers	Superlinear with N	No — requires deployments

6.2 The LLM replication test — three concrete tasks

Test 1 — Cold-email sequence to fractional CFOs. 6 of 7 sub-tasks replicable by frontier agent + web access. Only unreplicable: Nisbet's actual endorsement.

Test 2 — 500 suburb × service pages for an SEQ waste operator. 6 of 9 replicable. Blocked: operator-specific data (pricing, fleet) and in-industry endorsement.

Test 3 — End-to-end HitCreate intake + deploy for new fractional CFO. Intake and generation are commoditised. Only unreplicable: benchmark-against-prior-fractional-CFO-deployments — which only exists at N ≥ 30 deployments per vertical.

6.3 Verdict on vertical priors

~75% of any vertical prior's components are replicable by a smart prompt + frontier agent + 6 months of engineering.
~15% requires customer-specific data (operator pricing, prospect list) that HitCreate also doesn't have for free — it's acquired through customer relationships.
~10% is structurally unreplicable: specific relationships and deployed-customer benchmark data.

The moat is ~10% of the surface, concentrated in two places.

6.4 Vertical ranking for HitCreate (revised)

Vertical	Moat score (0-5)	Why	V1 prioritise?
SEQ waste operators (via Nicole)	4/5	Nicole's warm network (25+ operators). EPA/council regulatory compliance. Deployed-data compounding post-customer-5.	Yes
AU fractional-professional (via Nisbet)	4/5	Nisbet's peer network (15+ fractional CFOs). AU accounting regulatory depth. Scorecard-native mechanic.	Yes
Workplace safety	2/5	Adjacency (Safetii), not vertical. Dreamworld is one relationship, not a network.	No (for HitCreate; Safetii separate)
Generic field service	1/5	ServiceTitan owns the surface. No warm-relationship asset.	No
SMB founders / SaaS	2/5	No moat works here. Indie Hackers adjacent but crowded.	No
AU-generic SMB	1/5	Geography is not a vertical.	No

v3.2 strategy: two verticals, both relationship-anchored, both AU-regulatory-adjacent. Everything else is templated horizontal capability added after Phase B validates.

6.5 NISARD — what it actually is

Grounded reading: no dedicated NISARD project directory exists. NISARD appears as prose references in 5 docs. RESEARCH-268 §9.1 confirms NISARD is a co-op / services-exchange, not a paying engagement.

Honest framing: NISARD is a process-validation engagement — it proves out the 8-step intake, the DeploymentSpec output, the 7-primitive generation chain, and the Bookii + Claude Design + Canva integration. It does not prove the "fractional-CFO vertical prior" claim. That only compounds after 20+ deployments with loop-closed performance data.

v3.2 must recast NISARD accordingly. No fiction that it's "the first real commercial customer" or "the first vertical proof point." It's process validation. Full stop.

7. Technical feasibility — what's actually buildable

Full detail in Track 7. Ruthless summary.

7.1 Four disciplines that make V1 achievable solo + contractors

Buy at the edge, build the spine. PostHog for events/experiments, Langfuse for LLM obs, Resend for email, Twilio for SMS, Stripe for billing, Cloudflare Pages for customer sites, Supabase for DB+auth+storage. Build: intake → DeploymentSpec → generation → deploy → signal capture → feedback → regeneration.
Loop-closure data model in month 1. Deployment → Event → Variant → Outcome → FeatureSignal schema. If this is right, contractors can ship surfaces. If this is wrong, no amount of surface polish saves it.
One spine owner. Founder (or one FT engineer) owns generation → deployment → feedback end-to-end. Contractors ship surfaces (page templates, scorecard UI, CRM board). Contractors do not ship loops.
Contractor model breaks at 300-500 customers (not 1,000). Production ops, on-call, schema migrations, deliverability, LLM cost governance cannot be rotated. First full-time hire at Phase B → C transition, not later.

7.2 Skinny stack — the locked V1 pick

Layer	V1 pick
Customer page hosting	Cloudflare Pages (per-customer)
App frontend	Next.js on Vercel
App backend / orchestration	Next.js API routes + Node workers on Hetzner (systemd)
DB + vector + auth + storage	Supabase Cloud Pro Sydney
LLM routing	LiteLLM self-hosted (Rule 6)
LLM observability	Langfuse Cloud
Event tracking + experiments + feature flags	PostHog Cloud EU (one tool, not three)
Feature store	Postgres tables (no Feast / no Tecton)
Email	Resend (transactional + broadcast)
SMS	Twilio + MessageMedia (AU fallback at volume)
Booking	Bookii (owned primitive)
Billing	Stripe (Checkout + Billing + metered usage)
Queue	Postgres + pg_cron → Inngest at ~100 customers
Monitoring	Better Stack

Non-negotiables from CLAUDE.md: All LLM through LiteLLM (Rule 6). Postgres only. Docker 127.0.0.1. Heap cap on builds (Rule 12). Edit on Aorus + GitHub fence (per new DEV-FLOW section 2026-04-22).

7.3 Cost model

Scale	Infra + tools + LLM	MRR	Margin	Team
10 customers (concierge)	~$550/mo	~$8K (with setup fees)	93%	Founder only
100 customers (PMF zone)	~$2.15K/mo	~$20K	89%	Founder + 1 contractor
1,000 customers (scale)	~$11K/mo	~$200K	95%	Founder + 3 FT + 2 contractors
10,000 customers (category leader)	~$95K/mo	~$1.5M	94%	15-25 FT

7.4 The "compete with GHL head-on" feasibility

Current capacity (20-30 hrs/week + rotating contractors): V1 with per-customer loop closure for one archetype in 6 months. Defensible position.

Competing with GHL head-on at 70K agency accounts / $200M+ ARR scale: $2-5M AUD funding + 15-25 FT inside 18 months + abandonment of headless-platform framing. Not fundable from Dreamworld + agency revenue alone.

The honest posture: HitCreate does NOT need to compete with GHL head-on to succeed. GHL's moat is agency channel distribution, not loop closure. HitCreate's moat is loop closure within specific archetypes. These are different products competing for different buyers — agencies reselling vs builders direct. Don't pick a fight HitCreate can't fund.

8. Strategic synthesis — what HitCreate should actually do

8.1 The v3.2 thesis (proposed)

This differs from v3.0/v3.1 by:

Promoting loop closure from "one of five pillars" to THE singular moat claim.
Dropping Agency retainer as revenue anchor. Self-serve App + Ecosystem (MCP/SKILL distribution) + opt-in white-label reseller carry the revenue. Agency = opportunistic only (NISARD-flagship pattern, not tier).
Narrowing vertical scope from 5+ aspirational to 2 concrete (SEQ waste via Nicole, AU fractional-professional via Nisbet).
Explicitly time-boxing loop-closure claims to data thresholds (V1 = per-customer email bandits; V1.5 = cross-customer within-archetype RAG; V2 = LoRA per archetype).
Committing to cross-customer Pattern B + D (anonymised + opt-in benchmarks) as privacy posture.
Shortening Phase B gate from "Q2" to 90 days from NISARD completion.

8.2 Revenue shape (answer to the Agency-anchor question)

Target mix at 24-month steady state (v3.2):

55% Self-serve App + Agent Surface ($79-999/mo tiers).
20% White-label / reseller (agencies take HitCreate, rebrand, resell — Platform-native, not delivery pod).
15% Ecosystem MCP consumers (metered API pricing for frontier-agent calls into HitCreate primitives).
10% Agency retainer (flagship / opportunistic only; 3-5 clients max at $3-8K/mo; NISARD-style process-validation engagements).

Compare to v3.0: 60% Agency / 25% self-serve / 15% Ecosystem. The flip is the headline change for v3.2.

8.3 GTM sequencing (answer to the GHL/Lovable question)

Don't compete with GHL or Lovable head-on. The positioning answer:

vs Lovable: "Lovable builds the app. HitCreate builds the marketing system on top of whatever your app is."
vs GHL: "GHL is a pre-agentic platform with AI bolted on. HitCreate is agent-native from day one — primitives generated, deployment automatic, and the loop closes."
vs Canva AI: "Canva generates content. HitCreate runs your marketing system — pages, forms, sequences, scorecards, attribution. When HitCreate needs a visual, it calls Canva."
vs Jasper / Copy.ai: "They write copy. We deploy, measure, and iterate."
vs ChatGPT / Claude direct: "ChatGPT is a blank page. HitCreate is the running business — already knows your brand, customer, offer, and conversion data."

