Sovereign Revenue Intelligence Mesh

The strategic frame

AIVAON's commercial differentiator is sovereignty: regulated buyers in GH/US/EU choose AIVAON because every commercial decision is provable, on-tenant, and offline-survivable. The Sovereign Revenue Intelligence Mesh operationalizes that claim. The call, the transcript, the qualification, the opportunity, the workflow event, the audit decision, and the outcome become a single causal chain — each link carrying provenance to the previous, each link verifiable, each link replayable, each link individually governed.

The seven canonical chain links

1. #1utterance.captured
   Emitted by media plane (Asterisk RTP / Telnyx media stream)

   Opens the chain. Emitted by the media plane when a Voice Activity Detection segment is finalized. Carries no business data — just the audio context the §15 replay engine needs.

   Required payload fields

   • call_session_id
   • channel
   • frame_window_ms
   • audio_codec
2. #2transcript.turn.committed
   Emitted by asr_committer

   ASR result committed against the upstream utterance. Records the ASR provider used so replay can reconstruct the same model+context.

   Required payload fields

   • call_session_id
   • speaker_role
   • text
   • language_bcp47
   • asr_provider
   • asr_confidence
3. #3qualification.verdict.recorded
   Emitted by qualification_scorer

   BANT-style qualification verdict, optionally stamped with the Cognition Core decision_hash + selected_tier + rule_path so replay reproduces both the score AND the routing decision that produced it.

   Required payload fields

   • call_session_id
   • intents
   • qualification_score
   • scoring_model_id
   • scoring_model_provider
4. #4opportunity.assembled
   Emitted by opportunity_assembler

   Deterministic merge of qualification + tenant CRM schema. Carries a SHA-256 assembly proof — the cryptographic evidence that the link was assembled by code, not a model.

   Required payload fields

   • call_session_id
   • tenant_crm_schema_id
   • opportunity_fields
   • deterministic_assembly_proof
5. #5workflow.triggered
   Emitted by workflow_dispatcher

   Dispatch decision propagated to the §16.3 Flow OS. dispatch_status = accepted (allowed by governance) | queued (sanitize verdict — manual review) | dlq (governance denied with reason codes).

   Required payload fields

   • call_session_id
   • flow_id
   • trigger_input_hash
   • dispatch_status
6. #6audit.anchored
   Emitted by audit_anchor_service

   Bloc-level HMAC-SHA256 signature over every prior link. Tampering with any earlier link invalidates the audit anchor — the chain becomes structurally invalid as a whole, not just at the tampered link.

   Required payload fields

   • call_session_id
   • anchor_target_event_ids
   • anchor_signature
   • key_rotation_id
7. #7outcome.observed
   Emitted by outcome_observer

   Closes the chain. outcome_kind ∈ meeting_booked | qualified_lead | disqualified | transferred | abandoned | completed_no_action.

   Required payload fields

   • call_session_id
   • outcome_kind
   • outcome_value
   • observed_at

Sovereign SKU bindings

Verify any chain link, no credentials required

The public verifier is anonymous, rate-limited (60 req/min/IP, burst 10), cacheable for 60 seconds, and structurally incapable of returning tenant business data. Anyone with an event_id can verify provenance:

GET https://www.aivaon.com/api/v1/aivaon/revenue-mesh/events/{event_id}/verify

Response shape (always sanitized): { decision, event_kind, tenant_id_hash, residency_zone, anchored_at, key_rotation_id, schema_version }

Where the mesh sits in the 8-Core platform

• Core 1 — LiveOps
  media planeA1 voice_capture consumes RTP / Asterisk audiosocket frames into utterance.captured.
• Core 2 — Cognition
  inference cascadeA3/A4 route through WebLLM → vLLM → managed Claude → rule-engine terminal per residency policy.
• Core 3 — Memory
  multi-granularity contextPer-call transcript window assembled by the chain-link composer; per-tenant retrieval via §17.5 Memory Core (future).
• Core 4 — Evidence Spine
  the chain itselfPer-link anchors, audit anchor, replay engine, CI gate at 0.5% regression-rate threshold.
• Core 5 — Revenue Hub
  CRM PassportA5 assembles tenant-CRM-shaped opportunities; HubSpot first-party adapter ships idempotent on aivaon_event_id.
• Core 6 — Workflow Rail
  §16.3 Flow OSA7 dispatches via the FlowOsCatalogRegistry adapter — heuristic + catalog walk + safe fallback.
• Core 7 — Trust Stack
  BYOK + sanitizationTenantSovereigntyRegistry + Section10_6PromptInjectionScreen + verifier sanitization.
• Core 8 — Operator Surface
  console + metricsChain-state projector + chain-completion-rate metrics endpoint; dashboard panel pending S7.5b.

Operator + auditor surfaces

• Console chain-state panel — live operator dashboard with chain completion rate, governance dispatch distribution, link-3 latency percentiles, and cognition tier mix over a 5min/1hr/24hr window. Operator surface — auth required.
• A2A skill descriptor — peer-agent discovery contract for the verifier.
• Operator metrics endpoint (raw JSON) — sanitized aggregate snapshot. Same data the console panel renders.
• agent.json advertises the verify-chain skill alongside every other AIVAON A2A skill.
• llms.txt describes the verifier in paragraph form for AI search engines.