← ORBIS Cockpit

ORBIS Business Universal - Master Plan

From ~45 readiness to 100. 41 tasks. Single source of truth. Updated automatically as colors change.
All 93 3 30 12 48
Color transition law (read once, apply forever)
TransitionStatusTrigger
🔴 to 🟢AllowedExternal barrier lifted (OAuth approved, partner program, etc)
🟡 to 🟢AllowedFounder provided data / decision / document / input
🟢 to 🔵AllowedTask completed; commit landed
🔵 to anythingForbidden🔵 is irreversible
🟢 to 🟡Exception onlyRequires written explanation in commit
🟢 to 🔴ForbiddenCannot quietly punt to "external"
New 🔴ForbiddenFrozen list of 3 as of 2026-05-07

Priority 1 - Watchdog final 10 points 90% to 100% target

IDTaskStageColorDateCommit
W.1Real-PDF calibration on 10 Niia-style supplier invoices. Round 3 final: 7/9 traps caught immediately + 2 auto via 4-week history = 9/9 effective. words_numbers detector EN/RU/FR/PT/KAA2026-05-0926c1eaa
W.2Watchdog-only smoke on founder phone (about 20 min, invoice ingestion to WhatsApp button reply path)D2026-05-07

Priority 2 - Margin Machine 30% to 90% target

IDTaskStageColorDateCommit
M.1Brainstorm MVP scope: cost-side only vs cost-side plus manual revenue input. Decision binds GAP-B for Margin MachineA2026-05-07
M.2Populate USAR chart of accounts in Business DB for Niia's two cafes (after M.1 sets the default template)C2026-05-07
M.3Founder initiates Toast / Square / Clover partner program registrations (4 to 12 week clocks start)A2026-05-07
M.4Synthetic E2E: weekly P&L cron with seeded test data, WhatsApp template fires for tenantB2026-05-07c6a0a23
M.5Real E2E: Margin Machine on Niia's loaded USAR dataC2026-05-07

Priority 3 - Review Guardian 20% to 90% target

IDTaskStageColorDateCommit
R.1Google Business Profile production OAuth submission (founder fills consent screen, ensures privacy + ToS pages on orbis.restaurant, records demo, submits; Claude prepares justification text)A2026-05-07
R.2Connect Niia's two GBP accounts (after R.1)C2026-05-07
R.3Synthetic E2E: test review through analyzer / drafter / poster (dry-run, no real publish)B2026-05-077ce4cba
R.4Real E2E: first real review on Niia cafe to draft to founder approval to publishC2026-05-07

Priority 4 - The Brain 30% to 90% target

IDTaskStageColorDateCommit
J.1First dictation slice (30 min, highest-leverage topic for Brooklyn coffee shop owner). Expand to additional sessions ONLY after value-prop validated with Niia's first questionsA2026-05-07
J.2NYC F&B regulations corpus ingest (DOHMH, NYSLA, NY DOL, DCWP)B2026-05-08b270b6f
J.3Founder + Claude decide cross-tenant shared knowledge base vs per-tenant isolationA2026-05-07
J.4Synthetic E2E: query / retriever / synthesizer with citations from source materialB2026-05-0709b7722
J.5Real E2E: Niia asks ("what is normal food cost for a Brooklyn coffee shop"); Brain answers from J.1 + J.2C2026-05-07

Priority 5 - Shift Guardian 25% to 90% target

IDTaskStageColorDateCommit
S.1FLSA federal labor rules layer (NJ deferred until first NJ client)B2026-05-08fe5baca
S.2Manual schedule input for Niia's two cafes into schedules table (founder mediates import from her current system)C2026-05-07
S.3POS schedule integration via Toast / Square / Clover (depends on M.3)E2026-05-07
S.4Synthetic E2E: compliance-calendar-check cron on test data fires WhatsApp alert on overtime riskB2026-05-0709b7722
S.5Real E2E: Shift Guardian on Niia's loaded scheduleC2026-05-07

