The Kinetic Gain constellation.
Every operator surface deployed under kineticgain.com at one URL, grouped by lane. Each is a
production-hardened control plane — AGPL-3.0, dual-Node CI, dependabot weekly, real tests, GitHub Pages or
Hostinger FTP deploy, full ## Production status block, and now every deploy enters the
AI Procurement Pulse universe on the same day it ships.
Buyer-facing operator surfaces — 5 net-new, all hardened (2026-06-02)
Net-new lane shipped + hardened to v1.0-prod the same day: built from a
15-proposal triage (4 of 15 advanced from product-judgment review), then extended with a
5th surface (Microsoft Graph permission-scope auditor) the same evening. Each surface
squad-hardened with CI matrix on Node 20+22, 15 structure + data-integrity tests, html-validate
lint, and a GitHub Release behind every v1.0-prod tag. Each is a single-file static
HTML operator dashboard with the same 4-tab pattern (overview · anomalies · external sync ·
audit chain), 30 entities of synthetic data baked in, ed25519-signed hash-chained audit-stream
events, and apex-aligned visual language (onyx + cream + emerald). Browser-only, no telemetry,
no backend. Each plays a specific founder-credibility lever: CyberArk + IBM +
UKG + platform-engineering + HealthTech depth + Microsoft enterprise IAM.
CyberArk Access Certification Mesh — 30 synthetic PAM safes across infra, SaaS, identity, secrets-management tiers. 9 overdue certs, 6 detected anomaly patterns (self-review SoD, dormant credentials, break-glass spikes, MFA-bypass abuse, lateral movement), ServiceNow access-review ticket sync, 8-event hash-chained audit. Founder lever: CyberArk.
Workforce-to-Privilege Identity Flow — 15 synthetic people across joiner / mover / leaver buckets. 3 orphan accounts, 1 over-privileged mover, 6 pipeline anomalies (orphan AWS keys, Slack SCIM lag, over-priv movers, Day-1 errors). SCIM connector health matrix + workforce↔identity hash-chained audit. Founder lever: UKG + IAM stack.
Tenant Boundary Risk Command Center — 30 synthetic tenants across T1 Enterprise / T2 Mid / T3 SMB tiers. 1 RLS-missing tenant (critical), 9 open audit findings, 6 boundary-anomaly patterns (RLS gaps, JWT replay, cross-tenant queries, shared Redis namespacing, DR-drill cross-mounts). The buyer-diligence surface for SaaS vendors selling enterprise. Founder lever: platform engineering.
Pharmacovigilance Review and Reporting Hub — 18 synthetic AE cases across 4 marketed products (3 drugs + 1 implantable device). 2 expedited 7-day cases (death-related + unexpected anaphylaxis), 6 signal-detection patterns (QT cluster, Hy's Law watch, multi-region coordination), 8 regulator routes (FDA MedWatch / 21 CFR 803 / EU MDR / PMDA / Health Canada / TGA). Founder lever: HealthTech depth (extends to 9 clinical surfaces).
Microsoft Graph Permission Scope Auditor — 30 synthetic Entra-registered apps across MS 1P (8), ISV Tier 1 (10), mid-market SaaS (8), in-house custom (4). 6 anomaly patterns (over-permissioned in-house custom, ISV without DLP, unused-90d revoke, scope creep, secret-expiring, CA coverage gap), 8-policy × 30-app Conditional Access coverage matrix, 8-event ed25519-signed hash-chained audit. Founder lever: IAM stack + Microsoft enterprise depth — bridges entra + conditional-access + intune surfaces.
Provenance & content authenticity — education
A hands-on teaching lane on content provenance: why the steganographic watermarks behind systems like Google's SynthID are fragile against ordinary edits, and why durable authenticity needs cryptographically signed Content Credentials (C2PA). Pure client-side, no backend, no telemetry — and an explicit educational simulation, not a circumvention tool. The provenance counterpart to the Trust Pack.
Watermark Stress Test — inject a synthetic image or text watermark, then watch real client-side notch filtering, latent jitter, quantization, and bilateral denoising attenuate it in a live FFT view, plus a token Z-score text sandbox. Ends on the case for C2PA. Companion essay at why watermarks break. Founder lever: AI governance + provenance.
