Capablio enterprise uplift v1.1 delta

Verdict

The new pack materially changes the risk assessment and implementation sequencing, but it does not overturn the target product architecture.

The system is better described as a functional thin vertical slice rather than a screens-only prototype. It already contains meaningful survey, encryption, results, PDP, role/capability, tenant, and Adaptive Feedback Framework concepts. At the same time, the included source exposes trust-boundary contradictions that must be resolved before Capablio makes privacy or zero-knowledge claims.

Approximately four-fifths of the v1 target plan remains directionally valid. The main changes are:

1. Insert a cryptography and data-boundary gate before public claims and broad UI implementation.
2. Productize existing survey, PDP, and AFF primitives instead of rebuilding them blindly.
3. Replace the prior "no mobile evidence" finding with a concrete responsive-remediation program.
4. Add scoring governance and safe report rendering to the results work.
5. Treat generated demos, static exports, and screenshot fixtures as tested product artifacts.

Files

• 00-materiality-assessment.md - what the new pack proves, revises, and does not prove
• 01-plan-delta.md - exact changes to the existing prompt hierarchy
• PROMPT-INDEX-DELTA.md - where the new prompts fit
• prompts/02A-cryptography-and-trust-boundary-gate.md
• prompts/03A-responsive-shell-and-state-evidence.md
• prompts/12A-aff-domain-audit.md
• prompts/14A-results-scoring-and-rendering-safety.md
• prompts/18A-static-export-and-screenshot-contract.md

Use this addendum with the existing v1 pack. It is not a replacement for repository discovery; the supplied source is a mock/static export and must not be assumed to be identical to production without verification.