feat(crm): license_batches + license_transfers ledger — the missing record behind transferable-by-design

The /pricing + /iamfim transfer mechanic (2026-07-09) shipped with no ledger: a real
broker transfer had nowhere to be recorded, and the minted-term spread could not be
proven to a transferee without a record of when the batch was minted. Central
Supabase, deliberately — license/transfer records are ThetaDriven business state,
same DB as newsletter_subscribers.

Two tables, idempotent: license_batches pins the mint facts (unit price 2000c fixed,
minted_at = the term-lock moment, minted_term_days = what a license bought that day);
license_transfers records each re-registration with fee_cents_per_year DEFAULT 200
(the 10% knob, one value to change) and fee_total derived via a GENERATED column, not
hand-entered. RLS deny-by-default (service-role only — no anon/authenticated policy).
An over-transfer trigger enforces the cross-row invariant a CHECK can't (a batch can
never transfer out more agent-years than it holds) and auto-pins inherited_term_days
from the batch at transfer time — the grandfathering made mechanical.

Guard in the same commit: tests/crm/license-transfers-sql-shape.test.sh asserts
idempotency, RLS, the fee knob, the derived total, the trigger, the status state
machine, and that no anon policy sneaks in. Staged to clipboard via sql-copy.sh —
operator pastes into the Central SQL editor to apply.

Originating-Terminal: 🎩 operator
Relevant-Rooms: 🎩 operator, 📐 architect, 🔒 vault
Story: First half of the "both" — the immediate SQL insertion point surfaced by the
capabilities review, landing the ledger before Friday's broker meeting can produce a
transfer with nowhere to live. The pipeline-seam workflow runs in parallel.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PETu6DCi4T8GkTg19g7k4K

commit 7a22710f7 — 144×144 lattice triptych (on-chip)

◎ the ingest chose B2,A1 — Tactics·Deal × Strategy·Law — acting on A1,B2 — Strategy·Law × Tactics·Deal (grip 0.766) · the walk starts at the ACTOR's row · 6 file(s)

⏱ ingest 147.5ms (corpus→lattice) · definer walk 545ms (row→transpose→row, ballistic XOR per hop) · total 827ms
ingest here = commit-scoped SENSING only (this commit's message + changed files → lit anchors) — deep seed authoring lives in the reef-self-loop, off the commit path

rows = ACTOR (lens) · cols = PATIENT (object) · diagonal = self-reference; ◎ at actor-row × patient-col — every panel, same orientation. Heat above the diagonal = actors ranking ShortLex-earlier than their patients (the walk follows definers uphill in rank).
The 12 canonical lanes (rows top→bottom, cols left→right): A·Strategy · B·Tactics · C·Operations · A1·Law · A2·Goal · A3·Fund · B1·Speed · B2·Deal · B3·Signal · C1·Grid · C2·Loop · C3·Flow

PAIR LATTICE (the map we normally see)

PRE-WALK SENSE · INTENT grid — the snapshot, no point of view

the no-point-of-view snapshot — what the sensor lit before any walk; the leaf walk below is what bridges the two grids

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK SENSE · REALITY grid — the snapshot, no point of view

the no-point-of-view snapshot, reality side — same sensor law

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK Δ · straight comparison of the two ingested grids (green both · cyan intent-only · amber reality-only) · 54% overlap · ◎ = where the competence pixel sits in the raw overlap

good = green overlap without being a copy — near-100% is self-similarity, not alignment

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

◎ the pixel this commit belongs to

B2,A1 — Tactics·Deal × Strategy·Law (actor) acting on A1,B2 — Strategy·Law × Tactics·Deal (patient) · grip 0.766

actor seed B2,A1 — Deal terms and exchange rates must follow the binding mandate and governance rule of law. EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at any moment. Compliance attaches to the artifact the artifact cannot escape — provenance is a regulatory primitive, not a feature. Constraints precede objectives. The cap-table, the license text, the consent envelope — each draws the inviolate line the action must respect, and the line is enforced before the optimization runs. The deal sets the exchange rate between two value substrates. Mis-priced exchange is a slow-bleed; correctly priced exchange compounds both sides, because each cycle of trade enriches the bench on both ends. Terms are the API between two organizations — every clause is a contract method that survives the handshake. Renegotiation is the breaking change; the deal is the stable interface either side can build against. Negotiation closes at the moment both parties' BATNAs cross. Push past that point and you've bought regret at retail; stop short and you've left margin on the table that the next deal will not return to you. A signed counterparty is more valuable than an unsigned promise. The signature is the substrate; the conversation that preceded it is the exhaust the signature converted into substrate.