Operator Diagnostics — narrowly-scoped operator data tools
Net-new lane shipped 2026-05-31 after triage of a 27-repo Codex executive-family sweep: 10 duplicates were archived publicly (superseded by /trust/ + /calculators/ + /portfolio-triage/); these are the surviving operator-shaped surfaces — narrowly-scoped operator data tools distinct from /trust/ governance scaffolding and /calculators/ rubric math. Each is a single subdomain, GitHub Pages, AGPL-3.0, synthetic-data-only.
Claims-vs-Reality Engine — reads synthetic vendor and platform review records, scores evidence freshness, highlights contradicted narratives, packages board-ready diligence outputs.
Identity Risk Evidence Ledger — privileged-access evidence + identity-risk posture; narrow specialist surface, complements the generic Evidence Locker.
Martech Experiment Evidence Stack — cross-platform martech experiment evidence (Klaviyo / VWO / native A/B) layered into one record for promotion + audit. Also on growth.kineticgain.com.
VWO Experiment Governance Mirror — mirror VWO experiment configurations + rollout decisions into a governance ledger (who approved which variant against which audience, with what evidence).
WordPress Member Journey Consent Kit — member-side consent evidence and lifecycle audit across login/profile/upgrade/cancel flows.
Platform Margin Leak Report — board-ready executive intelligence for platform margin leak detection. Pending CNAME + CI fix.
Revenue Infrastructure Scorecard — pipeline integrity, attribution health, conversion-stack maturity scoring.
Vendor Replacement Intelligence — narrower than the rubric Vendor Renewal Decision calculator; surfaces operator data on candidate replacements + switching costs.
Apex executive tools — apex-native, not subdomains
Browser-only tool surfaces published on kineticgain.com itself (not subdomains). Static math-rubric
calculators, scoring scaffolds, and fill-in templates for CFOs, CIOs, CISOs, GCs, Heads of Trust, and PE/VC
operating partners. No login, no telemetry, vanilla JS, JS<30KB per page. Closes the
Pulse compound
(per-vendor reading tools alongside Pulse's quarterly population measurement).
AI build-vs-buy · cloud replatform ROI · compliance cost of delay · security breach exposure · AI use-case prioritizer · vendor renewal decision. Transparent formulas, dollar-impact ranges.
AI System Card Builder · Evidence Locker · Shadow AI Discovery · AI Vendor Intake · AI Incident Tabletop · Risk Register · Subprocessor Disclosure · Vendor AI Disclosure Review. Aligned with NIST AI RMF, EU AI Act, ISO/IEC 42001 vocabulary.
Score eight drag categories with three sub-prompts each (24-point complexity tax). Ranked stop-doing list with effort + impact callouts. Single-page, browser-only.
Index of the 11-vertical Kinetic Gain Protocol Suite readiness specs (HIPAA · FERPA · ECOA · NAIC · EEOC/NYC LL144 · CFPB/FCRA · OMB M-24-10 · ABA · NERC CIP · DFARS/CMMC/ITAR · FTC §5/EU Omnibus/BIPA). MIT specs, AGPL reference implementations, readiness scaffolding only.
Per-portco scoring across 9 dimensions → verdict bands (help-now · operator-support · prepare-for-diligence · monitor · leave-alone) + live counts. 6 prompted starter rows, CSV/JSON/MD export. Standalone surface.
v2 strategy — Workflow, CX, regulated
The May 2026 expansion lane: three sub-verticals × a four-tier monetization ladder (free repo → template pack → hosted preview → Kinetic Gain Embedded). Each surface lands on a credible enterprise platform and carries the founder-credibility hook — IBM, Genesys, Camunda, Apple MDM, WordPress.
Request-time governance bridge for IBM watsonx.ai. Enforces buyer Decision Cards on chat + text-generation calls before tokens are generated.
Genesys CX disclosure board — bot notice coverage, consent evidence, escalation routing, queue-safe review posture.
Klaviyo flow consent audit — consent evidence, suppression hygiene, deliverability readiness, send-safe lifecycle sequencing.
Camunda process governance — handoff attestations, timer drift, audit-safe execution review.
Insurance claim evidence routing desk — denial pressure, appeal readiness, owner-safe escalation.
Editorial standards routing, copy-policy blockers, approval-safe publishing posture.
