Kairos — MASTER STATE
The single current-state board for everything Mysterium. Standing rule: every MN session ends with a delta pass on this note AND the rendered War Room — update changed values (with date + confidence), append new insights to the ledger (never delete; supersede with a strike + pointer), then re-render. War Room freshness is a main priority (Lee, verbatim, 2026-08-09: "Being CONSTANTLY up to date in War Room will be one of our main priorities") — a rendered page older than this note is a defect, not a lag. For "current value of X," this note wins; for detail, follow the wikilink. Rendered view: https://kairos-war-room.leematulis.com (deploy/mnwar/, gated; the old locally-served MN Hub is retired). Questions canon stays questions-to-excavate; corrections canon public-surface-sweep-2026-07-18.
Facts board (current values — date + confidence on every line)
| Fact | Current value | As of | Confidence |
|---|---|---|---|
| MN DB financial signal | Current bounded measurement supersedes the earlier “whole audit ≈ $4” manifest estimate without rewriting that historical receipt. Latest 1,000 BigQuery jobs visible to the current principal: 358,726,238,208 totalBytesBilled from 2026-08-16 19:27:05Z through 2026-08-17 15:04:09Z; conservative on-demand list-price ceiling $2.04 (bytes ÷ 2^40 × $6.25). The 2026-08-17 UTC portion is 30,022,828,032 bytes → $0.17 ceiling. This is not an observed invoice: Google documents the first 1 TiB/month as free on on-demand pricing, and totalBytesBilled as informational under capacity/flat-rate pricing. Window includes all jobs visible to the principal, not just audit-tagged jobs. Pricing · job-field semantics. No GCP quota changed. |
08-17 live jobs.list, 15:04Z ceiling |
billed bytes measured; cash charge unknown |
| Term: "MN DB" | = the BigQuery warehouse mysterium-bq (24 datasets / 503 tables), nothing wider — not production Postgres as infrastructure (backups/DR/load: never audited, no access), not the Kairos Forgejo host. Lee, verbatim: "When I say MN DB (at least for now, until agreed on another definition) I mean BigQuery warehouse." Audit state: Kairos — DB Inflation Meaning and Disclosure (2026-08-16) · evidence CONTEXT/warehouse/MANIFEST.md |
08-16 Lee | definition |
| Revenue, total | 07-17 recollection · 08-07 deck | deck is documentary; recollection downgraded | |
| — VPN subscriptions | ~$67.6k/mo, −10.2% MoM (single month — n=1) | 07-17 | insider |
| — GoProxies (in-house) | ~$8.07k/mo, "2nd best month," growing | 07-17 | insider |
| Treasury | ~€30M; fiat-vs-crypto mix unknown | 07-10 Šaras | verbal, unverified |
| Revenue (group, verbal) | ~€2M/yr | 07-10 Šaras, via Lee 08-12 | verbal, unverified |
| Net loss | ~€2M/yr | 07-10 Šaras, via Lee 08-12 | verbal, unverified |
| Total cost base | ~€4M/yr (≈€333k/mo) — derived: revenue + loss; breakdown unknown | derived 08-12 | verbal inputs, unverified |
CORRECTED 2026-08-12. Šaras's words were "revenue is 2M, loss is 2M" — recorded here and in CONTEXT/CURRENT.md as "burn ~€2M/yr", collapsing net loss into total spend and halving the cost base. Corroboration: the 07-18 Fresh-Eyes Audit flagged €2M ÷ 40 people ≈ €50k/head as implausibly low; €4M ÷ 40 ≈ €100k/head resolves it. Runway is unchanged (€30M ÷ €2M net loss ≈ 15 yr) because runway keys off net loss, not gross spend. |
Lee, 2026-08-12 | correction | |
| MN Intelligence UAB (Ieva) | FY2025: €1.13M rev, −€268k loss, equity −€267k, liabilities €821k; registered ~2024-12; insured staff 1 → 10 in Jan–Feb 2025, 13 (2026-07), avg gross salary €3.1k; standard VPN counterparty. GoProxies schema tags name it, but GoProxies terms do not name a contracting entity. Full table + raw pages: Kairos CONTEXT/finance/ (C1) |
07-18 · 08-16 registry | solid (public filing) |
| MN Technologijos UAB (Ieva) | Rev 2021→2025: €0.60M / €0.79M / €1.43M / €2.31M / €1.97M; net +€24k / +€76k / +€8k / −€672k (2024) / −€30k (2025); equity −€516k, liabilities €1.00M (2025); insured staff 19 (2025-05) → 12 (2026-07), avg gross salary €6.4k | 07-18 · 08-16 registry | solid (public filing) |
| LT ring (both entities), FY2025 | Revenue €3.10M, net loss €298k (≈€25k/mo); ring cost base ≈€283k/mo; headcount 25, payroll ≈€113k/mo gross (~40% of ring cost); equity −€784k carried by €1.82M liabilities — funded, not self-sustaining. Diverges from the 07-10 verbal: filed LT revenue (€3.10M) is above the verbal group "~€2M", and the LT loss (€298k) is far below the verbal "~€2M" — so ~€1.7M of the verbal loss must sit outside the ring (BlockDev/treasury/protocol). Runway keys off treasury + group loss, not these filings; ask 8 = cash + committed funding, one line | 08-16 registry (C1) | filings solid; the divergence is an open question for Šaras |
| BlockDev AG (Ro president) | Zug; CHF 100k capital; protocol developer/public site operator; authority over other group entities unproven | 07-18 registry + public docs | solid/mixed |
| NetSys Inc. | MystNodes contractual operator; Mysterium Dark publisher; Panama-law terms shift node-risk exposure to operators | 07-18 public terms | solid |
| MYST token | ~$0.119 · cap ~$3.9M · ~$40k/day · MEXC-led (~81%; rest Quickswap/Uniswap DEX) · 7d +24.5% — up ~30% vs the 07-18 read ($0.090 / $2.9M). Listing status (no Binance; Coinbase/KuCoin pages non-trading) last verified 07-18 | 08-13 CoinGecko | solid, time-sensitive |
| Nodes / advertised IP inventory | CONFLICT: ~22k active nodes/135+ countries (mothership) vs 31,547 IPs/135 countries (MystNodes) vs prior 32,570/182 health read. GoProxies separately advertises 80M+ ethically sourced IPs across 200+ locations and multiple proxy classes; this is not established as an MN node count, but the own-network/upstream supply relationship remains unresolved. | 07-24 GoProxies re-check + prior MN reads | verified claims; relationship unresolved |
| Team | ~26–28 on LinkedIn; "~40" at all-hands; hiring frozen (Workable empty). 07-24 private call: Ro said original co-founder Valdas Petrulis will be let go; separately, at least one remote team member was caught simultaneously working a second job through LinkedIn event posts. Whether those are the same person is unknown | 07-24 Lee debrief | mixed public + direct private |
| Governance & decision-rights map | 07-24 Lee call (reported, unverified): Gitanas Kancerevyčius is Swiss-based director/CEO of the Swiss “mothership”; he appears to invest with Ro in early-stage startups and is said to bring legal/finance plus broad startup-pattern exposure. Treat him as a likely decision-maker alongside Ro, not a verified owner or signatory. Paulius Mozuras (original technical/developer co-founder) is currently travelling; his actual mandate, vote, entity role, and agreement posture are unknown — do not infer passivity from Lee's read. 07-31 call supersedes the passivity question: Paulius attended, chimed in repeatedly and unprompted, and grew steadily more enthused across the call — engaged and contributing on substance, not a silent seat. His formal mandate, vote and signing authority remain unknown; engagement is now established, authority still is not. | 07-24 Lee call + 07-31 Lee debrief | second-hand for authority; direct for engagement |
| Kairos funding & operating-ring boundary | 07-24 Lee call: Kairos will be funded directly from the MN fund or “mothership,” not MN Intelligence UAB or MN Technologijos UAB, the entities Ieva manages. Reported intent: preserve Ieva’s operational capacity and wellbeing while she runs that ring. This supersedes “Ieva is Kairos budget gate” but does not establish the fund’s legal owner, contracting entity, payer, authorized signer, or final budget authority. | 07-24 Lee call | direct private; legal authority unverified |
| MN operational data access | 07-24 Šaras report: Simonas, described as MN’s data person, will make high-quality operational data available “via Claude” soon. |
07-24 Lee call · 08-11 direct warehouse | direct access working; governance unmapped |
| Shared collaboration infrastructure | 07-31 post-call: Ro proposed replacing GitHub with a shared Synology Drive folder on his server and circulated individual access instructions. This is a hosting proposal, not an adopted migration. Synology Drive file sync is not equivalent to the current Git repository: any replacement must preserve Git history, atomic commits, conflict-safe collaboration, agent hooks, per-person access/revocation, backup/restore, and remote verification. Do not place the working .git directory inside multi-user file sync. The circulated credentials, server details, and screenshot are deliberately excluded from canon; rotate any password sent through chat before use. Live review: https://kairos.leematulis.com/infrastructure, classified as a living-latest technical note rather than an immutable proposal release. It carries TechArticle JSON-LD and a kairos-technical-brief/v1 record for collaborator agents; written and signed by Talos (5.6 Sol) on behalf of Lee Matulis. Lee commissioned the brief but did not approve its exact wording as his own. Git preserves rollback; the release catalogue remains for decision-bearing proposal surfaces. |
07-31 Lee debrief + live deployment | direct private; live artifact verified; migration not adopted |
