3.5

Repository evaluation, front-end thesis, and the working console.

One document, three parts, read in order. The evaluation establishes what the platform actually is; the thesis argues how the console should be organized; the prototype is that console, navigable. Each part stands on the one before it.

1 — System sketch39 cells 2 — Front-end thesis210 routes → 5 3 — Console prototypeinteractive
SYSTEM SKETCH — REPO EVALUATION

MIZ OKI 3.5, as the repository actually stands.

Read from mediaintelligence/MIZOKICloudRun @ main. Structure follows the Cell Registry v1.1 (the number authority) and the SRPVDAL seven-phase loop; every status label below is quoted from canon, not inferred.

Registered cells39
README version6.45.48
Platform ceilingbuilt, pre-benchmark
Posturecontrolled pilot
CLAIM LABELS LIVE PARTIAL IN BUILD SHADOW / OBSERVE-ONLY FLAG OFF

1 — Acquisition surface

SOURCES → ONE GOVERNED RECEIVER
Direct ad & commerce adapters
Meta Ads · Google Ads · GA4 · LinkedIn Ads · Amazon Ads · The Trade Desk · Merchant Center · Shopify (HMAC webhooks + Admin GraphQL backfill)
service-marketing-connectors — runtime deployed; providers ready-to-connect until operator credentials land.
Cell 37 — Data Injector
Backfills, bulk loads, partner files, synthetic (quarantined to the training plane). Canonical leg refuses caller-supplied available_to_model_at.
Canonical leg DARK by default — 503 until an operator arms it.
Cell 37 — External intelligence
SERP providers · Google KG · Wikidata · Schema.org · Meta platform signals · Amazon SP. LLM extraction leg through virtuoso_call.
Built flag-off; entity spine behind two unapproved control points.
Cell 33 — Intent signal ingest
Consent fail-closed IntentSignals as envelope projections. Audio prohibition absolute; deny-listed topics refuse at boot.
Live in Shadow — six extenders fail-closed.
CANONICAL EVENT ENVELOPE One governed receiver per provider · consent gate fails closed · bitemporal law: first-ingest sets model visibility · transactional outbox + DLQ · identity-derived tenancy
BigQuery — canonical events, mizoki_intent, unified dataset
Neo4j — Growth Decision Graph, GraphRAG (10,005 embeddings)
Firestore — intent subgraph, audit sequence, service state

2 — The SRPVDAL spine

SEVEN PHASES · 39 REGISTERED CELLS
SENSE
01 Discovery & Ingestion
02 Stream Processing
03 Data Validation / KG Brain
04 Feature Engineering
05 Storage & Persistence
33 intent-signal-ingest
37 market-signal-ingest
38 cre-prospecting-core
REASON
06 MOE Router
07 Causal Engine
08 Graph Analysis
09 Prediction Engine
10 Knowledge Synthesis
11 Decision Engine
12 Optimization Engine
34 intent-scoring-api
35 intent-graph
36 intent-causal
PLAN
14 Strategy Planning
39 cre-outreach-engine
Added by the SRDAL → SRPVDAL migration, with PLAN and VALIDATE as the two new phases.
VALIDATE
15 Validation & Testing
25 Security & Compliance
ValidationPassport — six-check media passport; a subset request returns 422. Cannot be weakened by the caller.
DECIDE
13 Risk Analysis
16 KD Autotuner & Segmentation
17 Supply Chain Optimization
18 MoE Router & CLV
Decision Control Plane · DEL score, 80.0 platform floor · iROAS, never platform ROAS.
ACT
19 System Monitoring
20 Dynamic Pricing / RLAIF
21 Advanced ML
22 NLP Engine
service-action-runner. Stage 3 recommend-only, fleet default; Stage 4 without an adapter returns 501.
LEARN
23 Computer Vision
24 Observability Hub
26 Creative Suite + causal-uplift
27 DR-Learner / DoWhy refutation
32 ROI Dashboard
Causal Credit Ledger — caused vs. anticipated, with intervals.
META / CROSS-CUTTING 28 A/B Testing (legacy — not an intent cell) · 29 Meta Pixel Event Extraction · 30 Time Series · 31 Recommendation + Google Ads GAQL pre-flight · 06 MOE router and the MOA consensus controller sit above every phase, and all model calls route through virtuoso_call.

