Vertical Fusion Checklist — Master Build Tracker
Date: 2026-05-12
Status: Composition / spec — first master tracker since 40-doc research pipeline + 16 ADR drafts
Purpose: Master checklist of every vertical integration + fusion layer in ValOS. Layered from Core (substrate primitives) → Endpoints → Peer Services → outward to Features.
Companion to v_platform/PLATFORM.md (Baseline live status §A.0-E + Master Checklist Part 1 + Part 2). This doc extends + organizes that baseline + Master Checklist by composing every architectural surface surfaced across the 2026-05-11 research pipeline + 16 ADR drafts.
Sources: v_platform/PLATFORM.md baseline + 40 research docs (2026-05-11 batch) + 18 ADR drafts (2026-05-12) + v_platform/IDENTITY.md + v_platform/SOUL.md + v_platform/AGENTS.md + CLAUDE.md + valos-reference.md.
Terminology lock (per operator 2026-05-12): ADE Factory = val-forge — the dev factory engine. Throughout this checklist + sibling MC docs, "ADE Factory" + "val-forge" + "ADE Factory Pipeline" + "val-forge pipeline" are synonymous. Per ADR-011 + ADR-025 val-forge owns the 4-scope multi-repo ADE.
Status legend
| Symbol | Meaning |
|---|
| ✅ | Locked / production-ready (per PLATFORM.md baseline) |
| 🔧 | In progress / partial |
| ❌ | Not started / missing |
| 📋 | Spec'd (research-doc or spec design exists; not built) |
| 🎯 | ADR proposed (2026-05-12 batch); operator approval pending |
Layer 0 — Ring 0 Substrate (Third-Party Dockers)
The foundation processes ValOS engines depend on but does not own. Per PLATFORM.md §A.1.
| # | Component | Purpose | Source |
|---|
| ✅ | L0.1 | valos-postgres (pgvector/pgvector:pg17) | Relational store + pgvector | PLATFORM.md baseline row 8 |
| ✅ | L0.2 | valos-openbao | Secrets vault (HashiCorp Vault fork) — ValOS infrastructure secrets surface | PLATFORM.md baseline row 9 + CLAUDE.md secrets rule |
| ✅ | L0.3 | valos-nats | Pub/sub + JetStream broker (VALOS_L_PULSES + VALOS_S_PULSES streams up) | PLATFORM.md baseline row 10 |
| ✅ | L0.4 | valos-vllm (ollama/ollama:latest) | Local LLM inference; 3 models loaded | PLATFORM.md baseline row 11 |
| ❌ | L0.5 | valos-meilisearch | Keyword + typo-tolerant search index (v1 idle) | PLATFORM.md Component Inventory |
| ❌ | L0.6 | valos-kamailio | SIP edge / SBC (voice substrate) | PLATFORM.md Component Inventory; cross-cuts ADR-022 candidate voice/comms |
| ❌ | L0.7 | valos-freeswitch | Media engine (voice — RTP, transcoding, recording, conferencing) | PLATFORM.md + voice-substrate per d_mission-control/policies/voice-substrate.md |
| ❌ | L0.8 | valos-meshcentral | Mesh transport candidate per ADR-022 candidate / doc 35 F234 — also fleet RMM + SOP screen capture | PLATFORM.md + doc 35 |
| 📋 | L0.9 | valos-hocuspocus | Collaboration server (Node.js Hocuspocus) per ADR-023 | doc 31 + ADR-023 + doc 40 F267 cross-validation |
| ❌ | L0.10 | valos-kopia (or vaultwarden + bitwarden-server) | Backup engine + password vault Ring 0 services | doc 36 + doc 39 + ADR-019 / future |
Layer 1 — Substrate Primitives (First-Class Entities)
10 members per ADR adoption. The composable substrate from which all features are built.
| # | Primitive | Status | ADR | Storage |
|---|
| ✅ | L1.1 | b_fact (business fact) | Three-class taxonomy locked 2026-05-03 | (rules/fact-taxonomy.md) | val-ledger |
| ✅ | L1.2 | s_fact (state telemetry) | Locked | (rules/fact-taxonomy.md) | JetStream |
| ✅ | L1.3 | l_fact (operational event) | Locked | (rules/fact-taxonomy.md) | JetStream + severity mirror |
| ✅ | L1.4 | skill (universal markdown skill) | Locked per ADR-001 | (skill-frontmatter-spec.md) | val-skills + filesystem |
| 🎯 | L1.5 | Missions (multi-agent orchestration) | ADR-007 proposed | ADR-007 | val-orchestrator + b_fact state |
| ✅ | L1.6 | blueprints (Ring 3 + Ring 4) | Locked (three-layer model per memory) | n/a (architectural) | filesystem + val-skills registry |
| 🎯 | L1.7 | Context Cores (packageable engagement bundles) | ADR-019 proposed | ADR-019 | Core archive (zip with 12 directories) |
| 🎯 | L1.8 | scenarios (val-ontology composite operations) | ADR-015 proposed | ADR-015 | val-ontology + filesystem |
| 🎯 | L1.9 | transactions (atomic multi-pulse) | ADR-016 proposed | ADR-016 | val-ontology |
| 🎯 | L1.10 | Canvas (JSON Canvas 1.0 spatial composition) | ADR-022 proposed | ADR-022 | val-ontology + filesystem |
| 🎯 | L1.11 | Editor + Collaboration substrate (Tiptap + Hocuspocus) | ADR-023 proposed | ADR-023 | val-ontology + Hocuspocus |
| 🎯 | L1.12 | val-ingest (document ingestion substrate) | ADR-017 proposed | ADR-017 | val-ontology |
Three-way block-schema cross-lock: ADR-010 (renderer) + ADR-022 (Canvas) + ADR-023 (editor). All three share canonical block schema.
