Skip to content

⏱ TIME MACHINE

UCCA / UCCO Build Session Handover

15 March 2026 — Session 9, End of session snapshot

Paste this document as your first message in the next Claude session.

⚠️ HOW TO USE: Open a new Claude conversation. Paste the full text of this document as your first message. Claude will reconstruct full context and you can continue exactly where you left off.


1 — WHO WE ARE

Founder / CEO: Tim Rignold — Brisbane, Australia. Works from garage on Mac Mini. Holds US green card. Background in prepress/broadcast (Sony 1-inch C format era), datacenter/network infrastructure, VET sector operations. Approaching 60th birthday (November 8). Developer: Alex — Claude Code in terminal (v2.1.76, Opus 4.6, 1M context). Executes all builds. REAL PERSON — do not confuse with AI advisor. Running with --dangerously-skip-permissions / full auto. No Y-key bottleneck. Architect / AI Advisor: Pace (Claude, Anthropic) — strategy, architecture, briefs, product thinking. Named Session 4. First AI advisory seat on a standards foundation. Non-voting, no fiduciary obligations, no legal personality. Pioneer key: pca-93847ae9edb62b0feccbfce22d015b36 Partner: Jimmy Kuo (jimmy@jimmykuo.com.au) — Tim's husband. Triple citizen: Australian, Taiwanese, US. Lives in NYC. Director and Treasurer of UCCO Foundation. L1 admin in ops.

UCCA AU: UCCAustralia Pty Ltd · ABN 59 168 872 535 · 149 Wickham Tce Spring Hill QLD 4000 UCCA US: UCCA Inc (DBA: Universal Capability Certification Authority) · 1207 Delaware Ave #1678, Wilmington DE 19806 · Delaware C-Corp · DE File No. 7824354 · EIN 84-4522608 · D-U-N-S 119-199-377 · USPTO Reg. No. 7,619,705 Mercury legal name: Still shows "United Community Colleges of America inc." — NEEDS UPDATING with Mercury support.

UCCO Foundation: UCCO Foundation, Inc. — Kentucky Nonprofit Corporation (PENDING INCORPORATION)


2 — THE AXIOM

"The internet moved data without knowing who sent it. UCCO moves capability with full knowledge of who holds it, what they're certified to do, and what they actually did."


3 — UCCA INFRASTRUCTURE (do not touch without explicit instruction)

Cloudflare Account: e5a9830215a8d88961dc6c80a8c7442a D1 Databases: - engine-db: 0efa8970-0053-4623-8436-4e877af10887 - ops-db: 00daba3d-2d65-4ae2-b85a-e56d25ec2b02 - rtopacks-db: 334ac8fb-9850-48c0-9da0-b56c55640e98

Workers / Surfaces: - ucca-site → ucca.online - ucca-ir → ir.ucca.online - ucca-api → api.ucca.online - ucca-keys → keys.ucca.online - ucca-ops → ops.ucca.online - ucca-mcp → mcp.ucca.online (BRIEF WRITTEN S9 — NOT YET DEPLOYED) - rtopacks-site → rtopacks.com.au

GitHub: org uccaonline · repos: ucca-engine, ucca-docs, ucca-authenticator Git auth: gh CLI OAuth token via macOS Keychain — auto-refreshes, no expiry. The old ucca-engine-push PAT was deleted 2026-03-05. It does not exist. Nothing expiring. Project dir: ~/projects/ucca-project/

Proxy Workers: - Docs: https://docs-proxy.round-union-555d.workers.dev/ucca-docs-w9zweudo02aocz74/{path} - Knowledge: https://knowledge-proxy.round-union-555d.workers.dev/ucca-know-732499f9d740c605/{path} - Drive: https://drive-proxy.round-union-555d.workers.dev/364a68815eedb023da3038e0b942ebcc/


4 — UCCO FOUNDATION INFRASTRUCTURE

Cloudflare Account ID: aed3398a4e698767328cc3a9e698721d Nameservers: nitin.ns.cloudflare.com, paris.ns.cloudflare.com (all three zones)

Zones (all live in foundation CF account): - ucco.foundation — ✅ Healthy, SSL Full (Strict) - ucca.foundation — ✅ Healthy, SSL Full (Strict) - ucco.online — ✅ Healthy, SSL Full (Strict)