Media rights windows, clearance blockers, release sequencing, publishing-safe launch posture.
Higher-education research disclosures, COI proof, attestation drift, audit-safe routing.
Life-sciences trial protocol deviations, CAPA pressure, source-proof readiness, inspection-safe sequencing.
Apple device trust across macOS, iOS, iPadOS — noncompliance, integrity exceptions, OS drift, stale check-ins.
Third-party risk evidence ledger — review gaps, renewal blockers, approval-safe escalation.
Vendor-neutral SecOps detection-coverage operator surface — blind spots, telemetry gaps, response sequencing.
WordPress regulatory disclosure control plane — schema-aligned service disclaimers, approval evidence.
Rust append-only clause-obligation ledger — review packet readiness, hash-chained event log.
Kotlin offline-first field-audit operator surface — supervisor escalation, permit-safe remediation, sync-trust.
Integration evidence ledger — connector replay attestations, contract drift, handoff-safe routing.
UKG workforce disclosure mirror — employee notice coverage, acknowledgment evidence, provisioning attestations.
Multi-cloud admin — Microsoft, AWS, GCP, Azure
Direct answer to the multi-cloud platform-admin recruiter ask. Each surface is a synthetic-data operator console with 95%+ statement coverage on services.
Entra access reviews & privileged-role drift posture.
Intune device compliance, jailbreak detection, OS-drift.
M365 Purview retention case orchestrator & eDiscovery posture.
Defender exposure & ops center — vulnerability posture, incident triage.
Sentinel detection coverage board, analytics rule posture, incident readiness.
Conditional Access posture board — policy drift, gap evidence, change review.
Okta access review orchestrator — recertification, drift evidence, owner routing.
GuardDuty detector posture & threat-finding triage.
GCP billing-anomaly routing & budget-breach escalation.
Azure landing-zone baseline drift radar & guardrail risk.
Snowflake cost governance studio — warehouse hygiene, role drift.
BigQuery query cost watch — slot pressure, scheduled-query drift.
Regulated workflow + healthcare
Approval routing, obligation evidence, consent records, audit-readiness scaffolding across legal, HealthTech, and GovTech. HIPAA-readiness language only — never “HIPAA-compliant.”
Regulatory comment intelligence hub — federal docket signal triage, evidence packets.
Contract clause obligation graph — owner routing, deadline pressure.
Prior-authorization evidence router — denial pressure, appeal readiness.
Patient consent audit stream — append-only consent events, evidence packets.
Gov-comment ingestor — RegTech intake pipeline, Go-shape squad repo.
Regulatory reporting mart — docket readiness, evidence packets, deadline pressure.
Operations atlas — booking, creator, retail, supply
Industry-vertical operator surfaces shipped under the Atlas pattern: bookings disruption, creator partnership desks, retail incident command, supply-chain scenario simulation. Each on its own subdomain.
Booking disruption command center — rebooking, refund pressure, host comms.
Creator partnership deal desk — drop scheduling, deliverable evidence.
Campaign taxonomy governor — schema drift, naming convention enforcement.
Catalog schema governance studio — product attribute compliance, taxonomy drift.
Store-ops incident board — ticket pressure, escalation drift, response SLAs.
Menu availability sync engine — 86-list propagation, kitchen capability map.
Permit package readiness hub — submission evidence, review status.
Crop compliance observation ledger — field obs, sampling proof, agronomist review.
Shipment exception command center — delay triage, customer comms, recovery SLA.
Plant downtime root-cause hub — outage timeline, RCA evidence, recovery posture.
Dispatch reliability control room — tech routing, SLA pressure, parts availability.
Supply chain scenario sim — disruption posture, recovery sequencing, lane reroute.
HealthTech operator surfaces — clinical + GxP-territory depth
Eight clinical / GxP-territory operator surfaces shipped 2026-05-31 (squad triage Wave B). Each maintains the standing readiness/posture/scaffolding language guardrail — explicit "no claim of HIPAA / GMP / GxP / FDA compliance" disclaimers, synthetic data only, no patient/clinician/biotech secrets. Aligned in vocabulary with NIST AI RMF / ISO 42001 / 21 CFR Part 11 / ICH GxP / ISO 15189 — never "compliant" or "validated" without external attestation.
GxP Change Control Board — change classification, validation evidence, SOP acknowledgments, approval continuity, cutover readiness in one view.
