Hyvara
Monthly Backfill: Four Weeks of Shipped Work Aug 8 โ€“ Sep 9 2026 ยท hyvara-demo.com
๐Ÿ“Š August 8 โ€“ September 9, 2026

Four weeks of shipped work.DCN pilot + Adobe call + security remediation.

DCN UAT found and fixed a real data-loss bug in `respondToRequest` where everything a user typed was being thrown away. Three build cycles shipped: decline persistence, needs-more-info logic, and navigation. Deal Registration Standing went live with proper vendor scoping, trust scoring, and graded disclosure. Security remediation fixed a real exposure (SECURITY DEFINER + anon on public endpoints). Demo build-out included a computed trust score model. On Wednesday September 9th, demonstrated to Sarah Lacey (Adobe Partner Experience), who asked to bring her team. Forty open items tracked, most urgent being the Crossbeam battlecard (analyzed but never built, then came up unprompted in the Adobe call).

Data-Loss Bug Fixed
Deal-Reg Standing Live
Security Remediation Complete
Adobe Demo Call โ€” Team Follow-up Requested
40 Open Items
3
Build Cycles Shipped
1
Security Exposure Fixed
40
Open Items Tracked
50
Minute Adobe Demo Call
Workstream 1
DCN โ€” The Co-Sell Product
~8 August: UAT Triage & Data-Loss Bug Fix
Kevin's 8/7 UAT document triaged into DCN_Master_Checklist.md โ€” ten sections, priority tagged. The critical find: respondToRequest in useIntroRequests.ts was flipping request status and discarding the entire response payload. Everything a user typed on accept or decline was being thrown away. This was live.
Fix Approach
Response payload now persisted to intro_requests.metadata.response plus response_message and the thread. Two mutually-exclusive states: Declined (terminal) and Needs-More-Info (explicitly non-terminal). Only Accept and Decline end a cycle. Reason field is required on both.
Three Build Cycles (commits b38f3d2, ab62ecd, aea5301)
Cycle 1: decline persistence and a real decline path. Cycle 2: needs-more-info correction. Cycle 3: navigation fixes.
Companion Features Shipped
Connections nav badge counting open requests. Dashboard tiles deep-link to /inbox?request=. Declined threads stay visible (not discarded). /bulk-import for super-admins with target-org picker, column mapping, domain normalisation, dedup, and server-side super_admin verification via edge function.
Structural Decision: Opportunity-as-Spine
Adopted as the fix for decline bugs rather than a future nicety. Every request anchors to an opportunity. Evidence timeline shows what changed and when. Managers curate and route; the AE decides. A manager must never become the middleman that kills AE-to-AE trust.
Two Mirror Roles Named
brand_partner_manager and partner_alliance_manager. Colour convention locked: blue for brand, gold/amber for partner. Both are live in preview โ€” not published.
Late August (~approx): Pilot Rollout & Knowledge Build
Drafted the Mike Neumann re-engagement email reframing around the Vancouver conversation, the self-funded build, four specific asks, and pilot free to Adobe and partners in Q4/Q1.
Knowledge Folder Structure Built
INDEX.md plus _KNOWLEDGE/00_inbox through 07_reference, _OUTPUT/drafts|sent, _ARCHIVE. All 91 files sorted and organized.
Identity Corrections & Findings
"Donna Hu" is actually Jordan Donahue (Adobe Field Partner Sales Manager, Charleston). Vancouver contact was Scott Zieglar, not Peter Webster. A reference architecture doc still names a design partner who has left that company โ€” flagged for correction. Jordan's real name and headshot used as demo persona โ€” Kevin confirmed he has her permission; same question still open for another persona.
Workstream 2
Deal Registration Standing & Partner Currency Engine
2โ€“3 September: Deal-Reg Standing Build
Corrected a critical mapping error: PCE's rich data lives in capital_signals, not directory_listings. Recovering that restored all five Adobe Active Co-Seller designations for Code And Theory, verified against the live Adobe partner page.
Live Tables & Views
deal_reg and deal_reg_challenge with RLS. deal_reg_standing_v and deal_reg_manager_standing_v. vendor_program and requirements (Adobe DXPP live, Veeam seeded as template). pce_row_key with unique index. Check constraints enforcing vendor-scoped claims carry both quote and source URL.