| Long-game upside governance | 07-24 Lee call: when the discussion reached “the long game,” Ro explicitly argued for a written upside-sharing agreement before Kairos hunts a mammoth-sized outcome. His reason: prior experience hunting without an agreed sharing protocol, then having the team “go all apeshit” after the value was created. Lee agrees: no greed, ever — but no slop either. The live proposal’s “open the upside conversation later” sentence is now insufficient. Exact parties, trigger, attribution method, instrument, pool, allocation, timing, and exit/dispute terms remain open. Architecture: Kairos — Mammoth Protocol Architecture (2026-07-24). | 07-24 Lee call | direct private; principle agreed, economics open |
| MN central data layer | 07-31 (Lee inference, strong legs, NOT established): MN has no single central location where data from all main operations flows in — no org-level second brain/vault. Some individuals are starting to use Claude; there is no shared substrate underneath. Consistent with Ro not naming his revenue split, nobody knowing what marketing measures, the three-way node-count conflict, and Simonas's data access still being future tense. Cheap falsification, run it before building on it: ask where an MN operator goes today to find last month's numbers for a function they don't own. An answer kills the inference; "ask whoever owns it" confirms it. | 07-31 Lee debrief | inference, unverified — do not cite as fact |
| Warehouse revenue integrity | 08-11 direct BigQuery: mv_user_revenue_actual and looker.users_revenue carry zero-length duplicate rows that inflate July's documented VPN gross population from $162.3k to $230.3k. Clean curated claude.vpn_purchases matches $162.3k. Artifact is present from the first non-zero observable month; exact origin, dashboard exposure and intent are unknown. Current judgment: serious data-governance failure with a low-probability fraud-risk branch, not fraud evidence. Kairos — Database Integrity and Fraud-Risk Assessment (2026-08-11) |
08-11 warehouse snapshot | duplication fact; clean value working tier; unit untested against a refuted sibling; intent unknown (wording per Tris F-T4 ii, 08-17) |
| VPN churn by country tier (cohort) | Month-start entitlement cohort, first churn in month, net of reactivation ≤30 d — Feb–Jul 2026: tier 1 gross 24.6–34.6% / net-30 18.8–25.7% · tier 2 23.5–31.2% / 18.0–24.1% · tier 3 38.2–55.5% / 28.4–43.1%; July 24.6/18.8 · 23.5/18.0 · 38.2/28.4 — tier 3 ≈1.5× tier 1 every month. In-month acquisitions that churn the same month: 15–224 per tier-month. "≈3-month life" is a hypothesis until a survival curve by plan duration. Red-teamed (Talos F4) and re-run on the correct estimator. Kairos — Warehouse Groundwork after the Red Team (2026-08-17) | 08-17 direct BigQuery (G7c) | measured L2, working tier — not reconciled, not owner-validated |
| VPN list price across tiers | The direct gateways charge one list price: plan_monthly_plus modal $13.49 in every tier on Stripe / Coingate / PayPal / Apple (July clean new); Google Play tier 3 $12.55 modal, dispersed (store-local pricing). Nigeria #1 country by 2026 new-purchase count (8,208, Google Play at $12.90). Tier-3 cancellers name price 7–9 pts less than tier 1 within every platform (self-selected in-app sample — a direction, not a churn cause). Consequence: tier churn is not elasticity evidence; the lever the data points at is product (map row W6). |
08-17 direct BigQuery (G7d1/d2) | measured L2 (price) · survey sample (reasons) |
| VPN churn labels | 2026 churned subscriptions in the labelled table: 31,394 (one row = one subscription = one user); ≈48% carry a billing-retry label, 52% voluntary incl. explicit cancellation requests. ≈¼ of ledger churn rows reverse within 30 d. 93% of recurring-type reactivations arrive within 30 days of the churn row (10,328 of 11,064). That recurring-type reactivation equals billing recovery rather than a returning customer is a hypothesis — the reason join matched 10.1% and cannot carry it (ask 14). Name the query: reactivation rows in 2026 by ≤30 d × type, to give P(Recurring |
≤30 d) directly. (Restated 08-17 per Tris F-T5 — the earlier line stated the inverted conditional as fact.) Whether a labelled churn was involuntary in outcome, and the never-recovered remainder, need MN's pairing key (ask 14). Map row W7. | 08-17 direct BigQuery (G7e, G4b) |
| Primer switch / payment-label seam | Primer replaced Stripe on the web w/c 2026-07-22; the revenue spine has no primer label — Primer rows sit under stripe. Identical-population weekly reconciliation (New-type): web = 101 · 102 · 101 · 100 · 100 · 110% of spine dollars across the switch — no aggregate discontinuity; row-level completeness unprovable (web table has no transaction id; ask 16). Any Stripe-keyed analysis silently absorbs Primer. Map row W8. |
08-17 direct BigQuery (G7a) | measured L2 (weekly) |
| MN DB analytical-fitness audit (plan v1.0, executed) | 08-17 Tiers 0–4 run on worktree audit/scorecard (runs T0 20260816T215739Z · T1 2026-08-16T222811Z · T2 224829Z · T3 230245Z; ≈92 GB of the 200 GB cap; last hop headless, previous writer idle 02:06). Coverage, stated: scored_whole 184/204 live (15.1 % of live bytes) · partial 1 (App_usage_sessions, 396 GB = 58.4 % of live bytes, partition-stratified, not scanned) · failed 1 (App_usage_events, 180 GB = 26.5 % of live bytes, unpartitioned monster — fails closed, unscored) · empty 18 · 3 GA4 shard families × 60 (gaps 0, no schema drift) · skipped 0; grades A 7 · A? 103 · B 2 · B? 49 · D 5 · D? 18 · P? 1 · X? 18 · unscored 1 (? = no tested contract; A = no mechanical flag fired, not 'clean'). Of 33 source findings: 7 unfit · 9 acknowledged · 4 fit (COVERAGE §Per finding; the frozen pack's labels are superseded where this says unfit/untested — B-15/F-22's 22 % paid-click line is untested). Critical tier: 21 contracts (14 tested · 1 tested-with-untested · 6 refuted). Results: phantom pre-registered verdict NOT MET (identified_1 0.050 vs baseline 0.211; 93.6 % unlinked → the 'phantom = copy of a real renewal' reading is downgraded to hypothesis; 99.99 % share a subscription identity, 6.6 % a period start); XSOURCE 108 rows, 3 FAIL (eq-3 2026-02 −4.6 %; two 2026-08 in-progress rows) · eq-2 BI-feed parity holds; mv_vpn_payments grain unresolved (measured 1.643/0.522; pre-registered 1.88/0.53 — Talos F-R2-5) → composition only; claude.vpn_web_sessions counts/shares BLOCKED (W2's 22 % paid-click line is untested); looker.daily_ltv, mv_vpn_active_users_history, google_events, cancel_reasons keys not unique; ledger↔snapshot key coverage 33 %; App_usage.app_errors_users 88 % byte-duplicate rows. FINDINGS-audit 23 entries; FINDINGS-source frozen 31 + 2. GATES: none closed (Q6/Q7 unsent, no durable principal, no refund export, no labeled phantom sample). Artefacts: CONTEXT/warehouse/{OPEN-REPORT-v2.md, COVERAGE.md, SCORECARD.csv, REGISTER.md, FINDINGS-audit.json, GATES.md, contracts/, scores/} on the audit branch (unpushed, .push-paused); plan v1.1 record in Kairos — MN DB Audit Plan (2026-08-17). The 26.5 % monster now carries sampled EVIDENCE (still unscored, still failed:UNPARTITIONED_MONSTER): Lee opened round 5 on 08-17 ("do round 5. we must finish the audit in full"); rounds 5–11 (v1.2.4 → v1.2.10) hardened the acceptance chain (bound review + round + code manifest + one turn of the codex session record) and, after v1.2.8's ACCEPTED run aborted on a BigQuery semantic nobody knew (TABLESAMPLE's byte-cap precondition uses the full-table estimate), the draw-cap rule; Talos ACCEPTED v1.2.10 in round 11 (ACCEPT amendment=v1.2.10 round=11 code_manifest=69edfd0d…); executed 08-17 11:51Z: artifact sampled/App_usage.App_usage_events.2026-08-17T115113Z.json — Q-S1 whole-table exact: 17,077 rows with current_event_time in the future (max 2045-01-27); Q-S3 exact rows 903,999,722; two distinct 2 % block draws side by side (byte-dup 1.0e-5 / 1.4e-5, draw statistics only, never a table rate); billed 21.28 GB (historical run metadata; see MN DB financial signal for the current list-price ceiling); the earlier whole-audit ≈ $4 manifest estimate is superseded and is preserved only in the completed handoff; FINDINGS-audit 23 (one whole-table fact added, gate green). Coverage headline unchanged in every count (unscored bytes 26.5 %) with the separate clause sampled evidence: 1 table … not a score (amendment v1.2.10). War Room /state/ carries the coverage headline as a derived card (data-live, from COVERAGE.json). |
08-17 direct BigQuery (audit runs) | measured; coverage-stated; cash charge unknown; fitness of each source finding in COVERAGE §Per finding |