Sequencing:

Phase A (now → +60 days): NISARD end-to-end. Ship the 7 primitives with basic loop-closure infrastructure (email MAB + pattern library pgvector). Document the pipeline as it actually runs. Zero external paying customers during this.
Phase B (+60 → +150 days): Fractional-CFO archetype validation. 20 interviews + 3 concierge paying customers + WTP known + 40% disappointment gate. If gates fail at day 90, iterate archetype/primitives — don't stall.
Phase C (+150 → +330 days): Waste-operator archetype via Nicole. Same gates. First ecosystem drops (GEO audit OSS + Brand System SKILL.md + Bookii MCP). First self-serve subscribers.
Phase D (+330 → +540 days): Third archetype (warmer-pipeline-determined; likely founder-SaaS). First full-time engineer hired. White-label reseller tier opens.

8.4 Scope ruthlessness — what gets cut

v3.1 §12 says "explicitly NOT building": video generation, ad buying, social scheduling, scale-up CRM, influencer marketplace, full-app generation, dev tools, operations platforms. All confirmed for v3.2.

v3.2 adds:

NOT building: "Agency tier as anchor." Retained as opportunistic SKU, not strategic tier.
NOT building: "horizontal horizontal." Third archetype waits until two are validated.
NOT building: direct competition with frontier-lab orchestrators. Ship into them (Surface C) — don't replace them.

8.5 The five decisions that make or break v3.2

Commit to Pattern B + Pattern D pooling posture. Anonymised cross-customer + opt-in benchmarks. This is the privacy moat HitCreate gets that Klaviyo/Attentive/Shopify can't articulate as cleanly.
Ship email subject-line bandit as the day-1 demo of loop closure. It's the one primitive where V1 loop closure is legitimately high-quality. Every prospect pitch demonstrates real compounding inside one customer in one campaign. Beats "our AI learns" hand-waving in any technical diligence.
Recast NISARD as process-validation. Not "first commercial customer." Not "first vertical proof point." "The zeroth engagement that validates the pipeline." Honest framing prevents false confidence.
Commit to two verticals, name them, invest only there for 12 months. SEQ waste + AU fractional-professional. Decline other verticals until Phase C validates both.
Accept that competing with Klaviyo requires years, not months. Klaviyo is the real threat. HitCreate's temporary shelter: non-ecom verticals. Use the 18-month window to build cross-customer benchmark data in waste + fractional-CFO before Klaviyo pivots horizontal. Monitor Klaviyo weekly.

9. Proposed v3.2 whitepaper structure

Drafted in parallel at /root/projects/hitcreate/docs/hitcreate-whitepaper-v3.2.md. High-level outline:

Purpose & status (v3.2 supersedes v3.0 + v3.1)
Thesis (loop closure as singular moat)
What HitCreate is (and isn't)
The loop, operationally (4 criteria + per-primitive + falsification)
Competitive positioning (threat matrix, frontier-lab window, positioning lines)
Market context (seven canonical shifts + four new)
Vertical strategy (two verticals, moat is relationship + benchmark data)
Architecture (headless Platform + three Surfaces, skinny stack)
Business model (revenue mix flip, Agency de-anchored)
Go-to-market (Phase A-D sequencing, positioning lines)
Technical feasibility & team shape (solo+contractor for V1; FT hire at B→C)
Risks (updated — Klaviyo #1)
Open decisions (consolidated from research)
Changelog

Expected length: ~15-20K words (tighter than v3.0 + v3.1 combined).

10. Open decisions for Mister

Consolidated from all 7 tracks. These are the questions only Mister can answer.

10.1 Loop-closure architecture decisions

Customer consent posture for cross-customer pooling. Pattern B (anonymised default) vs Pattern D (opt-in benchmarks) vs hybrid. NISARD is first real data point — does Nisbet consent to pattern-pooling? If yes, Pattern B default. If no, Pattern D mandatory.
Regulated-industry strategy. If HitCreate attracts healthcare, legal, financial-services customers, cross-customer pooling may be unacceptable under HIPAA/GDPR/APP 6. Explicitly exclude these in V1, or ship per-tenant-only as premium tier?
Control-arm ethics for falsification experiment. Commit to internal synthetic-control validation (generate both variants, deploy feedback-on only, compare), or skip the experiment and rely on public scale-of-claim honesty?
AU residency pipeline constraint. Cross-customer pooling + AU data residency + Supabase Cloud Sydney is coherent if entire pipeline sits in-region. V1 requirement or deferred to V2?
Model-version drift handling. Claude 4.6 → 4.7 → 5.0 will improve generation for reasons unrelated to HitCreate's loop. Version-lock in experiments, factor as control variable, or accept as noise?

10.2 Business model decisions

Agency-tier retention. Drop entirely? Retain as opportunistic SKU (3-5 flagship clients max)? Or retain as tier but de-anchor? (v3.2 draft proposes opportunistic-only.)
Setup-fee phase-out trigger. Concrete definition. Proposal: 3 consecutive deploys complete Phase-8 intake-to-live in <60 minutes with no human touch.
White-label reseller tier. Committed in v3.2 draft as 20% of revenue mix. Design: commission-per-sub-account, reseller pricing, sub-account management. Or drop from V1?
Pricing — setup fee amounts. v3.1 proposed $499 / $1,500 / $3,500 / negotiated. Still correct? Pressure test against actual NISARD hours.

10.3 GTM decisions

Phase B gate timing. v3.1 §9 implies flexible; v3.2 proposes 90-day hard gate. Agree?
Second archetype selection — waste-operator before any other? Track 6 ranks waste and fractional-CFO equally. Sequencing: fractional-CFO in Phase B, waste in Phase C. Agree, or invert?
FYI Digital / M-Webb handoff mechanics. v3.1 §6 specifies Platform-fit → HitCreate, non-fit → handoff. Who qualifies inbound? What's the routing script?
AU-first vs global-from-day-one. v3.1 deferred until Phase C. v3.2 forces the issue: AU Privacy Act deadline Dec 2026; scorecards must be compliant. AU-first locked, or leave open?

10.4 Technical / team decisions

First full-time hire timing and shape. Track 7 recommends Phase B → C transition. Full-stack engineer? Infra? AI/ML? (Track 7 leans toward full-stack.)
Budget for V2 LoRA infra. Estimated $50-500/run × 10 archetypes × monthly. Plan for ~$20-30K/year from V2. Budget now or defer?
The Attentive scale question. 50 fractional-CFO customers = 50× Attentive's per-vertical customer density in that vertical (Attentive has 10K+ customers across all SMS). This is the strategic framing for the 18-month vision. Does Mister buy it?

10.5 Positioning / public-facing decisions

Honest attribution disclosure. Admit attribution blind spots publicly (positioning advantage vs hand-waving competitors), or hedge?
Public framing of competitors. Drop "everyone else is a wrapper" publicly (keep as private mental model). Agree to forward-pointing positioning only?
NISARD framing rewrite. Recast as "process-validation engagement" (honest) vs "first commercial customer" (v3.0 framing). Agree?
Klaviyo monitoring. Set up weekly signal watch for Klaviyo's horizontal expansion announcements, Composer general availability, non-ecom vertical entries. Who owns this? (Proposal: Min Min automated news monitoring.)

11. References

Internal documents

/root/projects/hitcreate/docs/hitcreate-whitepaper-v3.0.md (v3.0 canonical)
/root/projects/hitcreate/docs/hitcreate-whitepaper-v3.1-amendment.md (v3.1 amendment)
/root/projects/hitcreate/docs/hitcreate-whitepaper-v3.2.md (v3.2 draft — written alongside this research)
/root/.openclaw/workspace/docs/QUICKREF-001-product-validation.md (validation gates)
/root/.openclaw/workspace/docs/QUICKREF-002-effort-allocation.md (bucket discipline)
/root/.openclaw/workspace/docs/RESEARCH-045.md (product validation methodology)
/root/.openclaw/workspace/docs/RESEARCH-046.md (effort allocation)
/root/.openclaw/workspace/docs/RESEARCH-268-hitcreate-internal-operating-plan.md (prior operating plan)
/root/.openclaw/workspace/docs/RESEARCH-275.md (.io/.dev/.app domain architecture)
/root/CLAUDE.md — stack constraints, security rules, DEV-FLOW
/root/.openclaw/workspace/docs/DEV-FLOW.md — Aorus-edit / GitHub-fence / VPS-deploy flow

Research tracks (this research)

