docs(v6.8.5.1): deferred documentation patch — system-design + metrics-catalog + api-reference + GTM refresh

super-legal-mcp-refactored/company-strategy/gtm-positioning-strategy.md

@@ -1,14 +1,14 @@
 # Aperture: GTM Positioning Strategy
 ## Platform Positioning, Messaging Architecture & Competitive Differentiation
 
-**Prepared: March 2026 | Classification: GTM Partner Briefing Document**
+**Prepared: March 2026 | Updated: May 2026 (v6.8.5 — Wave 5 compliance + FMP equity)** | Classification: GTM Partner Briefing Document**
 **For: GTM Advisory Firm Engagement**
 
 ---
 
 ## 1. What Aperture Is
 
-Aperture is institutional-grade deal facilitation infrastructure. It autonomously produces complete, verified due diligence memoranda — 100,000+ words with 400+ verified citations across 14 regulatory domains — in under 3 hours. Legal due diligence is a core component, but Aperture's scope spans the full deal service stack: regulatory compliance analysis, financial modeling (45 models including DCF, Monte Carlo, Altman Z-Score, Benford's Law, macro stress testing, recession probability), contract review and risk scoring, risk quantification and heat mapping, remediation planning, and QA/certification — collapsing 5-7 external vendor relationships ($530K-3M+ per deal) into a single, integrated pipeline.
+Aperture is institutional-grade deal facilitation infrastructure. It autonomously produces complete, verified due diligence memoranda — 100,000+ words with 400+ verified citations across 14 regulatory domains — in under 3 hours. Legal due diligence is a core component, but Aperture's scope spans the full deal service stack: regulatory compliance analysis, financial modeling (56 models including DCF, Monte Carlo, Altman Z-Score, Benford's Law, macro stress testing, recession probability, 11 equity research models added in v6.8.5), equity research and live securities data (FMP integration — 36 tools spanning prices, multiples, analyst estimates, earnings transcripts, institutional holdings), contract review and risk scoring, risk quantification and heat mapping, remediation planning, and QA/certification — collapsing 5-7 external vendor relationships ($530K-3M+ per deal) into a single, integrated pipeline.
 
 It is **not** an AI assistant, copilot, chatbot, document review tool, or legal search engine. It is a verification system that reveals the full landscape of a transaction and produces the deliverable the investment committee reads.
 
@@ -23,7 +23,7 @@ The product sits at the intersection of legal services and enterprise software,
 | Priority | Signal | Why It Leads |
 |----------|--------|-------------|
 | **1. Trust** | "I would stake my career on this output" | PE partners' reputations depend on analysis quality. Leading with trust eliminates the primary objection before it forms. |
-| **2. Precision** | "This is engineered, not generated" | Distinguishes Aperture from chatbot-style AI. The architecture IS the product — 40 agents, 5 gates, 134 tools. |
+| **2. Precision** | "This is engineered, not generated" | Distinguishes Aperture from chatbot-style AI. The architecture IS the product — 45 agents, 5 gates, 197 tools. |
 | **3. Capacity** | "Your team, multiplied" | A 20-30 person deal team at 160-200 person throughput. Not "faster diligence" but "expanded deal pipeline." |
 | **4. Speed** | "Without sacrificing trust, precision, or capacity" | Speed alone is commodity. Speed with institutional quality is unprecedented. Always mention last. |
 
@@ -70,7 +70,7 @@ An aperture is the precisely engineered opening in an optical system that determ
 |-------|------------------|---------------|-----------|
 | **1. Controlled Precision** | Iris blades calibrate what passes through — not a hole, a mechanism | 5 validation gates control what qualifies as verified output | "We don't just generate. We engineer what passes through." |
 | **2. Depth of Field** | Everything from near to far in sharp focus simultaneously | 14 regulatory domains analyzed in parallel — securities, antitrust, IP, FDA, EPA, employment, tax, privacy, cyber, AI governance, government contracts, insurance, commercial, litigation | "Every domain, at full resolution, simultaneously. Nothing blurred." |
-| **3. Resolution** | Precision lens resolves details invisible to lesser instruments | 134 tools connected to 50+ databases, 726KB prompt corpus, 6-wave remediation | "Our resolution exceeds what human teams can achieve at scale." |
+| **3. Resolution** | Precision lens resolves details invisible to lesser instruments | 197 tools connected to 50+ databases, 726KB prompt corpus, 6-wave remediation | "Our resolution exceeds what human teams can achieve at scale." |
 | **4. Revelation** | An aperture reveals — it does not create light | Risks and liabilities exist whether or not anyone finds them | "We don't generate findings. We reveal what the transaction already contains." |
 | **5. Force Multiplier** | Wider aperture = more light = more scenes captured | 20-30 person deal team at 160-200 person throughput, 10 memoranda/day | "Your pipeline was constrained by how much your team could see at once." |
 
