Executive Architecture & Technical Specs

Oracle AI briefings, KPI Engine, Board Portal, Crisis DEFCON Kill Switch, Vault SHA-256 watermarking, and more.

Capability Breakdown & Metrics

Oracle

— Daily briefings, Q&A, board prep, battlecard sync, scenario analysis

Live KPI Engine

— Finance/CRM/Helpdesk connectors, SQL aggregation, health scoring, 90-point history

Board Portal

— Resolution numbering, quorum validation, voting, director management

Crisis Command

— 5-level DEFCON, protocol activation, kill switch, dual control

Market Intelligence

— Competitor battlecards, strategic analysis, multi-source queries and normalization

Investor Relations

— Cap table, liquidation waterfall, pro-rata allocation, investor updates

Risk Register

— 5x5 heat map, risk scoring, mitigation tracking

Vault

— SHA-256 watermarking, canary traps, NDA enforcement, immutable logs

Initiative Tracking

— OKR tree rollup, health scoring, at-risk detection

Background processing

— Asynchronous job queue for briefing generation and other scheduled work

Scheduled briefings

— Daily briefing generation runs automatically

1. Oracle (AI Executive Advisor)

Oracle is the crown jewel — an AI advisor, powered by a frontier LLM through Aeion's AI gateway, that synthesizes live organizational data into actionable executive intelligence. It's framed with a system prompt establishing it as the organization's AI executive advisor, with full access to live operational data and instructions to stay direct, specific, and focused on what matters most to C-suite leaders.

Daily Briefing (4-hour cache):

Every briefing includes a one-sentence headline, up to 5 insights (what changed since yesterday), up to 3 risks to watch, up to 3 opportunities, and up to 5 owner-assigned actions — plus a confidence score (0.0-1.0) and a timestamp. A podcast-style audio narration is generated automatically when a TTS voice provider is configured.

Business Context Building:

Before answering any question or generating any briefing, Oracle assembles a real-time snapshot of your KPIs, active risks, initiative status, market intelligence, and upcoming board meetings — so every response is grounded in what's actually happening right now, not a stale snapshot.

Multi-Turn Q&A with Sources:

Oracle preserves conversation history so you can ask natural follow-up questions. Every answer includes the underlying data sources it drew on (module, metric, value), a confidence score, and — when relevant — caveats about what it isn't sure of.

Battlecard Autonomous Sync:

When new market intelligence arrives, Oracle analyzes it, extracts the strategic implications and any new competitor strengths or weaknesses, and merges the findings directly into that competitor's battlecard — firing an audit-trail event for every update, with no analyst involved.

Board Prep Document Generation:

Ahead of each board meeting, Oracle assembles an executive summary, the key metrics to present, anticipated questions, and recommended talking points — built from the KPIs currently in a yellow/red health state, the highest-severity open risks, and any initiatives that have gone off track.

2. Live KPI Engine (Live Data Engine)

Metric KeySQL AggregationFormula
`finance.mrr`SUM of recurring paid invoices this month
`finance.arr`MRR × 12
`finance.burn`SUM of expenses in last 30 days
`finance.runway`Cash ÷ (Monthly Burn)cash / burn
`finance.gross_margin`(Revenue - COGS) / Revenue × 100
`finance.cash`SUM of cash account balances
Metric KeySQL AggregationFormula
-------------------------------------
`crm.pipeline_value`SUM of open deals
`crm.win_rate`won / (won + lost) × 100
`crm.active_deals`COUNT of open deals
`crm.new_deals_30d`COUNT of deals created in 30 days
Metric KeyFormula
---------------------
`helpdesk.csat`AVG of satisfaction scores
`helpdesk.open_tickets`COUNT where status ∈ [open, pending, in_progress]
`helpdesk.sla_compliance`(resolved - breached) / resolved × 100

3. Board Portal

The Board Portal manages the complete board governance lifecycle.

Resolution Numbering (RES-YYYY-NNN):

Every passed resolution receives a permanent, sequential identifier in the format RES-YYYY-NNN — for example, RES-2026-001, RES-2026-042 — numbered within the calendar year.

Meeting Lifecycle:

Starting a meeting records the caller's attendance, then recalculates quorum from the count of in-person and virtual attendees against the meeting's required quorum. The meeting is marked in-progress and the quorum status is returned immediately.

Vote Casting:

A director's vote (yes / no / abstain, with an optional signature for legally binding resolutions) can be updated at any point during the voting window. Once cast, the current tally is available for Oracle to surface in the next board prep document.

Quorum Validation:

Quorum is recalculated on demand by counting present directors — in-person plus virtual — against the meeting's configured quorum requirement.

Board Deck Generation (AI-Powered):

AI-generated board decks are built as a sequence of typed slides (title, agenda, KPI, risk, initiative, or text), each carrying its own talking points for the presenter.

4. Crisis Command (DEFCON Kill Switch)

LevelTriggerSystem Actions
5Normal operationsBaseline monitoring
4Elevated threatEnhanced audit logging enabled
3Active threatLock non-essential modules
2Critical incidentStakeholder blast + vault download lock
1Catastrophic eventKill switch + Sentinel lockdown

5. Vault (Virtual Data Room)

The Vault provides enterprise M&A due diligence with forensic access control.

SHA-256 Watermarking:

Every document view generates a unique SHA-256-based watermark ID. It's combined with the viewer's email, the date, and their IP address into visible watermark text embedded directly in the PDF (for example: CONFIDENTIAL | investor@vc.com | 2026-05-11 | IP: 192.168.1.1 | REF: a1b2c3d4e5f67890).

4-Gate Access Control:

Access runs through four checks before a document is served: the document must still be active (not archived or expired), and the requesting user's role or identity must be on the allow list. If the document requires a signed NDA, that's verified as a final gate. Fail any check and access is denied automatically.

Canary Trap System:

When canary mode is enabled, each recipient receives a unique copy of the document with its own 64-character hex token embedded. If the document later surfaces publicly, extracting the embedded token and matching it against the issued tokens identifies exactly which recipient it came from.

Immutable Access Logging:

Every view, download, share, and print is logged immutably — document, user, action, IP address, user agent, watermark ID, and timestamp — with no update or delete possible on that log, ever.

6. Investor Relations (Cap Table & Liquidation)

Investor Relations manages the cap table with live ownership calculations and liquidation modeling.

Ownership Recomputation:

Whenever an equity event is recorded, every active investor's ownership percentage is recalculated from their share count against the total shares outstanding — kept accurate automatically, with no manual spreadsheet math.

Cap Table Summary:

A live summary breaks total shares and total invested down by share class and by funding series — share count, ownership percent, capital invested, and investor count for each.

Liquidation Waterfall:

Liquidation modeling supports participating, non-participating, and participating-with-cap preferred structures, calculating each investor's payout, preference amount, and participation amount based on preference multiples and cap multiples.

Composes with the rest of the OS