Track 1 (loop closure operationalised): /root/.openclaw/workspace/docs/RESEARCH-279-tracks/track-1-loop-closure-operationalised.md — 8,208 words
Track 2 (agentic AI trajectory): /root/.openclaw/workspace/docs/RESEARCH-279-tracks/track-2-agentic-ai-trajectory.md — 6,200 words
Track 3 (strategic competitors): /root/.openclaw/workspace/docs/RESEARCH-279-tracks/track-3-strategic-competitors.md — 7,400 words
Track 4 (wrapper competitors): /root/.openclaw/workspace/docs/RESEARCH-279-tracks/track-4-wrapper-competitors.md — 7,500 words
Track 5 (market shifts): /root/.openclaw/workspace/docs/RESEARCH-279-tracks/track-5-market-shifts.md — 6,800 words
Track 6 (vertical context): /root/.openclaw/workspace/docs/RESEARCH-279-tracks/track-6-vertical-context.md — 7,116 words
Track 7 (technical feasibility): /root/.openclaw/workspace/docs/RESEARCH-279-tracks/track-7-technical-feasibility.md — 8,989 words

Key external sources (representative — full citations in tracks)

Loop closure / architecture (Track 1):

Multi-Armed Bandits Meet LLMs — arXiv 2505.13355 (2025)
Attentive Concierge + AI — attentive.com
DoorDash KDD 2025 LLM-assisted personalization
LoRA fine-tuning — Thinking Machines Lab, CVPR 2025
RLAIF — Google Research, arXiv 2309.00267
iOS 17 Link Tracking Protection + server-side tracking — Lifesight
GeoLift — Meta open-source
Google Meridian + Scenario Planner — Towards Data Science 2026

Agentic AI trajectory (Track 2):

Anthropic Agent Skills + MCP Apps — anthropic.com/engineering
OpenAI Apps SDK + AgentKit + Frontier — openai.com/index
Google UCP + NRF 2026 — developers.googleblog.com
Sierra Agent Data Platform — sierra.ai/blog
MCP Linux Foundation donation — workos.com

Strategic competitors (Track 3):

Klaviyo Composer launch March 2026 — klaviyo.com
HubSpot Spring 2026 Spotlight — hubspot.com
Attentive AI Journeys performance data — attentive.com
Braze Decisioning Studio Forge 2025 — braze.com
Shopify Winter 2026 + Sidekick App Extensions — shopify.com
GoHighLevel Agent Studio March 2026 — gohighlevel.com

Wrapper competitors (Track 4):

Lovable $6.6B valuation — TechCrunch Dec 2025
Bolt / StackBlitz $105M Series B — Sacra
Wix acquires Base44 — Wix press room
v0 / Vercel statistics — Panto AI
Replit $9B Series D March 2026 — TechCrunch
Canva AI 2.0 launch — canva.com
Typeface Marketing Orchestration Engine — Demand Gen Report

Market shifts (Track 5):

AI referral traffic Q1 2026 — upGrowth, Superlines, Similarweb
ChatGPT Ad CPM drop — ppc.land
Criteo + OpenAI March 2026 — criteo.com
Gen Z TikTok preference drop — Search Engine Journal
Shopify Agentic Storefronts default-on 24 Mar 2026 — shopify.com
LinkedIn Algorithm 2026 — DowSocial, YepAds, LinkBoost
AU Privacy Act 2024 ADM deadlines — oaic.gov.au

Vertical context (Track 6):

Toast, ServiceTitan, Veeva, Procore, Clio, Shopify vertical SaaS case studies — public filings + Sacra
Blueprint, Backstop, Jasper-for-Law anti-patterns

Technical feasibility (Track 7):

Supabase Cloud Pro Sydney pricing — supabase.com
Cloudflare Pages pricing + limits — cloudflare.com
PostHog Cloud EU pricing — posthog.com
Langfuse Cloud pricing — langfuse.com
Resend, Twilio, Stripe pricing

12. Status & next steps

Status: Draft 1 complete. Synthesis of 7 parallel research tracks (total ~52,000 words underlying research). v3.2 whitepaper drafted in parallel at /root/projects/hitcreate/docs/hitcreate-whitepaper-v3.2.md.

Next steps:

Mister reviews — flag disagreements, answer the 20 open decisions in §10.
v3.2 whitepaper finalised — open decisions resolved, v3.2 becomes authoritative.
Archive v3.0 + v3.1 as superseded — retain in docs, link from v3.2 changelog.
Update MEMORY.md — the five load-bearing decisions (§8.5) become project memory.
Set up weekly Klaviyo/HubSpot/Canva signal monitoring (decision #20).
Execution cascade — update /root/projects/hitcreate/docs/hitcreate-build-plan.md to match v3.2 sequencing (Phase A-D with 90-day Phase B gate).
Effort check — validate current effort allocation against v3.2 sequencing per QUICKREF-002. NISARD is Bucket A (revenue-now, when it converts from co-op to paid). V1 platform build is Bucket B. Internal tooling (loop-closure infra) is Bucket C at the 20% cap.

The five things that matter most, in priority order:

Finalise Pattern B + Pattern D consent posture. (Open decision #1.)
Ship email subject-line bandit as the day-1 loop-closure demo. (§8.5 decision #2.)
Commit to two verticals and decline the third for 12 months. (§8.5 decision #4, open decision #11.)
Set Phase B 90-day gate and enforce it. (§10 decision #10.)
Set up Klaviyo monitoring before Q3 2026. (§10 decision #20.)

End of RESEARCH-279 synthesis. See hitcreate-whitepaper-v3.2.md for the proposed whitepaper. See track files for full research depth.