Two secrets surfaces locked: OpenBao (infrastructure per CLAUDE.md) + Bitwarden/Vaultwarden (client-facing per doc 39).
Layer 2 — Endpoints (Device Trio + Distribution)
Device-side runtime that ships per-machine. Per PLATFORM.md §A.3.
| # | Component | Role | Status |
|---|
| ✅ | L2.1 | val-agent (eng:val-agent) | Device-side OODA Chief of Staff | PLATFORM.md row 16 (/health 200) |
| ✅ | L2.2 | val-node (eng:val-node) | Transport: NATS local broker + peer mesh + sidecar | PLATFORM.md row 17 (sidecar /health :9760) |
| ✅ | L2.3 | val-bay (eng:val-bay) — device-side | Local skill executor (no model access; runs rust: + nats-relay:) | PLATFORM.md row 18 (bay.echo NATS reply ~430 µs) |
| 🔧 | L2.4 | val-agent OODA generalization | OODA beyond chat-only (arbitrary pulses) | PLATFORM.md Master Checklist Phase 1.2 |
| 🔧 | L2.5 | val-bay hot-reload | Subscribe to valos.skill.updated.> for hot-reload | PLATFORM.md Master Checklist Phase 1.2 |
| 📋 | L2.6 | Cross-platform Rust agent (RMM) | Windows/macOS/Linux/iOS/Android/ChromeOS endpoint coverage per doc 35 F235 zerotouch.ai-style breadth | doc 35 F240 ValOS-native equivalent |
| 📋 | L2.7 | Endpoint mesh transport | Mesh-default for cloud/hybrid + NATS for on-prem per doc 35 F234 operator correction | doc 35 + ADR-022 candidate MeshCentral |
| 📋 | L2.8 | Edge devices / IoT | Kiosks / signage / rugged / manufacturing portable per doc 35 F235 | doc 35 cross-platform breadth |
Layer 3 — HQ Engines (Peer Services)
Server-side multi-tenant engines. Per PLATFORM.md §A.2.
Locked HQ engines (PLATFORM.md baseline)
| # | Engine | Purpose | Status |
|---|
| ✅ | L3.1 | val-grid (eng:val-grid) | CA + node enrollment + Entra-config + token-exchange proxy | row 12 (/grid/health 200) |
| ✅ | L3.2 | val-cargo (eng:val-cargo) | SoR / MCP gateway + Entra token exchange + JWKS verify | row 13 (/cargo/health 200) |
| ✅ | L3.3 | val-ontology (eng:val-ontology) | Fusion gate (entity graph + LLMWiki + vector index + storage routing + promotion gate) | row 14 (NATS reply ~1.3 ms) |
| ✅ | L3.4 | val-ledger (eng:val-ledger) | Canonical b_fact registry (identity + state + lineage envelope) | row 15 (systemd=active) |
In-progress HQ engines
| # | Engine | Purpose | Status |
|---|
| 🔧 | L3.5 | val-switch | Omni-channel comms gateway (voice/email/SMS/Teams/WA/IG/FB/TG/webchat) — operator commitment: ValOS own provider + carrier partner per doc 25 F167 row 14 | PLATFORM.md substrate locked; per-channel implementations pending |
| 🔧 | L3.6 | val-orchestrator | HQ-side OODA / multi-step coordination (7 closed primitives: Pulse/Decide/Fan/Map/Park/Gate/Compensate) | Only fleet_host watcher kind impl; remaining kinds + Wizard primitive + Matter/Decision/Gate pending per PLATFORM.md Master Checklist |
| 🔧 | L3.7 | val-bay HQ-side (model gateway) | Routes llm-prompt:<profile> skills to OpenAI/Anthropic/Ollama; cost ledger + failover policy | v2 spec landed 2026-05-07; Phase 12 complete; Phases 3-11 pending |
| 🔧 | L3.8 | val-fleet | NATS voice for non-fork dockers (postgres/openbao/nats/vllm) | Currently sim mode; val-bridge folds in as library |
Missing HQ engines (R3 Peer Services)
| # | Engine | Purpose | Source |
|---|
| ❌ | L3.9 | val-ingest | Fact ingestion gateway (R2 entry gate); MarkItDown integration; 3 extraction modes (judgment / structured / video) | ADR-017 + doc 15 |
| ❌ | L3.10 | val-policy engine | Skill governance + signing + fleet-wide distribution + scope contract enforcement; capability binding (Reads/Builds/Grows/Evolves/Computes per doc 33 R210) + ABAC extension per doc 40 F269 | PLATFORM.md Master Checklist + doc 33 + doc 40 |
| ❌ | L3.11 | Blueprint engine (val-fab) | Manifest registry + slot resolver + widget binding contract + mount mechanism | PLATFORM.md Master Checklist + Ring 3/4 lifecycle |
Future engines (per research-pipeline commitments)
| # | Engine | Purpose | ADR / Source |
|---|
| 📋 | L3.12 | val-track (first-party work-tracking) | Linear-equivalent; 11 semantic categories; "build our own Linear" per operator commitment | doc 30 F181-F182 |
| 📋 | L3.13 | val-host (VPS/DNS/web hosting) | Net-new architectural surface per doc 25 F167 + F168; per-client DNS + web hosting + reverse proxy + certificate management; possibly extends val-grid scope | doc 25 F167 + F168 batch 5 |
| 🔧 | L3.14 | val-forge (dev factory / blueprint factory + Multi-Repo ADE) | Owns pipeline branches; AI panel for spatial + AI-assisted composition; Path C hybrid integration per ADR-011; multi-repo orchestration across dev-workspace + canonical + per-client + per-tenant val-up scopes per ADR-025; in final desktop testing 2026-05-12 | ADR-011 + ADR-025 + val-forge-spec.md (in-flight) + doc 11 |