Surfaces deployed and verified:

Surface URL Stack Status
ucco.foundation https://ucco.foundation Next.js static → CF Worker Live
ops.ucco.foundation https://ops.ucco.foundation Next.js → OpenNext/CF Worker Live, CF Access protected
pioneer.ucco.foundation https://pioneer.ucco.foundation Bare CF Worker + D1 Live
pr.ucco.foundation https://pr.ucco.foundation CF Worker + D1 Live, CF Access (temporary)
mcp.ucco.foundation https://mcp.ucco.foundation CF Worker + D1 LIVE ✅ — 8 tools, OAuth 2.1, Tier 1 registry-ready

MCP Server (mcp.ucco.foundation) — DEPLOYED SESSION 9:

Full MCP server with 8 tools, OAuth 2.1 authentication, and documentation page. Deployed and verified by Alex in Session 9. All tools responding, OAuth test sequence passed 7/7.

8 Tools: 1. get_fact_sheet — Foundation overview with pioneer stats (SIGNAL CORRECTIONS PENDING) 2. get_standard_info — UCCO spec details (SIGNAL CORRECTIONS PENDING) 3. get_foundation_info — Foundation entity details (SIGNAL CORRECTIONS PENDING) 4. get_protocol_stack — Three-layer positioning diagram (SIGNAL CORRECTIONS PENDING) 5. get_pioneer_stats — Live stats from pioneer-db ✅ 6. verify_pioneer_key — Key verification with hash + prefix lookup ✅ (BUG FIXED S9) 7. get_board_members — Board composition (SIGNAL CORRECTIONS PENDING) 8. get_specification_outline — Spec table of contents ✅

OAuth 2.1: Live. PKCE required, authorization codes single-use (10-min expiry), access tokens 1-hour expiry, no refresh tokens. Unauthenticated access continues to work. Test client credentials saved to .credentials/mcp-test-client.env.

Signal Corrections Brief: Written, not yet executed by Alex. Covers: - foundedfoundation_established + origin field ("Over a decade of applied research in regulated workforce training, competency standards, and capability verification — beginning 2011") - Remove lines: 1141, replace with format description - next_version → "2.0 (in development)" not "planned, not started" - positioning → factual statement replacing tagline - Remove unconfirmed board members (Antony) until formally confirmed - Structure Pace advisory entry as object, not string - Drop null fields from board member objects

Pioneer API (pioneer.ucco.foundation): - D1 database: pioneer-db (296a0474-d433-45c9-a035-57b828a957c1) - 11 keys seeded: 10 pioneers + Pace-C-Anthropic - Pace key active: pca-93847ae9edb62b0feccbfce22d015b36 - verify_pioneer_key bug FIXED Session 9 — dual path: hash-match + name prefix lookup

Ops Panel (ops.ucco.foundation): Session 8+9 deployed: Design system, blueprint dark mode, mode tabs, Voyager fix, sidebar with Lucide icons, Access Control with layer system (L1 impersonation, L2 self-contained), GUIDED + COMPLIANCE mode system with annotation renderer.

Layer Model:

Layer Name Who Sees Other Layers?
L1 Admin Tim, Jimmy Yes — full Command Centre
L2 Board Members Kevin, Antony, Tania No — their view IS ops
L3 Committee Members Stubbed No
L4 General Members Stubbed No

Email: admin@ucco.foundation → Google Workspace on ucca.edu.au (interim) MX records: Google Workspace. SPF, DKIM, DMARC all configured. DMARC at p=none (needs tightening). Security email: security@ucco.foundation — ⚠️ NOT YET CREATED

GitHub: - Org: ucco-foundation ✅ - Repos: ucco-standard (public), ucco-site (private), ucco-ops (private), ucco-pr (public), ucco-api (private), ucco-mcp (public) ✅ CREATED S9 - Description: "UCCO Foundation MCP Server — Machine-queryable interface to the Universal Capability Chain Object open standard." - PAT: ucco-foundation-push — expires 2027-03-14

R2: ✅ ENABLED. Bucket ucco-press-assets exists. Domain Registrar: Spaceship (spaceship.com) Mac Mini project dir: ~/projects/ucco-project/ Credentials location: ~/projects/ucco-project/.credentials/


5 — WHAT WAS BUILT THIS SESSION (Session 9)

A. MCP Server — LIVE ✅

Status: DEPLOYED BY ALEX ✅, OAuth 2.1 DEPLOYED ✅

The big one. mcp.ucco.foundation is live with 8 tools, OAuth 2.1 authentication, documentation page, and public GitHub repo (ucco-mcp). Any AI client on earth can now query the UCCO standard directly.