Assay Release Readiness Board — release-blocker visibility for diagnostics assay reviews + evidence gaps + approval-safe routing.
Batch Deviation CAPA Ledger — deviation classification, CAPA assignment, root-cause continuity, release-blocker posture.
Clinical Event Narrative Review Board — case narrative classification, reviewer routing, escalation posture, evidence continuity.
Diagnostic QC Evidence Router — QC evidence classification, control breach routing, lab manager visibility, audit-safe continuity.
Lab Instrument Change Audit — instrument-change evidence, qualification status, audit-trail continuity, release-blocker visibility.
Pharmacovigilance Signal Router — signal classification, MedDRA-aligned routing, regulator-window visibility, escalation posture.
Specimen Chain Of Custody Console — custody-lane visibility, transfer gaps, cold-chain posture, release-safe remediation.
AI Procurement Pulse — industry telemetry
A quarterly, ed25519-signed measurement product that crawls a 2,044-domain universe across 38 verticals and scores AI-procurement disclosure depth. The portfolio's only continuously-updated measurement product — published deltas land as public Issues at the engine repo. Not infrastructure; data.
Procurement Pulse landing — what's measured, signing-key index, Issue history, between-issue baseline. The buyer-facing surface for the measurement program.
The crawler + scorer + ed25519-signer that produces the JSON + ready-to-publish markdown for each quarterly Issue. Scheduled GitHub Action on Aug/Nov/Feb/May 15.
GitHub Action consumers can drop into their own CI to surface their own disclosure score — dogfooded on kineticgain.com itself as a live badge.
The open JSON spec the Pulse engine measures domains against. Cross-listed with the Protocol Suite — the spec being used by Pulse is the proof point.
Browser extension (Chrome / Firefox MV3) + Greasemonkey userscript that surface vendor AI-disclosure presence on any page — the user-side counterpart to the Pulse server-side crawl.
The single-file probe that powers the inspector and the Pulse self-score badge — vanilla JS, browser + userscript compatible, npm-ready.
Growth & Consent Operations — growth.kineticgain.com
Marketing, consent, and attribution governance. The adjacent vertical to the rest of the portfolio: where AI-governance work meets the much-larger martech and growth-ops audience. Anchored at growth.kineticgain.com with four named tracks (Consent + Lifecycle, Experimentation Governance, Privacy + Tokenization, Connector Observability).
Growth Ops control room — the apex hub for the 4 named tracks (Consent + Lifecycle, Experimentation Governance, Privacy + Tokenization, Connector Observability).
Klaviyo Flow Consent Audit — flow-level consent posture, opt-in lineage, suppression-list integrity, regulator-aligned vocab.
VWO Experiment Governance Mirror — experiment registry, segmentation review, exposure-window posture, decision-record continuity.
Martech Experiment Evidence Stack — evidence collection across martech experiment tooling, posture-ready review surface.
PII tokenization bridge — protection-level mapping, transform pipeline, RBAC-aware reveal posture. Pairs with the bridge console.
UTM attribution library — Go-native, deterministic UTM canonicalization + lineage for cross-channel attribution work.
Identity Lifecycle Workbench — joiner/mover/leaver visibility, entitlement drift, identity-event continuity.
Tableau Permission Audit Lab — workbook + project ACL review, overshare detection, audit-trail continuity.
Sales Enablement Stack — buyer-side diligence response (NEW lane)
Four buyer-diligence-response operator surfaces shipped 2026-05-31 (squad triage Wave E). Aligned vocabulary with NIST AI RMF + ISO 42001 + SOC 2 — readiness/posture framing only, never "compliant" or "certified". Each is the response-side counterpart to the buyer-trust tooling at kineticgain.com/trust/. Note: subdomain SSL is first-time-provisioning at GitHub Pages — full HTTPS access lands within 24h; HTTP responses confirm content is live.
Vendor Proof Gap Monitor — claim coverage, evidence freshness, benchmark confidence, reuse safety on the executive side of buyer diligence.
Trust Center Evidence Room — evidence packaging, artifact freshness, review readiness, buyer-safe diligence posture in one room.
Security Questionnaire Answer Studio — answer library, response ownership, cycle-time reduction, trust-evidence reuse.
