feat(pilot): add buyable demo proof-and-close kit

docs/pilot/buyable-demo/audit-artifact.json

@@ -0,0 +1,25 @@
+{
+  "artifact_id": "audit-syn-ky-001-v1",
+  "generated_at": "2026-03-29T00:00:00Z",
+  "input_hash_sha256": "7b09ea3ac2ee63c1296b7402393fd18a11479ee877cc1f113e9477bea9039a22",
+  "run_hash_sha256": "342123e7c6788bbb90e8c49331fd052925fe6ce7160b7ee6e6870aca63a952ca",
+  "decision_id": "dec-2026-03-29-001",
+  "evidence_to_decision_linkage": [
+    {
+      "evidence_id": "evt-001",
+      "supports": "approval provenance"
+    },
+    {
+      "evidence_id": "evt-006",
+      "supports": "financial diversion"
+    },
+    {
+      "evidence_id": "evt-009",
+      "supports": "coordination signal"
+    }
+  ],
+  "replay_contract": {
+    "command": "node scripts/pilot/verify-buyable-demo.mjs",
+    "expected_result": "Deterministic replay check passed"
+  }
+}

docs/pilot/buyable-demo/demo-script.md

@@ -0,0 +1,13 @@
+# Summit Demo Script: “Make It Buyable”
+
+## Talk Track (7 minutes)
+1. **Set context (30s):** “This is a synthetic procurement diversion case built for reproducible scrutiny.”
+2. **Show ingest (60s):** Open the dataset JSON and point out explicit entities, edges, and evidence IDs.
+3. **Show graph (90s):** Open saved graph state; trace the risk path from approver to secondary account.
+4. **Aha moment (60s):** “Both key actors used the same mobile device one minute apart before the transfer.”
+5. **Decision (60s):** Show `decision_record` and explain why escalation/freeze is justified.
+6. **Proof layer (90s):** Open audit artifact; map each evidence item to decision rationale.
+7. **Replay (90s):** Run deterministic replay command and confirm matching hash.
+
+## Buyer Close
+“If we can reduce investigation time by 30–50% while producing a defensible audit trail, is that enough to move forward with a 14-day pilot?”

docs/pilot/buyable-demo/follow-up-email.md

@@ -0,0 +1,23 @@
+Subject: Summit 14-Day Pilot Proposal — Defensible Analysis + Audit Trail
+
+Hi {{name}},
+
+Thank you for the session today. As discussed, Summit’s value is not just speed — it is defensibility.
+
+## Proposed Pilot (14 Days)
+- One use case
+- Your real or semi-real data
+- Outputs:
+  1. Faster analysis workflow
+  2. Defensible report
+  3. Exportable audit artifact
+
+## Success Criteria
+- 30–50% reduction in investigation cycle time
+- Every major finding linked to source evidence
+- Deterministic replay for auditability
+
+If these criteria are met, are you comfortable moving to an expanded deployment plan?
+
+Best,
+{{sender}}

docs/pilot/buyable-demo/graph-state.json

@@ -0,0 +1,29 @@
+{
+  "graph_id": "graph-syn-ky-001-v1",
+  "created_at": "2026-03-29T00:00:00Z",
+  "node_count": 9,
+  "edge_count": 9,
+  "high_risk_path": [
+    "person:alex-mercer",
+    "invoice:inv-2137",
+    "org:blueaster-logistics",
+    "account:ba-7782",
+    "account:hc-4409"
+  ],
+  "insight": {
+    "title": "Shared-device and post-invoice transfer convergence",
+    "summary": "Invoice approvals by internal procurement are followed by vendor payments and a near-immediate transfer to a secondary account linked to off-contract consulting activity.",
+    "confidence": 0.89,
+    "external_verification": [
+      "ERP-44791",
+      "BANK-ALERT-8821",
+      "MDM-LOG-2201"
+    ]
+  },
+  "decision_record": {
+    "decision_id": "dec-2026-03-29-001",
+    "decision": "Escalate and freeze",
+    "linked_evidence_ids": ["evt-001", "evt-006", "evt-009"],
+    "audit_export": "audit-artifact.json"
+  }
+}

