The Catalog

There is one Vin product: the capability model. It is a single queryable catalog of typed capability descriptors — the source of truth — and every face is a representation of it: this documentation, the SDK, the CLI verb table, the MCP index, the price list, the acceptance suite, and each door's affordances are all projected from these same rows. Because they are generated, they cannot drift.

3947 rows — 124 live · 3823 sandbox · 0 declared — across 317 nouns on 316 noun pages and 20 workflows. Every capability in sandbox is runnable today; live rollout is demand-ranked, and each row states its own mode.

Coverage grade: 100% — 3947 of 3947 rows answer on the wire (124 live, 3823 sandbox). A "grade" is just this count query — (live + sandbox) / total — run against the catalog, so it can never flatter the estate.

34 capabilities have earned standalone pages — promotion is computed (live · price posted · journey citations · own stateSet), recomputed on every regen, never an editorial debate. Every other capability answers at its frozen anchor on its noun page.

noun × facet × side

The organizing model beneath the catalog. The spine is the noun — 317 automotive nouns, each a job a car needs done, each a page in this Reference. Every noun has three facets, the three capability pillars restated as the three faces of one thing:

• Data — know it. The record: each fact an evidence object.
• Services — do it. The work a car needs, on the quote → order chassis.
• Commerce — transact it. The deal and its payment, folding onto one Deal ledger.

The side tag records who initiates. Workflows compose across the grid and own nothing — each is modeled end to end with its state, sequence, decision, and flow-of-funds diagrams. AI applies over the cells.

Status honesty — the key selects the mode

Every row exists from day one and tells the truth about itself. A status is mode-aware: sandbox is a caller mode, never a status claim, and each row also posts modes — which rail serves its live mode (platform | connection | account | null):

• live — the acceptance suite is green; it answers on the wire today on the platform rail.
• sandbox — wire-compatible simulated responses, provenance-labeled and deterministic. Where the live rail is a certified connection, the row is live via connection — certified, connect to activate at integrates.vin (dealer) / connects.vin (consumer); credential submissions enter the activation queue and rank live rollout.
• declared — rail-less (modes.live: null), the only rows allowed to read as roadmap. It answers a typed BLOCKED { reason: "DECLARED" } — never a silent 404, never a faked 200.

Workflows

20 compositions over the grid, each modeled end to end. A workflow owns nothing: delete it and every leaf still transacts on its own address.