Governed engagements where the work product is a signed, sealed, examiner-reproducible artifact — not a PDF you have to trust the firm on.
The moat: the client (or any auditor) re-derives the verdict themselves from the cryptographic trail. No trust in the provider's word. No proprietary review software. Open, reproducible, sovereign. Run on BRaaS; governed by policy_authoring + workproduct_rbac + examiner_replay.
This is the front door. Click any service to open its governed engagement surface — one generic surface (manifest + BRaaS-config driven), Engage → Draft → Review & Sign → Verify, SIMULATED/internal-demo. Five professions are LIVE (Legal, Financial, Accounting on the standard governed surface; Income Tax and Real Estate on their own industry-specific governed workflows — each card is tagged); the others are standing up — each lights up by writing its corpus + engagement config, or by pointing at its dedicated surface (operator gate per SD-050). The per-profession drafting engine is adapter-zone, under the hood.
Three structural invariants every engagement upholds — mechanized in code, examiner-verifiable, never claims of process.
Agents propose; only an operator-AGREE'd write happens. The CK Governed runtime holds no keys to your engagement; every consequential action is gated by an explicit, content-bound, attestation-shaped approval. policy_authoring is the only door.
Every work product carries a licensed professional's signature, bound to the exact bytes of the deliverable. Role-gated (workproduct_rbac, SD-047): auditors and clients can review and initiate, but only the licensed attestor signs.
The entire engagement seals into a tamper-evident chain. Any auditor — including the client themselves — runs examiner_replay against the trail and re-derives the verdict from scratch. The trail IS the evidence. No trust required.
The same five-stage flow for every service. Each stage is governed; each stage is sealed; the resulting work product is its own audit trail.
work_product recipe, S215).tool_governor, S216). The model never auto-acts on the deliverable.ReviewSignGate (P4 console, S217). Scrutinizes citations, risks, limits. Approves & Signs — a non-extractable Ed25519 signature over the canonical bytes (G1, hardware-backable).examiner_replay re-derives RELEASABLE / BROKEN from the chain alone. Tamper is caught. The work product is its own warrant.Honest standing of every service in the catalog.
Legal (federal + ABA, NY/CA/TX) runs the standard governed surface (teal badge). Accounting (federal · US GAAP / AICPA SSARS) and Financial (federal · SEC / Advisers Act §206 / Reg BI) run config-tailored workflows (violet badge) — the same generic surface RENDERS each workflow_spec from a BRaaS rule and does the substantive work (accounting: a cash-basis compilation whose statements tie + the AR-C §80 report; financial: an allocation analysis vs the stated policy + an IPS) with real downloadable documents, no bespoke Worker. Income Tax (1040) (federal + NY · IRS / NYS — deterministic compute from cited, attested rates) and Real Estate (federal frameworks + live NY property data — timeline / chain-of-title / comparables / review-sign / closing) run their own industry-specific governed workflows (gold badge). All five are corpus-attested + LIVE — operator-in-lieu attested + SIMULATED sign-off, INTERNAL-DEMO; each card is tagged with its workflow type. No real end-user until external counsel confirms the facilitate-only framing, and the real licensed-professional sign-off (bar / Series 65 / CPA / EA + PTIN / RE broker + appraiser) is the operator-gated production step.
Other professions' cited corpora remain preview, unattested — present + current but not yet attested to primary sources by a licensed rate_verifier; a live engagement is REFUSED at the policy-authoring gate until corpus attestation lands (the cheap toggle cannot outrun the verified corpus — SD-050). Each folds in the SAME way (close-any-state, pure config).