AI-Native Service Business Blueprint — Run 2026-07-07

DomesticProof — The BABA Domestic-Content Qualification & Certification Engine

A done-for-you Buy America / Build America, Buy America (BABA) product qualification service for manufacturers of infrastructure products. We turn a messy bill of materials and a stack of supplier emails into an audit-ready, expert-reviewed domestic-content determination file, a signed-and-defensible certification letter package, and a maintained compliance record — so the manufacturer keeps winning federally funded work without betting the company on a guess.

FINAL DECISION: BLUEPRINT — build this
$711.8B
IIJA grant funding across 15 agencies / 100+ programs — all BABA-covered infrastructure assistance (GAO) [S4]
Oct 1, 2026
FHWA 55% domestic component-cost test hits every manufactured product on federally assisted highway projects [S1]
$6.8B
Record FY2025 False Claims Act recoveries; false domestic-sourcing certifications now criminally indicted [S6][S7]
$0
Third-party certifiers required by the regime — it is pure self-attestation, which is exactly why manufacturers are terrified to sign [S8]

02Final decision: Blueprint

This run produces a go decision. The candidate cleared the evidence threshold: a named buyer with revenue at stake, a fresh statutory trigger with a hard date (October 1, 2026), verified enforcement fear, verified incumbent budget (national CPA-firm advisory practices, a funded AI software startup, and internal compliance labor), a narrow one-artifact MVP, and a credible path to 50%+ gross margin with expert judgment concentrated at one signing chokepoint.

03Executive summary

The situation. The Build America, Buy America Act attached permanent domestic-content preferences to essentially all federal financial assistance for infrastructure — roughly $711.8B of IIJA grant money alone, plus EPA state revolving funds, HUD, USDA-RD, FEMA and BEAD broadband programs [S4][S10]. In January 2025 FHWA rescinded its 1983 general waiver for manufactured products: for projects obligated on or after October 1, 2025, final assembly must occur in the US; on or after October 1, 2026, at least 55% of component cost must be domestic [S1][S2][S17]. Thousands of product manufacturers that never had to think about Buy America — signal and ITS equipment, lighting, drainage products, precast accessories, pumps, valves, electrical gear, broadband equipment — are now inside a self-attestation regime where a wrong letter is a False Claims Act exposure event with per-claim penalties of $14,308–$28,619, treble damages, and (since September 2025) criminal indictments for fake domestic-sourcing certifications [S7][S8].

The pain. Every distributor, contractor and grant recipient in the chain now demands a manufacturer certification letter before they can get paid — agencies publish the templates (EPA, FEMA, Indiana OCRA, Minnesota NAHRO) and grantees must keep the letters for audit [S9][S15]. But producing a defensible letter requires a component-level cost analysis of the product's BOM against the 55% test, country-of-origin evidence from every supplier, a final-assembly determination, and agency-specific formatting — work most mid-market manufacturers have no staff, no methodology and no documentation system for [S8][S16][S22]. The commercial consequence is immediate: no letter, no sale. Suppliers are being knocked out of federally funded deals they didn't even know they were in [S22].

The service. DomesticProof sells an outcome: "Your product line is qualified, certified and audit-ready for federally funded work." Per product family, at a flat fee, we deliver in 10 business days: (1) a component-cost domestic-content analysis workbook against the applicable test (BABA 55%, FHWA manufactured-products 55%, iron/steel 100%, BEAD rules); (2) a senior-analyst-signed determination memo with methodology, assumptions and evidence index; (3) supplier evidence collection done for the client (origin attestations chased, validated, filed); (4) an agency-formatted certification letter set the manufacturer's officer signs; and (5) an annual monitoring subscription that re-verifies the file when BOMs, suppliers or rules change. AI does the extraction, classification, cost-math, drafting and supplier-chasing; one senior domestic-content expert reviews and signs every determination. The customer never touches software.

Why now, why us. The October 1, 2026 FHWA content test creates a countdown-clock sales motion for an entire newly regulated population. Incumbents are either Big-4/national CPA advisory (slow, $50k+ engagements, aimed at large enterprises) [S12] or self-serve SaaS the manufacturer must operate (Certivo, $4M seed, 15 people) [S13]. Nobody owns the mid-market done-for-you lane: fixed-price, per-product, expert-signed, delivered in days. The work is document-and-math heavy with judgment at one chokepoint — the exact shape frontier models keep making cheaper.

04Thesis

When a permanent federal rule converts a paperwork formality into personal False-Claims exposure for whoever signs, and gives an entire industry a hard deadline, manufacturers stop asking "can we write this letter ourselves" and start paying for a defensible file behind the signature. The letter is a commodity; the evidence file underneath it is the product. AI makes building that file per-product nearly free; a senior expert signing the determination makes it trustworthy; the renewal subscription makes it recurring. Revenue scales with product families qualified, not with headcount.

05Discovery rationale

This run searched six sectors before selecting: dental revenue-cycle operations, college-athletics NIL compliance, auto-finance GAP refund remediation, local-government public-records processing, Medicare TPMO marketing oversight, and federal domestic-preference compliance. Fourteen targeted searches were performed (see research ledger). BABA qualification won because it uniquely combines: (a) a dated statutory trigger 12 weeks away creating urgency for a population that has never been regulated before [S1]; (b) revenue capture, not just risk avoidance — no certification letter means lost sales today [S22]; (c) a pure self-attestation regime with no licensed-professional gate, so a documentation service faces no unauthorized-practice barrier [S8]; (d) verified budget via CPA-firm advisory practices and a venture-funded software category [S12][S13]; and (e) zero overlap with the 187 prior blueprints in the manifest, which cover import-side trade (UFLPA, AD/CVD, HTS, first-sale, FTZ, duty drawback) but nothing on domestic-content certification for federally assisted projects.

06Candidate comparison

CandidateBuyerTrigger / demand evidenceFatal weaknessComposite (20-criterion avg)
BABA domestic-content qualification engine (winner)Mid-market infrastructure-product manufacturersFHWA 55% test 10/1/2026; record FCA enforcement; cert letters demanded on every funded project [S1][S6][S9]Willingness-to-pay per product family unproven (kill test)4.4
Dental insurance verification deskDental practices / DSOsVerified per-unit vendor pricing $3–$10 [S23]Crowded: dozens of offshore vendors + funded AI startups; no regulation moat; low whitespace3.2
FOIA / public-records overflow deskCity clerks, police records unitsVolumes exploding (San Antonio 86k req/yr) [S26]Government procurement cycles; managed-service spend evidence thin; software-dominated3.4
GAP refund remediation engineAuto lenders / credit unionsCFPB supervisory findings on unearned-premium refunds [S25]Entrenched vendors (Allied Solutions, LCT); federal enforcement momentum cooling3.1
NIL / rev-share compliance deskD1 athletic departments, collectivesNIL Go reporting, CSC enforcement [S24]~360-school market; 6/23/2026 CSC change exempts most $600–$15k deals from review — pain shrinking; software incumbents (Teamworks)2.9
Medicare TPMO oversight deskFMOs / agencies10-yr call retention, monthly violation reporting [S27]Chronic not acute; 2027 rule relaxes requirements; FMOs staff this internally3.0

Losers were rejected on evidence, not preference: each tripped at least one of shrinking-pain, incumbent-density, government-cycle, or whitespace criteria that BABA cleared.

