01 . The ask
Tom + Werner . 2026-05-26

The OS layer.
Is it the working layer Cloudworkz needs,
and does it go first?

We are aligned that Unlock and Cloudworkz share a similar shell. This conversation is about what sits between that shell and Supabase, and whether shipping it first makes everything else ship faster.

02 . Already agreed (context, not for debate)

What we are not re-litigating today

Shared shell

Get Station-style

Smart dock with preloaded apps on one edge, marketplace for the rest. Same chrome across Unlock and Cloudworkz.

Modular apps

Pluggable across products

Payments, login, authorization. Built once, mounted in both Unlock and Cloudworkz. Already agreed.

Specialist agents

Per product

Unlock: property hunter, retirement planner. Cloudworkz: strategy helper, sales-loop operator.

Connectors by product. Unlock users connect investment tools, HMRC, bank. Cloudworkz users connect Gmail, Signals, Content Engine.

03 . What's new

The operating / working layer

Today most of this content already exists in the vault. It is just not yet framed as a coherent layer with a clear boundary, and it is not accessible to the team. This brief proposes treating it as the working layer that everything else reads from and writes back to.

Skills Working files Generated docs Rules + routing Shared instructions, information, plans
04 . The expanded blueprint

Current state of play plus the proposed OS layer

SHELL . shared Unlock + Cloudworkz Get Station dock . marketplace . modular pluggable apps . specialist agents CLOUDZ surface . per-person + team views Live HTML renders (CF Pages) . Notion ops side . per-person clouds OS LAYER . the working layer (new framing) Vault (Obsidian) . Cloudflare . Relay . the working state for everything pre-database Skills reusable capabilities (markdown + optional code) Working files drafts, briefs, transcripts, decisions in progress Generated docs team instructions, HTML renders, scripts under work Rules + routing canon, sharing logic, propose-then-apply propose-then-apply edit flow ACID Data . Supabase Fixed atoms . user data . audit log Multi-tenant from day one . Approach B substrate ACID Engines . Lane 1 Roxy . Axiom . Signals . Sales engine . Content engine Called by agents . reads ACID Data
05 . Question 1
For Werner

Can the OS I have been testing be that working layer?

Cloudflare + Obsidian + Relay. Two document types coexist here, and that's the nuance to talk through.

Never go to the database

Operational artefacts

  • HTML instructions sent to the team
  • Live dashboards and plans
  • Per-person cloud views
  • Shared priorities, roadmaps
AND
Eventually go to the database (after sign-off)

Pre-fixed content

  • White paper drafts under iteration
  • Atoms in review
  • Sales scripts being tested
  • Decision documents under discussion

Right now, all of this lives in files where there is no single source of truth and nobody has access to it. With no rules.

06 . Question 2
For Werner

Where does an MVP of this layer sit on the roadmap?

And the real question underneath: can prioritizing it help everything else ship faster?

The bet

OS-MVP first, then Unlock

Ship the working layer (live decisions render, tasks render, transcript-routing) before the rest of Unlock's build. Argument: company itself moves faster after this lands. Less drift, less re-explanation, faster pivots.

The risk

Platform-before-product

Unlock has a 1 October 2026 ship gate. Engineering time on the OS layer might slip that gate. Need your read on whether the layer is light enough (vault + render pipeline + skills + Hub shell) to absorb cleanly, or whether it competes for the same hands.

07 . What this is protecting

The hour-on-the-phone is the value

Investor work
£5K/hour

Generated for every hour spent dealing with investors. Anchor and Chris Arping-Stahl are the proof.

Conservative floor
£1K/hour

Even at one-fifth the rate, 15-20 hours a week on investors is the key lever.

What blocks it today
Comms

Keeping up with changes, content back-and-forth, terminology debates, product-development discussions.

The OS layer eliminates the back-and-forth that currently costs both of us hours. That time goes back into investor calls.

08 . What the company gets

The team multiplier

The hour-on-the-phone case is the personal lens. The company-wide case is bigger: the OS layer turns one piece of work into many.

Analyze work overnight

Issues surface before standup

Juanes writes code today. Evaluation runs at 02:00 UTC. Issues surface by the time you and he are online. Same for Roy's daily Pipedrive surface, Claudia's Atomic-System deliverables. Continuous review without continuous meetings.

Share skills

One built, everyone uses

Transcript-ingest, content-validation, decision-record routing, the karpathy-guidelines pattern. Skills are markdown plus optional code in a folder. Build once, available to every team member's cloud. Skills compound; the team multiplies.

Build features that propagate

Distribute automatically

New module built? Distribution-rule fires. Artefact lands in the relevant team members' clouds (Notion ops side, HTML team-read, Slack notification). No emails, no "where's the latest version of X" Slack thread.

Run development overnight

The OS works when we don't

Scheduled tasks run while the team sleeps. Vault audits, transcript-routing, content-validation, terminology-drift checks. Results ready when people log in. The system scales work the team doesn't have to actively do.

09 . The principle
"If we are both using it,
I shouldn't be allowed to break it."
. Rule-write authority sits with Werner

Not admin of people. Not managing the team. The narrow architectural meaning: you are the only person who can modify the rules of the OS layer itself. Tom proposes, the team proposes; Werner decides what ships against his roadmap.

10 . What we decide today

Five calls to walk together

1

Working layer fit

Is Cloudflare + Obsidian + Relay engineering-clean as the working layer, or does it create a second canon you'd have to keep in sync with Supabase?

2

OS-MVP-first sequencing

Ship the working layer before the rest of Unlock's build. Does it accelerate Unlock or slip the 1 October gate?

3

Vault-API path

Relay-extension for v1, Substrate B at v3. Or does Substrate B move into v1? Fundamentally your bandwidth call.

4

GitHub overlap mapping

Wire your repo set and the Cloudworkz tools into a single view this week. Independent of every other call.

5

Rule-write authority

You as the only person who modifies OS-layer rules. Roy as systems-wiring operator (deputies into rule-write later if proven). Tom as client and user. Confirm or counter the shape.

11 . Next step

V2 by 2 June

Either V2 commits to OS-MVP-first sequencing with a sprint plan you scope, or it stands the current parallel-tracks plan with a documented decision record. Either way the GitHub overlap mapping ships this week.