Enterprise workflow
Not ours. The tenant model wins its own ground and should.
- Intermediary
- The tenant itself
- Principal
- The organization
- Outlives an org
- No
None. We do not sell against Okta or Entra inside a tenant.
Strategy
Where the bet
is placed.
The thesis says what the substrate and the estate are. This page says where they go first, where they go next, and where they do not go at all — and, for each bet, what would have to be true for it to win. It is a strategy, not a principle: it will change as the evidence does.
01What qualifies a domain
Four conditions. A domain needs all of them.
01
The person is the paying principal
Not the organization. Where the organization pays, the tenant model is the right answer and we do not compete with it.
02
The organizations are many and small — or losing the relationship
None large enough to be the root; or intermediaries that held the relationship are losing it to direct provider–consumer ties.
03
The records must outlive every organization
Giving, formation, relationships, itineraries, receipts: things a person carries across organizations and decades, that no single tenant can hold for them.
04
No incumbent intermediary owns the crossing
Where a card network or a distribution system already federates the case, the substrate is one signal among the intermediary’s — unless the intermediary is losing the record.
02The domain bets
Two beachheads. One is a bet on what has already happened; the other on what is happening.
Faith communities, mission work, mutual care
The first beachhead. The only column where the substrate’s claims are not already someone else’s product.
- Intermediary
- None. Many small organizations, none large enough to be the root; church-management SaaS holds each one’s slice
- Principal
- The person, mostly
- Outlives an org
- Yes — giving, formation, relationships and safety-sensitive records follow a person across congregations, agencies and decades
The bet
A person-centric record and a person-issued grant beat “each organization’s system of record plus its agent,” because the person belongs to several organizations and the organizations cannot afford to be roots.
What must be true
Two separately governed organizations complete real work under it — an invitation, a payment, a migration — and prefer it to the church-management platform they have.
Travel
The second beachhead: the disintermediation bet.
- Intermediary
- Today: card networks, GDSs, OTAs. Tomorrow, on this bet: fewer of them
- Principal
- The traveller
- Outlives an org
- Yes, on this bet — the itinerary, the preferences, the loyalty and the receipts are the traveller’s, not an airline’s order record
The bet
Providers want the direct relationship with the consumer and are winning it; OTAs and GDSs lose control of the order as that happens; the airlines’ own answer — “One Order,” NDC — is a tenant move that keeps the order inside the carrier. The traveller’s agent, carrying the traveller’s itinerary and issuing mandates to providers it engages directly, is the shape that serves both the consumer and the provider once the intermediary is gone. Payment still clears through a network; the network is a settlement rail under the mandate, not the root of the traveller’s authority.
What must be true
Providers accept a traveller-issued mandate at admission in preference to an intermediary’s token, because it brings them the direct relationship and the receipt. A traveller carries one itinerary across an airline, a hotel and a ground operator with no OTA holding the master record. The card network clears a mandate-bound payment without needing to be the authority.
Healthcare, education
Later, through regulation-driven portability. Not a beachhead.
- Intermediary
- Regulators and large institutions
- Principal
- Mixed
- Outlives an org
- Yes, by law
The bet
Portability mandates will want a record the person carries, and a substrate that already has one.
What must be true
A regulator names an owner-held, verifiable record as an acceptable form.
03Sequence
First, next, later, never.
- First
Faith communities and mission work, on the estate that already runs. The test is two separately governed organizations completing an invitation, a payment and a migration under it, and preferring it to the platform they have.
- Next
Travel at the long tail — independent hotels, ground operators, the routes carriers do not serve — where a provider already wants the direct relationship. The card network is a settlement rail under the mandate. If providers keep choosing the intermediary’s token at admission, the bet is wrong and this page will say so.
- Later
Healthcare and education, when a regulator names an owner-held, verifiable record as an acceptable form of portability.
- Never
Enterprise workflow inside a tenant. The tenant model wins its own ground; the estate federates with it at admission for the person the tenant does not own.
A bet is written down with what would have to be true. When the evidence goes the other way, the bet changes here before the thesis does.
The thesis the strategy serves.
What the substrate and the estate are, stated as a bet against the field’s consensus — and the project’s own critical reading of it.