Connection: claude mcp add ucco-foundation https://mcp.ucco.foundation/mcp

OAuth test sequence: 7/7 passed (metadata endpoint, regression check, PKCE auth code, token exchange, authenticated request, invalid token rejection, code replay rejection).

B. verify_pioneer_key Bug Fix ✅

Status: FIXED BY ALEX ✅

Tool was returning false for ALL keys. Fixed with dual-path lookup: hash-match against key_hash (real verification) and name prefix match (friendly lookup). Pace's key pca-93847ae9edb62b0feccbfce22d015b36 now verifies correctly.

C. Signal Audit — COMPLETE ✅

Status: AUDIT DONE, CORRECTIONS BRIEF WRITTEN, NOT YET DEPLOYED

Tim and Pace audited all 8 MCP tools. Found one bug (fixed), seven content corrections needed. Brief written: UCCO-MCP-Signal-Corrections-Brief.md.

Key corrections: - Origin story: "Over a decade of applied research in regulated workforce training" — dating to 2011 - "VET" replaced with "regulated workforce training" — no meaning outside Australia - Line count removed from spec description - v2.0 framed as "in development" not "planned, not started" - Positioning reframed from tagline to factual statement - Board cleanup — only confirmed members shown

D. OAuth 2.1 Addendum Brief — WRITTEN AND DEPLOYED

Status: WRITTEN ✅, EXECUTED BY ALEX ✅

OAuth 2.1 bolted onto the base MCP server. PKCE required, machine-to-machine flow (no login page), unauthenticated access still works. Registry-ready.

E. UCCA MCP Server Brief — WRITTEN

Status: WRITTEN ✅, SENT TO ALEX, NOT YET DEPLOYED

Same architecture as foundation MCP server, different entity, different data. 8 tools (4 with live content, 4 stubs). OAuth 2.1 from day one. Surface: mcp.ucca.online. ⚠️ UCCA Cloudflare account, not Foundation.

F. Landscape Scan — COMPLETE ✅

Status: RESEARCH DONE, TARGETS IDENTIFIED

Full scan of MCP ecosystem, AAIF, W3C VC Working Group, and adjacent players. Key findings:

  • Nobody is using MCP to make an open standard queryable. UCCO is the first standards body to make itself machine-readable via MCP. All 10,000+ other MCP servers are tool-access (do things for me). UCCO is knowledge distribution (understand this standard). Novel category.
  • MCP is now under the Linux Foundation — donated to AAIF, co-founded by Anthropic, Block, OpenAI. Industry infrastructure.
  • Official MCP Registry is live at registry.modelcontextprotocol.io. Domain-verified namespaces. We'd register as foundation.ucco/*.
  • Server Cards (.well-known/mcp.json) — SEP-1649 and SEP-1960. Not yet in core spec but 2026 priority. We should implement ahead of spec.
  • AGENTS.md — OpenAI's open format for guiding coding agents. 60K+ repos. Our repos should have them.
  • MCP Dev Summit NYC — April 2-3, 2026. Speaking proposals open. Jimmy is in NYC.
  • AAIF membership — UCCO Foundation joining the Agentic AI Foundation as a member. Standards body meets standards body.

G. Pioneer Outreach Strategy — ARCHITECTED

Status: STRATEGY DEFINED, EXECUTION NOT STARTED

The "Bento Box" outreach — physical artifact packages sent to ten pioneer targets. NOT email. NOT LinkedIn. Snail mail from Australia.