| 📋 | L3.15 | val-canvas library (Rust) | Canvas substrate library — 8 archetype templates; JSON Canvas 1.0 reader/writer; consumed by val-forge + val-desk | ADR-022 + doc 26 R157 |
| 📋 | L3.16 | val-editor library (Rust) | Editor substrate library — Tiptap-compatible block-schema; consumed by 6 surfaces | ADR-023 + doc 31 F199 |
| 📋 | L3.17 | val-block-renderer library | Multi-channel block rendering (11 block kinds; markdown/HTML/PDF/SVG outputs) | ADR-010 + doc 9 |
| 📋 | L3.18 | val-bridge | Protocol-pluggable upstream dispatcher (companion runtime) | PLATFORM.md Component Inventory |
| 🎯 | L3.19 | val-up (self-contained Mission Control + Onboarding Engine) | Self-contained Rust engine; multi-tenant SaaS at up.valtience.com; borrows ValOS libraries but runs standalone; Microsoft Entra OAuth + per-tenant isolation; first concrete consumer of ADR-023 Tiptap + Hocuspocus; runs Engagement Wizard for every client onboarding per ADR-013; MCP-only HQ integration via val-cargo | ADR-024 + mission-control-operating-protocol.md |
| 🎯 | L3.20 | val-forge Multi-Repo ADE (extension of L3.14) | 4-scope ADE routing (dev-workspace + canonical + per-client + per-tenant val-up); per-client repo lifecycle Missions (mission.forge.repo.create.v1 + archive.v1 + upgrade.v1); per-scope promoter approval workflow; Decision Card → pipeline-branch dispatch from val-up | ADR-025 |
Layer 4 — Shells / Apps (Ring 2)
Tauri shells that host blueprint surfaces. Per PLATFORM.md §A.5 + Component Inventory.
| # | Shell | Role | Status |
|---|
| 🔧 | L4.1 | val-desk (app:val-desk) | Operator cockpit — inbox + ops + content; daily-driver shell; in final desktop testing 2026-05-12 | PLATFORM.md row 29 |
| 🔧 | L4.2 | val-desk slot system | Declare slots as queryable Core/Endpoint API; codify widget contract; repackage chrome for blueprint hosting | PLATFORM.md Master Checklist Phase 1.2 |
| 📋 | L4.3 | val-desk OpsCenter (3-layer surface) | Tasks + Metrics + Initiatives surfaces per doc 28 | doc 28 F167 + R170 metrics dashboard |
| 📋 | L4.4 | val-desk Canvas mode | OpsCenter operator spatial outlining; 8 archetypes per doc 26 R156 | doc 26 + ADR-022 |
| 📋 | L4.5 | val-desk client portal | Client-facing self-service portal (separate from MSP-facing OpsCenter); read-only initially | doc 40 F270 + R277 |
| ❌ | L4.6 | val-atlas | Knowledge graph + LLMWiki + entity views | PLATFORM.md Component Inventory |
| ❌ | L4.7 | val-workbench | Focused work surface for skill-heavy operations | PLATFORM.md Component Inventory |
| ❌ | L4.8 | Additional role-specific shells | Research / field-ops / mission-control / etc. as roles diverge | PLATFORM.md Component Inventory |
Layer 5 — Libraries (Shared Crates — Ring 1)
Per PLATFORM.md §A.4 — 14 libraries locked.
| # | Library | Purpose | LOC | Status |
|---|
| ✅ | L5.1 | val-config | TOML loader + OpenBao secret resolution | 635 | row 19 |
| ✅ | L5.2 | val-entity | ECS types | 261 | row 20 |
| ✅ | L5.3 | val-events | CloudEvents v1.0 envelope | 212 | row 21 |
| ✅ | L5.4 | val-factchain | Fact-chain envelope types | 439 | row 22 |
| ✅ | L5.5 | val-graph | Entity envelope (extracted from val-bay) | 144 | row 23 |
| ✅ | L5.6 | val-learning | Learning loop + capture | 1 261 | row 24 |
| ✅ | L5.7 | val-llm | Local mini-inference layer | 579 | row 25 |
| ✅ | L5.8 | val-memory | Second Brain persistent memory | 758 | row 26 |
| ✅ | L5.9 | val-pulses | Pulse handlers | 407 | row 27 |
| ✅ | L5.10 | val-store | sled-backed local KV | 341 | row 28 |
| ✅ | L5.11 | val-skills | Skill registry (parser + filesystem discovery) | n/a | extracted 2026-05-07 |
| ✅ | L5.12 | val-engine-config | engine.config resolver via NATS | n/a | extracted 2026-05-07 |
| ✅ | L5.13 | val-registration | Fleet self-registration | n/a | extracted 2026-05-07 |
| ✅ | L5.14 | val-cache | sled-backed local cache of ECS deltas | n/a | extracted 2026-05-07 |
| ✅ | L5.15 | val-loops | val-node lifecycle loops | n/a | extracted 2026-05-07 |
| ✅ | L5.16 | val-sidecar | Protocol-pluggable upstream dispatcher | n/a | extracted 2026-05-07 |
| ✅ | L5.17 | val-node-runtime | val-node daemon runtime | n/a | extracted 2026-05-07 |
| ✅ | L5.18 | val-runtime | Pulse-execution framework (val-bay v2 spec) | n/a | renamed 2026-05-07 |
| ✅ | L5.19 | val-dispatch | Pulse-execution request handler | n/a | extracted 2026-05-07 |
| 🔧 | L5.20 | val-memory (full impl) | Beyond initial implementation | partial | Master Checklist |
| ❌ | L5.21 | Learning library (full) | Beyond capture | ❌ | Master Checklist |
| ❌ | L5.22 | Agent-swarm library | Mission decomposition orchestration helpers per ADR-007 | ❌ | Master Checklist + ADR-007 |
| ❌ | L5.23 | Sensor-driver libraries | Per-sensor type drivers | ❌ | Master Checklist + IDENTITY hardware/edge surface |
Layer 6 — Policy-as-Code / Meta Governance
Sits above the rings per PLATFORM.md §Policy-as-Code layer.