3 — Governance moat

TEN SERVICES · AUTHENTICATED-ONLY
Decision Eligibility Layer
Every proposed action scored; 80.0 platform floor. A $45k action over a $25k ceiling routes to human approval even at DEL 84.
Authorization binding
Authorizations bind to the proposed action — tampering returns 422, a second redeem returns 409, replay 409.
Immutable audit ledger
Chain held under 20 concurrent writers; Firestore sequence 1…109 contiguous, zero duplicates. Signing authority confined to two services.
Autonomy ladder L0–L5
Certified per account × action class. Gates: Brier ≤ 0.20, AUC ≥ 0.72, stable lift over two purchase cycles. The decision stays human.
MEASUREMENT_WRITEBACK — OFF. Machinery in production code, flag ast-pinned, fail-if-flipped tested.
Net Yield writeback — OFF. Net contribution never reaches a bidder until a verified pilot.
O-1 privacy lock — absolute. No activation on anticipated intent without a holdout registered before first exposure.

4 — Surfaces

WHERE THE LOOP IS OPERATED
Boss Agent
backend v6.49.3 · Chrome extension 6.46.1 · VS Code cockpit 3.1.1
Command Center UI
Next.js console — SRPVDAL live loop, onboarding, per-cell routes behind same-origin OIDC proxies
Public site
Five division demos + Nexus; deploys only by human APPROVED dispatch against a pinned canon lockfile
MCP layer
Skillpack served verbatim; parity drift between copies is a CI-failing defect
Tenant onboarding
Authenticated self-service intake, uploaded post-operational; collected values are never armed

5 — What is not yet true

OPEN GATES, QUOTED AS-IS
The intent ranking gate failed honestly. Model cumulative-gain area 0.5703 against naive-recency 0.7492 on a time-split eval, three attempts, protocol constant. The corpus is order-anchored; the gate reopens when live pre-purchase signals flow.
Scoring quality is data-bound, not model-bound. 0.6967 AUC / 0.1845 Brier over eight held-out seeds against a fixture ceiling of 0.7277 — the 0.72 promotion line is unreachable on synthetic data.
No in-repo corpus for finance and CRE. Benchmark runs are labeled illustrative scenario and are not acceptance-eligible; finance and CRE stay advisory-only.
Connector credentials are the gate, not the code. Every provider, the six intent extenders, the CRE connector set, and the canonical injection leg remain fail-closed until operator secrets and tenant mappings land.
The service registry is stale in two places. Cells 33–36 still read designed; no cell 37 row exists. The Cell Registry outranks it.
The UI has no CI type gate. Build errors are ignored by config; changes are held against a local delta-tsc baseline instead.
EVALUATION — FOUR READINGS
The loop is the product now.
The seven-phase migration is code-complete and live-verified. What remains under SRDAL is operator-timed: audit legacy writes, a graph provenance backfill, redirect shims, BigQuery renames.
Governance shipped ahead of performance.
Ten governance services are deployed authenticated-only, and one decision has been proven end to end across 24 steps. The ceiling still reads built, pre-benchmark — deliberately.
Intelligence runs in shadow.
Cells 33–36 are deployed and IAM-locked with zero consumers. The blocker is real forward labels, not architecture.
The estate's risk moved to documentation.
Cell counts, number-to-function maps, and skillpack copies drift faster than the code. The registry, the wiring file, and the canon status table are the three files that settle disputes.
GROWTH CONTROL — FOUR LOOPS, ONE STATE MACHINE
PROVE
Causal Credit Ledger — every conversion classified caused or anticipated, with intervals.
PROFIT
Net Contribution Yield prices every order at what it nets. Writeback off.
ANTICIPATE
Intent Engine v2, modules I-01…I-05 — consented, session-bounded, retention bounds as code.
GOVERN & COMPOUND
The Decision Control Plane on the SRPVDAL loop; every decision leaves a passport in the ledger.
STATUS TABLE — OFFERING MAP v2.3 §B.6
SRPVDAL · DCP · DEL · ledgerLIVE
Connector gateway · envelopeLIVE
Signal surface · Factory demoLIVE
Causal proof corePARTIAL
ORACLE cells 33–36 · graph edgesPARTIAL
Measurement rails writebackPARTIAL
Intent Engine v2 · I-01…I-05IN BUILD
Net Yield laneIN BUILD
F1 creative · F2 LTV · F3 supply · F4 geo · F5 treasuryIN BUILD
90-day pilot & packaging ladderADOPTED
Drift register: none — every probed flag matches its declared status.
SOURCES READ
README.md
CLAUDE.md
docs/architecture/CELL_REGISTRY.md
docs/CANON_STATUS.md
PART TWO
Front-end thesis
What the evaluation implies for the console: organize around a decision, not around the estate. Four tabs — inbox, record, loop, and the map that folds all 210 existing routes into five destinations.
Back to contents
PART THREE
Console prototype
The thesis, built. Five destinations and their pages, the four forced read states, a working approval that advances the pathway, and the component contract underneath it.
Back to contents