Kaiai audit model

What the audit model proves.

This page is the guardrail side of the product: what is real today, what is simulated, what stays blocked, and which clicks should produce evidence instead of theater.

Real today Blocked lanes Receipts UI click map
Real today

What the current preview actually claims

The homepage says preview mode, simulated, local-first, canonical library loaded, and real connectors blocked. That language is honest and should stay that way until a real send path is explicitly built.

R0
preview mode
15
modules
101
receipts
0
real sends
  • Preview commands are deterministic and local-first.
  • Audit model should explain what happened, what was simulated, and what stayed blocked.
  • Any claim about production actions needs a separate, gated path.
Receipt model

What each receipt should capture

FieldWhy it matters
external_mutation_performedProves the preview did not change anything outside the sandbox.
real_send_performedShows whether a real send or writeback happened. It should stay false in preview.
production_readyExplicitly false until a separate approval path is opened.
receipt_recordedConfirms an auditable record exists for the action or preview.
The audit page is the place to prove the difference between preview, simulated reads, and real production work. If the distinction gets blurry, this page should make it obvious again.
Blocked lanes

What must stay blocked in the homepage language

  • Real sends and writes.
  • Production actions.
  • Claims of live connector use without an explicit approval path.
  • Any wording that implies the preview has already shipped.
A cleaner rule of thumb: if it changes the outside world, it belongs behind a separate gate and a separate audit trail.
Blocked state examples
StateMeaning
real connectors blockedPreview can inspect, but not send.
no real sendsNothing leaves the sandbox as a production action.
preview-onlyUseful for QA and product review, not final approval.
local-firstSource of truth stays close to the work, not in a hidden service.
UI click map

Where audit evidence should come from

ClickAudit expectation
DocsOpens a page that explains the library and UI in plain language.
Audit ModelOpens this page and keeps the state model explicit.
Join AlphaOpens the terminal credential prompt at the top of the page.
Sign inUses the emailed credential link as the login path.
ClaimRemains the workspace save-link fallback for email testing.