docs/pilot/buyable-demo/one-pager.md

@@ -0,0 +1,22 @@
+# Summit One-Pager (Pilot Close)
+
+## Problem
+Analysts can generate answers, but leadership cannot always defend those answers under audit and external review.
+
+## What Summit Does
+Summit converts mixed operational evidence into an explainable graph workflow that produces a decision and its audit chain in one flow.
+
+## Why Summit Is Different
+Summit enforces defensibility: **you cannot ship an answer that cannot be justified** through linked evidence and deterministic replay.
+
+## 14-Day Pilot Offer
+- **Duration:** 2 weeks
+- **Scope:** one investigation use case
+- **Input:** customer real or semi-real data
+- **Output:**
+  - 30–50% faster analysis cycle time target
+  - defensible report package
+  - exportable audit artifact
+
+## Success Question
+“If we reduce investigation time by 30–50% and deliver a defensible audit trail, do we have approval to expand?”

docs/pilot/buyable-demo/synthetic-case.dataset.json

@@ -0,0 +1,150 @@
+{
+  "case_id": "SYN-KY-001",
+  "case_name": "Procurement Diversion Network",
+  "generated_at": "2026-03-29T00:00:00Z",
+  "entities": [
+    {
+      "id": "person:alex-mercer",
+      "type": "Person",
+      "name": "Alex Mercer",
+      "role": "Procurement Officer",
+      "department": "North Harbor Infrastructure"
+    },
+    {
+      "id": "person:rina-patel",
+      "type": "Person",
+      "name": "Rina Patel",
+      "role": "Vendor Account Lead",
+      "company": "BlueAster Logistics"
+    },
+    {
+      "id": "org:blueaster-logistics",
+      "type": "Organization",
+      "name": "BlueAster Logistics"
+    },
+    {
+      "id": "org:harborline-consulting",
+      "type": "Organization",
+      "name": "Harborline Consulting"
+    },
+    {
+      "id": "account:ba-7782",
+      "type": "BankAccount",
+      "name": "BlueAster Operating 7782"
+    },
+    {
+      "id": "account:hc-4409",
+      "type": "BankAccount",
+      "name": "Harborline Settlement 4409"
+    },
+    {
+      "id": "invoice:inv-2091",
+      "type": "Invoice",
+      "amount_usd": 184000,
+      "date": "2026-02-08"
+    },
+    {
+      "id": "invoice:inv-2137",
+      "type": "Invoice",
+      "amount_usd": 191500,
+      "date": "2026-02-19"
+    },
+    {
+      "id": "device:dx-55",
+      "type": "Device",
+      "name": "DX-55 Mobile"
+    }
+  ],
+  "edges": [
+    {
+      "from": "person:alex-mercer",
+      "to": "invoice:inv-2091",
+      "type": "APPROVED",
+      "timestamp": "2026-02-08T10:12:00Z",
+      "evidence_ref": "evt-001"
+    },
+    {
+      "from": "person:alex-mercer",
+      "to": "invoice:inv-2137",
+      "type": "APPROVED",
+      "timestamp": "2026-02-19T09:57:00Z",
+      "evidence_ref": "evt-002"
+    },
+    {
+      "from": "invoice:inv-2091",
+      "to": "org:blueaster-logistics",
+      "type": "PAID_TO",
+      "timestamp": "2026-02-08T11:30:00Z",
+      "evidence_ref": "evt-003"
+    },
+    {
+      "from": "invoice:inv-2137",
+      "to": "org:blueaster-logistics",
+      "type": "PAID_TO",
+      "timestamp": "2026-02-19T11:04:00Z",
+      "evidence_ref": "evt-004"
+    },
+    {
+      "from": "org:blueaster-logistics",
+      "to": "account:ba-7782",
+      "type": "USES_ACCOUNT",
+      "timestamp": "2026-01-01T00:00:00Z",
+      "evidence_ref": "evt-005"
+    },
+    {
+      "from": "account:ba-7782",
+      "to": "account:hc-4409",
+      "type": "TRANSFERRED_TO",
+      "amount_usd": 153000,
+      "timestamp": "2026-02-20T02:10:00Z",
+      "evidence_ref": "evt-006"
+    },
+    {
+      "from": "person:rina-patel",
+      "to": "org:blueaster-logistics",
+      "type": "EMPLOYED_BY",
+      "timestamp": "2025-06-01T00:00:00Z",
+      "evidence_ref": "evt-007"
+    },
+    {
+      "from": "person:rina-patel",
+      "to": "device:dx-55",
+      "type": "USED_DEVICE",
+      "timestamp": "2026-02-20T02:08:00Z",
+      "evidence_ref": "evt-008"
+    },
+    {
+      "from": "person:alex-mercer",
+      "to": "device:dx-55",
+      "type": "USED_DEVICE",
+      "timestamp": "2026-02-20T02:09:00Z",
+      "evidence_ref": "evt-009"
+    }
+  ],
+  "evidence": [
+    {
+      "id": "evt-001",
+      "source_type": "erp_approval_log",
+      "external_ref": "ERP-44791",
+      "checksum_sha256": "1c5a7d4f95f8c4eaa6a0cb3eb83f63e219b1e4a9f16bafba63e1be12d457bc0f"
+    },
+    {
+      "id": "evt-006",
+      "source_type": "bank_transfer_alert",
+      "external_ref": "BANK-ALERT-8821",
+      "checksum_sha256": "a0dcba7930f350f5d5fe7efe9a6b88dd875f6e8c3f86c5480464ae4c64d7318a"
+    },
+    {
+      "id": "evt-009",
+      "source_type": "mobile_device_login",
+      "external_ref": "MDM-LOG-2201",
+      "checksum_sha256": "ec1b6ec22f9d8ed4ed65dc7db0d4c344b2f5ac740e75ea8656cb0f53bcf52c4d"
+    }
+  ],
+  "expected_outcome": {
+    "finding": "Likely collusive diversion between internal approver and vendor counterpart.",
+    "decision": "Escalate to controlled forensic review and freeze settlement account.",
+    "risk_score": 0.89,
+    "deterministic_run_key": "SYN-KY-001::v1"
+  }
+}