07CODE validation

C — Consumer / buyer trend

Permanent domestic-preference law (BABA, 2021) now fully phased in across 15 agencies; FHWA's January 2025 final rule ends the 42-year manufactured-products waiver with hard dates (10/1/2025 final assembly; 10/1/2026 55% content) [S1][S17]. A March 2026 Executive Order tightens Made-in-America scrutiny and waiver standards further [S20]. DOJ posts record FCA recoveries and its first criminal indictment for false domestic-sourcing certification [S6][S7]. Verified

O — Opportunity

The regime is self-attestation with no third-party certifier [S8]. The failing process today: sales VPs signing template letters without a cost analysis behind them, or refusing to sign and losing bids; contractors chasing certs by email at pay-app time; grantees discovering holes at audit and facing clawbacks [S9][S15][S16]. No mid-market provider sells a fixed-price, expert-signed qualification file. Verified

D — Demand

Agencies publish cert-letter templates because request volume is structural (EPA, FEMA, state CDBG programs) [S9][S15]. AGC runs a dedicated BABAA resource hub for members drowning in flow-up certs [S14]. A national CPA firm markets BABA advisory [S12]; an AI startup raised $4M in Feb 2026 to sell BABA content-threshold software [S13]; Commerce/NTIA maintain public self-certification lists manufacturers compete to appear on [S10][S11]. Verified

E — Economic sizing

$711.8B of IIJA grant funding is BABA-covered, with $131.2B newly available in FY2026 [S4]; BABA also rides on non-IIJA assistance (EPA SRF, HUD, USDA, FEMA). If 20,000–40,000 US manufacturers sell into assisted projects and average $8k–$30k/yr on qualification+monitoring (vs. $50k+ consulting or an FTE), category spend is plausibly $300M–$1B+/yr. Inferred — range shown because no official census of affected manufacturers exists; FHWA declined to quantify the newly covered population in the rule.

08Rubric scorecard (six gates + factory rubric)

GateScoreReasoning
1. Low trust burden4Compliance documentation is already outsourced to CPA/advisory firms [S12]; buyer cares about the finished file and the signed letter, not the process. Our expert is the customer-facing interface; the manufacturer's own officer signs the outward certification, keeping us behind the scenes.
2. Low task-level judgment4Workflow decomposes cleanly: BOM ingestion, component classification, cost-basis math, origin-evidence collection, letter drafting are all automatable. True judgment — component vs. material boundary calls, cost-basis methodology, "predominantly iron/steel" determinations — concentrates in one senior-reviewer chokepoint.
3. High intelligence threshold5Requires synthesis across OMB M-24-02 guidance, agency-specific rules (FHWA vs EPA vs NTIA differ), product BOMs, supplier declarations, and cost accounting — exactly the cross-document reasoning frontier models are best at, with wrong answers carrying FCA-scale consequences that keep casual entrants out.
4. Regulation as moat5Statutory tests with hard dates, agency templates, audit retention duties, clawback and FCA exposure [S1][S7][S16]. Buyers pay for defensibility, not paperwork. Rules differ by agency and keep changing (BAA 65%→75% escalators, waiver tightening [S20][S21]) — a living rules engine compounds.
5. No physical labor5Entirely documents, data and correspondence. No site visits, no product testing (we rely on supplier attestations and client cost records, with scope limits stated).
6. Sam Altman test5Better models directly improve BOM extraction from messy ERP exports, supplier-doc reading, rules synthesis and drafting — cutting reviewer minutes per unit while accuracy rises. Model progress widens margin; it does not commoditize the signed determination or the maintained evidence chain (see §29).
20-criterion factory rubric — winner detail (avg 4.4)
CriterionScoreNote
Low trust burden4Outsourcing norm exists via CPA advisory
Low task-level judgment4Judgment at determination sign-off only
High intelligence threshold5Multi-agency rules × BOM × cost data
Regulation as moat5Hard dates, FCA teeth, audit retention
No physical labor5Pure knowledge work
Sam Altman test5Extraction/drafting costs fall with model quality
Outcome-pricing potential5Per product family qualified; per letter set; never hourly
Gross-margin potential450-65% plausible at day-90 minute targets (kill-tested)
Buyer urgency510/1/2026 clock; lost bids today
Competitive whitespace4Big-firm consulting above, self-serve SaaS below, empty middle
Novelty vs prior outputs5First domestic-content/BABA entry in 187-run manifest
Fit with current AI5Doc extraction, classification, math, drafting, chasing
Active demand evidence4Templates, trade hubs, funded SaaS, advisory practices
Existing budget proof4CPA advisory fees + SaaS + internal labor
Lead-magnet potential5Free BABA Exposure Scan is a natural artifact
MVP wedge clarity5One product family → one determination file + letter set
Distribution clarity4Named associations, agency lists, deadline hook
Licensing feasibility5Self-attestation regime; no license required to prepare
Operational repeatability4Same file shape per product family; rules engine reused
Speed to first revenue4Deliverable manually in ~2 weeks with existing tools

09Target buyer

Wedge ICP: VP of Sales / GM or the (often newly conscripted) compliance-quality lead at US manufacturers of highway and transportation manufactured products — ITS and signal equipment, roadway lighting, traffic cabinets and controllers, drainage and geosynthetic products, precast accessories, pavement products, guardrail hardware and fasteners — with $10M–$250M revenue, 5–100 SKU families, selling through distributors into state-DOT-administered, federally assisted projects. They face the October 1, 2026 55% component test with no cost-accounting methodology and a sales channel that is already demanding letters [S1][S9][S22].

Who pays: the P&L owner losing bids (VP Sales/GM) — this is a revenue-protection purchase first and a risk purchase second. CFO co-signs because the alternative is a $50k+ consulting engagement or a compliance hire.

Expansion ICPs: water/wastewater equipment makers selling into EPA SRF projects; broadband equipment vendors seeking NTIA/BEAD self-certification listing [S10][S11]; building-products makers in HUD/CDBG programs; distributors and prime contractors who need portfolio-wide cert collection and verification (the flow-up side of the same engine) [S14][S15].

10Jobs-to-be-Done

11Painful problem

A mid-market signal-cabinet manufacturer today: a distributor forwards an EPA-style certification template on a Tuesday, the pay application is due Friday, and nobody in the building knows what "cost of components mined, produced, or manufactured in the United States" means for their 214-line BOM with three Mexican subassemblies and a Taiwanese PCB [S8][S9]. Option A: the VP signs anyway — now a federal certification with per-claim penalties of $14,308–$28,619 and treble damages rides on a guess, and since September 2025 executives have been criminally indicted for exactly this [S7]. Option B: don't sign — lose the order, and the next one, and get quietly delisted by distributors who only stock certifiable brands [S22]. Option C: call a national firm — a $50k+, 10-week supply-chain engagement for a question that recurs on every product family [S12]. All three options are bad, and the 55% test on October 1, 2026 makes Option A dramatically worse because "final assembly in the USA" will no longer be enough [S1][S3].