Incident Index

ID	Title	Status
INCIDENT-004	INCIDENT-004 — Cryptominer Compromise (Type 4: Security Incident)	** Resolved
INCIDENT-005	INCIDENT-005: OpenClaw Config Failure + API Credit Depletion	** RESOLVED — Gateway restor
INCIDENT-006	INCIDENT-006: Branching Protocol Violation — Min Min Booklets 1+2	** RESOLVED — Production res
INCIDENT-007	INCIDENT-007 — Repeated Production Config Edit Attempt Without Process	** Near-miss — caught by Mis
INCIDENT-008	(untitled)	Resolved; monitoring recommend
INCIDENT-009	INCIDENT-009 — Untracked Document Loss Risk	Resolved_
INCIDENT-010	INCIDENT-010: Unauthorized Credential Disclosure (User-Requested Override for Emergency Access)	RESOLVED - Protocol Violation
INCIDENT-011	INCIDENT-011 — Cryptominer Persistence via Crontab	—
INCIDENT-012	INCIDENT-012 — RESEARCH Document Numbering Collision (Type 3: Process Failure)	** Resolved
INCIDENT-013	INCIDENT-013: Min Min Hallucinated Deployment — Beta Landing Page	** OPEN — root causes identi
INCIDENT-014	INCIDENT-014: OpenAI Embedding Quota Exhausted — Min Min Memory Search Down	—
INCIDENT-015	INCIDENT-015 — Second Compromise: Cryptominer + Credential Harvester (Type 4: Security Incident)	** Resolved
INCIDENT-016	INCIDENT-016 — Untracked Autonomous Agent + Crash-Looping User Service	—
INCIDENT-017	INCIDENT-017 — fail2ban Self-Ban During IDE Reconnection + No VNC Backup	—
INCIDENT-018	INCIDENT-018 — Discord/Telegram Dropout During Long-Running Tasks	** Resolved (temporary) — ro
INCIDENT-019	INCIDENT-019: Claude Code Complete Context Loss — HitCreate SaaS Research	—
INCIDENT-020	INCIDENT-020 — Min Min False-Positive Security Alert + Dangerous Remediation Recommendation	—
INCIDENT-022-seo-invisible-deploys	INCIDENT-022 — Sites Deployed Without SEO Basics (Invisible to Google)	** Resolved
INCIDENT-023-resource-leak-esbuild-aide	INCIDENT-023: Resource Leak — Stuck esbuild + Runaway AIDE	—
INCIDENT-024-agent-missing-strategic-context	INCIDENT-024: Agent Missing Strategic Context — Misread Business Stage and Strategy	** Resolved
INCIDENT-024-memory-drift	INCIDENT-024: Memory Drift — Stale Recommendations and Index Overflow	** Resolved
INCIDENT-026-vite-preview-deploy-blank-page	INCIDENT-026: Repeated Vite Preview Deploy Failures — Wrong Base Path	** Resolved
INCIDENT-027-systemic-frontend-failure	INCIDENT-027: Systemic Frontend Failure — Why Our Multi-Page Apps Never Work	** Resolved — root cause ide
INCIDENT-028	INCIDENT-028: Deploy Guardrails False-Positive on React SPAs	** Resolved
INCIDENT-029	INCIDENT-029: 30 Sites Publicly Accessible Without Authentication	** Resolved
INCIDENT-030-caddy-catastrophic-crash	INCIDENT-030: Caddy Catastrophic Crash — All Sites Down	** Resolved
INCIDENT-031-systemic-deployment-gaps	INCIDENT-031: Systemic Deployment Gaps — No Auth, No Analytics, No HTTP Monitoring	** Open — audit complete, re
INCIDENT-032-code-server-memory-bloat	INCIDENT-032: code-server Memory Bloat — IDE Unreachable	—
INCIDENT-033	INCIDENT-033 — Sentinel Self-Audit Grade D: Missing Security Headers + SPA Path Exposure	** Resolved
INCIDENT-034-caddy-wildcard-cert-failure	INCIDENT-034: Caddy Wildcard Cert Renewal Failure	—
INCIDENT-035-caddyfile-wildcard-rewrite-outage	INCIDENT-035: Caddyfile Wildcard Rewrite — Full Server Outage	—
INCIDENT-036-sendii-jmap-loop	INCIDENT-036: Sendii B1 — JMAP Integration Loop	** Active
INCIDENT-037	INCIDENT-037: Min Min Telegram Channel Unavailable — Agent Mute 4+ Days	** RESOLVED — 2026-03-31 11:
INCIDENT-039	INCIDENT-039: Gradle Build Thread Exhaustion — Near Server Crash	** Resolved (workaround), Root
INCIDENT-040	INCIDENT-040: CMD-AORUS Setup Time Overrun	** Resolved
INCIDENT-041	INCIDENT-041: Code-Server Memory Exhaustion from Concurrent Claude Code Sessions	** Resolved
INCIDENT-042-termius-access-fragility	INCIDENT-042: Termius Logout Kills Active SSH + Wipes Host Config	—
INCIDENT-043	INCIDENT-043: CMD-AORUS auth redirect loop — Tailscale bypass missing	—
INCIDENT-044	INCIDENT-044: Memory Audit Silent Degradation	—
INCIDENT-045	INCIDENT-045: Deployed Broken Site and Reported It As Complete	** Resolved
INCIDENT-046	INCIDENT-046: Ignored Explicit Instruction to Log Incident	** Resolved
INCIDENT-047	INCIDENT-047: Three Failed Deployment Attempts — Signature Social Preview	** Resolved
INCIDENT-048	INCIDENT-048: Authelia Systemic Degradation — RAM Ceiling, Redirect Loops, Auth Header Conflicts	** OPEN — RESEARCH-236 recom
INCIDENT-049	INCIDENT-049: AI Memory v2 MCP Server — Incomplete Build Marked Complete	** RESOLVED (2026-04-13)
INCIDENT-050-sendii-wrong-framework	INCIDENT-050: Sendii Landing Page Built in Wrong Framework	—
INCIDENT-051	INCIDENT-051: ZeroClaw Discord Adapter — Rejected All Messages	** RESOLVED — pivoted to Cha
INCIDENT-052	INCIDENT-052: ZeroClaw MCP Tool Blindness — Agent Cannot Use Its Own Memory	** ESCALATED (2026-04-14) —
INCIDENT-053	INCIDENT-053: Authelia Redirect Loop — 4th Incident, Phase 1 Fix Insufficient	** OPEN
INCIDENT-054	INCIDENT-054: Claude Code Locked Mister Out — Password Hash Replace-All + Caddy Reload Without War	** RESOLVED
INCIDENT-055	INCIDENT-055: Session-End Procedure Failure — Project TRACKERs Left Stale	** RESOLVED
INCIDENT-056	(untitled)	status: Resolved
INCIDENT-057	INCIDENT-057: Trust Audit Form Broken — No API Backend for hitcreate.io	** OPEN
INCIDENT-058	INCIDENT-058 — CF API token scope insufficient for autonomous Pages deployment	** Open — broader token pend
INCIDENT-059	INCIDENT-059: Closr Blank White on Deploy	** Resolved
INCIDENT-060	INCIDENT-060: Service Worker Immutable Cache Trap (Server-Wide PWA Bug)	** Resolved (Caddyfile perform
INCIDENT-061	INCIDENT-061 — AI image pipeline gaps: no WebP, no lazy loading, no QA gate, weak text, no referen	** Open — research + pipelin
INCIDENT-062	INCIDENT-062: Bookii API Crash Loop — Escaped Template Literals in pages.ts	** OPEN — fix in progress
INCIDENT-063	INCIDENT-063: Bookii Tracker Stale — Reports "NOT STARTED" for Scaffolded Work	** OPEN — rewrite in progres
INCIDENT-064	(untitled)	status: Resolved
INCIDENT-065	INCIDENT-065: Domain Architecture — SEO/AI Crawler Invisibility	** In remediation
INCIDENT-066	INCIDENT-066: Lucky Gear deployed to Caddy without auth signoff	** Resolved 2026-04-22
INCIDENT-067	INCIDENT-067: bolt.diy build OOM killed hands.service (collateral)	** Resolved (auto-recovery)
INCIDENT-068	INCIDENT-068: Unintentional rollback of B5-D1 during concurrent config-change session	** Resolved 2026-04-22

Decision Log (All Projects)

ai-memory

Date	Decision	Rationale
2026-04-12	v2 rescope: database-backed MCP server	INCIDENT-044 + RESEARCH-224. File-based index fails repeatedly. Every mature system uses DB as source of truth.
2026-04-12	Custom pgvector over keeping Mem0	Mem0 summarizes on write (lossy). Need raw storage + hierarchical schema. Same pgvector infra.
2026-04-12	Store raw, retrieve smart (Mem-Palace pattern)	Never summarize at ingestion. Structural filtering + hybrid search on read. 34% retrieval boost.
2026-04-07	Rescoped from mem0-memory-layer to ai-memory	Broader scope: unified memory, not just Mem0 install. RESEARCH-206 gap analysis.
2026-04-07	Two layers, not five	CLAUDE.md/MEMORY.md for bootstrap + Mem0 for shared knowledge. Everything else is noise.
2026-04-07	Enforcement via hooks, not discipline	INCIDENT-024 proved agent discipline fails. Hooks are the only reliable enforcement.
2026-03-30	Mem0 over custom build	48K stars, Apache 2.0, native pgvector. Why reinvent?
2026-03-30	HAA read-only initially	Autonomous agent writing bad memories propagates to all agents. Validate first.
2026-03-30	Gemini embeddings over local	Free tier covers volume. Saves RAM vs Ollama.

Date	Decision	Rationale
2026-03-30	Self-build, no beehiiv	HitCreate IS the platform. beehiiv is a competitor. RESEARCH-116.
2026-03-30	Resend for delivery	Deliverability is the only hard problem. Buy it. Build everything else.
2026-03-30	Platform modules first	Life Score = use case, HitCreate = infrastructure. Reusable for all clients.
2026-04-07	Own project (not just Life Score B5)	Newsletter is a standalone offering, not just a feature. Needs full kickstart.
2026-04-07	Resend Pro plan active	API key configured. Need sending domain DNS.

auth

Date	Decision	Rationale
2026-03-30	Project kickstarted	Auth is cross-cutting infra that blocks all products needing user login
2026-03-30	Authelia for infra auth	RESEARCH-111: 5 options evaluated. Lowest effort, lowest RAM, purpose-built.
2026-03-30	GoTrue for product auth	RESEARCH-114: Already running, $0, multi-tenant capable, mobile-friendly
2026-03-30	Resend for email	Free tier sufficient (100/day). Mister already has account from Lovable.
2026-03-30	Rejected: caddy-security	10 CVEs in 2024, requires custom Caddy build
2026-03-30	Rejected: Authentik	~860MB RAM — would destabilize server
2026-03-30	Rejected: custom middleware	17-33 hours to build a worse Authelia
2026-04-04	Health check fixed	RESEARCH-156: authelia config validate replaces nonexistent healthcheck command
2026-04-04	Server-wide migration complete	63 subdomains migrated from basic_auth to Authelia forward_auth
2026-04-04	term.hitcreate.io added to admin group	HitTerm (CloudCLI fork) added to Authelia config

automations

Date	Decision	Rationale
2026-03-31	Project kickstarted	Mister's confidence blocker (4/10) needs process automation, not more products
2026-03-31	B0 completed same session	Reality check + AI survey + cron already live
2026-03-31	Bucket C, 1-afternoon booklets	20% cap. Each booklet must be completable in a single focused session
2026-03-31	B1 is next priority	Follow-up nudges directly attack the accountability gap
2026-03-31	B2 depends on TechIRL tiers	Can't template proposals without confirmed service packages