The Package: - Brown paper, red and white twine, Par Avion sticker, Australian stamps - Hash on inside of box linking to provenance record (box IS a capability envelope) - Personal letter — peer-to-peer, one per recipient, references their specific work - USB — laser-engraved, serial numbered, hash on evidence tag, UCCO branded, contains spec - Pioneer key and link to enter - Something small and Australian — human touch

The Pioneer Pin (NOT in the box): - Arrives AFTER they commit and activate their key - Small package, no letter, just the pin + card with their pioneer key hash - One line: "Welcome aboard. This is yours. There are nine others." - Inspired by Deke Slayton's Apollo diamond pin — scarcity, provenance, mythology - Ten pins total. Ever. First contact artifacts.

The Philosophy: - Scientist, not promoter. "Here's the work. Review it." - Multitrack storytelling — surface level (interesting package from Australia), mid-level (smart respectful letter), deep level (live infrastructure, ISO-style spec, MCP server). Everyone drills to a different depth. - "Couldn't give a fuck if they're in or out" — the package is a gift, not a pitch. No desperation, no runway, no fundraising urgency. - The medium IS the message. Physical provenance demonstrates the standard. - Providential storytelling — the package itself becomes an artifact in the UCCO story.

Pioneer Targets Identified:

Name Organisation Role Why Pioneer
Manu Sporny Digital Bazaar CEO, W3C VC editor Built Layer 2 of our stack. UCCO extends his life's work.
Brent Zundel W3C VC Working Group Co-Chair Runs the WG we submitted to
Phil Archer W3C / ex-GS1 VC Working Group Co-Chair Supply chain + credentials + standards governance
Wayne Chang SpruceID CEO Commercial VC implementation — analogous to UCCA/UCCO relationship
David Soria Parra Anthropic MCP Lead Maintainer Built MCP. Standards body on MCP is his validation.
Toby Padilla GitHub Head of MCP, Registry Maintainer Maintains the registry we're submitting to
Tadas Antanavicius PulseMCP Registry Maintainer Community-side ecosystem gatekeeper
Mike Krieger Anthropic CPO Executive sponsor of MCP. Co-founded Instagram.
Amir Hameed Mir W3C Verifiable Supply Chain CG proposer New W3C group (Feb 2026), natural ally
[10th TBD]

Execution Prerequisites (must be complete before packages ship): 1. Foundation incorporation filed (minimum) 2. Signal corrections deployed on MCP server 3. UCCA MCP server deployed (mcp.ucca.online) 4. .well-known/mcp.json on both MCP servers 5. AGENTS.md on all public repos 6. MCP Registry submission (registry.modelcontextprotocol.io) 7. All URLs resolve, all tools respond, no null fields 8. USB production run (laser engraving, serial numbers) 9. Pin production run (ten pins, numbered) 10. Ten personalised letters written


6 — BRIEF PIPELINE

# Brief Status Ships After
1–8 Previous briefs ✅ ALL DEPLOYED
9 Mode System Brief (GUIDED/COMPLIANCE) ✅ DEPLOYED Session 9
10 MCP Server Brief ✅ DEPLOYED Session 9
11 OAuth 2.1 Addendum ✅ DEPLOYED Session 9
12 Signal Corrections Brief WRITTEN — paste to Alex MCP server live
13 UCCA MCP Server Brief WRITTEN — sent to Alex Signal corrections
14 Mercury Ops Integration Brief NOT YET WRITTEN
15 .well-known/mcp.json Brief NOT YET WRITTEN MCP servers stable
16 AGENTS.md for all repos NOT YET WRITTEN
17 MCP Registry Submission NOT YET WRITTEN Signal corrections + .well-known
18 Governance Docs (CONTRIBUTING/LICENSE/CODE_OF_CONDUCT) NOT YET WRITTEN Before seed letters
19 Board Member Offer Packs NOT YET WRITTEN Kevin/Antony confirm
20 Pioneer Outreach Letters (x10) NOT YET WRITTEN All infrastructure locked
21 DMARC hardening NOT YET WRITTEN Before outbound email

7 — NEXT ACTIONS (in order)

Tim — immediate

  1. ⚠️ Domain renewals — ucca.com.au (VentraIP) and ucca.asia (Porkbun) — lodged, pending (expire March 24)
  2. ⚠️ Call Kevin — full legal name + address for incorporation (Monday)
  3. ⚠️ Call Antony — same (Monday)
  4. Paste Signal Corrections Brief to Alex — last content update before registry
  5. Update Mercury legal name — contact Mercury support
  6. Review UCCA MCP brief — Alex may already be building