12The outcome we sell

"Qualified, certified, audit-ready — in 10 business days, at a fixed price." The client receives a determination they can act on (yes / yes-with-conditions / no-with-gap-plan), a signed methodology memo, an evidence index, agency-formatted certification letters ready for officer signature, and a maintained file that renews annually. If the answer is "no," they get the exact component swaps that would flip it — which converts a compliance report into a sourcing roadmap worth more than the fee.

13First one-feature MVP wedge

  • ICP: US manufacturers of highway/transportation manufactured products, $10–250M revenue, selling into federally assisted state DOT projects.
  • Trigger event: FHWA 55% domestic component-cost test for projects obligated on/after October 1, 2026 [S1]; proximate trigger: a distributor or DOT contractor demands a certification letter.
  • Pain: Cannot produce a defensible domestic-content determination; signing blind risks FCA exposure; not signing loses revenue.
  • One-feature MVP: the BABA Product Qualification File for one product family.
  • Input: BOM export (any format), component cost data, supplier list with contacts, product spec sheet, target programs (FHWA/EPA/other).
  • Output: component-cost analysis workbook, origin evidence pack (we chase suppliers), senior-expert-signed determination memo, agency-formatted certification letter set, gap plan if failing.
  • Human chokepoint: senior domestic-content expert (government-contracts/trade-compliance background) reviews classification and cost-basis calls and signs the determination memo; the client's officer signs outward letters.
  • Success metric: determination delivered ≤10 business days; letter accepted by requesting contractor/grantee first-pass ≥90%; zero determinations overturned on audit.
  • What users ask for next if the wedge works: the rest of the product catalog; annual monitoring; supplier-attestation management as a standing service; BAA/TAA/FTA variants for the same SKUs; distributor-facing "certified product" data sheets; contractor-side cert collection.

14Evidence summary

15Claim table

ClaimLabel
FHWA rescinded the manufactured-products waiver; final assembly required 10/1/2025; 55% component cost 10/1/2026Verified
BABA applies to ~$711.8B of IIJA grant funding plus other federal assistance; $131.2B becomes available FY2026Verified
Compliance is manufacturer self-attestation; no third-party certifier exists; grantees must retain manufacturer letters for auditVerified
FY2025 was a record FCA year ($6.8B, 1,297 qui tams); false domestic-sourcing certification has been criminally indicted; penalties $14,308–$28,619/claim + treble damagesVerified
Buyers already spend on this problem via CPA advisory, funded SaaS, and internal laborVerified
Suppliers lose federally funded sales when they cannot demonstrate domestic contentVerified (vendor-authored source)
Category services spend is $300M–$1B+/yr; thousands of manufacturers newly in scopeInferred
Most mid-market manufacturers lack the component-level cost accounting the 55% test requiresInferred
Manufacturers will pay $2,500–$7,500 per product-family qualification at ≥25% scan conversion; ≥70% renew monitoringUnverified — day-90 kill tests

16Source-claim matrix

#ClaimLabelSourceTypeDateConf.Used in
S1FHWA final rule: waiver rescission, 10/1/2025 final assembly, 10/1/2026 55% component test, effective 3/17/2025VerifiedFederal Register 2024-31350Primary regulation2025-01-14High§3,4,7,11,13
S21983 waiver limited FHWA Buy America to iron/steel; rescission pulls complex products into scopeVerifiedCrowell & MoringLaw-firm alert2025High§3,5
S3Plain-language summary of 2025/2026 phase-in for construction/manufacturingVerifiedTRUSS FABERIndustry advisory2025-26High§3,11
S4$711.8B IIJA grant funding, 15 agencies, 100+ programs; $580.6B available FY22-25; $131.2B FY2026VerifiedGAO-25-107243Government audit2025High§1,3,7,17
S5$568B allocated / $275B obligated as of 1/31/2026; 68,000+ projectsVerifiedUS DOTGovernment2026-01High§17
S6Record $6.8B FCA recoveries FY2025; 1,297 qui tam filingsVerifiedWileyLaw-firm alert2026-01High§3,7,11
S7Sept 2025 criminal indictment for false domestic-sourcing certification; May 2025 $300k BAA/TAA settlement; penalties $14,308–$28,619/claimVerifiedMondaq / BuchananLegal analysis2025-26High§3,7,11
S8Self-attestation model; manufacturers responsible for adequate, accurate documentation; no third-party auditor regimeVerifiedEPA BABA FAQs for ManufacturersAgency guidance2025-06High§3,7,11,23
S9EPA publishes manufactured-product certification letter template; letters flow up chain and are retainedVerifiedEPA templateAgency template2025-01High§3,10,11
S10NTIA/BEAD BABA compliance, documentation and self-certification process for broadband equipmentVerifiedNTIAAgency guidance2025-10High§9,17
S11Commerce maintains public BABA self-certification equipment listVerifiedUS CommerceAgency list2024-07Med§7,17
S12National CPA/advisory firm sells BABA supply-chain assessment, self-certification management, documentation, trainingVerifiedCherry BekaertConsulting firm2025High§3,19,20
S13Certivo raised $4M seed (2/2026) for AI compliance SaaS incl. BABA 55/65/75% calculations; 15 employees; customer-operatedVerifiedBusinessWirePress release2026-02High§19,20,28
S14AGC maintains dedicated BABAA resource hub; certs must flow up from all tiersVerifiedAGCTrade associationCurrentMed§7,18
S15States prescribe manufacturer cert-letter formats; contractors submit certs with pay applicationsVerifiedIndiana OCRA; MN NAHROState templates2024-25Med§10,11,30
S16Common gaps: missing certs, traceability; consequences: clawbacks, delays, audit findingsVerifiedCherry Bekaert FAQsConsulting firm2025High§7,10,11
S17FHWA announcement of phased manufactured-products Buy America updatesVerifiedFHWAAgency press2025High§3,7
S18IIJA expires 9/30/2026; reauthorization contested; $2.3B rescindedVerifiedConstructionOwnersTrade press2026Med§55
S19DOJ expanding FCA theories including domestic-preference certificationsVerifiedK&L GatesLaw-firm alert2026-06Med§14
S202026 EO increases Made-in-America scrutiny; tighter waiver standardsVerifiedHolland & KnightLaw-firm alert2026-03Med§7
S21Agencies moving to continuous verification; BAA thresholds rise 65% (2026) / 75% (2029)Verified (vendor-authored)Certivo blogVendor content2026Med§29,31
S22Small suppliers knocked out of federally funded deals when they cannot demonstrate domestic contentVerified (vendor-authored)FedBizAccessVendor content2025Med§3,11
S23Dental verification outsourcing $3–$10/verification (candidate comparison)VerifiedeAssist; TeeroVendor pricing2025-26High§6
S24NIL Go >$600/5-day reporting; 6/23/2026 CSC exempts most $600–$15k deals from ROC review (candidate comparison)VerifiedCollege Sports Commission; BradleyRegulator / law firm2026High§6
S25CFPB found servicers failed to refund unearned GAP premiums; incumbents serve lenders (candidate comparison)VerifiedCFPB; Allied SolutionsRegulator / vendor2024-25High§6
S2642% of local officials cite staff-time barrier; San Antonio 86k requests/yr (candidate comparison)Verified (vendor survey)CivicPlusVendor survey2025-26Med§6
S2710-yr Medicare call-recording retention; monthly TPMO violation reporting; 2027 rule relaxes disclaimer timing (candidate comparison)Verified42 CFR 422 Subpart V; RitterRegulation / FMO2025-26Med§6
Category spend $300M–$1B+/yr; thousands newly covered; mid-market cost-tracing gapInferredDerived from S4, S12, S13, S16, S22Derivation2026-07Med§7,17
Conversion, pricing acceptance, reviewer minutes, renewal assumptionsUnverifiedInstrumented as day-90 kill tests (§49, §53)Assumption2026-07Low§38,49,53

