VERIFIED PILOT BUILDEvidence refreshed 8 September 2026

Dealer pilot capability and A–H verification

This page exposes the audit result, exact A–H fixture evidence and truthful operating boundaries. The interactive inventory is fictional demonstration data; automated persistence and delivery verification use isolated fictional dealer tenants and an owner-controlled destination, and make no customer or traction claim. RFQ persistence and external delivery through a signature-verified provider webhook are production-verified.

Demonstration import: 9 source rows · 8 published · 1 inactive private draft · original bytes and field provenance retained.

Current source audit

Classification meanings: PASS = implemented and verified; FAIL = present but broken; MISSING = absent; UNVERIFIED = present without sufficient evidence.

CapabilityStatusVerification evidence
Dealer-specific inventory ingestion PASSAuthenticated dealer ownership is bound before preview or commit.
CSV import PASSQuoted fields, malformed rows, missing values and size limits are tested.
XLSX / Excel import PASSOnly the bounded first worksheet is parsed; formulas are not executed.
Original vs normalized values PASSOriginal upload bytes and raw rows remain separate from reviewed normalized records.
Field-level provenance PASSRaw value, normalized value, source, confidence and verification state are stored per field.
Dealer ownership / tenant isolation PASSEvery protected query and mutation is scoped by authenticated seller membership.
Active / inactive inventory PASSDraft, published, paused, sold and rejected states are distinct.
Natural-language extraction PASSPayload, reach, application and commercial context are extracted with explicit unknowns.
Missing critical requirements PASSApplication, payload and reach gate ranking until complete.
Intelligent follow-up PASSOnly materially missing hard-screening fields are requested.
Deterministic matching PASSPayload and reach failures remain authoritative regardless of AI output.
Four match states PASSMATCH, POSSIBLE MATCH, INSUFFICIENT INFO and INCOMPATIBLE are covered.
Qualified structured RFQ PASSBuyer, requirement, commercial context, shortlist, exclusions, unknowns and caveats persist.
Persisted lead PASSRFQs are committed to D1 with idempotent identifiers and audit events.
Dealer workspace persistence PASSThe structured RFQ is stored in the correct tenant's private D1-backed dealer inbox.
External dealer email notification PASSA clearly synthetic owner-controlled RFQ was accepted by Resend; the real signed email.delivered webhook correlated the provider ID to the durable outbox and persisted delivered_at.
Dealer embed / widget PASSDealer branding, inventory, attribution and exact-origin authorization are preserved.
Source attribution PASSImport-row, listing, landing surface, referrer and UTM fields are retained where available.
Pilot funnel analytics PASSThe same production journey persists the complete session-to-RFQ funnel and exactly one dealer_lead.delivered created only by the signed delivery webhook.
AI provider abstraction PASSA provider-independent validated interface uses the OpenAI Responses API in production, with strict schema validation and deterministic fallback.
Graceful AI failure PASSTimeout, invalid output and provider failure return the deterministic safe result.
Security / authorization PASSRole checks, same-origin enforcement, validation, rate limits and safe failures are tested.
SEO foundations PASSCanonicals, schema controls, segmented sitemaps, index gates and facet controls remain in place.
AI-retrieval relationships PASSDealer, listing, brand, model, application, location, controller, payload, reach, availability and update date are connected.

A–H acceptance cases

CASE A — Clear match

PASS
INPUT
Palletize 40 kg boxes with at least 2200 mm reach.
STRUCTURED REQUIREMENTS
application=palletizing · payloadKg=40 · reachMm=2200
RESULT
5 MATCH · 1 INSUFFICIENT INFO · 2 INCOMPATIBLE. Kawasaki ZX130L ranks first.
WHY IT PASSED
The top result's 130 kg payload and 2951 mm reach pass both hard constraints and its application tags include palletizing.
Open repeatable case →

