Governed engagements where the work product is a signed, sealed, examiner-reproducible artifact — not a PDF you have to trust the firm on.
The moat: the client (or any auditor) re-derives the verdict themselves from the cryptographic trail. No trust in the provider's word. No proprietary review software. Open, reproducible, sovereign. Run on BRaaS; governed by policy_authoring + workproduct_rbac + examiner_replay.
This is the front door. Click any service to open its governed engagement surface — one generic surface (manifest + BRaaS-config driven), Engage → Draft → Review & Sign → Verify, SIMULATED/internal-demo. Legal Advisory is LIVE end-to-end (federal + NY/CA/TX, corpus operator-in-lieu attested); the others are standing up — each lights up the same surface by writing its corpus + engagement config (operator gate per SD-050). The per-profession drafting engine is adapter-zone, under the hood.
Three structural invariants every engagement upholds — mechanized in code, examiner-verifiable, never claims of process.
Agents propose; only an operator-AGREE'd write happens. The CK Governed runtime holds no keys to your engagement; every consequential action is gated by an explicit, content-bound, attestation-shaped approval. policy_authoring is the only door.
Every work product carries a licensed professional's signature, bound to the exact bytes of the deliverable. Role-gated (workproduct_rbac, SD-047): auditors and clients can review and initiate, but only the licensed attestor signs.
The entire engagement seals into a tamper-evident chain. Any auditor — including the client themselves — runs examiner_replay against the trail and re-derives the verdict from scratch. The trail IS the evidence. No trust required.
The same five-stage flow for every service. Each stage is governed; each stage is sealed; the resulting work product is its own audit trail.
work_product recipe, S215).tool_governor, S216). The model never auto-acts on the deliverable.ReviewSignGate (P4 console, S217). Scrutinizes citations, risks, limits. Approves & Signs — a non-extractable Ed25519 signature over the canonical bytes (G1, hardware-backable).examiner_replay re-derives RELEASABLE / BROKEN from the chain alone. Tamper is caught. The work product is its own warrant.Honest standing of every service in the catalog.
Legal Advisory (federal + ABA, NY, CA, TX), Financial Advisory (federal · SEC / Investment Advisers Act), Accounting Advisory (federal · US GAAP / AICPA SSARS), and Income Tax (1040) (federal + NY · IRS / NYS — deterministic compute from cited, attested rates) are corpus-attested + LIVE and engageable end-to-end through the ONE generic engagement surface — operator-in-lieu attested + SIMULATED sign-off, INTERNAL-DEMO; no real end-user until an external counsel confirms the facilitate-only framing, and the real licensed-professional sign-off (bar / Series 65 / CPA / EA + PTIN) is the operator-gated production step.
Other professions' cited corpora remain preview, unattested — present + current but not yet attested to primary sources by a licensed rate_verifier; a live engagement is REFUSED at the policy-authoring gate until corpus attestation lands (the cheap toggle cannot outrun the verified corpus — SD-050). Each folds in the SAME way (close-any-state, pure config).