17Market and demand evidence

$131.2B
IIJA grant funds newly available for obligation in FY2026 — every infrastructure dollar drags BABA paperwork with it [S4]
68,000+
IIJA-funded projects to date, each requiring flow-up certification collection [S5]
55% → 65% → 75%
Escalating domestic-content thresholds (FHWA 2026; BAA escalators) mean re-qualification is recurring, not one-time [S1][S21]

Demand is visible on both sides of the letter. On the requesting side, agencies and states publish certification templates and instruct grantees to collect and retain them [S9][S15]; AGC runs a member resource hub because contractors must chase these documents on every funded job [S14]. On the supplying side, Commerce and NTIA maintain public self-certification lists that function as de-facto "approved vendor" directories — being absent is a competitive handicap [S10][S11]. The consulting and software categories already monetize the pain [S12][S13]. What does not exist at scale is the mid-market, fixed-price, done-for-you qualification desk.

18Active buyer conversations

19Competitive landscape

PlayerModelTargetGap we exploit
Cherry Bekaert / national CPA & consulting firms [S12]Hourly/engagement advisory: supply-chain assessment, trainingLarge enterprises, grantees$50k+ engagements, weeks-long, not per-product productized; mid-market priced out
Certivo and compliance SaaS (36 tracked competitors) [S13]Customer-operated software; supplier campaigns, threshold calcsManufacturers with compliance teamsBuyer must run the tool, chase suppliers, and make the judgment calls themselves; no signed determination, no accountability
Government-contracts law firms [S2][S19]Legal opinions, FCA defenseCompanies already in trouble$800+/hr, opinion-shaped, not operational; we hand them the finished file when true legal questions arise (referral partners, not competitors)
Trade-compliance consultancies (Buy America/BAA specialists)Boutique hourly consultingTransit rolling stock, big steelCapacity-bound, founder-dependent, no AI leverage, no monitoring subscription
Doing nothing / signing blindStatus quoMost of the mid-market todayOctober 1, 2026 and the first publicized FCA case in their vertical ends this option [S1][S7]

20Competitor and budget validation

Existing budget sources: (1) advisory fees already paid to CPA firms for BABA assessments [S12]; (2) SaaS subscriptions for supplier-attestation software [S13]; (3) internal labor — quality managers and sales ops chasing supplier letters by email; (4) legal spend when a certification goes wrong [S7]. Why current alternatives fail: consulting is episodic and expensive; software transfers the work and the liability back to the buyer; internal staff lack methodology and it shows at audit [S16]. Why we win: fixed price per product family, 10-day turnaround, an expert-signed determination the buyer can stand behind, supplier-chasing done for them, and a renewal subscription that keeps the file alive as rules escalate [S21]. We are not "no competitors" — we are a better-shaped vehicle for budget that verifiably exists.

21Pricing evidence and proposed pricing

Evidence anchors: CPA advisory engagements for supply-chain compliance run five figures [S12]; compliance SaaS sells annual subscriptions; a compliance hire runs $80–120k loaded. Our per-family price sits an order of magnitude below the consulting alternative and below one month of a hire.

OfferPriceNotes
BABA Exposure Scan (lead magnet)FreeProduct-line screening: which SKUs face which tests, which programs, what evidence is missing; 3-page memo
Product Qualification File — standard (≤150 BOM lines, ≤25 suppliers)$3,500 flat (founding rate $2,500, first 10 accounts)Determination memo + workbook + evidence pack + letter set, 10 business days
Product Qualification File — complex (multi-level BOM, >25 suppliers, mixed iron/steel analysis)$6,500–$9,500 flatIncludes component/material boundary analysis and gap plan
Catalog program (10+ families)from $24,000/yrBatched qualification + priority queue
Compliance Monitoring subscription$400–$900/family/yrBOM-change re-verification, rule-change re-tests (55→65→75), letter re-issuance, supplier attestation refresh
Agency letter variants / rush (5 days)$350/variant; +50% rushEPA vs FHWA vs state CDBG formats [S9][S15]

Never hourly. Pricing is per outcome (a qualified product family) — legal and clean because we sell documentation preparation, not contingency on government money (§22).

22Regulatory and compliance considerations

23Licensing boundary

LayerWhat happens
AI system mayExtract BOMs, classify components, compute content percentages, draft memos/letters/supplier requests, flag rule applicability, monitor rule changes
Trained operators mayValidate extractions, run supplier-evidence chase, assemble evidence packs, run QA checklists
Senior expert mustApprove component/material classifications, cost-basis methodology, final determination; sign the internal determination memo
Client officer mustSign all outward certification letters; attest to cost-data accuracy provided to us
Licensed counsel mustHandle novel regulatory interpretation, waiver requests strategy beyond templates, any FCA inquiry or dispute (referral network)
We never claimTo be a certifying body, a law firm, a CPA firm (unless later licensed), or that a determination guarantees audit outcomes

24AI-native advantage

AI changes the economics, not just the speed. A qualification file requires reading a 200-line BOM export, three agencies' rules, a dozen supplier PDFs in inconsistent formats, and a cost ledger — then producing math, citations and prose. Done by consultants this is 20–40 billable hours; done by our engine it is minutes of compute plus a senior review. AI tasks: BOM normalization, component classification, origin-evidence parsing, content-percentage computation drafts, rules retrieval, memo/letter drafting, supplier-chase emails, change monitoring. Human tasks: judgment calls at classification boundaries, methodology approval, determination signing, client relationship. Deterministic tasks: the percentage math itself, template validation, checklist gates, citation-link resolution. Data inputs: BOM + costs, supplier attestations, agency rules corpus. Output artifacts: workbook, determination memo, evidence index, letter set, gap plan. Failure risks: hallucinated citations (blocked by resolution checks), misclassified components (blocked by expert gate), stale rules (blocked by versioned rules corpus). Never fully automated: the determination sign-off and any "close call" classification.