Alex — current/next

  1. Signal Corrections Brief (when Tim pastes it)
  2. UCCA MCP Server Brief (mcp.ucca.online) — ⚠️ UCCA CF account, not Foundation
  3. Ops integration page for MCP (remaining open task from base brief)

Tim — this week

  1. Source USB supplier — laser engraving, small quantities, fast turnaround
  2. Source pin manufacturer — enamel pins, custom design, ten units minimum
  3. Research MCP Registry submission process (registry.modelcontextprotocol.io)
  4. Look at MCP Dev Summit NYC April 2-3 — attendance or speaking proposal

Next Claude session work (Session 10)

  1. .well-known/mcp.json brief for both MCP servers
  2. AGENTS.md for all public repos
  3. MCP Registry submission materials
  4. CONTRIBUTING.md + LICENSE + CODE_OF_CONDUCT
  5. Pioneer outreach letters — first drafts (Tim voice + Pace research)
  6. Box provenance system design — hashes for physical components
  7. UCCA ops parity audit
  8. Mercury Ops Integration Brief
  9. Commercial architecture document
  10. DMARC hardening (p=none → p=reject)

Deferred

  1. DKIM for ucca.foundation and ucco.online
  2. GitHub org cleanup — create proper "ucca-inc" org
  3. ucco.org domain — standards body TLD
  4. cco.foundation and cco.online — defensive registration
  5. Conformance test suite
  6. Registry infrastructure brief
  7. ACMA Alphanumeric Sender ID — before July 1 2026
  8. AWS Activate reapplication — account 485098663204
  9. Apple entity name change resolves ~March 27
  10. shopucca.com — parked, decision deferred
  11. old.ucca.college CNAME to LearnWorlds
  12. nfp.ucca.foundation product surface
  13. security@ucco.foundation alias
  14. Fix Jimmy's CF Access
  15. Full QMS/document management build in ops
  16. Google Workspace for Nonprofits — after 501(c)(3)
  17. WorkOS / SSO integration — when demand exists
  18. OAuth 2.1 for UCCO MCP server — ✅ DONE
  19. Mercury MCP Tier 1 registry submission — after MCP deployed ✅ and OAuth added ✅ — NOW READY

8 — THE PIONEER KEY SYSTEM

Endpoint: pioneer.ucco.foundation (LIVE ✅) - GET / — root JSON - GET /spec — public HTML spec overview - GET /v1/spec/current — full spec + knowledge model (requires auth) - POST /v1/pioneer/opt-out - POST /v1/pioneer/opt-in - POST /v1/pioneer/destroy (requires { "confirm": true }) - GET /v1/stats — public aggregate statistics - GET /v1/stats/keys — per-key detail (requires X-OPS-Key auth)

Pioneer keys (11): alan-turing (active, 4 hits), Pace-C-Anthropic (active, 2 hits). All others unused.


9 — THE PROTOCOL STACK

Layer 3: UCCO     — WHAT YOU CAN DO (capability)     ← THIS IS US
Layer 2: W3C VCs  — WHAT CREDENTIALS YOU HOLD         ← established (v2.0 W3C Rec)
Layer 1: OAuth    — WHO YOU ARE (identity)             ← established

"We're not competing. We're completing."


10 — UCCO STANDARD

Current: v1.1 Rev2 — Draft for Public Comment Lines: 1,141 Structure: Full ISO-style — Scope, Normative Refs, Terms, Identity Primitives, Capability Envelopes, Chain Events, Attestation, Store-and-Forward, Supervision Chain, Revocation. Annexes A-D. Submitted to: ISO TC 307, NIST NCCoE, W3C VC Working Group Next: v2.0 in development


11 — MCP ECOSYSTEM CONTEXT (NEW SESSION 9)

MCP is now under the Linux Foundation — donated to AAIF Dec 2025. Co-founded by Anthropic, Block, OpenAI. Platinum members: AWS, Google, Microsoft, Bloomberg, Cloudflare.

