the previous design / what happens now
What happens now
Your order, and what happens now — which is a different question from what you were buying, and so this is a different page from the one you read before paying.
This page needs JavaScript. The catalogue lists everything and what it costs.
The key is never on this page
A vault key is never published and never committed, and a page on this site is a committed file. So this page says how a key reaches you and never carries one. Anything that looks like a key on a page like this is a security incident rather than a convenience, and a build check refuses the release if one lands here.
The page after this one is not on this site
riskmandate.ai publishes one page per level — paid-t1 to paid-t4 — and since its v1.19.2 the level-one page is the download itself: the zip, its size, its sha256, and a check that hashes the file in your own browser against the hash that shape publishes. Your order above carries a link to the page for each line you bought.
What the link carries is two things and nothing else. Your order reference, which that page shows back to you and puts in the subject line of every message it offers; and, at level one only, the shape you bought — the same slug this store uses at /p/<slug>/, which is why the two sites keep their slugs in step. Nothing is posted, there is no callback and no session, and the page is a static file that works with no parameters at all.
Twenty-four hours is the commitment at the three vault levels, and it is theirs rather than ours: a person follows up within a day of the payment landing. The store said “one working day” until v0.1.9, which was a day slower than the page the buyer actually lands on — two sites promising different things about the same follow-up is the drift that a shared brief exists to stop, and the number that stands is the one that is committed to in public.
Done is a commit
Every level has a definition of done you can check yourself, and at the three vault levels it is a commit in your own history rather than somebody’s word: the licence file with your name in it, the corrected mandate and the recomputed delta with the note beside them, or the record and the sign-off file with a name and a date. You do not have to take anybody’s word for whether the thing you bought was delivered.