CASE B — Missing critical requirement

PASS
INPUT
We need a robot for palletising 40 kg boxes.
MISSING FIELD DETECTION
reachMm=UNKNOWN; application and payload are known.
FOLLOW-UP QUESTION
What minimum reach or working radius is required?
UPDATED REQUIREMENTS
After 2200 is supplied: application=palletizing · payloadKg=40 · reachMm=2200; ranking becomes available.
Open repeatable case →

CASE C — Hard incompatibility

PASS
REQUIREMENT
Palletize 40 kg boxes with at least 2200 mm reach.
ROBOT
ABB IRB 2600-20/1.65 · 20 kg payload · 1650 mm reach
FAILED CONSTRAINT
Payload is below 40 kg and reach is below 2200 mm.
FINAL STATE
INCOMPATIBLE · score 0 · excluded from shortlist · forged selection rejected with HTTP 409.
Open repeatable case →

CASE D — Unknown dealer data

PASS
SOURCE FIELD
DEMO-CSV-ROW-6: reach is blank; original model text is ‘KUKA KR 90 unknown reach’.
NORMALIZED FIELD
reach_mm=NULL / UNKNOWN; normalized model is ‘KR 90 variant’.
MATCH STATE
INSUFFICIENT INFO for a requirement containing minimum reach.
USER-FACING EXPLANATION
Reach is unknown, so this hard requirement cannot be verified.
Open repeatable case →

CASE E — RFQ persistence and dealer workspace access

PASS
RFQ ID
00000000-0000-4000-8000-00000000e001
DEALER ID
00000000-0000-4000-8000-00000000d001
PERSISTENCE RESULT
Exactly one inquiry row; structured requirements, shortlist, incompatibilities, unknowns and engineering caveats retained.
WORKSPACE RESULT
The isolated acceptance fixture persists one tenant-scoped RFQ; Dealer A receives HTTP 200 and Dealer B receives HTTP 404. This does not claim an external email was accepted.
ATTRIBUTION
organic · hosted_sales_engineer · /dealers/dealer-one-robotics/sales-engineer · Google referrer and UTM retained.
Open repeatable case →

CASE F — Dealer embed

PASS
EMBED ROUTE / TEST CONTEXT
/dealers/dealer-one-robotics/sales-engineer?embed=1; exact-origin allowlist test.
DEALER ID
00000000-0000-4000-8000-00000000d001
INVENTORY SCOPE
Six published Dealer A listings only; its private draft and Dealer B's XLSX listing are absent.
RFQ ROUTING RESULT
Selected listing owner is derived server-side; RFQ seller_organization_id equals Dealer A.
Open repeatable case →

CASE G — AI/provider failure

PASS
FAILURE CONDITION
Provider exceeds the bounded timeout and is aborted.
FALLBACK BEHAVIOR
Schema-safe deterministic extraction is returned with an explicit timeout warning and providerName=NULL.
RESULT
40 kg payload and 2200 mm reach remain correct; deterministic matching authority is unchanged.

Verified in the isolated server-side acceptance suite.

CASE H — Tenant isolation

PASS
ATTEMPT
Dealer B publishes Dealer A listing; reads Dealer A RFQ; opens its dashboard for Dealer A settings, leads or analytics. Reverse inventory visibility is also checked.
EXPECTED RESULT
DENIED / ISOLATED
ACTUAL RESULT
Publish HTTP 404; lead HTTP 404; Dealer B dashboard contains no Dealer A CTA, origin, buyer or events; each public sales engineer contains only its owner's published inventory.

Verified in the isolated server-side acceptance suite.

Commercial demonstration boundary

The public demo supports natural-language intake, follow-up, deterministic matching, explainable selection and a dealer-facing RFQ preview without submitting the contact form. Requirement-text processing is disclosed in the pilot data notice. Real dealer RFQs persist in D1 and remain visible in the correct tenant workspace even when external notification fails.

Current AI boundary

The production OpenAI Responses API interprets buyer requirement text through a provider-independent adapter with strict structured output, evidence checks and bounded timeout. Provider failure activates a deterministic fallback. Matching never treats AI output as authority over technical constraints.