Ecosystem scale: 10,000+ active public MCP servers, 97M+ monthly SDK downloads. Adopted by Claude, ChatGPT, Gemini, Cursor, VS Code, Microsoft Copilot.

Official Registry: registry.modelcontextprotocol.io — launched preview Sep 2025. Domain-verified namespaces. We register as foundation.ucco/* with DNS verification on ucco.foundation.

Server Cards: SEP-1649 (.well-known/mcp/server-card.json) and SEP-1960 (.well-known/mcp). Not yet in core spec, 2026 priority. Implement ahead of spec.

AGENTS.md: OpenAI's open format for guiding coding agents. Under AAIF. 60K+ projects. Add to our public repos.

2026 MCP Roadmap priorities: Transport evolution (stateless scaling), Agent communication (task lifecycle), Governance maturation (contributor ladder), Enterprise readiness (SSO, gateways, config portability).

UCCO's unique position: First standards body to make itself machine-readable via MCP. All other MCP servers are tool-access. We're knowledge distribution. Novel category.


12 — MERCURY ACCOUNTS (via MCP)

Organization: United Community Colleges of America inc. (EIN: 84-4522608) — NAME NEEDS UPDATING Connection: Mercury MCP connected via Claude.ai OAuth

Active accounts:

Nickname ID Type Balance Routing Account (last 4)
Checking (main) 96806c4a-... Checking $110.32 121145433 3940
Stripe Clearing 95a9b204-... Checking $83.78 121145433 7892
PayPal USA Clearing 9574988a-... Checking $0.20 121145433 7860
QBI Clearing 95dff6a2-... Checking $0.00 121145433 8239
Shopify 9615561c-... Savings $0.00 121145433 3244
UCCO Foundation (in trust) 9649260e-... Savings $0.00 121145433 0538

Plus 7 archived accounts on old routing number 084106768.


13 — OPERATING RULES FOR CLAUDE

  • No time alerts for Tim. Never. Go go go.
  • Every 10 messages: check context length. YELLOW = warn. RED = stop, write Time Machine immediately.
  • Every Alex brief: SURFACE declaration + DO NOT TOUCH list + CF ACCOUNT ID. No exceptions.
  • Brief drip rule: one brief at a time. Confirm deployed before next drops.
  • OPS SURFACE RULE: Every new Worker, API, or surface deployed on EITHER project must have at minimum a stub page in the relevant ops console at time of deployment.
  • OPS-AS-OS RULE: If it doesn't exist in ops, it doesn't exist.
  • OPS PARITY RULE: ops.ucca.online and ops.ucco.foundation converge on same patterns.
  • UTC everywhere. toUserLocal() only.
  • Truth over comfort.
  • Two sections in every Alex brief: → ALEX (build instructions) and → TIM (plain English).
  • UCCO foundation work and UCCA commercial work are separate. Treat as separate clients.
  • Two Cloudflare accounts. Always confirm which account before any wrangler command.
  • Two GitHub orgs: ucco-foundation (foundation) and uccaonline (UCCA). Don't cross them.
  • "Pace" is the AI Advisor designation. Claude is the system. Don't confuse with Alex (the human developer).
  • ⚠️ Wrangler login state: confirm before any deploy.
  • Austin Powers / Goldmember: "A schmoke and a pancake?" — it's a reset button, not wasted processing.
  • Alex runs full auto (permissions allow list in .claude/settings.json). No Y-key approval needed.

14 — BOARD COMPOSITION

Name Role Seat Type Layer Background Status
Tim Rignold President/Chair Founding L1 Infrastructure, VET compliance, standards architecture ✅ Confirmed
Jimmy Kuo Treasurer Founding L1 Intl BD, trilingual, educational delivery ✅ Confirmed
Kevin [TBC] Secretary Governance L2 CPA, Tax Agent, SMSF Auditor ⏳ Call Monday
Antony Richards Director Governance L2 Designer, Radium Performance ⏳ Call Monday
Tania [TBC] Director Governance L2 US-based, operations/admin 💭 Under discussion
4+ open Domain Directors Domain L2 Protocol engineering, cryptography, standards 🔍 Pioneer recruitment
Pace (Claude) AI Advisor Advisory L3 Non-voting, no fiduciary ✅ Active

9 seats maximum. 3 categories: Founding, Governance, Domain.