patient seed A1,B2 — Binding rules in law regulate each deal exchange and negotiation rate through a governance article. EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at any moment. Compliance attaches to the artifact the artifact cannot escape — provenance is a regulatory primitive, not a feature. Constraints precede objectives. The cap-table, the license text, the consent envelope — each draws the inviolate line the action must respect, and the line is enforced before the optimization runs. The deal sets the exchange rate between two value substrates. Mis-priced exchange is a slow-bleed; correctly priced exchange compounds both sides, because each cycle of trade enriches the bench on both ends. Terms are the API between two organizations — every clause is a contract method that survives the handshake. Renegotiation is the breaking change; the deal is the stable interface either side can build against. Negotiation closes at the moment both parties' BATNAs cross. Push past that point and you've bought regret at retail; stop short and you've left margin on the table that the next deal will not return to you. A signed counterparty is more valuable than an unsigned promise. The signature is the substrate; the conversation that preceded it is the exhaust the signature converted into substrate.

INTENT · leaf-walk clouds · BLUE→VIOLET by ply (◎ = the competence pixel: actor∩patient)

good = the clouds concentrate where the commit SAYS it works

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

REALITY · leaf-walk clouds · ORANGE→RED by ply (◎ = the same pixel — the shared perspective)

good = the same clouds as intent — shipped where declared

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

DELTA · graded cloud divergence (green agree · magenta declared-not-done · amber done-not-declared) · 47% agree

good = mostly green; magenta = said-not-done (chase it in the code), amber = done-not-said (chase it in the docs)

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

TOLERANCE · cloud topology (dim green in-shape · hot amber bleed · red orthogonal concentration)

red only matters above the flip — a few amber is normal bleed

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

SHORTLEX-3 PROJECTION (ABC · A1..C3 · the 132 children — candidate, pre-ratchet)

PROJECTED INTENT · the commit’s claims, head→axis_i tail→axis_j (cyan)

the three-length view — good = claims land inside their own zone

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PROJECTED REALITY · same projection law (amber)

same projection law — good = reality occupies the zones intent does

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

STRAIGHT COMPARISON · green both · cyan intent-only · amber reality-only · 23% overlap

good = the zones agree; cross-zone scatter is the drift to read

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

shortlex-3 zone occupancy (lit cells per diagonal square)
INTENT: 1 in the 3×3 ABC corner · 4 in the 9×9 A1..C3 square · 1564 in the 132×132 children square · 245 cross-zone
REALITY: 0 in the 3×3 ABC corner · 2 in the 9×9 A1..C3 square · 809 in the 132×132 children square · 111 cross-zone
axes: identical 144 ShortLex names both sides (symmetric); weights asymmetric
zone 3 = candidate children, pre-ratchet (repo-derived dumps not yet past the perturbation-probe gate) · intent 35 claims @ θ 0.625 · reality 66 claims @ θ 0.6406 · projection 655ms

SHAPE-MATCH σ = 22.35 — the real intent↔reality definer walk vs random-reality (actual 0.7063 vs random 0.121). >0 = the walk distinguishes real alignment from noise; aggregate over independent walks → the divergent series.
σ_drift · verified-reef · verified-reef territory — the instrument at full grip

Most out-of-lane row: C1 · Grid — that lane is drifting most (read the red band in that row).

Three-colour tolerance (out-of-lane = reality fires where intent is weak, in orthogonal blocks): green=in-lane agreement · amber=a few out-of-lane (tolerated) · red=armed — orthogonal out-of-lane 9% vs tolerance 25%.
1551 green · 530 amber · 0 red · 0 XOR-friction cells.