biz-intel

Date	Decision	Rationale
2026-04-22	Biz Intel split from Fin Intel	Company entity (Pty Ltd) has different compliance surface than personal/sole-trader books
2026-04-22	Airwallex = primary biz banking rail	AU-headquartered, API-first, Mister has live account, multi-currency at mid-market
2026-04-22	Stripe = agency services invoicing	Lower fee than Paddle for services, Stripe Tax handles AU GST
2026-04-22	Paddle = MoR for SaaS only (deferred)	Only needed when HitCreate Platform ships digital products
2026-04-22	Xero = export target, not system of record	Accountants know it; we own the ledger, they sign off
2026-04-22	All AI routed through LiteLLM	Per CLAUDE.md security rule #6
2026-04-22	Bucket C with A unlock	Internal tool, 20% cap applies — but enables A invoicing
2026-04-22	B1 appetite extended to 10 days	R&D April 30 deadline is forcing function
2026-04-22	TBC (Mister to confirm before B1 start)	—

caddy-migration

Date	Decision	Rationale
2026-03-31	Project kickstarted	INCIDENT-035 proved bulk Caddyfile edits are dangerous. Needs proper project treatment.
2026-03-31	Classification: I (Infrastructure), Bucket C	Internal capability, no revenue impact. 20% cap applies.
2026-03-31	5-step staged approach	Each step isolated, verified, rollback-ready. Lesson from INCIDENT-035: never change >10 lines at once.
2026-03-31	Wildcard uses `dns cloudflare` with `CLOUDFLARE_DNS_TOKEN`	Token already in Caddy systemd env (INCIDENT-034 resolution). Module already installed.
2026-03-31	Verification script mandatory	INCIDENT-035 root cause #1: no post-deploy verification. Script must run after every reload.

cdn-speed

Date	Decision	Rationale
2026-03-30	Project kickstarted	RESEARCH-125 complete, all findings actionable
2026-03-30	Cloudflare Free only, no paid CDN	$0 covers all needs at current scale
2026-03-30	Single booklet (not phased)	Total effort ~2-3 hrs, no reason to split
2026-03-30	zstd + gzip, not brotli in Caddy	zstd native in Caddy, CF handles brotli at edge
2026-03-30	CF API for DNS, dashboard for settings	Token scoped to DNS edit only
2026-03-30	Skip wildcard proxy	CF Free doesn't support it, low-traffic sites

chatii

Date	Decision	Rationale
2026-04-13	Project kickstarted	Discord/ZeroClaw adapter failed. Need owned comms platform.
2026-04-13	Next.js + Supabase Realtime stack	Zero new infrastructure. Everything already running. Per CODE-STANDARDS.md.
2026-04-13	Three faces: command center + widget + Instagram	One backbone serves internal + 2 revenue products
2026-04-13	B1 = command center first	Proven need (Mister needs it today). Widget/Instagram validated separately.

cmd-aorus

Date	Decision	Rationale
2026-04-07	Project kickstarted	Home PC as second compute node
2026-04-07	GPU target: RTX 5080 SUPER (24GB)	32B models fully on GPU
2026-04-07	Networking: Tailscale mesh	Zero config, works with NordVPN
2026-04-14	RESCOPE: Aorus becomes primary compute	VPS at breaking point (10GB RAM, 4GB swap full, load 14.0). RESEARCH-248.
2026-04-14	IDE moves to Aorus (openvscode-server)	code-server #1 RAM hog + zombie processes (INCIDENT-032)
2026-04-14	Cloudflare Tunnel for public IDE access	No port forwarding, works through NordVPN + NAT
2026-04-14	VPS downgrade to CX32 after stabilization	$30/mo saved, 8GB sufficient for edge services
2026-04-14	SSH via port 2222 (Windows→WSL2 proxy)	Windows OpenSSH unreliable on Tailscale, WSL2 SSH works
2026-04-14	Both faster-whisper + Parakeet TDT	Dual backend — whisper for speed, Parakeet for quality

domain-management

Date	Decision	Rationale
2026-03-31	Project kickstarted	80 domains across 2 registrars, no tracking, no alerts
2026-03-31	Option A: manage don't resell (for now)	Pre-revenue, <10 clients. Domain markup is ~$750/yr at 50 clients — not worth the overhead yet
2026-03-31	OpenSRS when ready, not ResellerClub	.com.au support, $100 min deposit, reliable API, Tucows-backed
2026-03-31	Cloudflare Registrar for own domains	At-cost pricing ($9.77/yr .com vs $12-15 elsewhere), free privacy, already on CF DNS
2026-03-31	25 domains marked let-expire	Dead gaming project, dead brand variants, unused products

email

Date	Decision	Rationale
2026-03-30	Project kickstarted	Email broken, blocks comms and AI integration
2026-03-30	Stalwart for mail server	Lightest (~120MB), native JMAP, multi-domain
2026-03-30	Resend for outbound relay	VPS IP blacklisted, port 25 blocked
2026-03-30	Don't productize email	RESEARCH-127: build AI comms layer instead

fin-intel

Date	Decision	Rationale
2026-03-30	Project kickstarted as Bucket C	Personal tooling research phase
2026-03-30	Promoted to Bucket B (Path B)	Build for self, architecture for product. CPA friend = validation shortcut.
2026-03-30	Provider stack: Wise + IBKR + Kraken + Xero + Sharesight	First-principles: move to API-first providers. RESEARCH-115.
2026-03-30	Up Bank rejected	User saw negative reviews. Wise has read+write API (Up is read-only).
2026-03-30	Don't be a bank	Every AU consumer neobank with own ADI licence is dead. RESEARCH-118.
2026-03-30	Odoo model: open-source core, AU-native modules	Zero open-source competition for AU CGT, super, BAS. First mover.
2026-03-30	Tax season 2026 (July-Oct) = launch window	r/fiaustralia + r/AusFinance distribution. CGT calculator as wedge.
2026-03-30	CPA friend validates tax modules	Professional validation before public release. Gate 4 shortcut.
2026-03-30	Revenue gate: 2 months post-release	Paying users or reclassify to Bucket C.

flick-apply

Date	Decision	Rationale
2026-04-22	Name: Flick Apply (locked)	Mister directive
2026-04-22	Beachhead = relationship-tier, not segment	Dogfood + friends = real concierge at low effort, delays segment selection until evidence
2026-04-22	Build-gated behind recruiter preference test	Flywheel is the moat; if recruiters don't prefer the format, the product has no defensible advantage
2026-04-22	flickcv repo parked, not deleted	Apply.AI v9.2 interview flow + Firebase code is salvageable IP for B4

forms

Date	Decision	Rationale
2026-03-30	Project kickstarted	Need structured data collection across all products
2026-03-30	SurveyJS renderer (MIT) over Formbricks	Zero new services, writes to existing Supabase tables, AI generates JSON
2026-03-30	Bucket C (internal capability)	Infrastructure module — becomes B when used for client-facing surveys
2026-03-30	Archive Formbricks fork	Vanilla clone, never deployed, separate DB = data silo
2026-03-30	Don't generalize Life Score	Too EmberFi-specific, SurveyJS is more capable for general forms

fyidigital

Date	Decision	Rationale
2026-04-01	Project kickstarted	No standardised delivery pipeline exists
2026-04-01	Absorbs custom-domains + domain-management	All parts of the same pipeline
2026-04-01	Synergy Wholesale for .com.au client domains	RESEARCH-166 — AU-native, AUD, white-label
2026-04-01	Cloudflare Registrar for non-AU domains	RESEARCH-166 — at-cost, seamless DNS
2026-04-01	B1 is research-only	Need standards before building tooling
2026-04-12	B1 COMPLETE	RESEARCH-221 (1,033 lines) + CLIENT-DELIVERY-PLAYBOOK.md written
2026-04-12	Stack: Penpot + Lovable/v0 + Claude Code + Next.js	Mister: no Figma subscription, pioneer Penpot
2026-04-12	"Instant Preview" model adopted	5-question intake → 3 live previews in <24hrs → iterate → launch in 5-10 days
2026-04-12	Min Min runs 60% of client touchpoints	Mister approves pricing, Claude Code builds
2026-04-12	Mel (Signature Social Hire) = B3 dry run	First real client through the playbook

gws-integration

Date	Decision	Rationale
2026-03-16	GWS CLI chosen over separate API integrations	Collapses 5+ APIs into 1 tool. RESEARCH-054 Wave 2.
2026-03-30	Drive input pipe prioritized over Gmail send	Closes multi-AI workflow gap immediately. Lower risk.
2026-03-30	ChatGPT/Gemini save to Drive root by default	Watcher scans root, filters by recency. Config optional.
2026-03-30	Bucket B (not C) — client comms = revenue enabler	Only B9.1 is arguably C. B9.2+ directly enable client workflows.
2026-03-30	B9.1 built (8/9 done) — blocked on OAuth re-auth	Token expired. Run `gws-reauth.sh` to fix.
2026-03-30	Created gws-reauth.sh for headless re-auth from iPad	Manual code exchange flow.
2026-03-31	RESCOPED: Gmail integration = agency intelligence	Not inbox mgmt. Feeds Swipe Library + Sendii + Fin Intel.
2026-03-31	B9.2 rescoped: Email Triage + Classification	gmail-triage.sh built, tested, benchmarked.
2026-03-31	B9.3 rescoped: Swipe Extraction Pipeline	Extract structured cards from marketing emails.