| Org-wide hub ambition | 07-31 in-room, provenance now exact (08-03): it was Gitanas, and it was caused. He challenged Lee on AI slop — "press the button to generate lame generic marketing copy", "skimming the surface only". Lee said slop will not be tolerated and described his working system; it landed; Gitanas then said "maybe we should have it company-wide." Ro: "not all at one go, but we are definitely testing it" — which publicly casts the 3-person Kairos repo as the test of the company-wide thing, making the substrate choice (insight 43) urgent rather than prudent. Framing consequence: the hub is a QUALITY argument, not an efficiency one — Gitanas's fear is surface-skimming, so the pitch is "how a company uses AI without becoming slop," not "how you centralise data." Ro was separately strongly in favour of the shared repo. Ro: "first we do this, then we see how it goes, then we add more people if it works." Correct sequencing on pace, silent on substrate. The trap: nobody re-decides the substrate at the "add more people" step, so the casual three-person choice becomes the permanent thirty-person one. This upgrades the Synology-vs-Git question from convenience to architecture — access revocation, history, and conflict-safety read as fussy at 3 and are load-bearing at 30. Operative rule: choose the three-person substrate as if thirty will use it. Lee: little doubt this is one of the important ways forward. Kairos — Call Debrief (2026-07-31) | 07-31 Lee debrief | direct private; ambition stated, nothing decided |
| Marketing function | 07-31 call (Lee debrief): marketing team is understaffed. Head of marketing is Indrė [surname/spelling unknown]; Gitanas described her as "one of the better ones in Lithuania." Ro said she "most likely has some excel sheets" about past campaigns — "ji turi turbūt kažkokių ekseliukų" — i.e. the funders cannot state what the measurement layer is, only guess it exists. Whether marketing and sales are separate teams is unknown. Paulius raised the whole subject unprompted, framed as agent-automated marketing, despite not being a marketing person. Lee's faint-praise reading of Gitanas's phrasing is an inference about tone, not a stated position — test it, do not record it as Gitanas's view. Kairos — Call Debrief (2026-07-31) | 07-31 Lee debrief | direct private; names and structure unverified |
| 07-31 governance call | Held, five in the room (Lee · Ro · Šaras · Gitanas · Paulius). Ro framed the need; Šaras pitched Lee on the Mangirdas/Termovizija case; Lee carried the substance. Gitanas probed throughout, Lee had a prepared answer each time. OUTCOME — APPROVED IN PRINCIPLE: mid-call Ro said "Gitanas, if I read you correctly, you also approve of Kairos as the thing we need" and Gitanas nodded. Both decision-maker nodes now approve; agreement still unsigned. Content of Gitanas's challenges NOT captured — highest-value remaining gap. Kairos — Call Debrief (2026-07-31) | 07-31 Lee debrief | direct private |
| Deck delivery | Stopped at card 13 of 17; card 13's talking points were not delivered. Verified against deploy/swat-next/deck.html. Never reached in the room: 14 "The ceiling, named by us" (€10k/mo, ~€30.9k) · 15 "Rules before the hunt" · 16 "Four things we need decided" · 17 close. CORRECTED 08-03 — do not read this as "they approved before hearing the price": Ro already knows cards 14–17 in full from the earlier Ro+Šaras proposal call, and treated the commercial layer as "buhalterija" — routine, handled. The residual question is narrower and still open: whether Gitanas and Paulius know the ceiling and the upside architecture, since the deck existed precisely because those two read cold, and Gitanas approved without those cards being shown. The undelivered cards remain the natural spine of 08-07. Separately: the deck did not persuade — the room converged early; its real job was making two cold readers safe enough to engage. |
07-31 Lee debrief, corrected 08-03 | direct private; card map verified |
| Contracting entity | ~08-01 phone call (Ro → Lee, informal): Ro has an MB attached to MN that "we can use", and his suggestion for Lee's own side was "paprasčiausia yra tiesiog išsiimt individualios veiklos pažymėjimą." Corrected 08-03: Ro's MB is the PAYER side; Lee contracts into it under his own structure. The earlier payer-vs-vehicle ambiguity is resolved — Kairos does not operate through Ro's MB. Ro framed the whole commercial layer as "kaip Antanas sako — buhalterija": routine, will be handled. Lee trusts this, largely via Šaras. Still to name before 08-10: which MB (name, code, ownership), what "attached to MN" means legally, how it squares with the 07-24 "funded from the fund/mothership" line, recourse if payment stops, and which entity can grant upside (insight 38 + deck card 15). | 08-01 Lee report, corrected 08-03 | direct private; payer side clear, entity details open |
| Lee's own entity — OPEN | Two live options: individuali veikla (Ro's suggestion; live in a day, minimal admin) or thawing Lee's existing dormant MB. Driver is not only tax: Lee carries LT debt and does not want all income plugging that hole instantly, which makes withdrawal-timing control a real variable. 2026 figures (verified, but GPM for IV is reported inconsistently across sources — accountant must confirm): IV — VSD 12.52% + PSD 6.98% on 90% of taxable income, 30% flat deduction available, tax credit tapers €20,000→€42,500. MB — profit tax 17% standard / 7% reduced if annual income <€300k and members control no other companies / 0% first two tax periods in some cases; dividends 15% GPM with no Sodra; manager compensation carries no VSD, PSD ~€966/yr. VAT registration compulsory above €45,000 turnover. At the 200-hour cap split evenly, Lee's run-rate is ~€5k/mo ≈ €60k/yr — above both the €42,500 credit taper and the €45,000 VAT line; the initial one-month engagement is ~€5k for Lee at that split. The right answer depends on whether work continues after month one. Open question only Lee can answer: is the debt under active enforcement (antstolis) or on a normal schedule — it changes the analysis. Action: one paid hour with a LT accountant before 08-10. | 08-03 Lee + web verification; 08-07 commitment correction | rates verified, GPM contested; decision Lee's |
| GoProxies pricing | $2.40/GB entry → $1.40/GB @1TB; self-serve checkout live; Scraping API private beta; 80M+ advertised IPs across heterogeneous SKUs, source mix unproven | 07-18 | solid/mixed |
| Content engines | VPN news desk near-daily (2026) · GoProxies research arm (press pickup) · MystNodes thin · legacy blogs dead. Mothership links product doors; entity/claim/metric coherence remains fragmented | 07-18 | solid/est |
| Engagement | Approved 07-04 · CORRECTED 08-07 by Lee: initial commitment is one month, cancellable after that; continuation depends on substantial results. €50/hour per team member pre-tax, capped at 200 combined hours/month across both unless Robertas suggests or approves another cap · ~€300/mo traffic valve · money-floor + listening access · proposal live as "Kairos" but agreement still unsigned — Kairos — Proposal v2 (2026-07-23). Before quoting any hour or euro figure, read Kairos — Time Ledger Caveats — the all-time total is permanently withheld, session load is an upper bound, and only Lee's half of the combined cap is instrumented | 08-07 Lee correction; supersedes the 07-24 three-month reading | direct private |
| September board target | Robertas's written 08-11 request: by the board meeting at the end of the first week of September, Kairos should circulate a written pack three days before the meeting: 3–5 one-page candidate opportunities in one comparable structure; at least one internal and one external candidate or an explicit evidenced empty side; ranked recommendation; and a one-line rejection log. Each candidate must state the actual asymmetry, Mysterium-specific advantage and copy resistance, cheapest prove/kill test, kill condition, and concrete next step with cost and timeframe. Finished business plans, financial models, and built product are explicitly excluded; the live-context system is a means, not an opportunity. Lee's current scope correction: screen 3–5; deepen the strongest 1–2; prepare one complete torpedo contract; launch at most one only through the explicit readiness gate. No launch is promised. Robertas asks for acceptance or a corrected scope now and notes the agreement is still unsigned. Lee reply remains unsent. Kairos — September Opportunity Target (2026-08-11) | 08-11 Robertas WhatsApp + Lee correction | direct written; meeting date still imprecise |
| Key dates (CURRENT) | Work STARTED Mon 2026-08-10 — as of 2026-08-14 that is day 5 of the 30-day mandate, 25 left; the agreement is still unsigned and the clock is running anyway. · 90-system/log.md 14:49) — closes the question carried open since 07-31, when only the cadence was agreed and the exact time was not. First in-engagement Friday was 2026-08-14. The Thursday one-pager pass is the prep half of the same cadence. · A weekly client-facing one-pager ships alongside each call — recurring commitment; production mechanism BUILT 08-03 (insight 22: cadence or don't start): fixed seven-section template + gated generator + Thursday drafting task, at deploy/swat-next/weekly/ with the ritual and publish sequence in its README. Week 0 written, gates green, verified locally in both themes; LIVE 2026-08-04 at https://kairos.leematulis.com/weekly (v2.3.0), Lee approved — client-facing prose in his and Šaras's name. Surface classified living-latest in release.py; first publish is a one-time v2.3.0 release, every Friday after is deploy-living --surface weekly · Lee's holiday now runs to ~08-06, superseding "Smiltynė 08-02–08-05" (past) |