| # | Meta Skill | Purpose | Status |
|---|
| ✅ | L6.1 | meta/TAXONOMY.md | Skill naming ontology | Locked |
| ✅ | L6.2 | meta/CAVEMAN.md | Token compression mechanics — 3-tier (Ultra/Full/Lite) | Locked + caveman discipline external 57.7K-star validation per doc 24 |
| ✅ | L6.3 | meta/TONE.md | Voice + register specification | Locked |
| ✅ | L6.4 | meta/PENDING.md | Anti-slop pattern | Locked |
| ✅ | L6.5 | meta/AUTONOMY.md | Approval gate mechanics | Locked |
| ✅ | L6.6 | meta/MEMORY.md | Memory model | Locked |
| ✅ | L6.7 | meta/LEARNING.md | Learning loop mechanics | Locked |
| ✅ | L6.8 | meta/SESSION.md | Session conventions detail | Locked |
| 📋 | L6.9 | Substrate-Primitive Design Discipline | Add per doc 33 R207 — 4 ontology design principles (DDD / DRY / Open-Closed / Producer-extends-Consumer-Super) | doc 33 R207 → valos-reference.md §48 |
| 📋 | L6.10 | meta/STRATEGIC-COMMITMENTS.md | Operator strategic commitments captured durably (zerotouch.ai borrow-only / mesh transport / Microsoft-stack alignment / val-track / val-host / etc.) | doc 25 F167-F169 batch 5-6 commitments |
Layer 7 — Cross-Vertical Capability Layers (Base Blueprints)
Cross-vertical capabilities composable across all verticals. Per project_blueprint_layering.md memory.
| # | Capability Layer | Status | Scope |
|---|
| 📋 | L7.1 | Problem-Solving (multi-agent annealment) | Operator-confirmed blueprint | doc 34; cross-vertical |
| 📋 | L7.2 | QMS (Quality Management System — 8 surface areas) | Operator-confirmed blueprint | doc 29; ISO 9001 + 7 extensions |
| 📋 | L7.3 | Marketing Automation | Cross-vertical capability layer | doc 18 + ADR-018 |
| 📋 | L7.4 | Engagement Wizard (5-level maturity framework) | 8 industry corroborations | ADR-013; doc 12 + doc 19 + doc 21 + doc 25 + doc 29 + doc 34 |
| 📋 | L7.5 | Legacy Modernization Mission | Army + Foundry pattern at SMB scope | ADR-014 + doc 13 + doc 4 |
Layer 8 — MSP-Vertical Toolstack (16-Area Capability Sketch)
Per doc 25 F167 capability sketch — 16 capability areas pre-mapped.
Endpoint Layer
| # | Area | Strategy | Reference |
|---|
| 📋 | L8.1 | Endpoint provisioning | val-grid + Rufus + USB sidecar (rejects Microsoft Autopilot) | ADR-012 + doc 12 |
| 📋 | L8.2 | RMM / UEM / MDM consolidation | ValOS native build (Path C; mesh-default + NATS-on-prem); informed by zerotouch.ai primary + Tactical RMM secondary borrowable patterns | doc 35 |
Security / Monitoring Layer
| # | Area | Strategy | Reference |
|---|
| 📋 | L8.3 | SIEM (Wazuh) | Adopt Wazuh as primary SIEM substrate; XDR positioning beyond SIEM (15M endpoints production scale; Cisco/NASA/eBay/Intuit/Groupon customers) | doc 25 F166 |
| 📋 | L8.4 | EDR / MDR | ValOS-as-MDR-provider on Microsoft Defender for Business EDR substrate; 6 MDR Mission categories; MDR ↔ RMM interaction (6 dispatch patterns) | doc 37 |
| 📋 | L8.5 | M365 security training | Blue Team Labs domain content (M365 audit logs / Defender / Intune) | doc 25 F142 |
Operations Layer
| # | Area | Strategy | Reference |
|---|
| 📋 | L8.6 | PSA / Ticketing / Client Management | ValOS native PSA-vertical-extension on val-track + Business Central + new client-portal surface; informed by Alga PSA borrow-only-patterns (5 patterns + Hocuspocus cross-validation) | doc 40 |
| 📋 | L8.7 | Patch management | val-grid + val-orchestrator Missions (mission.patch.apply.v1) | doc 25 F167 + ADR-012 |
| 📋 | L8.8 | Backup (per-client DR) | Integrate-with Kopia (primary; Apache 2.0; Go) + Duplicati (alternative; LGPL; .NET); ValOS orchestrates engines via val-cargo + val-orchestrator | doc 36 |
Identity + Credentials Layer
| # | Area | Strategy | Reference |
|---|
| 📋 | L8.9 | Identity / SSO / Conditional Access | Azure AD / Entra (Microsoft-stack alignment) + val-grid identity surface | doc 25 F167 + doc 38 F251 |
| 📋 | L8.10 | Password Management / Vault | Integrate-with Vaultwarden (primary; Rust; AGPLv3; lightweight) + Bitwarden Server (alternative; .NET; AGPLv3); 6 Mission categories; MDR cross-cut for credential-compromise rotation | doc 39 |
| 📋 | L8.11 | Documentation (IT Glue / Hudu replacement) | Subsume via val-ontology LLMWiki + Cores | doc 25 F167 |
Communications + Hosting Layer
| # | Area | Strategy | Reference |
|---|
| 📋 | L8.12 | Voice / Comms | ValOS own voice/comms provider + carrier partner per operator commitment 2026-05-11; val-switch + carrier SIP trunking | doc 25 F167 + F168 batch 5 |
| 📋 | L8.13 | VPS / DNS / Web Hosting | Net-new ValOS hosting capability layer per operator commitment — val-host engine candidate OR extend val-grid scope; per-client DNS management + web hosting + reverse proxy + certificate management | doc 25 F167 + F168 batch 5 |
System of Record Layer
| # | Area | Strategy | Reference |
|---|
| 📋 | L8.14 | System of Record / Financial / Billing | Microsoft Dynamics 365 Business Central per operator commitment 2026-05-11; val-cargo MCP + REST/OData + Graph API bridge; 3 integration patterns (entity reference + b_fact emission + cache+sync); broadest cross-cutting commitment in pipeline | doc 38 |
Cross-Cutting Layer
| # | Area | Strategy | Reference |
|---|
| 📋 | L8.15 | Incident response runbooks | val-skills + scenarios per ADR-015 | doc 25 F167 |
| 📋 | L8.16 | Problem-Solving (complex incidents / NCR / root cause) | Problem-Solving base blueprint per L7.1 | doc 34 |
MSP-vertical capability sketch total: 16 capability areas. Operator strategic stance per F167: subsume / integrate-with / build natively per per-category nuance.