Priority 6 - Sentinel 30% to 90% target

IDTaskStageColorDateCommit
F.1NYC DOHMH scraper: pull restaurant inspection results by address into compliance_calendarB2026-05-082768bd5
F.2NYSLA scraper (NY State Liquor Authority). Built when first liquor-licensed client arrives; coffee-shop-only Niia does not need it. No external barrier; only sequenced to Stage EE2026-05-087806454
F.3License data input for Niia's two cafes into compliance_calendar (founder coordinates with Niia for permits / renewals / fire dept certs)C2026-05-07
F.4Synthetic E2E: Sentinel cron checks upcoming renewal, fires WhatsApp alert at 60 / 30 / 14 day windowsB2026-05-0709b7722
F.5Real E2E: Sentinel on Niia's loaded license dataC2026-05-07

Priority 7 - Final QA before Niia 3 tasks

IDTaskStageColorDateCommit
Q.1Full one-day E2E across 6 agents on a fresh test tenant qa-2026-05-XX (founder simulates Niia: invoice, P&L query, review query, Brain question, compliance alert, sentinel renewal). Folds in W.2 Watchdog smokeD2026-05-08507db98
Q.2Onboarding script polish: add specific prompts for POS access, GBP access, license document handoff to the existing 35-question anketaB2026-05-08520703d
Q.3Cockpit web UI smoke: open https://app.orbis.restaurant/cockpit/b/<token> and verify invoice timeline plus alerts renderD2026-05-081685a63

Hygiene P2 founder-approved 2 tasks, ~20 min total

IDTaskStageColorDateCommit
N.1O.2 - revoke leaked GitHub PAT ghp_GFdLNg... via github.com/settings/tokens. About 30 seconds founder timeA2026-05-07
N.2O.3 - replace simple WhatsApp webhook verify tokens (orbis_verify_2026, alter_webhook_verify_2026) with random tokens. Instructions in 2026-05-08_O3_verify_token_replacement_instructions.md. About 15 to 20 minutes founder timeA2026-05-07

Cross-cutting infrastructure review v2 gaps 10 tasks

IDTaskStageColorDateCommit
GAP-AAudit trail event-bus emissions for the other 5 agents (Margin Machine, Review Guardian, Brain, Shift Guardian, Sentinel). Same fire-and-forget pattern as Watchdog. About 2 to 3 hours per agentB2026-05-073fbf03a
GAP-BPer-agent docs/<agent>/scope-mvp-vs-pro.md for the other 5 agents (after each agent's brainstorm). About 30 to 60 min per agentB2026-05-08045681b
GAP-CTest infrastructure: adopt node --test runner as canonical, add GitHub Actions workflow running node --test tests/ on every PR. About 4 to 6 hours. NOTE: runner side shipped (commit 90b3358); CI workflow file blocked because active GitHub PAT lacks 'workflow' scope. Staged at docs/ci/github-actions-test.yml.template. Founder unblocks by adding 'workflow' scope to PAT (30 sec at https://github.com/settings/tokens) - then Claude moves the file in one commit.B2026-05-07partial: 90b3358
GAP-DSentry alert rule calibration after Niia's first 7 days of live data (review event volumes, adjust thresholds). About 30 to 60 minE2026-05-07
GAP-EDB restore drill: restore a recent Supabase snapshot to staging, verify integrity, document procedure in docs/runbook/db-restore.md. About 1 to 2 hoursB2026-05-089c22ff5
GAP-FStripe end-to-end smoke: checkout to webhook to stripe_webhook_events row to manager_profiles row to onboarding template fires. Test mode. Document in docs/runbook/stripe-e2e-smoke.md. About 2 to 3 hoursB2026-05-0886c46d4
GAP-GMeta whatsapp_business_management re-submission after 2026-04-09 rejection. Stage A: screencast script + justification doc + privacy responses (3 to 4 hours). Stage E: founder submits, 4 to 8 week clockA2026-05-07
GAP-HIncident Pattern verification: confirm orchestrator runs on cron envelope, trace Review Guardian and Sentinel wiring, run synthetic E2E injecting 3 incidents, refine product-state audit Part 2. About 3 to 5 hoursB2026-05-086edfa73
GAP-IBrain memory pruning scalability plan: audit current pruning effectiveness, build growth model, document tier-based retention policy in docs/architecture/brain-memory-scalability.md, add memory-archival-monthly cron if needed. About 4 to 6 hours analysis + 2 to 4 hours coding if cron addedB2026-05-08d49af7d
GAP-JCron observability + alerting wire-up: route logger.error for cron failures into Sentry, add daily morning-cron-health-summary digest cron, add cockpit-style /cockpit/cron-health/<token> view, document SLO. About 4 to 6 hoursB2026-05-087c39538