07-31 + 08-03 Lee debrief; call time 08-14 | direct private |
| Key dates (superseded 07-30 row) | Ro returns from Russia in first half of 07-27 week · Ro+Šaras+Paulius+Gitanas internal call 07-29 or 07-30 · 07-31 13:00 call is now Lee+Ro+Šaras+Gitanas+Paulius (Lee, 07-30 — supersedes the "Lee+Ro+Šaras ~12:30" follow-up: the internal four-way and the trio call appear to have merged into one room, making this a likely governance/decision gate rather than a catch-up. Ro asked for slides instead of the scrolling one-pager, and for specifics on how the work starts) · Lee family holiday Smiltynė 08-02–08-05 · Lee full commitment (~80% focus/energy) available from 08-10, with Vytautas-house push before and after the holiday · Cloudflare bot-policy defaults Sept 15 (scoped) | 07-30 | direct |
| Meeting deck | LIVE: https://kairos.leematulis.com/deck (v2.1.0, 07-30) — the proposal as 17 presented slides for the 07-31 room, built because two of the four (Gitanas, Paulius) read it cold. Net-new beyond the one-pager: a day-1-to-day-30 operating plan (pre-start hour · economic perimeter days 1–7 · board choice days 8–10 · one reversible proof days 11–30 · day-30 gate), our own cost ceiling stated first (€10k/mo max, ~€30.9k across the proposed three months), what MN keeps if it stops at the first gate, month-one boundaries, and the four decisions needed to start. People-lane framing per Lee's 07-30 call: one restrained line — where Ring 1 touches people it reaches the sponsor privately as evidence, never as opinion in a report | 07-30 | direct |
| Research page | LIVE: https://kairos.leematulis.com/research — full corpus configured for Ro+Šaras (facts board w/ confidence badges, kill graveyard, survivors, open questions, three rings, optimism case, 14-doc library). noindex; insider figures withheld from public URL by design (stated qualitatively). Proposal terms corrected 07-24 to €50/hour per team member pre-tax with a 200 combined-hour monthly cap unless Robertas suggests or approves another; ~€300/mo traffic valve, three rings, "we don't know yet" + monthly decision gate remain | 07-24 | direct |
| VPN cancellation-reason capture | EXISTS and is LIVE — it was never missing. App_usage.App_usage_cancel_reasons: in-app multi-select survey + optional free text, 2025-06-19→2026-09-01, 18,419 responses across iOS 7,014 · Android 6,419 · Windows 4,847 · Mac 192. Multi-select, so shares overlap on 9,060 distinct respondents: Other 35.9% · TooExpensive 35.8% · Disconnects 19.9% · Error7040 18.2% · Usability 18.0% · Testing 17.3% · then a 12–15% tail. Any technical reason 60.7% vs price 35.8%. Response volume peaked Feb 2026 (1,947/mo) and has fallen to ~900/mo; app-surface only, self-selected. Separately postgre.mv_vpn_cancel_reasons is a stale system classifier (three buckets, sync dead since 2026-04-28, 72k rows split across a BILLING_RETRY/BILLING RETRY label typo) — not a survey. Kairos — Cancellation Reason Tables Read (2026-09-02) |
09-02 direct BigQuery | solid |
| Churned users with no recorded connection | 56.7% of 119,954 churned users carry was_connected_total = false (~68k people) in App_usage.users_churn_reasons; 8.5% refunded. HYPOTHESIS, not fact — the field's semantics are uncommissioned and it may mean "no connection telemetry recorded" rather than "never connected". Do not quote outward until Simonas commissions it. Converges with Error7040 as the #3 stated cancel reason and the ban-chain pile in the 09-02 public-review sweep. |
09-02 direct BigQuery | hypothesis 2026-09-02 evening probe (VPN complaints architecture, D1 field reconciliation): weakened further. Of the 68,013 flagged not-connected, 64,457 (94.8%) are also opened_app_total=false; the never-opened share is 64.2% even on the Apple gateway and 52.8% on Google, where telemetry exists; 7,594 flagged users have sessions in users_cycles. Reading: a user-id ↔ pseudo-id mapping gap in the table build, not behaviour. Field EXCLUDED from all outputs until MN supplies its definition. Source: ~/Claude/Projects/kairos-vpn-complaints/work/probes-2026-09-02.md, results q04. |
| First-sprint outcome review | Friday 2026-09-11, ~3 hours reserved, other work cleared — the one-month review accepted in principle on the 08-28 call; judges work done, results produced and where Kairos has arrived, not process sophistication. Sprint 1 runs 08-10 → 09-11 (33 days). Attendees and the continuation-decision owner still unconfirmed. Robertas's 08-11 board-pack ask has not been mentioned by either side since; whether it stands as its own artifact or folds into this review is an open question for the 09-04 call. Kairos — Call Analysis (2026-08-28) | 09-02 Lee; 08-28 call transcript | direct |
Insight ledger (append-only; strike, never delete)
- 07-03 · Money is UP the stack — raw GB is commodity; 10–30× markup lives in managed/per-success access. Reinforced 07-18: GoProxies Scraping API beta. Kairos — Meeting Prep (2026-07-04)
07-03 · FWA/consented-mobile supply thesis— DEAD (carrier ToS, no proven trust premium, Bright Data retreat). Survives only as cheap node-classification test.- 07-03 · Agent traffic threads the needle — low-volume, human-paced traffic dodges carrier ToS/throttle; decentralized trickle self-selects the premium use case. Unvalidated.
- 07-05 · Ro can't name his revenue split — lost sensitivity to operations; the runway is the anesthetic (HRO). RED-TEAMED 07-18: use this as an interview probe, not a diagnosis of a person or governance system. Kairos — Frameworks Applied (HRO + Dunford)
07-06 · The one uncontested wedge: permissionless + consented, crypto-paid, no-KYC — Grass/VC-KYC players can't credibly own it.RED-TEAMED 07-18: no-KYC is a demand hypothesis with adverse-selection, abuse, procurement, and operator-risk exposure; not a trial promise. market-map- 07-06 · Token revival base rate ≈ low single digits — second-order amplifier after operational wins, never the plan. token-reanimation-precedents
- 07-06 · Tesonet argues both ways — the market pays AND neighbors 100–300× better capitalized already own it. Never ship only the flattering half.
- 07-13 · The founding premise is the baggage (Dunford Step 1) — positioned as 2016 dVPN while materially a 2026 data-supply network.
07-17 · Four waves, mistimed — funded by the fast waves (ICO+ETH), needed the slow ones (privacy, DePIN) that crested after momentum died. Forward filter: pair one fast + one slow-structural wave.CORRECTED 07-24: waves are an amplifier, not a prerequisite or causal explanation. MN’s ETH/ICO/privacy/DePIN chronology remains a useful timing lens, but MN itself disproves “catch the wave = compound”: it caught the fast enabling/capital waves and still did not build an outsized business. Broader evidence finds timing effects modest and conditional; ecosystem readiness, buyer demand, capabilities, economics, and control of complementary assets determine value capture. Use “wave fit” only as one multiplier—not a permission slip or substitute for fundamentals. wave-map · wave-thesis-evidence-2026-07-24- 07-17 · MN is a VPN subscription business — bandwidth (3.21 PB) is a vanity metric; never per-GB revenue math.
07-17 · Capacity is not the constraint — demand is. Break-even ≈ 5–8% of current throughput sold as proxy. Survival = GTM problem.RED-TEAMED 07-18: activity is proven; monetizable proxy capacity and the 5–8% ratio are not. Keep as a testable hypothesis only. infra-assessment- 07-17 · The melting base outruns growth — VPN halving ~7 months beats any year-one proxy ramp → cut burn is the floor-setter. RED-TEAMED 07-18: VPN decline is n=1; map costs and capability dependencies before deciding whether any cut is safe. phase1-breakeven-plan
07-17 · GoProxies is in-house (master key). Hardened 07-18: legal operator = MN Intelligence UAB.RED-TEAMED 07-18: public terms do not identify a GoProxies contracting entity; treat product ownership and intercompany economics as open until documented. Adjudication note: the schema.org publisher tag naming MN Intelligence UAB (primary, 07-18) is NOT refuted by this — a publisher tag and a ToS contracting party are different things. Both data points stand on a still-open question.- 07-17 · Node economics are structurally contradictory — only exposed residential operators earn; can't opsec out. Kairos — Node-Economics & Operator-Risk Intel (2026-07-17)
- 07-17 · The origin story is a cage — ideology caps monetization; the profitable truth is orthogonal; Proton = the structural (not promised) precedent.
- 07-17 · Hermes is not a payments goldmine — ride x402/L402 + stablecoins on top; the asset is 4.5yr know-how.
07-18 · Treasury ⟷ token-cap inversion — €30M bank vs $3M cap; capital allocation absent from all 19 levers; break-even may be bought, not grown (Lee greenlit investigating).RED-TEAMED 07-18: capital allocation is an option only after treasury ownership, liquidity, authorization, and the real operating perimeter are verified. Kairos — 30km Fresh-Eyes Audit (2026-07-18)- 07-18 · We sell urgency, not analysis — no forcing function exists at MN; trial needs adoption gates and dated internal decisions. RED-TEAMED: do not use external clocks as buyer-demand proof.