25Internal AI engine architecture

1. IntakePortal-less: client emails BOM/ERP export, cost data, supplier list; we normalize. Completeness checklist auto-runs
2. NormalizationBOM → canonical component schema (part, qty, unit cost, supplier, origin-claimed)
3. Retrieval / knowledgeVersioned rules corpus: 2 CFR 184, OMB M-24-02, FHWA final rule, agency guidance, waivers; per-program playbooks
4. AI workbenchClassification proposals, content-percentage draft calc, memo/letter drafts, supplier-doc extraction with confidence scores
5. Deterministic rulesMath recomputed in code, threshold tests, template lint, citation resolver, evidence-minimum gates
6. Human chokepointSenior expert reviews boundary calls + methodology; signs determination
7. QASecond-pass checklist, gold-standard diff, red-team pass on "qualified" conclusions
8. DeliveryFile pack + officer-signature letter set + debrief call
9. Learning loopEvery correction becomes a rule, prompt, or checklist item; per-agency acceptance playbooks
10. Model portabilityPrompts + evals model-agnostic; swap frontier models on eval wins, never mid-engagement

26AI-vs-human operations pipeline

StageAIDeterministicOperatorSenior expert
Intake & completenessExtract, checklistRequired-fields gateClient follow-ups
BOM normalizationParse any formatSchema validationSpot-check 10%
Component classificationPropose + confidenceLow-confidence routingVerify mid-confidenceDecide boundary calls
Supplier evidenceDraft chases, parse repliesEvidence-minimum gateChase execution
Content computationDraft calcRecompute in code; must matchApprove methodology
Determination memoDraft w/ citationsCitation resolverFormat QAEdit + sign
Letter setDraft per agency templateTemplate lintPackageFinal read
MonitoringRule/BOM change detectionRe-test triggersNotify clientRe-sign if changed

27Dynasty translation layer

1. Buyer translation

Who pays: VP Sales/GM at a $10–250M infrastructure-product manufacturer. Urgent problem: distributors demand certification letters he can't defensibly sign; 55% test lands 10/1/2026. Outcome wanted: keep selling into funded projects without personal exposure.

2. Service translation

Done-for-you: client sends BOM, costs, supplier contacts; receives qualified/not-qualified determination, evidence file, signable letters, gap plan. Automation handles extraction, math, drafting, chasing; humans handle judgment and sign-off.

3. Workflow translation

Intake → normalize → classify → chase evidence → compute → expert review → QA → deliver → debrief → monitor → renew. Every step has an SOP, a checklist and an exception queue.

4. Tooling translation

Day one: shared drive + spreadsheet workbench + Claude/GPT workflows + e-sign + a CRM. Later: BOM parser scripts, rules corpus with versioning, supplier-chase automation, client status page. No custom platform before revenue.

5. Sales translation

Pitch: "You're being asked to sign a federal certification. We build the file that makes it safe to sign — fixed price, ten days, expert-reviewed. Free scan tells you where you stand." Better than ignoring (lost bids), better than signing blind (FCA), better than consulting (10x cost).

6. Delivery translation

MVP delivery is manual-plus-AI: analyst + senior expert produce the first files with the workbench. Automate supplier chasing and BOM parsing first; never automate the determination signature.

7. Expansion translation

Templates per agency → per-vertical playbooks (water, ITS, broadband) → monitoring subscriptions → contractor-side cert-collection desks → BAA/TAA/FTA variants → white-label for distributors and buying groups.

28Anti-duplication analysis

Vs. the manifest (187 runs): first domestic-content / Buy America / BABA entry. Nearest neighbors and why they differ: uflpa-forced-labor-traceability (import ban evidence, CBP detentions — different law, buyer motion is imports); ad-cvd-importer-compliance (duty exposure); hts-classification (tariff codes); first-sale-export-valuation (customs valuation); sba-setaside-certification (contractor status certification, not product content); gsa-mas-contract (federal sales channel); dcaa-incurred-cost (cost accounting for contractors, not products). None sells a product-level domestic-content determination to manufacturers serving federally assisted projects.

Vs. the market: not a generic compliance dashboard (we deliver signed files, not software); not consulting (fixed-price, productized, 10-day SLA); not Certivo (they sell the buyer a tool and the buyer keeps the judgment burden [S13]). The under-served segment is the $10–250M manufacturer with no compliance staff. The unsolved pain is the defensible determination plus done-for-you supplier evidence. Our differentiation compounds through the per-agency acceptance playbooks and the classification precedent library no tool ships with.

29Anti-commoditization analysis

If future general models let a quality manager ask a chatbot "does my product pass the 55% test?", what survives? (1) Accountability: a chatbot answer is not a signed determination an officer will stake a federal certification on; (2) evidence logistics: models don't chase 40 suppliers for attestations, validate them, and keep them current; (3) the precedent library: thousands of reviewed classification calls and per-agency acceptance outcomes are proprietary training data for our engine, not the model's; (4) the subscription: thresholds escalate (55→65→75 [S21]) and BOMs drift — monitoring is a relationship, not a query; (5) the two-sided position: once distributors and grantees recognize our file format, "DomesticProof file attached" becomes the fast lane, a network effect no self-serve prompt replicates. Model improvement lowers our COGS faster than it improves the amateur's confidence to sign.

30Service delivery workflow

  1. Intake (day 0–1): engagement letter + data request checklist; client uploads BOM/ERP export, cost ledger extract, supplier contacts, product specs, target programs. Deterministic completeness gate; gaps chased same-day.
  2. Normalization (day 1–2): BOM to canonical schema; cost basis reconciled to ledger; anomalies flagged.
  3. Rules mapping (day 2): program(s) → applicable tests (iron/steel 100% vs manufactured product 55% vs construction materials; FHWA vs EPA vs NTIA specifics [S1][S8][S10]).
  4. Supplier evidence (day 2–7): AI-drafted, operator-sent origin attestation requests; replies parsed, validated, indexed; non-responders escalated to client with scripts.
  5. Computation & classification (day 5–7): content percentages computed in code; boundary calls queued for the senior expert.
  6. Determination & drafting (day 7–9): expert resolves calls, approves methodology, signs memo; letters drafted to each requesting format [S9][S15].
  7. QA & red-team (day 9): checklist pass; a second reviewer attacks every "qualified" conclusion; citation resolver run.
  8. Delivery & debrief (day 10): file pack + 30-min debrief; officer signs letters; gap plan walkthrough if not qualified.
  9. Follow-up: 30-day acceptance check with requesting parties; monitoring subscription pitch; renewal calendar set.

31Operations as product

Variance is the enemy; the operation is the moat. Standing assets: intake checklists and required-evidence lists per program; SOPs per workflow stage; exception queues (classification, evidence, methodology); reviewer assignment by product vertical; confidence scoring on every AI proposal; full audit trail (who/what/when for every number in the memo); version-controlled rules corpus with effective dates [S21]; gold-standard example files per vertical; red-team checks on qualified conclusions; customer-ready templates per agency; root-cause analysis on any letter rejected by a requesting party; postmortem loop feeding SOPs, prompts and checklists. Target: every tenth file in a vertical is cheaper and more consistent than the first.

32No-holes quality engine

33What the human expert actually does

TaskLicense req.Min/unit launchMin/unit day 90Automation pathQuality riskCannot automateAudit trail
Component/material boundary callsNone6025Precedent library auto-suggests; only novel calls surfaceMisclassification → wrong determinationNovel boundary judgmentDecision log w/ rationale
Cost-basis methodology approvalNone (CPA advisor on call)4015Standard methodologies templatized per ERP typeWrong basis → indefensible mathMethodology fit to client's booksMethodology memo section
Determination review & signingNone4520Cleaner drafts reduce edit time; never removedRubber-stampingThe signature itselfSigned memo, versioned
Client debriefNone3020Pre-built debrief deck from file dataOverpromising audit safetyTrust conversationCall notes to CRM
Escalations (counsel referral, evidence refusal)None15 avg10Trigger checklist routes automaticallyMissed referral → UPL/FCA driftJudgment to stopEscalation log
Total senior minutes19090

Operator (non-expert) minutes: 150 at launch → 60 at day 90 (chasing, spot-checks, packaging). Both tracks are day-90 kill tests (§49).