Jordan's Partner Coaching Queue
Built at /deal-reg/manager. Shows partner-side registration state and what evidence is still missing.
Competency Redefined
Competency now derives from Active Co-Seller count rather than partner tier โ€” because Silver is a $3,000 fee with no capability bar. certifications_count set to NULL rather than asserting false precision from a "20+" bucket. Three-state vendor scope: only a genuinely vendor-scoped claim can reach ready. Graded disclosure: partner AE sees sources, dates, quotes; manager sees trajectory only โ€” asymmetry is disclosed, not hidden. No Sales Center integration โ€” DCN is a prompt to register, not a second place.
Data Issues Found & Fixed
Four currency rows had no PCE batch id (relabelled, marked not-for-pilot). Manager queue copy conflated "partner has no evidence" with "we hold no evidence" (wrong on 3 of 4 rows). vendor_id was null on 3,012 grounded active-client signals. 1,120 PCE accounts still awaiting domain resolution.
Workstream 3
Hyvara Network โ€” SDR Hive & AE Hive
~31 August to 1 September: Session 8 (approx)
Long UAT walkthrough of both hives, everything captured into feature-backlog.md ordered by dependency.
Live at sdrhive.hyvara.ai
Follow-up Queue in both sidebars. AE list at /ae/follow-ups with detail pages. SDR mirror. Transcript-capture box on each detail page that re-runs the analysis engine. Granola dependency dropped.
Feature Killed: SDR Health Gauge
Always-on judgment violates the "AI as exoskeleton" principle. It rendered red on new accounts โ€” discouraging people at the exact moment they start. Killed.
Live Call Co-Pilot Logged as Subsystem
Rolling analysis during a call, mid-call prompts for missed questions, end-of-call recap, anti-"happy ears" scorecard. Queued for future build.
Foundation Before Features
The KPI picker, follow-up routing, and 1:1 subsystem all depend on the Opportunity entity. Building them first would recreate the tech debt the post-MVP audit already flagged. Deferred until Opportunity is solid.
Issues Found (Open for Next Session)
AE profile is a clone of SDR profile with wrong fields. Avatar upload fails on both hives. Org Settings shows "No organization found".
30 August: Google Workspace Theming
Standardised cover art across all HYVARA shared drives on a single Hyvara-blue theme, driven through the browser (no API for this). Only the Executive drive was themed before session ended โ€” incomplete.
Findings Worth Recording
Google has no global theme switch. Theme gallery has no solid-colour option. Custom themes must be pulled from Drive, not uploaded.
Workstream 4
Security Remediation & Demo Hardening
6โ€“7 September: Security Audit & Fixes
The significant find of the month: both deal-reg views were SECURITY DEFINER and granted to anon, on a project published publicly with dcn.hyvara.ai live. That is a real exposure window, not a theoretical one.
Fixes Applied (Real Exposure)
security_invoker=true on both views. anon and all DML revoked across all six. Commits: 2c969111, 0a22a974, de60b94c, 62cb6b75, eac6e364.
Additional Fixes
Manager gate fixed. Silent failures on seven write paths. Five deal-reg experience bugs. Removal of fake capability bits.
Issues Catalogued (Open for Next Session)
Forty hooks discarding Supabase errors silently (one reordered partner rankings without anyone knowing). Share card was pre-checking MSA/NDA, prior implementation, named relationships as true โ€” making false commercial assertions. Nine separate scoring systems with four contradictory cutoff tables. Roughly thirty read-path hooks still swallow errors (deferred until after demo).
8โ€“9 September: Demo Build-Out
Built a genuinely computed trust score, replacing hand-typed values. Model: Currency 50 + Corroboration 30 + Conduct 20, tiers at 70 and 40. Three SQL functions plus a trust_breakdown column.
Computed Results (Verified)
Code And Theory 95, Capgemini 90, Slalom 81, Ensemble 60, Brightwork 25 โ€” all derived, none typed.