RFP Response Assembler — RFP coverage, differentiation, evidence reuse, submission readiness in one assembly surface.
Executive Intelligence Stack — board-prep + investor-facing surfaces (NEW lane)
Five operator surfaces shipped 2026-05-31 from the exec-family expansion triage. After product judgment, 4 of the original 9 candidates were archived publicly (executive-buyer-map, deal-radar, timing-signal-index, partner-graph) with supersession notes pointing at the Sales Enablement Stack + Trust Pack — they overlapped without adding distinct buyer outcome. These 5 survived because each carries a buyer-distinguishable promise.
Boardroom Sparring Partner — board-prep intelligence for executive questions, pushback rehearsal, memo posture, investor-facing readiness. Library + CLI.
Category Thesis Builder — executive narrative surface for category framing, investor-ready positioning, why-now clarity, thesis-defensible company stories.
Exit Room — exit-readiness intelligence surface for red flags, diligence gaps, board narrative strength, investor-facing deal posture. Library + CLI.
Brand Governance Styleguide — CSS-first operator surface for brand governance, approved tokens, pattern approvals, release-safe style posture.
Release Readiness Shell Kit — bash-native platform release operator surface for launch blockers, rollback posture, freeze windows.
Recently activated — 59 live + 0 deploy-fix in flight
59 operator surfaces shipped via Codex squad doctrine over 2026-05-31 → 2026-06-03,
hardened to v1.0-prod, and pushed through hPanel provisioning + FTP deploy
on 2026-06-03 to 2026-06-04. 59 are live (HTTP 200 serving content);
0 are getting deploy.yml hardening (npm + FTP retry patches
pushed 2026-06-04; refire chain in progress). Until each repo's deploy lands, the card title
links to the GitHub repo where the code is hosted. As these stabilize and find their
cluster homes, they'll graduate into the regular lanes above.
Operator surface for Apple Business Manager device assignment, MDM handoff posture, zero-touch enrollment.
Board-ready accountability-ledger surface for tracking final decision owners, ov
Board-ready allocation-risk surface for concentration, downside clustering, and
Operator surface for AWS Cost Anomaly Detection routing, budget breach posture, FinOps ownership clarity.
Board-ready intelligence layer that ranks exposure, savings, investment priority
Operator surface for GCP billing anomalies, FinOps routing posture, budget breac
TypeScript command center for booking disruptions, recovery blockers, guest comm
Board-ready executive intelligence surface for exposing revenue-control failures
Growth operator surface for campaign taxonomy, audience blockers, and launch-saf
Commerce operator surface for catalog schema governance, dependency blockers, an
LegalTech operator surface for clause extraction, obligation graphs, review bloc
Digital Health operator surface for consent state, audit streams, and revocation
Board-ready owner-continuity scorecard for tracking whether final decision owner
Board-ready executive intelligence surface for packaging security controls, evid
Vendor-neutral SecOps operator surface for detection coverage, telemetry gaps, a
Creator operator surface for partnership changes, obligation blockers, and launc
Operator surface for Datadog monitor coverage gaps, dashboard-monitor dependency lanes, alerting blind-spot evidence.
WordPress disclosure control plane for regulated copy, schema-aligned service di
Mobility operator surface for dispatch readiness, route adherence, and SLA-safe
Manufacturing operator surface for downtime incidents, root-cause blockers, and
Board-ready growth execution drag surface for delivery friction, blocker accumul
Board-ready executive-intelligence surface for tracking where public trust asser
Board-ready efficiency proof room for realized savings evidence, owner follow-th
Operator control plane for Microsoft Entra access reviews, privileged-role decis
Board-ready escalation-mapping surface for committee handoffs, owner drift, deci
Exit-readiness intelligence surface for red flags, diligence gaps, board narrati
Board-ready expansion capacity map for throughput ceilings, operator bandwidth,
Kotlin mobile-first field audit control plane for offline evidence capture, supe
Operating Model Friction Index — v1.0-prod hardened, awaiting Hostinger subdomain provisioning.
