R6-01 Growth drivers

Supports slide 34.

Three things drive growth. None of them is a regulatory date. Each has a number I can track.

Driver	What it is	Input metric	Where it stands
Partner distribution	Our content inside Strike Graph (357 organisations) and DTA. Resale through Policycode and Sentient (528 reachable accounts: 148 and 380). Their paper, their installed base.	Partner-sourced accounts; content live in partner products	0 partner-sourced accounts so far (slide 21). Strike Graph embed planned from November 2026; DTA paperwork with lawyers.
Agent-native access	API and MCP bundled in the paid tier. The crosswalk as a function call for the agents and GRC platforms buyers already run.	API and MCP keys issued; calls per key	MCP server in beta with SecRed, Marfi and IT Convergence (R2-03).
Standing obligations	Phase 1 self-assessment, NIST 800-171 and DFARS 7012 apply whatever happens to Phase 2.	Verified signups from .mil, .gov and contractor domains	192 signups since 1 May, 112 verified (slide 3). Not yet split by domain.

CMMC Phase 2, if it comes back, is upside. It isn’t in the base case.

Not yet evidenced: a baseline count of API and MCP keys issued and calls per key. Not yet evidenced: verified signups split by .mil, .gov and contractor domain. Not yet evidenced here: the status of CMMC Phase 2. That belongs to R1-10.

Sources:

• Strike Graph 357 organisations: Capstone Deck v1.2 Build Note, SOM line.
• Policycode 148 and Sentient 380: Founder Operating System, Module 10 (17 Aug 2026), input metric 4.
• DTA status: Capstone Facts Reconciled, 17 Oct 2026.
• MCP beta partners: R2-03 partner bench register.
• Signups 192 / 112 verified: STIGViewer verification records since 1 May 2026, as reported on slide 3.