Self-serve signup /business/signup WhatsApp progressive bot

IDTaskStageColorDateCommit
BSO.0Founder submits Meta template business_signup_reminder (UTILITY). Required for 24h-window reminders. Wallet card in audits/2026-05-09-wallet-card-BSO0-meta-template-submit.mdA2026-05-09
BSO.1Routing fix: intent-classifier + Business signup branch in message-router. Safety gateB2026-05-09e067f87
BSO.2DB migration: discovery_state, discovery_answers, signup_source on restaurants; signup_source on discovery_interviews; pending_outbound_messages table; business_signups_stalled viewB2026-05-09e067f87
BSO.3business-signup-bot.js: state machine + 8-question sequence (7 conversational + email) + activation via runSubmitPipelineB2026-05-09e067f87
BSO.4outbound-scheduler.js + business-signup-pacer cron (every minute). DB queue with pacing rules: max 2/day, ≥6h gap, 10-18 ET, skip Sat-Sun first 14 daysB2026-05-09e067f87
BSO.5Admin cockpit /admin/stalled-signups: founder feed of paused signups + reach-out / abandon / resume CTAs. INTERNAL_API_SECRET gatedB2026-05-09e067f87
BSO.6Integration tests: bot state machine, pacer due-now, end-to-end synthetic. ~25 casesB2026-05-09
BSO.7Live smoke: founder runs /business/signup flow from personal phone, end-to-end progresses through 8 questions, runSubmitPipeline activates the tenantD2026-05-09

Priority 13 - Operator Cockpit (orbis.expert v2) 22 tasks shipped 2026-05-10

IDTaskStageColorDateCommit
CP.1Hero pin-screen with rotating D3 globe inside the O of ORBIS, ported from main site (desktop only; mobile fallback to plain O)D2026-05-10
CP.2Always-on pulse strip top bar: MRR / Clients / Saved month / Trials expiring / IncidentsD2026-05-10
CP.35-tab navigation shell: Today / Clients / Money / Agents / Settings (hidden Build slot wired)D2026-05-10
CP.4Today tab: action cards (urgent/warn/normal) + AI briefing block + event feedD2026-05-10
CP.5Clients tab: card layout + drill-down modal with curated profile fields + Hide-Synthetic filter default OND2026-05-10
CP.6Money tab: 3 big-num heroes + 12-month MRR chart with empty-state + Movement + Trial expirations + Costs + MarginD2026-05-10
CP.7Agents tab: 6 cards (Watchdog/Discovery/Brain/Sales/Cockpit/Wins) with role descriptions instead of opaque numberingD2026-05-10
CP.8Settings tab: PIN rotation with confirm-pin + irreversibility checkbox + copy-PIN-after-rotate UID2026-05-10
CP.9Backend rotate-token endpoint + override-file loader (mode 0600) + hot-update config.adminToken in-memoryD2026-05-10a6d483c
CP.10New admin endpoints: /admin/money/trend + /money/movement + /agents/stats + /events (4 endpoints wiring real DB data)D2026-05-100272c83
CP.11Code review pass: 5 production-blocker fixes (C-1 trial enum, I-1 stale Business MRR, I-3 cron filter, I-6 spurious-401-logout, I-8 missing error log)D2026-05-104f0866b
CP.12Atomic swap of /var/www/orbis-expert/index.html (old archived as .bak.pre-v2.2026-05-10)D2026-05-10
CP.13mrr_snapshots table + monthly cron registered (1st of month 00:01 UTC) + backfill script (12 months filled)D2026-05-1082fa224
CP.14platform_events table + lib/platform-events.js fire-and-forget emit helper (15 event types). Hook points deferred.D2026-05-1082fa224
CP.15llm_usage table + lib/llm-usage.js Anthropic SDK wrapper + lib/llm-pricing.js cost tableD2026-05-1082fa224
CP.16wa_usage table + lib/wa-pricing.js Meta cost table + post-send hook in lib/whatsapp-client.jsD2026-05-1082fa224
CP.17/admin/money/costs endpoint + Costs panel rendering 4 lines + live Margin line on Money tabD2026-05-1082fa224
CP.18/admin/today/briefing endpoint with Claude Sonnet 4.6 + 1h in-memory cache + template fallback on LLM errorD2026-05-1082fa224
CP.19URL-param bypass ?go=PIN for browser autofill corruption cases. Auto-auth + cleans URL from history.D2026-05-10
CP.20Auth flow hardening: api() helper no longer force-logout on spurious 401 from legacy admin routesD2026-05-10
CP.21Build space integration: Business/Build switcher in panel embeds master cockpit + 3 plans + living plan via iframe sub-tabsD2026-05-10
CP.22cockpit-canon.css + cockpit-canon.js overlay injected into all 5 engineering plan HTMLs. Visual unification with panel.D2026-05-10303603f