Demo Controls Shipped
Snapshot/restore on admin page after four-phase restore was required to survive foreign-key constraints. Tested to zero row differences.
Incident: Purge Test Data Button
Deleted all eight demo auth users. Recovered by recreating with original UUIDs so snapshot would reconcile. Root cause: purge exists, capture-for-restore did not, snapshot excluded identities. Fix queued.
Batch of Domain & Terminology Fixes
Partner Manager is the brand side, Alliance Manager is the partner side (app had them crossed in places). PAE/BAE naming symmetry across both sides. Connected badge now names the person, not only company. AlertDialogContent had no height cap or overflow โ€” clipped buttons off screen (fixed).
Go-to-Market Milestone
Wednesday 9 September โ€” Adobe Demo Call
4pm: demonstrated to Sarah Lacey (leads Partner Experience at Adobe), introduced by Kyle Chau. Fifty minutes, no slides.
What She Asked
Asked to see more. Asked to bring her team.
Her Summary
"It solves for insight into human connection, and informs the one-to-one interactions that scaled process cannot reach."
Follow-up Requested
Team session with her team. Short recorded clips of collaboration flows within the week.
Same-Day Deliverables Built
Internal messaging one-pager for her leadership. Follow-up email draft. Three-clip recording plan. Call debrief with Adobe org map. Team readout. Quotes page.
Strategic Window Open
Clips promised this week. Three-clip recording plan in place. Clips are the immediate ask; team session is the long-term ask. This is a real sponsor conversation with someone who controls budget and has named the problem the product solves.
Strategic Clarification
3 September: Session 18 Continuity Brief
Wrote DCN_DealReg_Session_Handoff.md so a fresh build chat could pick the work up cold. Built a Kevin-voice style guide from four of his books, then rewrote the Kyle Chau note, Jordan note, partner recruit email, and Adobe one-pager in it.
Worked Colin Schaap's pushback: the graph is "a feature, not the product." Reply and North Star vision document created.
Sharpest Strategic Call of the Month
The product is the loop create โ†’ route โ†’ protect. The graph is the front door people visit occasionally. Triage is the first month. Deal-reg standing is the daily retention engine โ€” because registration is the only one of the three with money and a clock attached.
Adobe Route Mapped
Kyle Chau โ†’ Sarah Lacey โ†’ upward. Mike Neumann and Jordan on sales floor. Mike retires 31 December โ€” September is real deadline. One approach held deliberately to avoid turf war.
Market Research
~5โ€“6 September: Crossbeam Competitive Analysis
Kevin fed in five sources (product overview, Feb 2026 webinar, two older webinars, March 2026 founder interview). Four parallel research agents run.
Key Findings
The opening is the last mile โ€” "Crossbeam sells the map, nobody sells the drive." Four years of public reviews: great for mapping, no way to action or track, adoption stuck inside partnerships team. Every recent release reads as a confession the data was not reaching reps.
Scale & Financial Health
~800 paying customers at ~$10M ARR at 2024 merger, ~$25M ARR by mid-2025, median contract $25K. Negative net revenue retention, meaningful churn, senior departures post-merger, no priced round since 2021.
Correction to Our Priors
Their founder's earlier company was acquired into Adobe's own history. Do not disparage him in an Adobe room.
Status: Analysis Complete, Battlecard Not Built
No battlecard or one-pager produced. Two of four research passes still running when session ended. This is overdue โ€” Crossbeam came up unprompted in the Adobe call four days later.
What's Open Going Forward
40 Items: Priority & Mapping
๐Ÿšจ Critical Path
  • Crossbeam battlecard (analyzed, never built, now urgent)
  • Clips promised to Adobe, this week
  • Partner-side Opportunities columns still show brand-side fields (deal value, MSA) + trust chip rendering
  • Purge Test Data capture-before-purge (auth user incident recovery)
โš™๏ธ Next Build Queue
  • Deal registration asked for in five places, writes to five stores (consolidate)
  • Forty hooks discarding Supabase errors silently (audit + fix)
  • Thirty read-path hooks swallow errors silently (deferred post-demo)
  • PCE export batch endpoint (blocks anything partner-facing)
  • 1,120 PCE accounts awaiting domain resolution