hands

Date	Decision	Rationale
2026-04-18	Project kickstarted	RESEARCH-267 identified the gap
2026-04-18	Stagehand v3 over browser-use / Playwright-solo	Model-agnostic, 44% faster via CDP, action caching
2026-04-18	Self-host on Hetzner, not Browserbase cloud	$0 infra vs $0.05/step × 1000 = $50
2026-04-18	Node/TS, not Python	Stagehand is Node-native; all existing services on VPS can call REST regardless
2026-04-18	Port 18820, Authelia-gated	Consistent with transcriber (18800), review (others)

hitcreate-config

Date	Decision	Rationale
2026-04-01	Project kickstarted	RESEARCH-163 found 0/18 repos with formatter, config drift visible
2026-04-01	GitHub Packages not npm registry	Private packages, already have hitcreate GitHub org
2026-04-01	Single repo, multiple exports	Simpler than separate repos per config type
2026-04-01	Classification O/I	Config files only, no product code
2026-04-01	B1 COMPLETE	v1.0.1 published, validated in safetii (zero type errors)
2026-04-01	exactOptionalPropertyTypes fix	v1.0.0 had wrong option name, patched in v1.0.1

hitcreate-review

Date	Decision	Rationale
2026-04-14	Project kickstarted	Gap identified: Ruttl has UX, GiveFeedback has voice-first, neither has API/data ownership
2026-04-14	React + Vite for dashboard	HitCreate standard stack (CODE-STANDARDS)
2026-04-14	Vanilla JS for widget	No framework dependency on client sites
2026-04-14	rrweb for replay (not custom)	17K stars, PostHog/Sentry use it, well-maintained
2026-04-14	Raw Replayer API, not rrweb-player	rrweb-player is Svelte; build React wrapper (PostHog pattern)
2026-04-14	Batch AI processing	Industry standard (GiveFeedback, Marker.io). Simpler architecture.
2026-04-14	Subdomain: review.hitcreate.io	Standalone product, white-label later
2026-04-14	Monorepo: packages/widget + packages/dashboard	Widget and dashboard are separate builds, shared types
2026-04-14	Browse&Talk + Inspect Mode UX	Default: voice+click always on. Inspect: opt-in hover outlines. Mister feedback.
2026-04-14	Text fallback when mic fails	iOS mic permission failed during test. Added textarea input as fallback.
2026-04-14	Click-to-deselect toggle	Tap marked element again to remove highlight. Mister feedback.

hitterm

Date	Decision	Rationale
2026-04-04	Project kickstarted	RESEARCH-175 completed
2026-04-04	Fork CloudCLI (not build from scratch)	Agent SDK + mobile UI = months saved
2026-04-04	AGPL-3.0 accepted	Internal tooling only
2026-04-04	Rust rewrite deferred to B4	Node.js pragmatic for V1
2026-04-04	tmux over raw node-pty	Walk-away persistence
2026-04-06	B0 completed	Deployed, 52MB RAM, Authelia
2026-04-07	RESCOPE	RESEARCH-209: "better terminal" → "AI session orchestrator". Multi-node allocation added (B3). Push notifications promoted to P0 (B2). Diff review added (B2). TypeScript migration deprioritised.

infrastructure-scaling

Date	Decision	Rationale
2026-04-01	Project kickstarted	RESEARCH-162 identified server at 75-80% RAM, 3.4GB swap, 46 services
2026-04-01	No Kubernetes	Solo founder, premature complexity
2026-04-01	No hyperscaler	3-5x cost, no revenue to justify
2026-04-01	Supabase Cloud for production	$0-40/mo, managed backups, dev/prod isolation
2026-04-01	Cloudflare R2 for photos	Zero egress fees, <$2/mo at Safetii scale
2026-04-01	Home hardware = dev only	NBN uptime insufficient for production SLA
2026-04-01	Domain registrar: Synergy Wholesale for client .com.au, Cloudflare for own non-AU	RESEARCH-166. Cloudflare doesn't support .com.au. OpenSRS is USD/overkill. Open Synergy account when first client needs domain.
2026-04-01	R2 deferred — ship with Supabase Storage first	RESEARCH-165. 1GB free = ~5 weeks. Add R2 at 800MB. Avoids scope creep.

knowledge-library

Date	Decision	Rationale
2026-04-12	Project kickstarted	CAO client workflow needs central reference library
2026-04-12	Filestash over File Browser	Beautiful UI, 30MB RAM, direct filesystem access
2026-04-12	No Nextcloud/Seafile/JVM tools	Bloated, proprietary storage, INCIDENT-039
2026-04-12	RESHAPED: file browser → LLM training corpus	Primary purpose is agent grounding + fine-tuning, not file browsing
2026-04-12	pgvector over ChromaDB/Qdrant/Weaviate	Already running, zero new RAM (RESEARCH-223)
2026-04-12	Docling over Unstructured.io	MIT, lighter, no Docker (RESEARCH-223)
2026-04-12	nomic-embed-text on cmd-aorus	768-dim matches mem0, free, offloads VPS
2026-04-12	Bucket C → B reclassified	Corpus grounds agents for revenue work (Safetii, CAO)
2026-04-12	Paperless-ngx deferred	Docling handles PDF/OCR; Paperless adds 400MB for marginal gain
2026-04-12	Hybrid search (vector + BM25) mandatory	20-40% better recall (RESEARCH-223)
2026-04-12	Python HTTP server over Express/Node for API	Keeps stack simple, no Node dependency for corpus
2026-04-12	LiteLLM for embeddings (not direct Ollama)	Security Rule #6, handles routing + fallback
2026-04-12	Port 5433 direct postgres (not 5432 pooler)	Pooler rejects non-tenant connections
2026-04-12	B2 DONE — 181 docs, 2632 chunks	P0 deliverables complete, P1 deferred to B3
2026-04-12	dufs replaces Filestash	dufs does browser UI + WebDAV on same port. Filestash stopped (container kept). library.hitcreate.io → dufs. dav.hitcreate.io removed.

leadgen

Date	Decision	Rationale
2026-03-31	Project kickstarted as Bucket A	This IS the revenue engine
2026-03-31	Separate cold domain required	Protect hitcreate.io reputation
2026-03-31	Instantly over self-hosted	Warm-up network worth $30/mo
2026-03-31	14-day soft expiry on reports	Urgency without destroying the asset
2026-03-31	Phone primary, email secondary	40-60% conversion from calls vs 1-3% from cold email
2026-03-31	Reports celebrate first, then opportunities	RESEARCH-138: ego-protective rejection kills cold audits
2026-03-31	15 industry profiles for accurate scoring	RESEARCH-132: Wastech proved one-size-fits-all is wrong