Board-ready executive intelligence surface for showing where diligence packets a
Operator surface for AWS GuardDuty detector and finding triage, credential abuse
Board-ready identity cost drift brief for license waste, review burden, access o
Board-ready executive intelligence surface for identity risk evidence, diligence
Go control plane for government comment ingestion, adapter drift, and evidence l
Board-ready chain-integrity brief for tracking where decision paths fracture, es
Board-ready growth decision latency surface for approval drag, committee lag, es
Rust control plane for clause obligation ledgers, append-only review events, and
Board-ready operating leverage index for scaling motions, drag pockets, ownershi
Executive board-memo surface for risk, savings, investment priority, and narrati
Board-ready ownership-reset surface for restoring final decision accountability,
Flutter mobile operator surface for on-call incident ack, escalation lanes, field-incident handoff evidence.
Board-ready cash-preservation playbook for freezing spend, ring-fencing core sys
Digital Health operator surface for prior-authorization evidence routing, payer
Board-ready investment-priority surface for ranking what leaders should fund, pr
Board-ready capital-reallocation brief for sequencing trims, protections, and re
Board-ready executive-intelligence surface for renewal risk, exit pressure, spon
Board-ready path-resilience scorecard for tracking whether executive decision pa
Executive-intelligence surface for pipeline integrity, attribution trust, report
Board-ready scaling readiness brief for expansion lanes, execution drag, ownersh
Board-ready scenario surface for capital allocation choices, savings sequencing,
Portfolio Benchmark Scorebook — v1.0-prod hardened, awaiting Hostinger subdomain provisioning.
Board-ready growth sequencing brief for expansion pacing, dependency order, capa
Supply Chain operator surface for shipment exceptions, carrier rules, and SLA-sa
Board-ready cost-takeout command center for sequencing savings owners, execution
Board-ready growth risk thresholds for pacing guardrails, downside triggers, exe
Board-ready committee-throughput surface for agenda load, decision slots, escala
Board-ready executive intelligence surface for tracking AI vendor concentration,
Board-ready executive intelligence surface for comparing vertical operating lane
Operator surface for GCP VPC Service Controls perimeter posture, exception lanes, perimeter drift detection.
Polyglot proof — Flutter, Julia, Python, Rust, Kotlin, PHP, R
Real operator surfaces across seven different runtimes — the language fits the problem, not the resume. Each ships at the same production hardness as the TypeScript baseline. Expanded 2026-05-31 (squad triage Wave C): three Julia operators, three R notebooks, one Python operator.
Flutter web operator shell — queue health, offline packets, handoff proof.
Julia + JuMP capacity optimizer — constrained allocation, scenario diffs.
Kotlin offline-first field-audit control plane — evidence capture, supervisor escalation.
Rust append-only obligation ledger — hash-chained event log, replay-safe ordering.
Request-time governance bridge — Python · Code Engine · IBM Cloud IAM.
WordPress regulatory disclosure kit — schema-aligned service disclaimers + approval evidence.
Campaign Appeal Fatigue Monitor — track when growth/donor appeal frequency crosses lifetime-value or unsubscribe-risk thresholds.
Treasury Liquidity Signal Lab — cash-position signals, liquidity-stress scenarios, runway visibility, board-readable posture.
Yield Forecast Studio — forecast-divergence detection, scenario stacks, planner-safe reconciliation across operations workflows.
Care Variation Analysis Notebook — practitioner-level variation detection, outcome continuity, cohort-safe reporting.
Claims Loss Trend Lab — loss-trend reconciliation, frequency/severity decomposition, reserve-safe reporting.
Donor Cohort Risk Lab — donor-cohort retention risk, lapsed-prevention modeling, segment-safe targeting.
Program Outcome Proof Ledger — outcome-evidence continuity, grant-reporting posture, cohort-safe attestation chain.
Suite landings + research surfaces
The Kinetic Gain Protocol Suite hub, spec landings, validator, and research properties.
The pillar landing for the eleven open AI governance specs — Agent Cards, Tool Cards, Decision Cards, and more.
AEO Protocol — Answer Engine Optimization spec landing, schema, validator.
Clinical AI Card — disclosure spec for healthcare-facing AI products.
AI Procurement Decision Card v0.3 — buyer-side policy gating spec. data_vault_targets (v0.2) + retention_envelope (v0.3) pair on one document: who can read AND how long the data lives.
Hosted JSON validator for all eleven Suite specs — inline error reporting.
AI Procurement Pulse — quarterly index of vendor AI governance disclosure. Issue #4 + Baseline live.