Layer 9 — System of Record + External Integration
Microsoft-stack-aligned positioning locked across pipeline: 6 surfaces.
| # | Microsoft Surface | ValOS Integration | Reference |
|---|
| 📋 | L9.1 | Microsoft Dynamics 365 Business Central (ERP / SoR) | val-cargo MCP + REST/OData + Graph API | doc 38 + ADR-009 |
| 📋 | L9.2 | Microsoft Defender for Business (EDR substrate) | val-cargo + Graph API security endpoints; ValOS-as-MDR-provider | doc 37 |
| 📋 | L9.3 | Microsoft Intune (UEM/MDM) | val-cargo + Graph API; zerotouch.ai-style Intune companion architecture | doc 35 F233 |
| 📋 | L9.4 | Microsoft Dataverse (business application data) | val-cargo + Dataverse Web API | doc 7 |
| 📋 | L9.5 | Azure AD / Microsoft Entra (identity / SSO) | val-grid + Graph API user/group/license endpoints | doc 25 F167 + doc 38 F251 |
| 📋 | L9.6 | Microsoft 365 audit logs (security training + M365 surface) | val-cargo + Graph API | doc 25 F142 |
Per-client Microsoft licensing cost factor: ~$92/user/month (Business Premium + Business Central Essentials) per doc 38 F252.
Open-source-substrate-aligned alternatives:
- Kopia + Duplicati (backup — L8.8)
- Vaultwarden / Bitwarden Server (password vault — L8.10)
- Wazuh (SIEM — L8.3)
- Tiptap + Hocuspocus (editor + collaboration — L1.11)
- MeshCentral (mesh transport + remote desktop — L0.8 + ADR-022)
Open-vs-locked corroboration count: 18 (per doc 17 §3 baseline 13 + 5 added across batch 5-6).
Layer 10 — Pipelines + Lifecycle
| # | Pipeline | Purpose | Status |
|---|
| 📋 | L10.1 | Onboarding pipeline | Fills IDENTITY + SOUL templates + selects Ring 4 blueprints; runs at first session via val-agent CoS chat | PLATFORM.md Component Inventory |
| 📋 | L10.2 | val-forge factory pipeline | Author → Promote → Install → Run → Retire for blueprints (Ring 3 + Ring 4) | PLATFORM.md Blueprints-as-a-Service + ADR-011 |
| ✅ | L10.3 | Anomaly pipeline | JetStream firehose → val-bay watcher OODA → val-ontology gate → val-ledger registry | PLATFORM.md Pulse Lifecycle Path 2 |
| 📋 | L10.4 | Heartbeat watchdog | val-orchestrator interval + plateau triggers per ADR-020 (3 corroborations: Coral + Automaton + K4D) | ADR-020 |
| ✅ | L10.5 | Skill registry pipeline | val-bay scans v_platform/skills/ at boot, validates against meta/TAXONOMY, exposes via valos.skill.lookup | PLATFORM.md |
| 🔧 | L10.6 | Smoke harness pipeline | Engine-by-engine smokes (in v_source/ops/smoke/); dev-side only | PLATFORM.md row 51 |
| 📋 | L10.7 | Engagement Core lifecycle (build/test/version/promote/rollback/transfer) | 6 lifecycle Missions per ADR-019 | ADR-019 |
| 📋 | L10.8 | Background curation Missions (Hydrator + Synthesis + Validation) | 6 categories per doc 32 F202; threshold ~500 LLMWiki entries | doc 32 R199 + R200 |
| 📋 | L10.9 | Legacy Modernization pipeline (7 phases) | Mission template per ADR-014 | ADR-014 |
| 📋 | L10.10 | caveman-shrink filter (MCP middleware) | val-cargo gateway compression discipline; ~65% token reduction multiplier | ADR-021 |
Layer 11 — Engagement Cores Archive Structure (12 Directories)
Per ADR-019 + batch 5-6 directory extensions.
core.engagement.<client>.<engagement>.v<version>.zip
├── manifest.json ← (per ADR-019 baseline)
├── ontology/ ← (per ADR-019 baseline)
├── embeddings/ ← (per ADR-019 baseline)
├── facts/ ← (per ADR-019 baseline)
├── policies/ ← (per ADR-019 baseline)
├── provenance/ ← (per ADR-019 baseline)
├── canvases/ ← per doc 26 R158 (ADR-022)
├── knowledge-nodes/ ← per doc 33 R203 (granular reflected-knowledge units)
├── backup-state/ ← per doc 36 F247 (backup config + restore-point catalog)
├── mdr-state/ ← per doc 37 F247 (MDR config + incident log + playbooks)
├── bc-references/ ← per doc 38 F254 (Business Central entity references)
├── password-mgmt-state/ ← per doc 39 F260 (Bitwarden config + audit log)
└── psa-state/ ← per doc 40 F271 (tickets / assets / agreements / workflows)
Total: 12 directories (was 7 baseline; 7 substrate-state directories added across batch 5-6).