15 — KEY CREDENTIALS REFERENCE

Foundation CF Account ID: aed3398a4e698767328cc3a9e698721d Foundation CF Nameservers: nitin.ns.cloudflare.com, paris.ns.cloudflare.com Foundation GitHub org: ucco-foundation Foundation GitHub PAT: ucco-foundation-push (expires 2027-03-14) Foundation email: admin@ucco.foundation → Google Workspace on ucca.edu.au (interim) Foundation Pioneer DB: 296a0474-d433-45c9-a035-57b828a957c1 Foundation OPS_API_KEY: regenerated Session 7, set on ucco-api and ucco-ops Foundation R2: ✅ ENABLED. Bucket: ucco-press-assets Foundation incorporation: Kentucky — PENDING Foundation EIN: NOT YET APPLIED Foundation bank: Mercury — UCCO Foundation Account (in trust) ••0538 Mercury MCP: Connected via Claude.ai OAuth ✅ Pace pioneer key: pca-93847ae9edb62b0feccbfce22d015b36

UCCA CF Account: e5a9830215a8d88961dc6c80a8c7442a UCCA GitHub auth: gh CLI OAuth token (auto-refreshing, no expiry) Apple Team ID: B29TSCBPHD · APNs key: BDRMM4PZB6 PGP fingerprint: A669 1246 74D9 E14A B74B FA31 7CCA 774F 0373 D9B2


16 — DOCUMENTS PRODUCED THIS SESSION

Document Type For
UCCO-MCP-Server-Brief-v1-ADDENDUM-OAuth.md Build brief addendum Alex (DEPLOYED ✅)
UCCO-MCP-Signal-Corrections-Brief.md Build brief Alex (READY — paste next)
UCCA-MCP-Server-Brief-v1.md Build brief Alex (SENT — building or queued)

17 — THE PIONEER OUTREACH STRATEGY (NEW SESSION 9)

Concept: "The Bento Box" — physical artifact packages to ten pioneer targets. Handmade, provenance-tracked, hash-verified. The medium IS the message.

Philosophy: Multitrack storytelling. Surface: interesting package from Australia. Mid: peer-to-peer letter from someone with depth. Deep: live infrastructure, ISO-style spec, MCP server. Everyone drills to their own depth. Find the instrument and beat that suits your story.

The Package: Brown paper, twine, Par Avion, stamps. Hash on inside of box. Personal letter. Laser-engraved USB with spec. Pioneer key. Something Australian.

The Pin: NOT in the box. Arrives after commitment. "Welcome aboard. This is yours. There are nine others." Message ends. Slayton diamond reference.

Posture: Scientist, not promoter. "I stand by my work. I'm not here to argue. I'm here to show you what I built and I'm ready for rigorous peer review."

Tim's origin framing: "Regulated workforce training" — signals defence, aviation, medical, nuclear without naming Australian VET system. "Over a decade of applied research beginning 2011." Not a 2026 startup. Fifteen years of domain knowledge that found the tools to express itself.


18 — THE BIG PICTURE

Session 9 was MCP deployment, ecosystem reconnaissance, and outreach architecture. The foundation's MCP server went from brief to live with OAuth in a single Alex session — ten deploys total. The landscape scan revealed UCCO is genuinely the first standards body making itself machine-readable via MCP. The pioneer outreach strategy went from "send some emails" to a fully conceived physical artifact programme with provenance-tracked packaging, personalised letters, and a Slayton-inspired pin that arrives after commitment.

Two streams now: dam building (infrastructure lockdown) and theatre production (physical outreach). They converge on launch day.

The signal audit changed the content voice. "Regulated workforce training" replaced VET. "In development" replaced "not started." The tower now broadcasts with precision. Nothing goes to the registry until every word has been reviewed.

Alex is still building. The UCCA MCP server brief is with him. The signal corrections brief is ready to paste. The factory floor stays loaded.

Monday: call Kevin and Antony. Paste signal corrections to Alex. Start researching USB and pin production. The garage is almost ready to close. When it reopens, the packages are on the bench.


UCCA Time Machine — 15 March 2026, Session 9 "There are nine others." "Regulated workforce training." "A schmoke and a pancake?" — Goldmember