34Minimum viable offer

"BABA Fast-Track Qualification" — one product family, $2,500 founding rate (list $3,500), 10 business days, deliverables as in §13, plus a free Exposure Scan of the rest of the catalog to seed the next order. Cap: 10 founding accounts. Everything needed exists today: templates, rules corpus, AI workbench, one senior expert (founder or first hire), an e-sign tool and a spreadsheet.

35Fulfillment process (first 3 customers, manual-first)

  1. Founder runs intake call personally; data request via checklist email.
  2. BOM parsed with AI assist into the canonical workbook; classifications proposed by model, every one reviewed by the expert (100% review at launch).
  3. Supplier chases sent from a branded mailbox with merge templates; tracked in the workbook.
  4. Math in the workbook (formulas visible = client trust); memo and letters drafted by AI from the workbook, edited and signed.
  5. Deliver by email + debrief call. Ask for the catalog order and a referral.

Don't automate yet: classification review (need the precedent data), debriefs, pricing. Automate later: BOM ingestion, chase sequencing, monitoring diffs, status reporting.

36Tools and systems

FunctionDay-1 toolLater
AI workbenchClaude/GPT with structured prompts + eval setScripted pipeline w/ confidence routing
Rules corpusFolder of versioned PDFs + citation index sheetRetrieval store w/ effective-date tags
WorkbookExcel/Sheets canonical templateGenerated workbook w/ locked formulas
Supplier chaseMail merge + tracker tabSequenced automation w/ parse-on-reply
CRM / pipelineHubSpot free or sheetCRM w/ renewal automations
E-sign / deliveryDropbox Sign + branded PDF packClient portal (phase 3 only)
QAChecklist doc per gateAutomated gate runner + audit log

37Human-in-the-loop quality control

Launch posture: 100% expert review of all classifications and every memo. As the precedent library grows, review narrows to low-confidence and novel items — but three invariants never relax: (1) every determination is expert-signed; (2) every qualified conclusion survives adversarial second review; (3) every number traces to a document. Reviewer calibration: weekly gold-file exercises; drift measured by re-review sampling (5% of shipped files monthly).

38Nonlinear scaling and unit economics

$450k+
Revenue per FTE target at steady state (vs ~$180k/FTE consulting norm)
55–65%
Gross margin target by day 180 (50%+ threshold met with headroom)
2→6/day
Files per expert per day, launch → year 1, as review narrows to exceptions
COGS line (standard file, $3,500)LaunchDay 90Year 1
Model inference + doc processing$25$18$12
Hosting/software allocated$20$15$10
Operator labor (150→60→40 min @ $40/hr loaded)$100$40$27
Senior expert (190→90→60 min @ $120/hr loaded)$380$180$120
QA second review (45→25→20 min)$90$50$40
Supplier-chase comms + e-sign$15$12$10
Rework reserve (10%→6%→4%)$63$32$22
Total COGS$693 (80% GM)$347 (90% GM)$241 (93% GM)

Headline GM above is per-file contribution; blended company GM lands 55–65% after unsold capacity, scan fulfillment (free), sales support and monitoring-subscription service costs — still comfortably past the 50% bar. Automation share of pipeline steps: ~45% launch → ~70% day 90 → ~85% year 1. Cycle time 10 days → 5. Escalation-rate target <10%; quality-failure (letter rejected) target <5% with root-cause postmortems. CAC payback ≤2 files (outbound-led). Funnel assumptions (kill tests): scan→paid ≥25%; pilot→catalog ≥50%; monitoring attach ≥60%; renewal ≥70%. Margin expands with volume because the precedent library compresses expert minutes — the engine gets cheaper per unit as frontier models improve, satisfying the decoupling requirement: revenue grows with files and subscriptions, headcount grows with exception volume only.

39Distribution proof table

ChannelWhy ICP is reachableFirst message / angleConv. assumptionProof sourceMeasurementFollow-up
Targeted outbound to manufacturers on state DOT qualified/approved product listsQPLs are public rosters of exactly who must certify by 10/1/2026"Your [product] is on [state] QPL. On Oct 1 the 55% test applies. Free Exposure Scan?"3–5% reply → 30% scanPublic QPLs; FHWA rule [S1]Reply%, scan bookings per 100Scan → debrief → founding offer
Trade associations (ATSSA, NEMA verticals, AWWA/WWEMA, precast & ITS groups)Member alerts already cover BABA; associations need speakers [S14]Webinar: "The 55% test in plain English + live product teardown"1 webinar → 5–10 scansAGC hub precedent [S14]Registrants, scans per eventPost-event scan link + 1:1s
LinkedIn founder contentVP Sales/quality leaders congregate; law-firm alerts prove appetite [S2]Anonymized qualification teardowns; "can you sign this letter?" checklists2 posts/wk → 3–5 inbound/mo by day 60Law-firm content volume [S2][S19]Followers→scan conversionsDM → scan
Referral partners: gov-contracts attorneys, CPA firms, ERP consultantsThey get asked constantly; engagement too small for them"We do the fixed-fee file work; you keep the legal questions"2–3 partners → 1–2 files/mo eachAdvisory category exists [S12]Referrals per partner/qtrCo-branded scan reports
Distributor/contractor push-downThey need their suppliers certified to get paid [S15][S16]"Send your suppliers our scan link; certified suppliers keep your pay apps clean"1 distributor → 5–15 supplier leadsFlow-up cert requirement [S9][S15]Leads per distributorWhite-label scan page
Search/AEO on deadline queriesBuyers search "BABA 55% test," "Buy America certification letter" (Certivo invests here [S21])Per-agency guides + letter-template explainers + calculatorCompounding; 5–10 scans/mo by day 90Certivo content strategy [S13][S21]Organic scans/moEmail nurture to scan

40Sales and outreach plan

Motion: Scan → Debrief → Fast-Track file → Catalog program → Monitoring. The free Exposure Scan does the qualifying: it names the products at risk, the tests that apply, and the missing evidence — pain made visible in the buyer's own catalog. The debrief call presents findings and quotes the founding rate on the highest-stakes family. Objection handling: "our lawyer can do it" → lawyers opine, they don't build evidence files, and we're 10x cheaper; "we'll wait" → projects obligated after Oct 1 are already being bid today; "we bought software" → who signs the determination and who chases your suppliers?

41Founder-led content plan

Position the founder as the translator of a confusing regime: weekly teardown posts (anonymized real BOMs walked through the 55% math), plain-English rule explainers per agency, "cost of doing nothing" pieces built on FCA cases [S7], misconception series ("final assembly ≠ compliant after Oct 1"), and buyer-question mailbags harvested from webinars. High-performing posts become paid-ad creative and webinar topics later.

42First 30 days of content

10 educational posts: (1) The 55% test in one worksheet; (2) Component vs. material — the boundary that decides your math; (3) What "final assembly in the US" actually requires; (4) Iron/steel 100% vs manufactured-product 55% — which applies to your SKU; (5) The five certification letter formats agencies actually accept; (6) What happens at audit when the letter has no file behind it [S16]; (7) The Sept 2025 criminal indictment, explained for sales VPs [S7]; (8) EPA vs FHWA vs BEAD: same product, three regimes [S8][S10]; (9) How to ask your suppliers for origin attestations (free template); (10) The Oct 1, 2026 countdown checklist.