Layer 12 — Cross-Vertical Capability Layer Composition
Three cross-vertical base blueprints + four vertical-specific extensions identified to date.
Base Blueprints (cross-vertical capability layers)
| Base Blueprint | Cross-Vertical Scope |
|---|
| Marketing Automation (ADR-018) | All B2B + B2C + retail + SaaS + professional-services verticals |
| QMS (doc 29) | Manufacturing + construction + healthcare + food-safety + medical-devices + pharma + financial-services + IT-services (8 candidate verticals) |
| Problem-Solving (doc 34) | Universal across verticals (highest applicability) |
| Debt-recovery-au (memory baseline) | SBR first production client engagement vertical |
Vertical Blueprints (industry-specific)
| Vertical | Status | Reference |
|---|
| Debt-recovery-AU | 📋 v1 priority (SBR first production client) | project_slater_byrne.md memory |
| MSP / IT Services | 📋 capture-and-hold; 16-area sketch | doc 25 F167 |
| Manufacturing | 📋 capture-and-hold (Doug Wood reference shape) | doc 29 F175 |
| Construction | 📋 capture-and-hold | doc 29 F175 |
| Healthcare | 📋 capture-and-hold | doc 29 F175 + doc 2 §10 F11 HIPAA |
| Food-safety | 📋 capture-and-hold | doc 29 F175 |
| Medical-devices | 📋 capture-and-hold | doc 29 F175 |
| Pharma | 📋 capture-and-hold | doc 29 F175 |
| Financial-services | 📋 capture-and-hold | doc 29 F175 |
Layer 13 — Operator Surfaces (Ring 4 Blueprints + Per-Deployment)
Per PLATFORM.md §Ring 4. Per-deployment + per-operator.
| # | Surface | Status |
|---|
| 📋 | L13.1 | val-desk OpsCenter Tasks layer (recurring + one-off + single-ownership) | doc 28 F167 |
| 📋 | L13.2 | val-desk OpsCenter Metrics dashboard surface (3rd primary surface) | doc 28 R170 (15+ b_fact taxonomy candidates) |
| 📋 | L13.3 | val-desk OpsCenter Initiatives layer (Mission-vocabulary surface) | doc 28 R171 + ADR-007 |
| 📋 | L13.4 | val-desk Canvas mode (8 archetypes) | doc 26 R156 |
| 📋 | L13.5 | val-desk client portal (read-only initially) | doc 40 F270 + R277 |
| 📋 | L13.6 | Operator daily-brief blueprints | PLATFORM.md Ring 4 |
| 📋 | L13.7 | SBR debt-recovery vertical blueprints | project_slater_byrne.md memory |
Layer 14 — Cross-cutting Mechanical Enforcement
Per PLATFORM.md Phase 1.5 Cross-cutting Mechanical Enforcement.
| # | Rule | Status | Source |
|---|
| 🔧 | L14.1 | R1 NATS via val-node (Non-Negotiable #8) | Inspector skill at runtime; needs commit/CI gate | PLATFORM.md row 33 + SOUL.md NN#8 |
| ❌ | L14.2 | R2 Facts through val-ingest first | Unenforced; ADR-017 will lock | ADR-017 |
| 🔧 | L14.3 | R3 Skills via val-bay (NN#3) | Partial buildtime; needs src-tauri coverage | PLATFORM.md row 39 + SOUL.md NN#3 |
| 🔧 | L14.4 | R4 No hardcoded UI arrays (ARCH-166) | Soft lint warning; needs build-fail | PLATFORM.md row 47 |
| ❌ | L14.5 | R5 Markdown view layer (ARCH-165) | Prose-only | CLAUDE.md ARCH-165 + ADR-010 |
| ✅ | L14.6 | R6 Single-tenant per deployment (NN#5) | Postgres RLS enforced | PLATFORM.md row 32 |
| ❌ | L14.7 | R7 Latency targets | Duration recorded; no SLO check | PLATFORM.md Master Checklist |
| ❌ | L14.8 | R8 Three-class fact model | 2-class enum currently; locked 2026-05-03 per rules/fact-taxonomy.md | rules/fact-taxonomy.md |
| ❌ | L14.9 | R9 SEID atomic-universal (UUIDv7) | Convention only | PLATFORM.md Master Checklist |
| ❌ | L14.10 | R10 Model stack | Declarative TOML; no enforcement | d_mission-control/policies/model-stack.md |
| ❌ | L14.11 | R11 Operator three meanings | Prose-only | PLATFORM.md Master Checklist |
Layer 15 — Observability + Audit
| # | Component | Status | Source |
|---|
| ✅ | L15.1 | val-ledger b_facts audit chain (parent_fact_ids) | Locked | PLATFORM.md baseline + AGENTS.md |
| ✅ | L15.2 | system.inspector.v1 skill | Locked; clean walk = baseline locked | PLATFORM.md row 50 |
| ✅ | L15.3 | smoke-baseline.sh all | Locked; 43/43 probe-able rows green | PLATFORM.md row 51 |
| ✅ | L15.4 | baseline-coral.jsonl (append-only coral log) | Locked; per-row probe history | PLATFORM.md Baseline §A.0-E |
| 📋 | L15.5 | Heartbeat watchdog observability | b_facts emit per trigger firing | ADR-020 |
| 📋 | L15.6 | Engagement Core lifecycle audit | 6 Core lifecycle Missions emit audit b_facts | ADR-019 |