@@ -99,7 +99,7 @@ USER QUERY + DOCUMENTS
         |
    Phase 1: Research Planning (orchestrator creates research plan)
         |
-   Phase 2: Parallel Research (18+ specialist agents across 50+ databases)
+   Phase 2: Parallel Research (20+ specialist agents across 50+ databases)
         |
    Phase 3: Research Review Gate (completeness verification)
         |
@@ -243,6 +243,45 @@ Every claim in the output carries one of 8 verification tags:
 | **REJECT_LOOP** | <88%, remediation cycles <2 | Return to automated remediation |
 | **REJECT_ESCALATE** | <88%, cycles ≥2 | Human review required |
 
+### 3.8 Compliance & Audit Posture (v6.8.5 — Wave 5)
+
+The architecture above is engineered. The compliance posture is regulator-ready. v6.8.5 closes the transparency gap that copilot-class tools cannot address by design.
+
+**EU AI Act mapping**:
+
+| Article | Requirement | Aperture Implementation |
+|---|---|---|
+| **Art. 12 — Logging** | High-risk AI systems must maintain automatic logs of operation | `hook_audit_log` records every tool invocation, agent dispatch, and code execution with bounded reason enums and Prometheus failure counters |
+| **Art. 13 — Transparency** | Operators must be able to interpret system output | `GET /api/session/:sessionKey/audit-report` returns the complete audit trail per session — code executions with model identity, tokens, prompt hashes; bridge_metadata with git_sha + sdk_version + container_id; access log; human interventions; citation source links |
+| **Art. 14 — Human Oversight** | Designated humans must be able to override and intervene | Admin endpoints (`/api/sessions/:key/halt`, `/override`, `/legal-hold`, `/tombstone`) write to `human_interventions` with user identity, reason, and timestamp |
+| **Art. 15 — Accuracy & Robustness** | Reproducibility from audit log | Every `run_python_analysis` execution is byte-replayable from `system_prompt_hash + python_code + git_sha + sdk_version + container_id + model_id + anthropic_request_id` |
+
+**GDPR mapping**:
+
+| Article | Requirement | Aperture Implementation |
+|---|---|---|
+| **Art. 17 — Right to Erasure** | Data subjects can request deletion | `redactSessionEventData()` overwrites JSONB content paths to `[REDACTED]` at offboarding-time; cascade DELETE via FK on session removal; `pii_mappings.erasePII()` permanently removes real-value mappings while preserving pseudonyms in reports |
+| **Art. 20 — Data Portability** | Export structured data | Audit-export endpoint supports JSON and CSV.gz formats |
+| **Art. 32 — Security** | Encryption at rest + in transit | Cloud SQL TLS + Google-managed CMEK; bcrypt password hashing at cost factor 12 |
+
+**SEC 17a-4 record-keeping**: 5-class retention manager with `LITIGATION_HOLD`, `REGULATORY_7Y`, `STANDARD_3Y`, `RESEARCH_1Y`, `TRANSIENT_90D`. Legal hold prevents all deletion regardless of class. WORM bucket with 8-year object lock for raw source archive.
+
+**The differentiation**: copilots cannot offer this because their architecture treats the LLM as a black box invoked through chat. Aperture treats the LLM as a component in an instrumented pipeline — every call is audited at the boundary, not at the chat surface. This is why the audit-export endpoint can claim byte-faithful reproducibility while the streaming pipeline stays under 200ms hook latency.
+
+**Buyer message**: "Bloomberg gave you market data you could trust. Aperture gives you AI output your regulator will trust."
+
+### 3.9 The Equity Research Layer (v6.8.5 — FMP Integration)
+
+Pre-v6.8.5, Aperture's `securities-researcher` agent had access to SEC filings (10-K/Q/8-K) but zero access to live market data — stock prices, multiples, analyst estimates, earnings call transcripts, institutional holdings. IB/PE/M&A memos cite all of these routinely.
+
+v6.8.5 closes the gap with a dedicated `equity-analyst` subagent backed by Financial Modeling Prep's `/stable` API:
+
+- **36 tools** — peer cohorts, multiple decomposition, premium/discount bridges, EPS surprise analysis, reverse DCF, earnings call sentiment, analyst rating distributions, institutional 13F holdings, batch quotes
+- **11 code-execution models** (M46–M55, M58) — quantitative cohort identification, multiple regression, control-premium estimation, PE/strategic buyer pricing differentials
+- **Architectural separation from financial-analyst** — financial-analyst reviews **financials** (DCF, LBO, capital structure, working capital). Equity-analyst reviews **securities data**. Two distinct workflows, two distinct prompts, cleaner outputs than a multi-purpose agent
+
+This pairing — comprehensive securities research alongside legal/regulatory due diligence in the same pipeline — does not exist in any competitor's offering. Bloomberg gives you market data; Harvey gives you legal AI; Aperture is the first to do both inside one verified, audited memorandum.
+
 ---
 