- 07-18 · Narrative problem = fragmentation, not silence — the one consistent engine (VPN news desk) aims at the declining product. public-surface-sweep-2026-07-18
07-18 · Entity-scoped break-even changes the game — revenue entity is ~€22k/mo from break-even; the big burn is BlockDev's; the P&L needing saving is Ieva's.RED-TEAMED 07-18: invalid as stated. FY2025 MN Intelligence net loss is not current monthly burn, and BlockDev's burn ownership is unproven. Keep entity mapping as an open gate, not a conclusion.07-18 · Consent is the enforcement line (NetNut/Popa) — certificates ≠ consent; provable consent beats audit theater; displacement window open now.RED-TEAMED 07-18: consent and traffic-control evidence are counsel-reviewed operating gates, not a legal or commercial moat; a displacement window remains unproven.- 07-18 · An abandoned blog is negative, not zero — commit to a predefined cadence or don't start; time-box a high-quality test, then keep-or-kill (Lee's principle, proven by MN's own portfolio).
- 07-18 · Negative findings carry their scope (process) — "not found on X as of DATE," or it doesn't travel.
- 07-18 · Red-team verdict — Phase 1 survives; the supporting certainty does not. The next paid work must resolve entity-scoped P&L, burn definition, 12-month VPN trend, and GoProxies customer/contribution economics. Until then, 3.21 PB, 5–8%, €30M runway, €22k distance-to-break-even, and the crypto-native wedge are hypotheses, not facts. Kairos — 30km Fresh-Eyes Audit (2026-07-18)
- 07-18 · Mysterium is a portfolio, not one business — commercial VPN, GoProxies, node/protocol infrastructure, and mission layer need separate economic boundaries. MYST holders/nodes are constituencies, not revenue lines. Kairos — 30km Fresh-Eyes Audit (2026-07-18)
- 07-18 · GoProxies source truth is a gate — 80M advertised IPs across residential/ISP/datacenter SKUs cannot be equated with MN's ~22k–31.5k nodes. Map source, transfer price, consent, quality, and contribution margin per SKU before "scaling the proxy motion." Kairos — 30km Fresh-Eyes Audit (2026-07-18)
- 07-18 · Fragmentation may be a firebreak, not merely a marketing failure — public surfaces mix BlockDev, NetSys, MN Intelligence, and an unnamed GoProxies counterparty. Resolve legal/commercial purpose before consolidating brands or trust claims.
- 07-18 · No-KYC is adverse selection, not a moat — it may attract the exact abuse/procurement risk that destabilises node supply. Kill it as a trial promise.
- 07-18 · The engagement itself needs a decision gate — prepaid fiat, named entity/signer/owners, confidential-data/AI protocol, fixed payment protection, and no public attribution before work. No readiness = no kickoff. ADJUDICATED 07-18: terms adopted; the full-data-room-before-signing ultimatum is rejected — the data room becomes the sprint's first work product; pre-signature gates shrink to entity/signer + payment protection + no-attribution. Gate the work, not the relationship.
-
07-18 · Claude adjudication of the Sol pass — final verdict. Survives: portfolio reframe, GoProxies supply gate, all calibration downgrades, all protective contract terms, the research stop. Gated: the four data pulls + the new reseller fork (if GoProxies mostly resells upstream supply, "scale GoProxies" is a standalone margin business, not network monetization — better or worse story, only the supply map decides). Rejected: the walk-away ultimatum (over-calibrated for a first strategic engagement with friends; the meta-play is the compounding asset); the "Sol changed everything" framing (pass 2 had already made most downgrades — Sol's net-new = portfolio frame + supply gate). #28 corrected: no-KYC killed as promised torpedo, kept as discovery hypothesis — T1 stands. Kairos — 30km Fresh-Eyes Audit (2026-07-18)
-
07-23 · The money person is the floor, not the ask (Lee's correction) — one named 48h money-owner is mandatory but covers a sliver of what the org knows; the rest is distributed and written down nowhere. Access design: listening access — Slack presence + opt-in coffee conversations, zero meetings added — framed as listening, not audit interviews, to avoid the "consultants are here" panic that triggers resistance. Encoded same-session across index.html, ro.html, research.html, and Proposal DRAFT v1.
- 07-24 · Commercial terms corrected by Šaras — €50/hour per team member, pre-tax; 200 combined hours/month across Šarūnas + Linas, unless Robertas suggests or approves another cap. This supersedes the 07-23 fixed-retainer/100-hours-each wording. Šaras's supplied signature is a proposal visual asset, not proof that the client agreement has been executed.
07-24 · Verbal green light is not yet a contract — no objections, and Ro floated a three-month pre-commitment, but the monthly gate survives “in theory.”CORRECTED 08-07 by Lee: the commitment is one month, cancellable after that; continuation depends on substantial results. The agreement is still unsigned, so the remaining contract gates are entity, signer, payment mechanics, owners, data access, and the Mammoth Framework.- 07-24 · People-performance is an explicit workstream, not an unsayable side effect — Ro confirmed they already know of at least one remote employee simultaneously working a second job and said original co-founder Valdas Petrulis will be let go. Do not conflate those two facts without confirmation. Lee's “20% deadweight” line was a possibility named in the room, not a measured workforce finding. Audit role fit, actual contribution, and divided employment; evidence-gate every person-level conclusion.
- 07-24 · Authority map has a new candidate node — reported call intelligence places Gitanas Kancerevyčius, a Swiss “mothership” director/CEO with legal/finance and early-stage-investing exposure, alongside Ro as a likely decision-maker. The 07-29/30 internal call may therefore be a governance gate, not scheduling formality. Establish the actual decision-rights map: contracting entity, signer, budget owner, director/board authority, and who can approve scope, payment, and continuation after the initial month. Do not promote reported titles or Lee's read of Paulius's influence into fact.
- 07-24 · Kairos has a separate funding ring — direct call intelligence says Kairos is to be paid from the MN fund or “mothership,” outside Ieva’s MN Intelligence/MN Technologijos operating ring. That protects operating capacity but creates a new governance seam: sponsor, payer, signer, budget owner, and implementer can now be different people. Earlier language calling Ieva the Kairos budget gate is superseded by scope. Keep Ieva as an operating/data counterpart unless the actual authority map says otherwise; get fund-level payment and decision rights in writing before work begins. Mysterium People — Index
- 07-24 · High-quality MN data may become queryable through Claude — Šaras says Simonas will expose operational data via Claude soon. If real, this shifts Kairos from interview-led reconstruction toward repeatable evidence pulls; it can collapse the data-room bottleneck. Do not mistake a fluent chat surface for a governed data layer: before using it for decisions, lock the source-of-truth tables, metric definitions, refresh cadence, read-only identity, access scope, PII/secret handling, AI retention/processing terms, and a way to audit every answer back to rows and time windows. Mysterium People — Index
-
07-24 · Agree the mammoth protocol before the hunt — Ro explicitly wants the upside-sharing process written before a major opportunity is found, based on prior experience of a team fracturing after success when nothing had been agreed in advance. Lee agrees. This upgrades upside from a post-success conversation to a pre-hunt governance requirement. Prepare continuously without prematurely locking the instrument: keep an opportunity register, a contribution/attribution ledger, and an option matrix for cash success fee, revenue share, equity, token-based upside, or a new-venture stake; choose and sign the relevant structure when the opportunity class becomes concrete, before material pursuit or launch. Exact economics remain open. Principle: no greed — ever — but no slop either. Kairos — Mammoth Protocol Architecture (2026-07-24)
-
07-31 · "Most likely has some excel sheets" is the finding (Lee's read) — when the people funding a function can only guess at whether its measurement layer exists, two separate gaps are present and only one is cheap. The visibility gap is that nobody can say what marketing measures. The standard gap is that there is no reference model of what world-class looks like for a ~$900k/yr subscription business, so nothing is being compared against one. A team can be understaffed and still excellent; a team with no external standard cannot know which it is. Understaffing is the stated problem, absent standard is the real one. Generalises past marketing: ask of any MN function whether a reference standard exists, before asking whether the function is performing. Kairos — Call Debrief (2026-07-31)
- 07-31 · The best openings arrive unprompted from inside — the marketing gap was raised by Paulius, a technical co-founder with no marketing remit, framed as agent-automated marketing, and not pitched by us. An opening surfaced by a principal has consent and sponsorship built in that a consultant-identified opening has to earn. Candidate Ring-1 proof shape: bounded perimeter, existing owner, live budget already being spent, no standard to measure it against. Not yet a plan — it touches a named person's function, so the people-lane rule holds (evidence to the sponsor privately, never opinion in a report), and Lee has not decided to expand scope. Kairos — Call Debrief (2026-07-31)
-
07-31 · Preparation held under adversarial reading — Gitanas, the board's likely-decision-maker node, spent the call looking for angles to challenge; Lee's pattern was to agree the deliberation mattered and already have the answer. That is the first live test of the research corpus against a hostile-by-design reader, and it passed. The content of his challenges was not captured and is worth more than the fact they were answered — a decision-maker's objections map where the doubt lives. Recover them in the completed debrief.