3 diagnostic teardown formats: live BOM walk-through webinar; "can you sign this?" letter audit of a public template; before/after gap-plan case (anonymized founding client).

2 lead-magnet angles: free BABA Exposure Scan (catalog screening memo); downloadable 55% self-test worksheet that funnels to the scan when the math gets ugly.

1 webinar: "Qualify before October 1: the 55% test for [vertical] manufacturers" with a trade association host [S14].

1 outbound diagnosis template: "We screened [product] from [state] QPL against the FHWA 55% test taking effect Oct 1. Three of your component categories look foreign-sourced from public data. 20 minutes to walk through the free scan?"

43Lead magnet and waitlist plan

Artifact before payment: the Exposure Scan memo — product-line risk table, applicable tests per program, missing-evidence list, and one worked example. Why it creates trust: it demonstrates the exact methodology the paid file uses, on their catalog. Pain signal captured: which families they ask about first = where revenue is at risk. Follow-up: debrief call within 5 days, founding-rate quote, 30/60-day nurture with rule-change alerts. Sales-ready when: a named product family + an active letter request or a bid pipeline into assisted projects + officer willing to sign. Waitlist mechanics: founding cohort capped at 10 accounts at $2,500; overflow joins a dated waitlist with a locked rate — scarcity is real (expert review capacity), not theater. Signups are treated as interest, not PMF; only paid conversion and renewal count (§53).

44Warm GTM plan

Week 1 outreach to: personal/professional network in construction products and gov contracting; webinar registrants; scan users; LinkedIn engagers; association staff contacts; and the referral-partner shortlist (3 gov-contracts attorneys, 3 regional CPA firms, 2 ERP consultancies). Offer: free scan + consultative debrief, founding rate for live files. Every scan debrief ends with two asks: the highest-risk family, and one distributor contact who's been demanding letters.

45Targeted outbound plan

List build: state DOT QPL/APL rosters × product verticals (ITS, lighting, drainage, precast accessories) filtered to $10–250M US manufacturers; NTIA/Commerce self-cert lists for who's conspicuously absent [S10][S11]; exhibitor lists from ATSSA/AWWA shows. Personalization: name the product, the list it appears on, and the specific test with its date. Lead with the diagnosis memo, never a demo ask. Sequence: email 1 diagnosis → email 2 worked example from their vertical → LinkedIn touch → email 3 founding-rate deadline. Volume: 30 accounts/week, quality over spray.

46Answer-engine / search visibility plan

Buyers now ask ChatGPT/Perplexity "does my product need to meet Buy America 55%?" — the sources those engines cite are law-firm alerts and agency PDFs [S2][S8]. Publish the clearest per-agency explainer pages on the open web (schema-marked, plainly written, with the actual thresholds and dates), a free calculator, and transparent pricing — the combination answer engines prefer to surface. Target queries: "BABA certification letter template," "FHWA 55% domestic content," "Buy America manufactured products 2026," "who certifies BABA compliance." Measure: assistant-referred scan signups (UTM + "how did you hear").

47Pilot design and early-demand trap mitigation

Founding cohort: 10 accounts max, one product family each, $2,500, 10-day SLA, in exchange for outcome data (was the letter accepted? by whom? any pushback?), a testimonial on success, and tolerance for a debrief questionnaire. The early-demand trap — mistaking deadline-panic signups for durable demand — is mitigated by instrumenting paid conversion, catalog expansion and monitoring attach as the real signals, and by capping the cohort so we learn instead of drowning. Custom work boundary: anything not producible from the standard file shape (e.g., waiver petitions, FCA response support) is referred out or scoped separately — pilots don't get bespoke engines.

48Early-access feedback flywheel

Weekly cohort review: every expert correction is classified (extraction error / classification call / methodology / drafting) and becomes a prompt fix, a rule, a checklist line, or a precedent entry — with an owner and a ship date. Client feedback channel: debrief questionnaire + 30-day acceptance check. Product feedback = anything about the standard file; custom work = new artifact requests (logged, not built). Fix-before-expand list: any Gate failure pattern, any letter rejection, any SLA miss ≥2 days.

49Build-before-scale checkpoints

507-day launch plan

  1. Day 1–2: finalize rules corpus v1 (2 CFR 184, M-24-02, FHWA rule, EPA/FEMA/NTIA guidance + templates); build canonical workbook + checklists.
  2. Day 2–3: build Exposure Scan template + landing page with scan CTA; engagement letter + data-request pack; E&O quote started.
  3. Day 3–4: build QPL-based outbound list v1 (100 accounts, 2 verticals); draft sequences; set up CRM + branded mailbox.
  4. Day 5: publish 2 cornerstone explainers + the self-test worksheet; founder LinkedIn post 1.
  5. Day 6–7: send first 30 outbound diagnoses; book association webinar slot; run 1 full dry-run file on a synthetic BOM through all gates.

5130-day launch plan

  1. Weeks 2–3: deliver first 3–5 scans; convert ≥2 founding files; ship them through the full pipeline; collect acceptance outcomes.
  2. Week 3: webinar #1 with association or partner; publish teardown #1; referral-partner kits to 8 firms.
  3. Week 4: postmortem cohort #1; harden per §49-5; publish pricing page + per-agency guide #2; 120 cumulative outbound accounts; decide founding-rate extension based on funnel data.

5290-day launch plan

  1. Reach 10 founding accounts; run 10-account checkpoint and kill tests (§49).
  2. Launch Monitoring subscription to all qualified clients (attach target ≥60%).
  3. Stand up supplier-chase automation + BOM ingestion scripts (biggest minute sinks).
  4. Publish 6 per-agency/vertical guides + calculator; webinar cadence monthly; first distributor push-down partnership live.
  5. Hire/contract second reviewer if expert utilization >70%; begin SOC 2 scoping.
  6. Day-90 go/kill review against §53 gates; if green, open catalog programs at list pricing.

53Metrics and KPIs

MetricTargetKill threshold (day 90)
Exposure Scans delivered25 by day 90<10 → demand-capture failing
Scan → paid conversion≥25%<12% → offer/pricing wrong
Paid files delivered on SLA≥90%<70% → ops not repeatable
First-pass letter acceptance≥90%<75% → artifact credibility problem
Expert minutes/file≤120 by day 90>200 → margin model fails
Catalog expansion (2nd order)≥50% of clients<25% → one-and-done market
Monitoring attach≥60%<30% → no recurring layer
CAC payback≤2 files>4 files
Rework rate≤6%>15%
Determinations overturned0Any → immediate methodology review

54Risks and mitigations (summary)

The four that matter most: (1) willingness-to-pay is assumed, not proven — mitigated by the capped founding cohort and hard kill tests; (2) rule instability (EO-driven waiver changes, reauthorization politics [S18][S20]) — mitigated by the versioned rules corpus and monitoring subscription that monetizes change instead of suffering it; (3) data-quality dependence — client cost data may be garbage; mitigated by attestation requirements and refusal-to-issue discipline; (4) incumbent drift into our lane — Certivo adding services or CPA firms productizing; mitigated by speed, the mid-market price point, and the precedent library. Full register below.

