OverviewProof MatrixCase StudiesMethod & AboutRequest Proof Room
Overview/Case Studies/WholesaleDispo CRM
LIVECASE STUDY 04

WholesaleDispo CRM nervous system: action-bounded AI command center

A chat and voice command base where the model surfaces one decision at a time, opens only the panels that decision needs, prepares and records bounded actions, refuses unsupported rankings, and requires receipt readback before any state claim. The backend keeps every table; the operator surface is the assistant.

Not a tab maze. One active decision, prepared, not sent.

01 Problem & system

The problem

CRMs become tab mazes. AI overlays often summarize CRM data but do not control authority boundaries, action contracts, or mutation readback, so confident-sounding output can imply actions that never safely happened.

The system built

A command surface served by real endpoints: an operating brief, a ranked priority queue, action contracts that prepare append-only receipts, and a goal-boundary audit that keeps broad claims locked until real proof exists. Chat and voice share one command context, and a stage-update writes through the shared mutation path and reads the change back.

02 Operator cockpit

The same command context drives chat and voice. The voice spine mints ephemeral session tokens server-side, so the provider key never reaches the browser; smoke runs confirm zero provider calls and no client secret leaving the server. The operator gets the next verified move, by typing or talking, and unsupported rankings are refused.

wholesaledispo · CRM cockpit
WholesaleDispo CRM operator cockpit, live product with synthetic data
Lead names, phone numbers, and account details redacted. Full proof available under NDA.

03 Action contract flow

An Aria recommendation never mutates state directly. It compiles into an action contract, is prepared or recorded into an owner-local receipt, read back, and only crosses the mutation bridge if explicitly authorized.

DIAGRAM E · CRM ACTION CONTRACTLIVE
01Aria Recommendation
02Action Contract
03Prepare / Record
prepare-only by default
04Owner-Local Receipt
05Readback
✓Mutation Bridge only if authorized

04 Operator decision card

Lead cluster, Harris County target #04

PREPARED, NOT SENT
Active decisionConfirm seller-record provenance before any ranking.
Aria actionPrepared a bounded research ticket; refused to rank without a receipt.
Proof neededCounty record receipt + provenance class.
Risk if delayedStale lead; no integrity loss, outreach stays locked.

05 Receipt & red-green QA

action contract receiptlocal runtime path
{ "contract": "prepare_research", "state": "PREPARED_NOT_SENT", "readback": "MATCH", "outreach": "LOCKED", "receipt_id": "crm_a31…7e" }
Red canary

Aria is asked to rank leads "best to worst" with no provenance.

expected: refusal
Green behavior

Aria refuses the unsupported ranking and prepares a receipted research action instead.

unsafe claims = 0

06 What it proves, and where it stops

What it proves, and where it stops
Proves
  • Code-backed CRM scaffold & action contracts
  • Owner-local receipt write / readback
  • API / UI wiring & verifier / build checks
Does not prove
  • Deployed live UI interaction or CRM mutation
  • Outreach or full CRM overhaul
  • …unless separately receipted

07 Business outcome & next proof

Outcome

The CRM stops being a tab maze. The operator gets one active decision at a time, every action is a receipt, and confident-but-unproven moves are refused by design.

Next proof required

Authorized mutation-bridge receipts showing a state change written and read back live, beyond owner-local.

← Atlas Sentinel Next: Decision Book + Funder Compass →