Priority 14 - Founder External Actions (fundraising + outreach) 15 tasks, all 🟡 await founder

From ORBIS Reality Check 2026-05-10. Sits in Business plan because Business is the main commercial path - fundraising narrative anchors to Sovereign-tier traction. Personal/Alter inherit the runway implications, but the action belongs here. Closure = submission actually fired, not just deck ready.

IDTaskStageColorDateStatus
FE.1Bread & Butter Ventures (Brett Brohl LinkedIn DM + breadandbutterventures.com). Seed $100-400k, foodtech+SaaS, $40M Fund IV closed Mar 2025. Priority-1 cold reach.A2026-05-10pending submit
FE.2Chingona Ventures (Samara Hernandez LinkedIn + media@chingona.ventures). Pre-seed $250k-$2M, foodtech thesis explicit. Priority-2.A2026-05-10pending submit
FE.3Visible Hands NYC Fellowship. $10k non-dilutive + NYC ecosystem warm intros. Eligibility: "overlooked" framing (immigrant founder from Georgia qualifies). Priority-3 (low downside).A2026-05-10pending submit
FE.4NYCEDC Founder Fellowship. Often paired with VHNYC; same operator.A2026-05-10pending submit
FE.5ERA NYC Winter 2026. $150k for 6% SAFE. NYC-grounded, restaurant-tech-friendly. ~1% acceptance.A2026-05-10pending submit
FE.6South Park Commons (Spring/Fall 2026). $400k for 7% + $600k next round + up to $1M AI credits. Game-changer for solo technical founder.A2026-05-10pending submit
FE.7MassChallenge US Early Stage 2026. Zero equity, mentors + curriculum. Window Jan 14 - Mar 4, 2026.A2026-05-10pending submit
FE.8Berkeley SkyDeck Batch 22. $200k for 7.5%, SF-based. Window Jan 13 - Feb 13, 2026.A2026-05-10pending submit
FE.9HFTP Entrepreneur 20X at HITEC 2026. Pitch competition + free booth + investor exposure. Deadline ~Mar 31, 2026.A2026-05-10pending submit
FE.10Techstars Future of Food (Minneapolis, Ecolab partner). $120k for ~6%. Window Mar 19 - Jun 10, 2026.A2026-05-10pending submit
FE.11YC Summer 2026 reapply. Updated story: Niia traction + 107k LOC shipped + competitive moat. ~May 2026 deadline.A2026-05-10pending submit
FE.12Branded Hospitality Ventures warm intro motion (NYC, Jimmy Frischling). Highest-fit fund. Path: founder finds NYC restaurants using Chowly/Ovation/Spendgo (Branded portfolio), opens conversation, requests intro to those CEOs, then intro to Frischling. Continuous motion 2-4 weeks.A2026-05-10in motion
FE.13Niia onboard kickoff communication. Re-warm Niia after >1 week silence. Send WhatsApp confirming pilot ready, schedule W.2 phone smoke. Founder time: 15 min.A2026-05-10pending
FE.145 friendly contacts outreach per week. NYC F&B network from sommelier/bartender years. Personalized WhatsApp/Instagram messages with discovery questionnaire link. Target: 12 conversations by end Q3 2026.A2026-05-10sustained motion
FE.15Wefunder community raise prep. Trigger: after first paying client. Reg CF + Reg A. Plausible $100-300k from NYC F&B network. Cost: ~7-8% raised + $5k legal. NOT to start before first paying client.A2026-05-10blocked: trigger

Excluded intentionally: foreign funds (Speedinvest/Atomico, rarely lead pre-seed US), revenue-based finance (Lighter/Capchase/Founderpath - need $10k+ MRR), Mainvest (closed Jun 2024), cold-pitch high-profile angels without warm intro (Danny Meyer / Kimbal Musk).