-
07-31 · The missing measurement layer is not a marketing problem — insight 39 found no standard for marketing; the 07-31 hub thread suggests the cause is upstream. If no central location exists where operational data lands, then every function is measured only by whoever owns it, and no function can be compared to an external standard because there is no shared ground truth to compare from. Marketing was where it became visible, not where it lives. Supersedes nothing; it explains 39. Test the inference cheaply before building on it. Kairos — Call Debrief (2026-07-31)
- 07-31 · Choose the three-person substrate as if thirty will use it (Lee's "properly, not haphazardly", made specific) — staged rollout is correct risk management and contains one silent failure: the substrate is chosen once, casually, for the pilot, and is never re-decided when people are added, because migrating a working system is a cost nobody volunteers for. Sequencing controls pace; it does not protect architecture. The requirements that look like ceremony at three — Git history, atomic commits, conflict-safe concurrent writes, per-person access and revocation, backup/restore, remote verification — are the entire product at thirty. This is the only moment the right choice is nearly free. Kairos — Call Debrief (2026-07-31)
- 07-31 · Lee's credential here is demonstrable, and that is also the trap — he does not theorise about second brains, he operates one: git-backed, agent-readable, boot protocol, canon precedence, drift guards, cross-session handoff continuity, two agents on one substrate without clobbering each other. Almost nobody advising on this can show a running instance. The pull to be resisted: MN's constraints are not Lee's — thirty mostly non-technical people, incumbent tooling, a principal who wants it on his own server, real exposure on operational data. The transferable asset is the architecture and the failure modes, never the implementation. Flag it the moment a proposal starts resembling a copy of this vault.
-
07-31 · MAMMOTH GATE FIRED — org-wide MN intelligence layer registered — surfacing rule triggers 2 (call debrief) and 4 (potentially material opportunity) both fire. An org intelligence layer is not a €50/hour deliverable; it is mammoth-class, and Ro has already argued the sharing protocol must be written before the hunt (insight 38). Draft register entry sits in the debrief note, state qualifying — pending Lee's confirmation and MN's written acknowledgement. Cheap validation may proceed under ordinary paid work; the Opportunity Schedule gate stands before any material pursuit. Registering costs nothing and is what prevents "that was always our idea." Kairos — Mammoth Protocol Architecture (2026-07-24)
-
07-31 · Approval arrived before the price, the rules, and the ask— CORRECTED 08-03 by Lee. Ro had already been through cards 14–17 in the earlier Ro+Šaras proposal call, so the sponsor was not approving blind; he called the commercial layer "buhalterija." The surviving, narrower version: the undelivered cards were new to the room's two cold readers, not to Ro — Gitanas approved without seeing the ceiling or the upside architecture, and whether he and Paulius know those is genuinely open. The general rule still stands: when a room converges early, the undelivered cards become the next meeting's agenda, and someone must notice which ones they were. Error to carry forward: "not delivered in this room" is not "unknown to the counterparty" — check what was covered in prior rooms before inferring a gap. 46b. 07-31 · Approval arrived before the price, the rules, and the ask (superseded — retained for the reasoning trail) — the room converged at deck card 13; cards 14 (our cost ceiling), 15 (upside rules before the hunt), 16 (the four decisions) were never delivered. Two readings, both true: the case was strong enough that the closing material was unnecessary to win, and everything commercially load-bearing is still unsaid. Approval of the idea is not approval of the number. The sharpest asymmetry: card 15 exists to answer Ro's own 07-24 request, and Ro never saw it — the strongest possible Friday agenda item, because it is his ask being fulfilled rather than ours being introduced. General rule: when a room converges early, the undelivered cards do not disappear — they become the next meeting's agenda, and someone must notice which ones they were. Kairos — Call Debrief (2026-07-31) - 08-01 · A structural decision was made in passing — Ro offered an MB "attached to MN" as the vehicle on a phone call; Lee said "works for me." That is a reasonable first pass and an unresolved counterparty. "We can use it" does not distinguish payer from operating vehicle, and the second determines who owns the work and any upside. It is also a third entity structure alongside the fund/mothership and Ieva's UABs. Convert to a named entity with a defined role before 08-10, and settle it together with card 15 rather than after. Not resistance to Ro's offer — most likely it is the sensible answer; it simply is not yet a defined one. Kairos — Call Debrief (2026-07-31)
-
07-31 · Ro spends comfort to protect momentum — offered a softer Monday slot by Šaras, he declined so the 08-10 start would hold. Small, but it is direct evidence of how he trades schedule against pace. Read it as a sponsor who wants this moving. The reciprocal obligation is delivery: the weekly one-pager cannot slip, and continuation after month one depends on substantial results.
-
07-31 · Gitanas's doubt #1 — "don't just report the problem" (recovered 08-03) — his exaggerated fear was a duo that ends each month saying revenue too low, margins too low, churn too high, fix it. What answered it: analysis → first defendable hypothesis → torpedo → data, where the torpedo (Šaras's 07-04 term for the live test) is the load-bearing word — the method ends in a fired intervention and measured data, not a memo. The unnamed tension: his objection and our autonomy commitment pull against each other. Doing requires touching; touching products requires insiders; so maximising autonomy biases the work toward torpedoes that don't touch products, which is the analysis-only trap he fears. Resolution: classify every torpedo up front by whether it touches product surface, and pre-agree the named insider path for those that do — before torpedo #1, not at it. Card-16 class; settle it 08-07. Lee's standing principle: minimum disturbance to existing workflows, zero if achievable, better still improve the workflows we touch. Kairos — Call Debrief (2026-07-31)
-
07-31 · The objection produced the opportunity — and the system was the argument — Gitanas challenged AI slop; Lee answered by showing his actual system; that is what triggered "maybe we should have it company-wide." The org-hub prize was not an aside, it was generated by a working demonstration answering a stated fear. Confirms insight 44 in live conditions: the credential is demonstrable, not assertable, and it converted an objection into an expansion in one move. Two teeth: (a) "AI slop won't be tolerated" is now a promise to a decision-maker, and any generic artifact from Kairos is the exact failure he warned about — show mechanisms (
Copy Checks,Voice Anchor, forage evidence gates, the Tris↔Talos opposing-review discipline) rather than assurances, because a mechanism makes skimming expensive where a policy only forbids it. (b) The pull to hand MN a copy of this vault is now a live trigger rather than a hypothetical — thirty non-technical people is a different problem; transfer the architecture and failure modes, never the implementation. Kairos — Call Debrief (2026-07-31) -
08-03 · The deliverable is the agenda — the four decisions the 07-31 room never reached (cards 14–16) were built into week 0 of the weekly one-pager rather than into a separate agenda document, so the 08-07 call is led from a page the client can see, with the asks numbered on screen. Three things happen at once: the recurring commitment is honoured in week zero before an hour is billed, the ceiling reaches Gitanas in writing before it reaches a contract, and the format is established by something other than good news. The general rule: when a recurring client deliverable and a meeting agenda want the same content, ship the deliverable and lead the meeting from it — one artifact, one review, and the cadence starts with a full edition instead of a promise. Prep detail: Kairos — Call Agenda (2026-08-07).
- 08-03 · A guard that ships an unenforceable rule is honest about it — the one-pager's generator refuses five defects (missing section · untagged finding · unnamed or undated ask · insider figure on a public URL · generic glyph), each one watched failing on its exact defect before it was trusted. Two rules it cannot enforce — no person-level judgment in the report and no recommendation without its evidence — are written into the README beside the gates rather than quietly assumed. The red-first pass paid for itself immediately: it exposed a parser bug that truncated wrapped bullets, which had made the ask gate pass for the wrong reason and had silently masked two further gates. An untested guard reports green and you stop looking.
- 08-07 · One month, then proof earns continuation — Lee corrected the carried-forward three-month assumption: the initial commitment is one month and cancellable after that. Kairos continues only if it delivers substantial results. This removes the commitment-shape question from the 08-07 agenda and kills the three-month exposure total as a current term; the monthly ceiling remains €10,000. The agreement remains unsigned and the other kickoff gates remain open.
- 08-09 · One all-hands deck found a contradiction; the archive can test the operating system — Lee will request every historical Mysterium All Hands deck he is authorized to access, preferably with dates, presenters, notes, recordings/transcripts, Q&A and linked dashboards. The analysis target is longitudinal rather than a stack of deck summaries: definitions and perimeter drift, stated bet → later outcome, priorities that persist or disappear, forecast calibration, and recurring ownership/reporting gaps. Preserve originals and missing-period evidence first. Slides remain management narrative, not audited truth. Continuation: handoff-2026-08-09-allhands-audit-live-gated.