 ## 4. Competitive Positioning
@@ -303,7 +342,7 @@ The augmentation model costs 52-125% more per deliverable, produces 25-50x fewer
 
 ### 4.5 vs. "Build It Ourselves"
 
-- 40-agent orchestration with state management, 50+ database integrations (each with its own API versioning, authentication, rate limiting), 5-gate validation architecture, 134 tools, 12-dimension QA, 6-wave remediation
+- 45-agent orchestration with state management, 50+ database integrations (each with its own API versioning, authentication, rate limiting), 5-gate validation architecture, 197 tools, 12-dimension QA, 6-wave remediation
 - "Our validation infrastructure alone took 18 months of dedicated engineering. That's before a single research agent was built."
 
 ### 4.6 vs. Deal-Execution AI Ecosystem
@@ -331,7 +370,7 @@ As Aperture processes more deals, it generates aggregate cross-domain regulatory
 
 - **Authoritative but not stiff** — think *The Economist* meets a top-tier M&A partner's cover letter
 - **Technical but not alienating** — buyers are sophisticated (understand CREAC, Bluebook, HSR thresholds) but not engineers
-- **Understated rather than hyperbolic** — lead with architecture numbers: "40 agents. 5 validation gates. 14 domains. 134 tools." Output metrics from production runs are proof points, not promises.
+- **Understated rather than hyperbolic** — lead with architecture numbers: "45 agents. 5 validation gates. 14 domains. 197 tools. 56 financial models." Output metrics from production runs are proof points, not promises.
 
 ### 5.2 Word Choice
 
@@ -377,11 +416,11 @@ As Aperture processes more deals, it generates aggregate cross-domain regulatory
 | Audience | Tagline |
 |----------|---------|
 | PE / SWF | "Every deal. Full resolution." |
-| AmLaw / BigLaw | "40 agents. 14 domains. Every claim tagged to source. Certified." |
+| AmLaw / BigLaw | "45 agents. 14 domains. Every claim tagged to source. Certified. EU AI Act Art. 12-15 audit-ready." |
 | Ecosystem / Integration | "The verification layer for deal intelligence." |
 | Conference / Event | "What your diligence isn't showing you." |
 | IB / M&A Advisory | "A lean 20-person deal team at the capacity of 160-200 people." |
-| Technical / API | "40 specialist agents. 134 tools. 50+ databases (legal, financial, government). One memorandum." |
+| Technical / API | "45 specialist agents. 197 tools. 50+ databases (legal, financial, government, equity-research). One memorandum. Byte-replayable from audit log alone." |
 | Investor / Press | "Institutional-grade deal due diligence at machine speed." |
 
 ---
@@ -397,7 +436,7 @@ As Aperture processes more deals, it generates aggregate cross-domain regulatory
 ### 2-Minute (Formal Introduction)
 "The fundamental problem with deal due diligence isn't speed — it's blindness. A deal team coordinates 5-7 external firms, each examining their slice. The cross-domain connections stay dark. Aperture solves blindness.
 
-It's deal facilitation infrastructure — 40 specialized AI agents analyzing 14 regulatory domains simultaneously against 50+ live databases, with 45 financial models running sandboxed analysis. Legal, regulatory, financial, contract review, risk quantification, remediation planning — all in parallel, all cross-referenced, all verified.
+It's deal facilitation infrastructure — 45 specialized AI agents analyzing 14 regulatory domains simultaneously against 50+ live databases, with 56 financial and equity-research models running sandboxed analysis. Legal, regulatory, financial, equity, contract review, risk quantification, remediation planning — all in parallel, all cross-referenced, all verified, all byte-replayable from audit log.
 
 The output is a CREAC-structured memorandum with 400+ footnotes, risk quantification tables, draft contract language, and an executive summary. Every citation is tagged: verified, unverified, or inferred. A 12-dimension QA system scores the output on a 100-point scale. Below 93, it doesn't ship — it goes through automated remediation and re-certification.