docs/pilot/buyable-demo/walkthrough.md

@@ -0,0 +1,25 @@
+# Buyable Demo Walkthrough (5–7 Steps)
+
+## Objective
+Show a complete, pressure-ready chain: raw inputs → graph insight → decision → verifiable audit trail.
+
+## Step 1 — Ingest the raw case package
+Load `synthetic-case.dataset.json` and confirm the deterministic run key `SYN-KY-001::v1`.
+
+## Step 2 — Render graph state
+Open `graph-state.json` and focus on the high-risk path from approver to settlement account.
+
+## Step 3 — Reveal the “aha”
+Highlight the shared device (`device:dx-55`) used by both internal approver and vendor lead within one minute.
+
+## Step 4 — Link evidence to judgment
+Show that decision `dec-2026-03-29-001` is backed by exactly three evidence items (`evt-001`, `evt-006`, `evt-009`).
+
+## Step 5 — Export proof artifact
+Export and present `audit-artifact.json` as the defensible report payload.
+
+## Step 6 — Deterministic replay
+Run `node scripts/pilot/verify-buyable-demo.mjs`; same input returns same run hash.
+
+## Step 7 — External verification
+Validate external references (`ERP-44791`, `BANK-ALERT-8821`, `MDM-LOG-2201`) with independent source systems.

scripts/pilot/verify-buyable-demo.mjs

@@ -0,0 +1,33 @@
+import { createHash } from 'node:crypto';
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+const root = resolve(process.cwd());
+const datasetPath = resolve(root, 'docs/pilot/buyable-demo/synthetic-case.dataset.json');
+const artifactPath = resolve(root, 'docs/pilot/buyable-demo/audit-artifact.json');
+
+const datasetRaw = readFileSync(datasetPath, 'utf8');
+const artifact = JSON.parse(readFileSync(artifactPath, 'utf8'));
+
+const normalizedDataset = JSON.stringify(JSON.parse(datasetRaw));
+const inputHash = createHash('sha256').update(normalizedDataset).digest('hex');
+
+if (inputHash !== artifact.input_hash_sha256) {
+  console.error('Deterministic replay check failed: input hash mismatch');
+  console.error(`Expected: ${artifact.input_hash_sha256}`);
+  console.error(`Actual:   ${inputHash}`);
+  process.exit(1);
+}
+
+const runHash = createHash('sha256')
+  .update(`${artifact.decision_id}:${inputHash}`)
+  .digest('hex');
+
+if (runHash !== artifact.run_hash_sha256) {
+  console.error('Deterministic replay check failed: run hash mismatch');
+  console.error(`Expected: ${artifact.run_hash_sha256}`);
+  console.error(`Actual:   ${runHash}`);
+  process.exit(1);
+}
+
+console.log('Deterministic replay check passed');