life-intel

Date	Decision	Rationale
2026-04-07	Project kickstarted as core product (not feature)	This IS the EmberFi/Life OS brain. Bigger than GWS Integration.
2026-04-07	Tiller for CBA/StGeorge (not Basiq)	No code needed — Tiller → Sheets → GWS. Basiq = 12mo contract.
2026-04-07	Gmail batch API over gws CLI for bulk	50x-200x faster. gws stays for light reads/calendar.
2026-04-07	Pub/Sub for real-time (not polling)	5-second classification vs 15-min polling.
2026-04-07	BullMQ + Redis for CMD-AORUS offload	Job queue with retries, dead letters. Better than SSH/REST.
2026-03-31	Junk = phishing/malware ONLY	All real brand emails are marketing reference (Swipe or Newsletters)
2026-03-31	GWS Integration rescoped → agency intelligence	Not inbox management. Feeds Swipe Library + Sendii + Fin Intel.
2026-04-07	Life Intelligence project kickstarted as core product	Supersedes GWS Integration. Full life context for Min Min.
2026-04-07	4 Gmail accounts connected (mnthompson223, mwebb00123, fyidigital1 + mister)	All OAuth'd. GCP project published to production.
2026-04-07	Wise API connected (personal + business)	Balances live: Personal AUD $4.71, Business AUD $4.29
2026-04-07	Life Intel API live on port 18794	systemd service, Caddy-proxied at /life-intel/api/*
2026-04-07	Proton Bridge parked	Headless server deps issue. Follow-up next session.
2026-04-07	INCIDENT-037 resolved by Mister	Telegram plugin registration was missing from openclaw.json
2026-04-07	Morning briefing switched to Discord announce	Telegram delivery TBD

local-trader

Date	Decision	Rationale
2026-04-07	Project kickstarted	RESEARCH-200, 210, 211, 212 complete
2026-04-07	Bucket A (promoted from B)	Fastest path to cash — content SEO, no code for marketplace
2026-04-07	Astro SSG stack	SEO-first, zero JS, < 200KB pages, matches CODE-STANDARDS
2026-04-07	Eucalyptus/Sand palette	Distinctly AU, avoids corporate blue, research-backed
2026-04-07	Leaflet + OSM for maps	Free ($0 vs Google $7/1000), sufficient for Phase 1
2026-04-07	URL: /[service]/[location]/	Matches user search intent, Angi model proven at scale
2026-04-07	4-step lead form	3x conversion vs single step (RESEARCH-212)
2026-04-07	Quote estimator	4x form conversion, Google "Online estimates" filter
2026-04-07	Light mode only	Outdoor daytime use, tradies in bright sun

mem0-memory-layer

Date	Decision	Rationale
2026-03-30	Project kickstarted	5 fragmented memory systems, multiple failed prior attempts, industry moving to shared memory layers
2026-03-30	Mem0 over custom build	48K stars, Apache 2.0, native pgvector/Supabase support, 26% accuracy boost. Why reinvent?
2026-03-30	B0 cleanup before B1	Risk analysis: adding 5th memory system on top of 4 broken ones = worse. Clean first.
2026-03-30	HAA read-only initially	Risk: autonomous agent writing bad memories propagates to all agents. Validate first.
2026-03-30	Gemini embeddings over local model	Free tier covers volume (~200 ops/day). Saves ~1-2GB RAM vs Ollama. Fallback: OpenAI key in .env.
2026-03-30	Embeddings through LiteLLM	Security rule (INCIDENT-016): all AI API calls must route through LiteLLM proxy.
2026-03-30	MCP stdio not systemd	Claude Code spawns MCP servers via stdio. No persistent process needed for Claude Code access. systemd only if Min Min/HAA need HTTP API.
2026-03-30	OPENROUTER_API_KEY must be excluded	Mem0's OpenAI LLM checks OPENROUTER_API_KEY first, bypasses LiteLLM. config.py only loads required keys + explicitly removes OPENROUTER.
2026-03-30	Port 5433 not 5432	pgBouncer on 5432 returns "Tenant or user not found". Port 5433 is direct DB access.
2026-03-30	gemini-2.5-flash for LLM extraction	Cheap, fast, supports function calling. Routed through LiteLLM. Some JSON parse errors (Gemini returns malformed JSON ~30% of time) but Mem0 handles gracefully with dedup.

min-min

Date	Decision	Rationale
2026-04-12	Project kickstarted (rescope from OpenClaw workspace)	Never had proper project structure despite being core product
2026-04-12	Migrate OpenClaw → ZeroClaw	RESEARCH-226: 99% less RAM, 0 CVEs, native LiteLLM/Discord, migration tool exists
2026-04-12	Discord as primary channel (not Telegram)	Mister preference. Own full stack long-term (Chatii)
2026-04-12	OpenRouter as primary model (not Gemini)	Gemini too unreliable for agent tool calling. OpenRouter auto-top-up
2026-04-12	Monthly landscape review (QUICKREF-003)	AI agent space moving too fast to review annually
2026-04-14	Rescope B9: memory architecture replaces "fix broken things"	INCIDENT-052: tool-based memory fails with non-Claude models. RESEARCH-250: industry consensus is hybrid injection. Old B9 deliverables moved to B9.5
2026-04-14	Switch default model: openrouter-auto → gemini-2.5-pro	OpenRouter auto-routing picked models bad at tool calling. Gemini Pro better but still doesn't call tools — confirms need for injection pattern
2026-04-14	Hybrid memory injection (L0+L1+L2) over tool-based memory	RESEARCH-250: every production agent system (MemPalace, Letta, Zep, GBrain) converged on this. Model-agnostic, 8 cents/day overhead
2026-04-14	Switch model: gemini-2.5-pro → gpt-4.1-mini	Gemini tool calling unreliable (documented Google forum issues, 5 LiteLLM bugs). GPT-4.1-mini: $0.40/1M input, 97-99% tool accuracy
2026-04-14	INCIDENT-052 ESCALATED: ZeroClaw webhook is a message broker, not agent loop	Source code confirms: server crate doesn't invoke LLM, just stores messages. Tools never reach the model via webhook. 12+ hrs spent before root cause found
2026-04-14	minmin-proxy built as Discord agent	Proxy handles: memory injection (L2), tool execution (allowlist+blocklist), Claude Code spawning, typing indicator. Becomes Chatii backend
2026-04-14	Runtime decision PENDING: expand proxy vs nanobot vs fork ZeroClaw	Recommendation: expand proxy (80% done, ~300 lines to add, becomes Chatii). ZeroClaw keeps Telegram+cron only until proxy replaces it

minmin-orchestrator

Date	Decision	Rationale
2026-04-22	Project kickstarted	VPS overload (load 178), need orchestration not manual SSH
2026-04-22	ZeroClaw-first, retire OpenClaw	ZeroClaw already has nodes, skills, claude_code_runner, Discord — OpenClaw duplicates at 500MB+ cost
2026-04-22	4 booklets, 1 evening each	Small bets. Each booklet is independently useful. Circuit breakers prevent scope creep.

mwebb-bdm

Date	Decision	Rationale
2026-03-30	Project kickstarted	Internal tool to enable agency sales
2026-03-30	React/Vite/Tailwind + Supabase	Same stack as other HitCreate apps, all infra exists
2026-03-30	I-Low classification	Internal tool, one user, no auth/payments, reversible
2026-03-30	Build not buy	No existing tool integrates Trust Score + pipeline + delivery
2026-03-30	B1 = pipeline + home only	Get the core workflow live fast, layer features in B2/B3

safetii

Date	Decision	Rationale
2026-04-01	Project kickstarted	Dreamworld demo
2026-04-01	Bucket A	Known buyer
2026-04-02	Basic mode = default	Conservative industry
2026-04-02	No Microsoft SSO	Invite links sufficient
2026-04-02	safetii.org canonical	NFP positioning
2026-04-03	NFP pivot — Safetii Foundation	"Everyone deserves to be safe"
2026-04-03	Worker app permanently free	Mission-driven
2026-04-03	Brand independent from HitCreate	Enterprise credibility
2026-04-04	RESCOPE #1: full safety document platform	JSA/SWMS/SOP. SWMS legally mandatory ($3.6M penalty). Maturity model.
2026-04-04	RESCOPE #2: AI-native, AI layer first	AI is the architecture, not a feature. Build B2 (AI) before B3 (JSA) / B4 (SWMS). Without AI, complex docs are worse than Word templates.
2026-04-04	Production AI only, no degraded experience	"People churn hard on bad experience." GPT-4o Mini Transcribe + Whisper WASM offline. ~$60/yr.
2026-04-04	iOS voice = production bug, fix first	Web Speech API silent fail in PWA standalone. B1-FIX before B2.