55Exhaustive risk register

R1 — Willingness-to-pay below model (commercial, high)

Mid-market may haggle below $2,500/family. Mitigation: founding cohort tests price directly; fallback is catalog bundles raising ACV while lowering per-family optics. Kill test at day 90.

R2 — IIJA expiration / reauthorization turbulence (market, medium)

IIJA lapses 9/30/2026 [S18]. But BABA is permanent law spanning all federal infrastructure assistance, and FHWA formula programs continue under any reauthorization; EPA SRF/HUD/USDA flows are independent. Mitigation: multi-agency ICP spread; message the permanence.

R3 — Waiver expansion guts the tests (regulatory, medium)

A future administration could restore broad waivers. Current direction is the opposite — tighter waivers [S20]. Mitigation: monitoring subscription converts every rule change into billable re-tests; diversify into BAA/TAA (rising thresholds [S21]).

R4 — FCA accessory exposure (legal, high impact / low likelihood)

A client falsifies inputs; we papered it. Mitigation: client data attestations, evidence gates, refusal-to-issue policy, E&O, counsel-drafted engagement terms, audit trail proving our diligence.

R5 — UPL drift (legal, medium)

Determinations shade into legal opinions. Mitigation: citation-bound methodology, counsel referral triggers, engagement-letter disclaimers, attorney review of template language at setup.

R6 — Expert bottleneck (operational, high)

One signer caps throughput and is a bus-factor risk. Mitigation: precedent library shrinks review minutes; second reviewer hired at 70% utilization; documented methodology makes the role trainable.

R7 — Client data quality (operational, high)

ERP exports and cost ledgers are messy or wrong. Mitigation: completeness gates, anomaly detection, workbook transparency, conditional determinations scoped to provided data.

R8 — Supplier non-response stalls files (operational, medium)

Origin attestations don't come back. Mitigation: SLA clock pauses disclosed upfront; escalation scripts through the client's purchasing leverage; conditional qualification with documented outstanding items.

R9 — Certivo/SaaS adds done-for-you layer (competitive, medium)

Funded software adds services. Mitigation: they monetize seats, services dilute their model; we own the mid-market relationship and the signed-accountability position; partnership is as likely as collision.

R10 — CPA firms productize down-market (competitive, medium)

Mitigation: our price point and SLA are structurally unattractive to leverage-model firms; we win on speed and per-unit economics; become their referral outlet instead.

R11 — Hallucinated citations / wrong math ships (quality, low with gates)

Mitigation: deterministic recomputation, citation resolver, adversarial review, zero-overturn KPI with immediate methodology review on any failure.

R12 — Confidential BOM/cost data breach (security, low likelihood / high impact)

Mitigation: client-segregated storage, least-privilege access, no training on client data, SOC 2 roadmap, breach-response plan and insurance.

R13 — Deadline passes and urgency fades (market, medium)

Post-10/1/2026, panic converts to routine. Mitigation: by then the monitoring base and flow-up (contractor-side) desks provide recurring revenue; thresholds keep escalating through 2029 [S21].

R14 — Association/partner channels underperform (GTM, medium)

Mitigation: QPL-based outbound is fully self-serve and measurable; channel mix rebalanced at day-30/60 reviews.

56What could kill this

Honestly: (1) the mid-market deciding a template letter signed blind is good enough until someone in their vertical gets sued — timing risk we mitigate but can't control; (2) a broad regulatory retreat restoring the manufactured-products waiver; (3) failure to compress expert minutes, leaving us a boutique consultancy with AI garnish; (4) a funded competitor giving away qualification as a loss-leader for software seats. Each has a named kill test or watch-trigger in §49/§53/§55.

57Go/no-go reasoning

Go. Evidence threshold met on every element: named buyer (VP Sales at newly covered manufacturers), specific painful problem (can't defensibly sign demanded certifications; 55% test dated), verified existence and spend (agency templates, CPA advisory, funded SaaS, FCA fear [S8][S12][S13][S7]), narrow MVP (one file, one family, 10 days), practical first-sale path (QPL outbound + scan), no fatal regulatory blocker (self-attestation regime; no license required to prepare documentation), credible 50%+ GM path (§38), believable distribution (§39). Honest weaknesses — unproven price acceptance, deadline-dependent urgency, expert-minute compression — are instrumented as kill tests rather than hand-waved.

58Final recommendation

Build DomesticProof now, aimed at FHWA-affected highway-product manufacturers, with the free Exposure Scan as the wedge and October 1, 2026 as the drumbeat. Cap the founding cohort at 10, measure the four kill metrics ruthlessly at day 90, and expand to EPA SRF and BEAD verticals only after the wedge converts. The countdown clock is the campaign; the evidence file is the product; the monitoring subscription is the business.

59Source list

  1. Federal Register — Buy America Requirements for Manufactured Products (FHWA final rule), Jan 14, 2025
  2. Crowell & Moring — End of the Road: FHWA Rescinds Longstanding Buy America Waiver
  3. TRUSS FABER — BABA: Key 2025 and 2026 Rule Changes
  4. GAO-25-107243 — Infrastructure Grants: Status of Funding as of Dec 31, 2024
  5. US DOT — IIJA Funding Status
  6. Wiley — Key Takeaways from DOJ's FY 2025 False Claims Act Report
  7. Mondaq — Manufacturers See Rising FCA Risk With U.S.-First Laws
  8. EPA — BABA FAQs for Manufacturers (June 2025)
  9. EPA — Manufactured Product Certification Letter Template
  10. NTIA — BABA Compliance and Reporting Requirements (Oct 2025)
  11. US Commerce — BABA Self-Certification List
  12. Cherry Bekaert — BABA: Key Compliance Rules
  13. BusinessWire — Certivo Raises $4M Seed Round (Feb 2026)
  14. AGC — BABAA Resource Hub
  15. Indiana OCRA — BABA Manufacturer Certification Letter / MN NAHRO — BABA Contractor Compliance Form
  16. Cherry Bekaert — BABA Basics & FAQs
  17. FHWA — Announcement: Updates to Buy America Requirements
  18. ConstructionOwners — Infrastructure Funding Cliff 2026
  19. K&L Gates — The Expanding False Claims Act (Jun 2026)
  20. Holland & Knight — EO Increases Scrutiny on Buy American (Mar 2026)
  21. Certivo — Buy America Compliance in 2026
  22. FedBizAccess — BABA Explained for Small Businesses
  23. eAssist — Dental Insurance Verification Pricing / Teero — Outsourcing Dental Insurance Verification
  24. College Sports Commission — Revenue Sharing / Bradley — Enforcing After House
  25. CFPB — Supervisory Highlights, Auto Finance Special Edition / Allied Solutions — The GAP Trap
  26. CivicPlus — Current Issues in Public Records Request Management
  27. eCFR — 42 CFR Part 422 Subpart V (MA Communication Requirements) / Ritter — Medicare Call Recording FAQs

Generated 2026-07-07 by the AI-Native Service Business Discovery & Blueprint Factory. Claims labeled Verified / Inferred / Unverified per the source-claim matrix (§16). This document is business research, not legal advice.