PATAS v3: customer-first validation and benchmark-gated build

[kiku-jw]

Result

Validate and sell one bounded PATAS historical spam-campaign audit before
building a new v3 runtime. The benchmark is the paid pilot's acceptance
contract, not a pre-customer implementation phase.

Context

• The durable product and architecture source is
  docs/v3/BRIEF.md.
• The current market, competitor, economic, data-access, technical, and
  anti-slop synthesis is
  docs/v3/research/README.md.
• The current Core is a reference baseline, not a clean production foundation.
• PATAS is historical pattern/control discovery; TAS remains the separate live
  filtering concept.

Decisions

• Conditional GO for a paid customer/data validation; NO-GO for a new v3 build
  until both gates pass.
• First-cohort hypothesis: a company-backed UGC/support operator with paid
  staff, recurring cross-message campaigns, an authorized abuse-plus-legitimate
  export, and a PostgreSQL-backed review/control surface.
• Founding money probe: a scoped $500 offline audit after metadata-only data
  preflight, with one frozen PostgreSQL replay adapter and no live integration.
• Exact, character, entity, and sparse methods are baselines. Dense semantics
  is a challenger and is removed if it adds no future-slice control yield.
• Rules remain typed, cited, replayed, and human-approved. No raw LLM SQL or
  automatic production enforcement.
• Data possession or de-identification alone does not establish processing
  rights; provenance, authorization, purpose, retention, and deletion are
  separate.
• Owner authorization for the bounded customer-validation sprint was granted
  on 2026-07-17: up to 20 individually verified first touches, at most two per
  day, one follow-up per contact, asynchronous qualification, and up to five
  identical $500 offers after all qualification gates pass.

Acceptance

• Critical market, competitor, economics, data-access, technical, and
  adjacent-use-case research is published.
• Buyer qualification, fixed artifact contract, benchmark contract, and
  prospect/cohort kill rules are documented.
• Bounded customer-validation execution is owner-authorized.
• At least 5 of 15 qualified operators confirm the owner-set pain threshold.
• At least 3 of 10 data-qualified prospects can provide usable authorized
  abuse and legitimate history with future replay coverage.
• At least 1 of 5 concrete paid founding-pilot offers is accepted.
• One paid pilot produces a deployed control or review shortcut with
  measured work reduction under the buyer's legitimate-error ceiling.
• Three customers share 70-80% of the pipeline and at least one wants a
  repeat audit before broader v3/platform work.

All numeric thresholds above are owner-set falsifiers, not market statistics.

Current handoff

• State: Waiting.
• Next Actor: External.
• Outcome: The single final Mumsnet follow-up was sent in the original thread on 2026-07-29. A fresh readback found no human reply or verified bounce, so that lane is closed to further outreach. The cohort remains at eight first touches, now with four final follow-ups sent or accepted, one substantive platform-boundary reply, and zero qualified buyers.
• Evidence: PATAS-TAS/PATAS@de6077a; docs/v3/research/PROSPECT-COHORT-30.md; knowledge/completions/2026-07-29-mumsnet-final-follow-up.md.
• Remaining: Wait for a real inbound response or the next permitted follow-up window. PistonHeads opens from 2026-08-03; The Student Room and Digital Spy open from 2026-08-04 through 2026-08-06. Every action requires a fresh reply and bounce scan.
• Next: Do not contact Mumsnet again. At the next dated window, rescan the mailbox and send at most the single already-authorized final follow-up only if no response or bounce cancels it.
• Gate: No customer rows, contract deviation, production access, custom development, price or scope change, or new v3 implementation before payment, metadata fit, processing terms, and explicit data authorization.
• Source: PATAS-TAS/PATAS@de6077a2296d9c06713abe67fabd6a509f90ad0d.

[kiku-jw]

The durable v3 brief and fresh-session handoff source are now published in commit 2e22f73.

Start with docs/v3/BRIEF.md. It records the reproduced v2 audit, settled PATAS/TAS boundaries, benchmark contract, research questions, phased v3 path, migration gates, and the exact first-session output.

The implementation gate remains: no production v3 service before a rights-cleared campaign-level benchmark and baseline comparison exist.

[kiku-jw]

Critical market and technical research is published in f636f04.

Verdict: conditional GO for customer/data validation; NO-GO for a new v3 build
until one qualified operator makes a paid commitment and passes the
usable-authorized-data gate. The research rejects generic anti-spam AI,
universal-platform positioning, and semantic-cluster-to-SQL shortcuts. It
freezes one PostgreSQL replay contract, makes cheap deterministic/lexical
methods the baseline, and treats semantics as a removable challenger.

The adversarial pass corrected the old build-first sequencing, separated
processing rights from sanitization, qualified current price/vendor claims,
split prospect disqualifiers from cohort kills, and reconciled the $500 money
probe with the larger benchmark. No customer outreach or data request was sent.

[kiku-jw]

The first-customer outreach roster is published in commit ad2e22b.

It names eight first-wave contacts across direct buyers and reusable platform channels, gives an official contact path and exact problem-specific first touch for each, and separates four boundary interviews plus explicit no-contact/skip cases. No public prospect is represented as ready for the $500 offer: every first message is a currentness or channel probe, and the paid offer remains gated on current workload, native-tool failure, an existing PostgreSQL-backed control path, retained abuse-plus-legitimate history, processing authority, and a budget owner.

The adversarial pass removed forbidden forum solicitation, reduced every first touch to one question and 50-80 words, and closed the first cohort against new plugins or platform-specific adapters. No customer outreach or data request was sent.

[kiku-jw]

Published the paid design-partner response playbook in fbfc3d9.

It maps likely first-wave replies to explicit advance or stop actions, puts the metadata-only preflight before scope and invoicing, and defines a paid partner as a named operator plus budget/data authority, full $500 payment, bounded review work, and a deploy-or-reject decision. It also preserves the no-custom-adapter, no-free-audit, one-analyst-day, and one-follow-up boundaries.

Current public DNS shows patas.app is configured for inbound routing but is not yet a verified authenticated outbound human mailbox. The tiny first wave should therefore use the existing authenticated human Gmail account manually; a permanent nick@patas.app sender remains gated on an outbound provider plus passing SPF, DKIM, and DMARC headers. The two proposed external skill repositories were reviewed but not installed. No customer message or data request was sent.