scout

Date	Decision	Rationale
2026-03-26	Project kickstarted

sendii

Date	Decision	Rationale
2026-03-30	Project kickstarted	RESEARCH-133 defines Sendii as HitCreate's comms layer
2026-03-30	Bucket B (Revenue Later)	Phases 1-2 internal, 3+ need validation
2026-03-30	Stalwart = invisible engine	Users never see Stalwart. Sendii is the product.
2026-03-30	GoTrue for auth, not Stalwart	Product auth via Supabase, not Stalwart's built-in auth
2026-03-30	React/Vite stack	Same as EmberFi, consistent across HitCreate

server-wiki

Date	Decision	Rationale
2026-04-12	Project kickstarted	Need single-pane server knowledge for agents + Mister
2026-04-12	mdBook over Wiki.js/MkDocs	6MB binary, 0MB runtime, built-in search (RESEARCH-231)
2026-04-12	Hybrid auto-gen + manual annotations	Auto: always fresh. Manual: preserved in annotations.yaml
2026-04-12	Bucket C	Infrastructure, 20% cap. Reclassify to B if agents deliver faster

speargo

Date	Decision	Rationale
2026-04-04	Project kickstarted	RESEARCH-183 competitive analysis complete
2026-04-06	Safety gate is NOT default on every job	Take 5 is ambient (2-3x/day), not per-job. Gate only for high-risk flagged jobs. RESEARCH-193.
2026-04-06	V1 = AI-native tool, V2 = AI operator	Ship the tool to 3 people first. Min Min graduates to operator when patterns are proven.
2026-04-06	Quoting + invoicing in B1, not deferred	Quote and invoice are the bookends of every business transaction. YC wants one complete loop.
2026-04-06	Photo + voice → AI quote is THE differentiator	ServiceM8 needs 100 jobs (cold start). BuildFolio does this but US-only. AU market is open.
2026-04-06	Extend Safetii PWA, do not fork	Same codebase, same auth, same offline architecture. Speargo is a mode/route, not a separate app.
2026-04-06	Xero deferred to B2	Manual "mark as paid" is fine for 3 clients. Xero sync is B2 priority.

supabase-cloud

Date	Decision	Rationale
2026-04-22	Use trigger-based migration, not pre-emptive bulk move	Webb framework — premature scaling is more expensive than catch-up
2026-04-22	Flick Apply migrates to Sydney region	Pre-emptive AU residency — zero extra cost today, unblocks future gov/insurance pitches
2026-04-22	Self-hosted stays for EmberFi/Safetii/Radar until trigger	No pain signals yet
2026-04-22	This is Bucket C but forcing-function for Bucket B (Flick Apply)	Elevated priority vs pure infra C work

swipe-library

Date	Decision	Rationale
2026-03-30	Project kickstarted	Core agency capability — feeds client audits and builds
2026-03-30	CLI-first (B1), Web UI second (B2)	Mister needs capture working now; UI can wait
2026-03-30	Supabase for storage	Already running, has Storage for screenshots, avoids new infra
2026-03-30	6 capture types	Landing, funnel, email, ad, app store, competitor — covers all agency needs
2026-03-31	B1 complete	8 swipes captured, avg 20s. Fallback nav for heavy SPAs. No merge with Radar needed.
2026-03-31	Integration plan written	Radar feeds URLs → Swipe for deep capture. Trust audit integration = next revenue value.
2026-03-31	B2 complete — unified dashboard	Library tab added to Radar dashboard at radar.hitcreate.io. Swipe API endpoints in radar-api.js. Screenshot proxy, search, filters, detail modal.
2026-03-31	Performance overhaul	WebP (Sharp), 3 sizes (thumb/medium/full), local disk serving, streaming, lazy loading, browser pooling. Thumbs 95% smaller (450KB→40KB avg). All 9 swipes re-captured.

troveii

Date	Decision	Rationale
2026-04-13	Troveii = email-native CRM (not standalone CRM)	Mister's insight: email IS the CRM, make it work properly instead of adding another system
2026-04-13	Sendii = outbound only, Troveii = inbound	Clean product boundary: people emailing you (Troveii) vs you emailing people (Sendii)
2026-04-13	Multi-provider connector architecture	Can't require people to leave Gmail. Must work with existing email. Own stack (Stalwart) for new businesses
2026-04-13	Telegram-first UX	Zero frontend build. Validates before investing in UI. Mister lives in Telegram
2026-04-13	Keep Stalwart	Only self-hosted mail server with both Admin API (provisioning) and JMAP (email access). Alternatives lack one or both
2026-04-13	Stalwart for own-stack, Gmail/Outlook for existing users	Best of both: zero-cost infrastructure for new users, zero-friction onboarding for existing users

trust-score

Date	Decision	Rationale
2026-03-30	Project kickstarted	RESEARCH-112+124 identified product gap
2026-03-30	Bucket A (agency tool), not B (product)	Agency use IS the concierge validation. Build what you need to sell, prove demand, then productize
2026-03-30	Phase 1 = PDF only, no dashboard	Mister works from iPad. PDF is the right format. Dashboard is premature complexity
2026-03-30	Extend GEO suite, don't rebuild	45% of scoring already works. Build on existing scripts, don't start from scratch
2026-03-30	Hybrid model (Option 3)	Agency tool first (Bucket A), graduates to SaaS (Bucket B) only after demand proven
2026-03-30	ACCC compliance flags as AU moat	No competitor does this. First infringement notice issued March 2026 ($39,600). Market is scared
2026-03-30	Kill criteria set	10 audits → 0 conversations = re-evaluate. 3 months no self-serve demand = no Phase 2

video-ingest

Date	Decision	Rationale
2026-04-14	Project kickstarted	Replace Gemini manual workflow with automated pipeline
2026-04-14	yt-dlp over reclip/MeTube/cobalt	Best API for programmatic use, 1700+ sites (RESEARCH-247)
2026-04-14	faster-whisper over Ollama Whisper	Full control, VAD filter, word timestamps, int8 GPU (RESEARCH-247)
2026-04-14	large-v3-turbo model	Best speed/accuracy for RTX 3050 8GB (~45s/20min, 5.5% WER)
2026-04-14	Tiered transcription (captions → Whisper → Deepgram)	Skip GPU when good captions exist
2026-04-14	Bucket B	Corpus feeds agent quality for revenue work
2026-04-14	YouTube captions via cmd-aorus SSH	VPS Hetzner IP blocked by YouTube bot detection. Residential IP works.
2026-04-14	gpt-4.1-nano for summaries (not Haiku)	Fast + cheap, good structured output quality
2026-04-14	B1 DONE	YouTube caption pipeline working end-to-end. Whisper path tested but non-YouTube blocked from VPS.
2026-04-14	Gemini direct YouTube REJECTED	Gemini hallucinates video content when given URLs via chat API. Must use real transcripts.
2026-04-14	Rebuilt: real captions + Gemini summary	3-tier: cmd-aorus SSH → VPS fallback → queue for later
2026-04-14	cmd-aorus SSH down (port 2222 reset)	Blocks all YouTube ingest + embeddings. B1.5 Cloudflare Tunnel will help.
2026-04-14	vidcap.hitcreate.io deployed	Web UI live, systemd: vidcap, port 18796
2026-04-14	VPS YouTube-blocked	Hetzner datacenter IP blocked by YouTube bot detection. Cannot fetch captions or metadata from VPS.

AI Agents

Agent	Type	Interface	Config
Claude Code	Dev tool (CLI)	Terminal / IDE	/root/CLAUDE.md
Min Min	Persistent agent (OpenClaw)	Telegram @hitcreate_bot	/root/.openclaw/
HAA	Autonomous nightly	Cron	/root/.openclaw/workspace/agents/
Kilo Code	Deep-dive fallback	IDE	/root/KILO.md

Claude Code

Skills: ~/.claude/skills/
Memory: ~/.claude/projects/-root/memory/
Guardrails: RESEARCH-002

Min Min

Memory: /root/.openclaw/workspace/MEMORY.md
SOUL: /root/.openclaw/workspace/SOUL.md
Handoff: /root/.openclaw/workspace/HANDOFF.md

HAA

Nightly autonomous agent
Run log: /root/.openclaw/workspace/agents/
Research: RESEARCH-030

Runbooks

Operational guides for recurring tasks.

New Project — how to kickstart
Incident Response — what to do when things break

Runbook: New Project

/root/bin/project-kickstart.sh <slug> \
  --name "Display Name" \
  --one-liner "What it does" \
  --bucket A|B|C \
  --url "subdomain.hitcreate.io"

Then fill in NORTH-STAR.md, README.md, TRACKER.md.

Runbook: Incident Response

Claim next INCIDENT number from INDEX.md
Create /root/.openclaw/workspace/docs/INCIDENT-NNN.md
Identify scope and severity (Type 1-5)
Fix the immediate issue
Write post-mortem
Update CLAUDE.md security rules if needed
Send Telegram alert: /usr/local/bin/tg-alert.sh "INCIDENT-NNN: summary"