08-11 · The September output is a ranked decision portfolio, not a research archive — Robertas has now supplied the acceptance contract: 3–5 comparable one-page candidate opportunities, a rejection log, and a recommendation before the board allocates future resources. The load-bearing distinction is asymmetry versus “good idea”; the cheapest prove/kill test and kill condition must survive beside every payoff claim. The count is realistic because these are evidence-bounded candidates, not finished businesses, financial models, or built products. Accept the target, fix the exact circulation date, close agreement and data access, and keep the existing Opportunity Schedule gate before material pursuit.CORRECTED 08-11 by insights 56 and 58: the inventory exists, but “test” was still being used too loosely. Kairos — September Opportunity Target (2026-08-11)08-11 · Candidate count is not the September constraint; signal strength is — Lee challenged the unconditional acceptance. The initialCORRECTED 08-11 by insight 58: screening 3–5 is credible; calling them tested is not. Kairos — September Opportunity Target (2026-08-11)alpha-huntalready generated 19 hypotheses and a top-five survivor set; later work added external node-use possibilities and seven internal all-hands opportunities. Several have since been killed, held, corrected or left data-dependent. Commit to seriously testing at least 3–5 across internal and external lanes, but recommend only those that clear an explicit evidence threshold—even if only one survives. Lee reports that almost a full working day went into securing the MN database connection through Simonas; repeated MN-side access friction would consume material research time and must be treated as a delivery dependency, not hidden inside Kairos's result obligation.08-11 · Best evidence and best asymmetry are currently different candidates — the first ranked red-team separates the axes Robertas's target can otherwise blur. Paid-Test Conversion Strike leads because MN already reports $9,084 of $11,628 in July paid tests: real paid intent, bounded follow-up, and a proprietary current cohort, but little durable copy resistance. Payment-Recovery Torpedo is a close-to-cash challenger, but may be ordinary payment hygiene. Residential Vantage Network is the strongest external asset-inversion hypothesis, but has no MN demand signal and faces RIPE Atlas, Catchpoint, ThousandEyes, and Kentik; it earns only discovery plus a tiny consented-node test. Current portfolio: one lead, one internal challenger, one external probe—not three equal recommendations.CORRECTED 08-11 by insight 58: these are validation priorities, not launch-ready opportunities; the names “Strike” and “Torpedo” outran readiness. Kairos — Opportunity Hypotheses (2026-08-11)- 08-11 · Screening, validation, launch and measured result are four different stages — Lee caught the semantic laundering in “seriously test 3–5.” The honest four-week contract is: screen 3–5 candidates; deepen the strongest 1–2 toward decision-grade evidence; prepare one complete torpedo contract; launch at most one only if accessible data, a named MN owner/implementer, a stable baseline and eligible population, an implemented reversible intervention, pre-registered metrics/guardrails, and enough observation time all clear early enough. If the gate is not clear by the end of the second working week, do not manufacture a superficial final-week launch. A no-launch result can still be the ranked portfolio, rejection record, blocker map and strongest launch-ready test contract. Lee reports that almost a full working day went into securing the MN database connection through Simonas; repeated access friction remains an MN delivery dependency. Kairos — September Opportunity Target (2026-08-11) · Kairos — Opportunity Hypotheses (2026-08-11)
- 08-11 · A material warehouse anomaly is an audit branch, not a personnel conclusion — direct BigQuery work found a duplicate-carrying BI revenue feed and a clean curated comparator. The mechanical pattern currently fits an ETL/SQL defect far better than deliberate insider fraud; intent cannot be inferred from duplicated rows. Preserve the evidence, trace source SQL and consumers, reconcile externally, and ask who knew what only after lineage is established. Keep this private and unnamed. Kairos — Database Integrity and Fraud-Risk Assessment (2026-08-11)
- 08-12 · Upside exists in architecture, not in force — and the leverage window is closing — live terms are €10k/month fiat with no upside instrument: if Kairos generated €3M tomorrow it would capture €0 of it. The Mammoth Protocol already specifies the right shape — a time-limited share of incremental gross profit against a pre-registered baseline — so MN's net loss never touches Kairos compensation and Lee's absorbed-into-the-hole worry is designed against, not merely hoped away. Delta-based pricing needs no P&L, which decouples the two asks: the gap number is needed for the mandate (break-even is the job), never to price Kairos — saying exactly that removes the only reading under which the gap question sounds self-interested. Measurement rights are the enforcement mechanism ("without measurement rights, any percentage is decorative"): every warehouse query still runs through Šaras's principal, informally, with no post-engagement continuity — which reclassifies the Lee-owned BigQuery grant from plumbing to commercial protection. And leverage moves one way: negotiating a share after showing MN which opportunity is the winner is negotiating face-up. Today there are candidates and no winner — maximum leverage, closing toward the early-September board date. Re-contract clause 10 already says the upside agreement comes before the hunt; the hunt is running. Kairos — Upside Economics and the Robertas Conversation (2026-08-12)
-
08-16 · Unscouted territory is ranked by value of information, not by evidence — and the map is a tool only if sessions take quests from it. Paulius (08-14) put data access on the map as the enabler node; Lee (08-16) asked whether the MN "towns" — VPN, proxy, nodes, marketing, support, fraud, lone wise men — could be ranked like opportunities. Answer: the blindspot map already did three-quarters of it; v0.4.0 (LIVE 08-16, kairos-war-room…/opportunities/#blindspots) makes it a working map — ten quests in three lanes (warehouse · human · corpus), each with prior, unlock, owner column, a decision rule written before the data, predicted days-to-signal checked against the actual, drop-by; status derived from an append-only event record; a kill test in code (unused by day 21 → the page says so). Ordering change: metric lineage + the owner map lead the human lane — the only move that lifts a claim from L2 to L4. Write path:
deploy/mnwar/opportunities/blindspot.py next|claim|signal|climb|kill|park; the boot digest prints the next quest per lane. Kairos — Quest Map, ranking unscouted territories (2026-08-16) -
08-17 · A profile is not a fitness contract — and the red team ran before the board, not after. Two evenings of broad warehouse capture while the borrowed token lived were the right use of the hours (Talos F1: breadth rational); drawing use-specific claims from ~40 tables whose grain, identity, date field and joins had never been contracted was not — it produced the withdrawn headlines (iOS 4×, West Africa iOS, 99% error-connect, "no revenue missing", "base grows on retention", "iOS first-connect gap"). The correction that held: the opposing review landed 23:52 and every test it named that the warehouse could answer ran before anything reached
/opportunities/(G7, 11 queries, 60 GB, jobs labelled) — F8's cohort test killed the iOS row that would otherwise have shipped to a client-facing board (entitled first-tries connect 96.9% / 96.3%; the gap was composition), F4's estimator reproduced the tier ratio (tier 3 ≈1.5× tier 1), F5's within-platform standardisation kept the survey direction and stripped the causal claim, F2's identical-population rerun replaced "no revenue missing" with "no aggregate discontinuity within 2%", F6's row-vs-episode attack was the one the data refuted (row = subscription = user). Rule going forward: six critical tables now carry written contracts (CONTEXT/warehouse/contracts/); a claim outside a contract is working-tier until the contract is extended by dated line. Board effect: v0.6.0 — W6 Android product experience · W7 billing-labelled churn remainder · W8 Primer label seam signalled; W3 reworded; retention #02 gains its tier cut. Kairos — Warehouse Groundwork after the Red Team (2026-08-17) -
08-17 · A red team of the audit's conclusions found the render, not the warehouse, was the weak side — and the surfaces moved the same day. A sealed Claude-side (Tris) review of the eight load-bearing conclusions plus the joins finding, checked against the audit's own artifacts and against
/state/,/opportunities/and this note, returned ACCEPT WITH MATERIAL CORRECTIONS (8 findings, all accepted; adjudicated by the writer, Codex holds one rebuttal on the four touching its artifacts). Six of eight conclusions stood on their evidence; the tier-churn cohort estimator, W3, W6 and the label-not-outcome discipline stand as written. What failed was wording that outran its evidence:/state/said the sampled path was "not executed" beside a card that said it was (F-T1); the board worded a session share as a revenue share with nountested(F-T2); row 43 and W7 stated P(Recurring | ≤30 d) when G4b measured P(≤30 d | Recurring) (F-T5); the dollar-share label was unsupported by the safe table (F-T6); W8's "100–102 %" dropped the 110 % week (F-T7); the $162.3k stamp claimed more than the canon did (F-T4 ii). Every string was replaced by the adjudicated sentence (rows 40, 41, 43 here;/state/L227/229/230; opportunities v0.6.1). Rule carried, not yet written: what anevidence:unscoredtag obliges a surface to say — 5 of 14 sit on jobs feeding W7/C4. 2026-08-17 — Tris review of MN DB audit — load-bearing conclusions vs evidence and live surfaces (red team, adjudicated) -
08-21 · One sensitive field must not silently become a whole-system access veto. In Lee's post-call account, employee compensation was raised as private data and treated as a blocker to broader access. Lee's proposed operating requirement is narrower: establish the exact lawful, contractual and authority perimeter field by field; exclude, aggregate, mask, pseudonymise or purpose-limit what needs protection; open the rest through governed read access; then revisit restricted fields only if the accessible perimeter proves insufficient. His “98%” is a hunch, not coverage evidence. Agents prepare the source-backed issue map and controls; Lithuanian/EU counsel remains the legal authority, and no agent conclusion widens access. Kairos — Call Debrief (2026-08-21)
-
08-21 · “Agent-friendly” is an acceptance contract, not a file extension. Robertas reportedly asked that Kairos outputs be usable by agents now and later. Lee said the War Room was machine-readable, then correctly reopened whether that holds surface-wide. Current status is unverified. Inventory each relevant surface before choosing architecture: human and machine interfaces, stable IDs, typed/versioned schema, provenance, freshness, access, deterministic retrieval, change semantics, explicit unknown/error states, fixtures and conformance tests. The carrier may be Markdown, SQL, JSON, API or HTML; the test is whether an authorized agent can discover, interpret, verify and safely act without guessing. First concrete fixture: given authorized access, an agent must answer “what changed on ClickUp project X since last week?” by resolving the project and time window, retrieving the relevant prior and current records, citing the source events and timestamps, and distinguishing no change from missing access, missing history or retrieval failure. Guessing fails the fixture. Reopen Garry Tan's retained source before any Markdown-versus-database decision. Kairos — Call Debrief (2026-08-21) · Kairos — Call Analysis (2026-08-21) · personal-agi-under-your-own-power
-
09-02 · The reason data was never missing — only unread. MN has run in-app cancellation-reason capture for fourteen and a half months across four platforms. Two exhaustive object ledgers found the table and dispositioned it correctly for their own decisions (
PARKEDfor Payment Recovery,DECISION_CANDIDATE_CURRENTLY_BLOCKEDfor Retention Economics); both statuses read as "handled" on a board while one meant "nobody has looked yet". Kairos was onegcloud auth loginfrom the evidence and spent the week planning access asks instead. Kairos — Cancellation Reason Tables Read (2026-09-02) - 09-02 · Task completion is a real but SECONDARY cancellation signal — corrected same day. On the correctly exploded multi-select (9,060 distinct respondents; reasons overlap),
cancelTestingis 17.3% and ranks sixth, inside a tight 12–20% band with disconnects, Error7040, usability, missing features, speed, blocked sites, downtimes and latency. Only 12.6% cite testing without also citing a technical or price reason. The leading tiers arecancelOther35.9% andcancelTooExpensive35.8%; any technical reason reaches 60.7% against price at 35.8%. An earlier draft of this line called task completion the "dominant" theme — that was built on a single-reason table and on a free-text bucket that was 2nd of nine with 67% of the pool unclassified and order-dependent buckets. It was wrong and is retracted. The episodic-user hypothesis stays live and unquantified against the 63,242 mature monthly cohort; it is not a headline. - 09-02 · The picked list and the free text disagree about error codes. The survey option is
cancelError7040while users independently typeerror 7042(14 distinct users),error 4102(7) anderror 500(5). Either the label is wrong or distinct faults are being collapsed into one bucket. A stated-reason taxonomy that cannot name the fault correctly will under-report reliability as a cause of loss.