| 📋 | L15.7 | val-bay pulse cost ledger (LLM cost telemetry) | Locked direction; full implementation pending | val-bay v2 spec §3 |
Layer 16 — Strategic Commitments + Vocabulary
Strategic commitments captured durably across pipeline
| Commitment | Source |
|---|
| Business Central as System of Record | doc 38 + operator 2026-05-11 |
| zerotouch.ai as RMM reference (borrow-only-patterns) | doc 35 + operator 2026-05-11 |
| Mesh-default transport + NATS on-prem | doc 35 F234 + operator correction 2026-05-11 |
| ValOS-as-MDR-provider on Microsoft Defender for Business | doc 37 + operator 2026-05-11 |
| Bitwarden / Vaultwarden for password management | doc 39 + operator 2026-05-11 |
| Kopia + Duplicati both for backups | doc 36 + operator 2026-05-11 |
| VPS / DNS / Hosting capability (val-host engine candidate) | doc 25 F167 + F168 + operator 2026-05-11 |
| Voice / Comms own provider + carrier partner | val-switch spec + operator 2026-05-11 |
| val-track first-party engine (work-tracking) | doc 30 F181 + operator 2026-05-11 |
| Microsoft-stack-aligned positioning (6 surfaces) | doc 38 F251 + batch 5-6 commitments |
Vocabulary register (operator-facing surface vs internal-architecture labels)
| Operator-facing label | Internal architecture | Lock source |
|---|
| Initiative | Mission | doc 28 R171 |
| Work Item | val-track entity (per ADR-019 candidate val-track) | doc 30 F184 + R185 |
| Approach | Idea (Problem-Solving generation stage) | doc 34 Q169 |
Caveman tier discipline (3 tiers locked)
| Tier | Budget | Use |
|---|
| Ultra | ≤ 50 tok | Wiki cards / badges / tiles / bullet digests |
| Full | ≤ 300 tok | Operator chat / pulse output / status replies |
| Lite | ≤ 600 tok | Client-facing text / onboarding / proposals / briefings |
Substrate-Primitive Design Discipline (per doc 33 R207)
- Domain-driven design
- Don't repeat yourself (Rule of Three)
- Open-Closed (locked core + composition extension)
- Producer extends consumer super (covariance / contravariance)
Build Burn-Down Summary
Already locked (per PLATFORM.md baseline 48/48)
- Ring 0 substrate: 4 of 8 dockers operational (postgres / openbao / nats / vllm)
- Ring 1 HQ engines: 4 locked (val-grid / val-cargo / val-ontology / val-ledger)
- Ring 1 device trio: 3 locked (val-agent / val-node / val-bay)
- Ring 1 libraries: 14 locked + 5 extracted (val-skills / val-engine-config / val-registration / val-cache / val-loops / val-sidecar / val-node-runtime / val-runtime / val-dispatch) = 19 total locked
- Ring 2 apps: val-desk locked
- Systems + Features: 10 + 7 + 1 + 1 = 19 locked
Currently in-progress (🔧)
- val-bay (v2 spec Phase 12 complete; Phases 3-11 pending)
- val-agent OODA generalization + hot-reload
- val-desk slot system + chrome chassis repackaging
- val-switch per-channel implementations
- val-orchestrator multi-watcher kinds + Wizard primitive
- val-fleet (currently sim mode)
- val-memory (full impl)
Spec'd / ADR-proposed (📋 / 🎯) — 16 ADRs drafted 2026-05-12
- ADR-007 Missions
- ADR-009 Inbound MCP
- ADR-010 val-block-renderer
- ADR-011 val-forge integration
- ADR-012 Device provisioning
- ADR-013 Engagement Wizard
- ADR-014 Legacy Modernization Mission
- ADR-015 Scenarios
- ADR-016 Transactions
- ADR-017 val-ingest
- ADR-018 Marketing Automation
- ADR-019 Context Cores
- ADR-020 Heartbeat watchdog
- ADR-021 caveman-shrink filter
- ADR-022 Canvas substrate-primitive
- ADR-023 Editor + Collaboration substrate
Net-new architectural surfaces flagged
- val-track (first-party work-tracking engine; doc 30 commitment)
- val-host (VPS/DNS/hosting engine candidate; doc 25 F167 commitment)
- val-policy ABAC extension (doc 40 F269 R276)
- Client-facing portal val-desk extension (doc 40 F270 R277)
- Meta-Ontology subclasses for b_facts (doc 32 F201)
- Background-curation Mission categories (doc 32 F202)
- Hydrator pattern (doc 32 F203)
- Dynamically-instantiated Worker roles ADR-007 variant (doc 34 F226)
- val-policy "Computes" capability (doc 33 R210; 5th capability)
- Walkthrough video as 3rd validation modality (doc 30 F185)
- Fork-from-state Mission debug (doc 32 F208)
- Caveman 4-tier extension question (Wenyan tier per doc 24)
Critical Path — Next Build Targets
Per PLATFORM.md Master Checklist update protocol + 16 ADR draft cross-locks.