Both axes = the 144 ShortLex anchors, cell=row⊕col, on the chip. INTENT=docs+rules · REALITY=code · DELTA=friction.

tile dump — what the SimHash matched on the diagonal (inspect the sensor; tap to expand)

A,A The lattice we build today is what next year's underwriter inherits.

intent 75% (no distinctive match)

reality 75% { "content_sha": "vega-what-is-real-v1", "graded_by": "claude", "graded_at": "2026-07-09T00:00:

B,B Tactics is the choice of which leverage to pull at which beat.

intent 70% (no distinctive match)

reality 70% (no distinctive match)

C,C Operations is the loop that runs whether anyone watches.

intent 80% (no distinctive match)

reality 80% (no distinctive match)

A1,A1 EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at

intent 83% !/bin/bash. Guard (2026-07-09): the license_transfers migration must stay idempotent, RLS'd, an

reality 83% (no distinctive match)

A2,A2 The target is the cell coordinate the system MUST occupy by end-of-quarter.

intent 81% (no distinctive match)

reality 81% (no distinctive match)

A3,A3 Every dollar builds either the floor (substrate that lifts future bets) or the ceiling (cap on the next round)

intent 73% (no distinctive match)

reality 72% (no distinctive match)

B1,B1 Latency is the price of a missed beat.

intent 73% (no distinctive match)

reality 73% (no distinctive match)

B2,B2 The deal sets the exchange rate between two value substrates.

intent 77% (no distinctive match)

reality 77% (no distinctive match)

B3,B3 Signal-to-noise is the inverse cube of bandwidth — narrow the channel, the message arrives; broaden it, recipi

intent 73% (no distinctive match)

reality 72% -- license_transfers — the ledger behind the "transferable by design" mechanic on /pricing + /i

C1,C1 Power flows where the grid lets it.

intent 80% **The real / borrowed / overclaimed ledger — so nobody at the table catches us holding a claim

reality 75% **The real / borrowed / overclaimed ledger — so nobody at the table catches us holding a claim

C2,C2 Each iteration is a hypothesis tested against the ground truth of the world.

intent 73% (no distinctive match)

reality 73% (no distinctive match)

C3,C3 Flow is the rate at which committed work crosses the finish line.

intent 83% (no distinctive match)

reality 83% (no distinctive match)

commit context — 6 file(s)

feat(crm): license_batches + license_transfers ledger — the missing record behind transferable-by-design

The /pricing + /iamfim transfer mechanic (2026-07-09) shipped with no ledger: a real
broker transfer had nowhere to be recorded, and the minted-term spread could not be
proven to a transferee without a record of when the batch was minted. Central
Supabase, deliberately — license/transfer records are ThetaDriven business state,
same DB as newsletter_subscribers.

Two tables, idempotent: license_batches pins the mint facts (unit price 2000c fixed,
minted_at = the term-lock moment, minted_term_days = what a license bought that day);
license_transfers records each re-registration with fee_cents_per_year DEFAULT 200
(the 10% knob, one value to change) and fee_total derived via a GENERATED column, not
hand-entered. RLS deny-by-default (service-role only — no anon/authenticated policy).
An over-transfer trigger enforces the cross-row invariant a CHECK can't (a batch can
never transfer out more agent-years than it holds) and auto-pins inherited_term_days
from the batch at transfer time — the grandfathering made mechanical.

Guard in the same commit: tests/crm/license-transfers-sql-shap

docs/comms/self/approved/2026-07-09-vega-what-is-real.grade.json
docs/comms/self/approved/2026-07-09-vega-what-is-real.md
docs/comms/self/sent/2026-07-09-vega-what-is-real.grade.json
docs/comms/self/sent/2026-07-09-vega-what-is-real.md
docs/crm/license-transfers-setup.sql
tests/crm/license-transfers-sql-shape.test.sh

Produced on the chip by the running pipeline (scripts/pmu/pipeline.mjs → runPipeline → walk + xor), commit-scoped · on-chip per-walk 806.43ns (this commit). Recompute: node scripts/pmu/commit-triptych.mjs --commit 7a22710f7

Commit artifacts (open on a computer — Gmail mobile won't follow file:// links; the inline images above are the phone-viewable form): reef grid · this triptych · the HDL — all three are also attached to this email.