Hypothesis board
| Hypothesis | Status |
|---|---|
| MN has no central operational data layer | OPEN — one cheap question falsifies it; load-bearing for both the marketing standard gap and the org-hub opportunity |
| T1 · Crypto-native no-KYC wedge | Untested demand hypothesis — discovery only; do not call it uncontested |
| T2 · Pricing/margin probe | Armed (GoProxies public sheet in hand) |
| T3 · Trust-surface sprint | HOLD — no external ethical-supply/trust claim until source controls, buyer screening, incident handling, and counsel-backed claims exist |
| M&A · Buy proxy revenue with treasury | Investigation backlog only — gated by treasury ownership/liquidity/authority, supply quality, profit, assignability, and integration data |
| VPN decline: fixable vs secular | OPEN — the pivotal fork; gates the whole Phase-1 plan |
| Ideology-is-the-ceiling | Load-bearing, unverified (scanner watches) |
| 182-country breadth advantage | Contested (node-stat conflict; scanner W1) |
| Commercial vs mission boundary | OPEN — board-level definition required; break-even is meaningless until the commercial P&L and deliberately subsidised mission work separate |
| GoProxies supply and risk-adjusted unit economics | OPEN — Phase-1 gate; revenue must split by SKU, source, consent/control, customer cohort, and contribution margin |
| Marketing visibility gap = missing measurement + external reference standards | PRIVATE — Lee + Šaras only. Inference, never a personnel conclusion. Held here because it reads as a judgement on a named function; validate with the relevant owner and sponsor, and test whether agreed metrics plus an external benchmark change a bounded decision. Moved out of the shared repo 2026-08-11 under the asymmetric-opportunity lens (Lee) |
| Paid-Test Conversion | VALIDATION LEAD 08-11 — strongest current company-reported signal; economics and launch readiness remain unknown. Reconcile the paid cohort before choosing any intervention |
| Payment-Recovery Candidate | CONDITIONAL EXPERIMENT 08-11 — potentially close to revenue, but recoverable value, owner, implementation and observation window are unverified. Do not call it a torpedo yet |
| Residential Vantage Network | DISCOVERY ONLY 08-11 — potentially asymmetric asset inversion, but no MN demand signal and real incumbency. Establish outreach authority, buyer access and technical feasibility; no September product test |
| Lawful data-access perimeter | OPEN 08-21 — Lee requirement, not legal conclusion. Research Lithuanian/EU law, contract/confidentiality and technical controls field by field; separate counsel authority from MN policy; test whether masking, aggregation, pseudonymisation or purpose limitation unlocks the non-sensitive perimeter. |
| Agent-readable Kairos substrate | OPEN 08-21 — current War Room coverage unverified. First acceptance fixture: an authorized agent must answer “what changed on ClickUp project X since last week?” from source events and timestamps, distinguishing no change from unavailable evidence and never guessing. Inventory every relevant surface and its machine contract before recommending a future architecture or claiming the whole room is machine-readable. |
Strategy state
Phase 1 — economic perimeter + board choice (Sol re-run, 07-18): before any "break-even first" intervention, define commercial versus mission perimeter; reconcile group/product/SKU P&Ls, intercompany flows, treasury/burn definitions, source/consent/traffic controls, VPN cohorts, and GoProxies customer contribution. At day 8, force a board choice: defend · harvest · grow · partner · ring-fence as mission · kill. Only then run one reversible, cash-quality proof. Cost cuts, acquisitions, trust marketing, and agent/no-KYC bets are not no-regret moves. Phase 2 — scale only the proof: CZ-1 agent access × payments (hypothesis only) · CZ-2 verified-human/provenance (build-heavy hypothesis) · WC-2 grant-funded censorship-resistance (sleeper). Kill-list stands: head-on proxy sales, token-first revival, generic agent outbound, consumer VPN growth race.
Standard of performance (Lee, 08-14) — the successor to the business-health page, and the shape the engagement's second half takes. Map and log every vital MN operation precisely; assemble a granular insider account of what world-class looks like for that specific operation; measure current against it, take the single lowest-hanging 80/20 gap, and close it once and for all as a tiny non-reverting habit or as automation — never a one-off action item. Wash, rinse, repeat. Gated on the four data grants; the business-health v1 is pulled from the War Room front door until it earns the place. Full mechanism: Kairos — Standard of Performance (2026-08-14).
Adjudicated engagement position (Claude, 07-18): Decision & Economics Sprint frame adopted; tone collaborative, not procurement — pre-signature gates are entity/signer, payment protection, no-attribution; the data room is the sprint's first work product. Clause set awaiting Lee's review: Kairos — Re-contract Clauses (2026-07-18). The send is Lee's.
Deep library
Kairos — Standard of Performance (2026-08-14) · Kairos — Research Dossier · Kairos — Meeting Prep (2026-07-04) · Kairos — Meeting Outcome (2026-07-04) · Kairos — Proposal DRAFT v1 · Kairos — Proposal Input (Lee → Šaras) · Kairos — Research Program (10x) · Kairos — Frameworks Applied (HRO + Dunford) · Kairos — Node-Economics & Operator-Risk Intel (2026-07-17) · Kairos — 30km Fresh-Eyes Audit (2026-07-18) · Kairos — Call Debrief (2026-07-31) · Kairos — Call Debrief (2026-08-21) · Kairos — Proposal v2 (2026-07-23) · Kairos — Mammoth Protocol Architecture (2026-07-24) · Kairos — Time Ledger Caveats · Kairos — September Opportunity Target (2026-08-11) · 2026-08-11 — Robertas September target (WhatsApp verbatim) · Kairos — Opportunity Hypotheses (2026-08-11) · Kairos — Database Integrity and Fraud-Risk Assessment (2026-08-11) · VPN business-health benchmarks — 2026-08-11 · Kairos — Upside Economics and the Robertas Conversation (2026-08-12) · MN warehouse access topology — 2026-08-12 · Kairos — Finance Perimeter from the Registry (2026-08-16) · outside-in-xray · market-map · alpha-hunt · token-reanimation-precedents · wave-map · infra-assessment · phase1-breakeven-plan · questions-to-excavate · public-surface-sweep-2026-07-18 · scanner (winnow): 90-system/scanner/mn/ · capture (everything): ~/Claude/Projects/Kairos/capture/ — The MN Daily, live core-tier at kairos-war-room.leematulis.com/mn-daily/, machine digest signal/latest.json · Kairos — Warehouse Groundwork after the Red Team (2026-08-17)