Immediate (Part 1 Phase 1.2-1.3 completion)
- val-ingest ADR-017 — fact ingestion gateway (R2 entry gate)
- val-policy engine — skill governance + signing + capability binding extension (Reads/Builds/Grows/Evolves/Computes)
- Blueprint engine (val-fab) — manifest registry + slot resolver + widget binding
- val-agent OODA generalization — beyond chat-only
Near-term (ADR review windows)
- ADR-019 Context Cores — substrate-primitive lock (broadest cross-cutting); 12 directory archive structure
- ADR-020 Heartbeat watchdog — val-orchestrator background process (3 corroborations)
- Three-way block-schema cross-lock — ADR-010 + ADR-022 + ADR-023 coordinated review
- ADR-009 Inbound MCP — val-cargo gateway scope (6 Microsoft surfaces ready)
Per-vertical-engagement triggers
- SBR debt-recovery v1 — first production client engagement
- MSP-vertical scoping (post-SBR + post-first-production-stage) — MSP toolstack 5 sibling docs ready
- QMS base blueprint scoping (when manufacturing or construction client triggers)
Strategic / commercial-model
- 9 memory updates pending at next commit time (val_bay_cost_envelope / msp_vertical / opscenter_design / work_tracking_surface / editor_collaboration_substrate / palantir_competitive_intel / substrate_design_discipline / problem_solving_blueprint / business_central_sor)
- FORCE deck revision — substrate-ownership slide cluster (per doc 17 R91) + Microsoft-stack alignment + pricing model with Microsoft licensing pass-through
Counts + Convergence Metrics
| Metric | Count | Source |
|---|
| Total research docs (2026-05-11 pipeline) | 40 | This pipeline |
| Total ADRs drafted (2026-05-12) | 16 | This batch |
| Substrate-primitive layer members | 10-12 | Per ADR adoption (b_facts × 3 + skills + blueprints + Cores + scenarios + transactions + Canvas + Editor + val-ingest) |
| Open-vs-locked corroborations | 18 | doc 17 §3 (5 added across batch 5-6) |
| Skill format convergence | 14 industry sources | doc 27 F151 |
| Block-schema convergence | 15 industry sources | doc 31 F191 |
| Confidence gating corroborations | 8 | doc 27 F158 |
| Reflection-as-consolidation corroborations | 4 | doc 34 F225 |
| Promotion-to-deterministic corroborations | 3 | doc 32 F207 |
| Heartbeat watchdog corroborations | 3 | ADR-020 |
| Hybrid retrieval corroborations | 5 | doc 27 F156 + doc 32 cross-cut |
| Substrate-primitive thesis corroborations | 4 | doc 33 F212 |
| Engagement Wizard pattern instances | 8 | ADR-013 |
| Cross-vertical capability layers | 3 | Marketing + QMS + Problem-Solving |
| Base blueprints scoped | 4 | + Debt-recovery-AU from memory |
| MSP-vertical capability sketch areas | 16 | doc 25 F167 |
| MSP-toolstack sibling docs | 5 | RMM + Backup + MDR + Password + PSA |
| Microsoft surfaces integrated | 6 | doc 38 F251 |
| Production-scale customer references | 10+ | First Solar + Cisco + NASA + eBay + Intuit + Groupon + LinkedIn + KPMG + Substack + GBrain + Hivemind + etc. |
| Academic-grade citations | 2 | Coral arXiv 2604.01658 + Caveman March 2026 research |
| Competitor analysis layers | 4 | Substrate / OpsCenter-surface / Dev-factory / Editor + Collaboration substrate |
| Per-category strategy variants | 3 | Native-with-borrow-patterns / Integrate-with / Integrate-with-SoR |
| Cross-ADR couplings | 3+ | Three-way block schema (ADR-010 + ADR-022 + ADR-023); ADR-019 + ADR-020 (Cores + heartbeat); ADR-007 Missions consumed across many |
| Memory updates pending | 9 | Per pipeline state |
| Operator strategic commitments locked | 10+ | Per batch 5-6 + Business Central SoR + zerotouch.ai + mesh transport + etc. |
| First-party platform commitments | 1+ | val-track (doc 30) + val-host candidate |
| Hocuspocus external-product corroborations | 1 | Alga PSA (doc 40 F267) |
| Entity convergence count | 2 | Asset + Client/Company |
| Two secrets surfaces | 2 | OpenBao + Bitwarden/Vaultwarden |
| Reserved doc 17 §3 corroborations | 5+ | MSP / Wazuh / RMM / Backup / EDR / Password / PSA / val-track (when MSP scopes) |
Update Protocol
- When a checklist item flips state (❌ → 📋 → 🎯 → 🔧 → ✅), update this section + commit with message referencing the item.
- When a layer fully completes (all items ✅), lock it via memory entry; do not unlock without explicit operator approval.
- ADR status flips:
- 🎯 → 🔧 when ADR draft accepted + scoping begins
- 🔧 → ✅ when ADR-locked surface is built + production-ready
- Memory updates pending at every commit window — apply when commits batch.
- Layer-level completeness gates same as PLATFORM.md (Layer N green before Layer N+1 advances where dependency exists).
- Cross-doc updates from research pipeline flow into this checklist (b_fact taxonomy / Core archive directories / dispatch patterns / capability counts / etc.).
Companion Documents
| Document | Purpose |
|---|
v_platform/PLATFORM.md | Architectural picture + baseline live status (48/48 rows locked) + Master Checklist Part 1 + Part 2 |
v_platform/IDENTITY.md | Who this deployment serves (per-deployment) |
v_platform/SOUL.md | What ValOS IS (universal) |
v_platform/AGENTS.md | How Val behaves per session (universal) |
CLAUDE.md | Cowork dev rules (Cowork-only; not shipped) |
valos-reference.md | Locked reference (engines + capabilities + vocabulary) |
16 ADR drafts (d_mission-control/specs/adr-NNN-*.md) | Architectural decisions |
40 research docs (d_mission-control/research/2026-05-11.*.md) | Pipeline depth surfaces |
3 rules (d_mission-control/rules/) | Architecture-layers / fact-taxonomy / OODA-pattern |
2 policies (d_mission-control/policies/) | Model-stack / voice-substrate |
9 existing specs (d_mission-control/specs/) | Engine + feature specs |
Master vertical fusion checklist — Cowork-side composition. Companion to PLATFORM.md baseline. Status reflects pipeline state 2026-05-12 (post-batch-5 commit + 16 ADR drafts).