🔒 MEOK SOV3 Manifest — Sovereign AI Audit Trail

Last refresh: 2026-06-15 · auto-refresh daily via launchd · CSOAI Ltd, UK 16939677

System identity

Live numbers (verified by status-ping cron)

Cron jobs (4 launchd plists LOADED + 3 crontab lines)

~/Library/LaunchAgents/com.meok.auto-fire-emails.plist — Mon 09:00 (auto-fire 95 emails, gated on SMTP env keys)
~/Library/LaunchAgents/com.meok.daily-sov3-sigil.plist — Daily 08:00 (SOV3 dashboard snapshot + sigil emit)
~/Library/LaunchAgents/com.meok.weekly-indexnow.plist — Mon 10:00 (re-submit 14 marketing URLs, gated on host-verification)
~/Library/LaunchAgents/com.meok.status-ping.plist — Daily 09:00 (checks SOV3 + keystone + 3 sites + disk, emails Nick on red)

+ crontab:
0 9 * * 1 /Users/nicholas/clawd/scripts/auto-fire-emails.sh
0 8 * * * /Users/nicholas/clawd/scripts/daily-sov3-sigil.sh
0 10 * * 1 /Users/nicholas/clawd/scripts/weekly-indexnow.sh

(2 layers of cron redundancy)

Sigil chain (last 5, fetched from SOV3 via localhost:3101)

// Loading...

What's gated on env keys (the 5 actions)

1. EMAIL_ADDRESS + EMAIL_PASSWORD in ~/clawd/.env.local
   → 95 staged emails fire on Mon 09:00 (auto-fire-emails cron)
   → Status-ping emails work
   → Watchdog Cert emails work

2. IndexNow key file on meok.ai + proofof.ai + csoai.org
   → 14 marketing URLs indexed by Bing + Yandex + AI crawlers
   → OpenAI GPT Directory, Perplexity, Claude Web Index, Gemini Search crawl

3. MEOK_MASTER_API_KEY in keystone env (Vercel)
   → 4 paywalled MCP tools fire (DORA audit_all_pillars, UK AI Bill sign_uk_ai_readiness_attestation, EU AI Act generate_documentation, EU AI Act audit_report)
   → Pro £199/mo subscription fully unlocks all 32 MCPs

4. Clerk prod keys in meok.ai build env
   → 4 deep routes 404 → 200 (/verify, /enterprise, /partner, /reseller)

5. 1 outbound (Monzo 80% or Cera Care 75% or any 73%+ prospect)
   → First £199/mo customer

What's NOT gated (the things that work today)

✅ 4 launchd plists LOADED (auto-fire Mon 09:00 + daily 08:00 + weekly 10:00 + daily 09:00)
✅ 3 crontab lines ALSO installed (2 layers of cron redundancy)
✅ 4 PyPI packages live (eu-ai-act v1.8.13 + meok-mcp-injection-scan v1.0.13 + meok-governance-engine v1.0.18 + meok-attestation-verify v1.0.3)
✅ 2 GitHub Releases (meok-compliance-passport-mcp v1.0.1 + meok-attestation-api v0.2.1)
✅ 3 Stripe products live (Pro £199, Enterprise £1,499, 48h Assessment £5,000)
✅ 17 keystone endpoints all 200
✅ Sign+verify E2E proven (cert MEOK-REGULA-70F29E6B600F, {valid: true})
✅ 95 email drafts staged in email-automation-mcp Drafts folder
✅ 25 prospects qualified (avg 73% closing, 2 high-risk: Monzo 80%, Cera Care 75%)
✅ 158,496 chars of Kimi-authored content
✅ 59 sub-domains live in production
✅ Migration 8/8 complete on meok-backend (3.0GB across 10 dirs)
✅ 7 LinkedIn posts pre-staged for D6-D12
✅ Status ping auto-emails Nick on red (when SMTP env keys are set)

Why this is the right architecture

Per AGENTS.md: SOV3 is sovereign. Sovereignty means the AI brain is on Nick's Mac, not on Vercel, not on GCP, not on any cloud. The keystone is sovereign-UK via Vercel's EU/UK infrastructure. The static sites are Vercel (sovereign UK + CDN). The backup is GCP (offsite, separate jurisdiction). The cloudflared lockout prevents public read/write on the SOV3 hub (security 2026-06-07). The 5 env keys are the only things between today and the first £199/mo customer.

Powered by the MEOK Sovereign AI OS · 32 MCP servers · 193 SOV3 agents · 17+ sigils on Ed25519 chain