PHASE 1 COMPLETION:
TASK-005 — Live gitleaks scan:
Scanned 146 commits with gitleaks v8.20.1
Result: 1 finding — FALSE POSITIVE (model name llama-3.1-70b-versatile
in test fixture, not an API key)
Added to .gitleaksignore
rotation_log.md updated with scan results
VERDICT: No real secrets in git history — repo clean for extraction
TASK-006 — Legal templates (bilingual):
docs/legal/templates/IP_ASSIGNMENT_AGREEMENT.md — bilingual IP assignment
docs/legal/templates/PRIVACY_POLICY_EN.md — PDPL/GDPR-aware template
docs/legal/templates/PRIVACY_POLICY_AR.md — Arabic privacy policy
docs/legal/templates/TERMS_OF_SERVICE_EN.md — SaaS ToS with MENA pricing
docs/legal/templates/DPA_EN.md — Data Processing Agreement with annexes
All marked as "DRAFT — must be reviewed by Saudi counsel before use"
TASK-006 — Trademark Filing Kit:
docs/legal/templates/TRADEMARK_FILING_KIT.md
Covers: DEALIX (Latin) + ديلكس (Arabic) + logo
Classes 9, 42, 35 across KSA, UAE, Egypt, Jordan, Kuwait
Application text ready to paste into SAIP + equivalents
Agent recommendations (AGIP, Saba, Bird & Bird, Al Tamimi)
Budget: ~90-120K SAR for full MENA coverage
Founder Decision Package:
FOUNDER_DECISION_PACKAGE.md — single file with 4 decisions:
1. GitHub org name (recommend: dealix-io)
2. Entity structure (MISA vs DIFC vs ADGM)
3. Saudi counsel engagement (15-30K SAR)
4. Trademark filing (30-50K SAR initial)
Total founder time to unblock: ~1 week + ~50K SAR
PHASE 2 FOUNDATION:
DEALIX_PHASE2_BLUEPRINT.md — 18-month category leadership plan:
10 parallel streams (Frontend, Product, AI, Enterprise, Integrations,
Scale, Commercial, Customer Platform, Trust, Category POV)
Executable NOW vs Requires External Services vs Wait-for-PMF
Phase 2 completion criteria (NPS >=50, NRR >=120%, etc.)
TASK-F201 — Design System foundation (scaffolded):
packages/design-system/tokens/primitive.json — W3C Design Tokens format:
Brand palette (50-900), neutral (50-950), critical/warning/success/info
Space, radius, motion (duration + easing) tokens
Typography with Arabic fontFamily + arabic-adjustment (1.15) for size
Arabic line-height (1.8) for diacritics
packages/design-system/tokens/semantic.json — light + dark themes:
surface, fg, border, interactive, status semantic layers
packages/design-system/README.md — principles + integration guide
TASK-CAT1340 (prep) — @dealix/arabic-ui package (scaffolded):
packages/arabic-ui/src/normalize.ts:
Diacritic-insensitive search (fatha/kasra/damma stripped)
Hamza variants normalized (أ/إ/آ → ا)
Waw-hamza, ya-hamza, taa-marbuta, alef-maksura handled
arabicMatch() + arabicCompare() helpers
packages/arabic-ui/src/numerals.ts:
Western/Arabic-Indic/Eastern Arabic-Indic conversion
formatCurrency() for SAR/AED/EGP/USD/JOD/KWD
formatNumber() with locale awareness
packages/arabic-ui/src/direction.ts:
detectDirection() via Unicode bidi algorithm
isolate() using U+2068/U+2069 for mixed-direction content
isRTL() locale check
hasArabic() presence check
Future: release as OSS after 12 months of internal use
TASK-CAT1310 — Manifesto (bilingual draft):
marketing/manifesto.md — 4 principles in Arabic + English:
1. Arabic first, not Arabic translated
2. Decisions backed by evidence, not opinion
3. AI recommends, systems commit, humans approve
4. Saudi compliance built-in, not bolted on
Publication target: dealix.io/manifesto + dealix.io/بيان
TASK-CAT1320 — Dealix Labs (scaffolded):
docs/labs/README.md — research program structure:
Annual State of Arabic Enterprise AI report
Quarterly Arabic LLM Benchmarks
OTel semantic conventions proposal
Open source: @dealix/arabic-ui + @dealix/design-system
TRUTH.yaml updated:
Added Phase 2 capabilities section (all as 'partial' or 'roadmap')
Added ISO 27001/17/18 and bug bounty to security_claims (all false)
All gates GREEN:
Architecture Brief: 40/40
Release Readiness Matrix: 71/71 (up from 53/53)
Release Readiness Gate (blueprint): PASS
Truth Registry Validator: VALID
https://claude.ai/code/session_01W1rJthWDkasijTdXCfxVHs
5.0 KiB
Founder Decision Package — Dealix Tier-1
Purpose: Everything the founder needs to make 4 decisions and unblock full execution.
All code automation is DONE. Only these decisions remain.
Decision 1: GitHub Organization Name (5 min)
Options
| Option | Pro | Con |
|---|---|---|
dealix-io |
Clean, aligns with dealix.io domain | Standard |
dealix-hq |
Professional, enterprise feel | Less common |
dealix |
Shortest, clean | May be taken |
getdealix |
Matches marketing convention | Longer |
Recommendation
dealix-io — matches the typical domain/org pattern, easy to communicate, unambiguous.
Action
# After creating GitHub org `dealix-io` and empty private repo `dealix-io/platform`:
cd /home/user/system-prompts-and-models-of-ai-tools
./salesflow-saas/scripts/extract_dealix_repo.sh git@github.com:dealix-io/platform.git
Decision 2: Company Entity Structure (this week)
Options
| Option | Pro | Con | Estimated cost |
|---|---|---|---|
| MISA Startup License (KSA) | Saudi-first customers prefer local entity; Vision 2030 alignment; PDPL compliance easier | Requires Saudi founder/partner for some structures; 100% foreign allowed in many sectors now | ~15-30K SAR setup |
| DIFC (UAE) | Strong IP protection; easier banking; common-law courts; international-friendly | Not "Saudi-first" for KSA sales; distance from market | ~50-100K AED setup |
| ADGM (UAE) | Similar to DIFC but often faster | Same "not Saudi" issue | ~50-100K AED setup |
| Two-entity structure (KSA + UAE) | Best of both | Complex; more cost | 70-130K total |
Recommendation
MISA Startup License if founder is Saudi or has Saudi partner. DIFC if founder is foreign and speed matters more than local presence.
Action
Engage one of these:
- TAM (Saudi) — https://tamkeentech.net (Saudi startup formation)
- Diligents — KSA/GCC legal formations
- DIFC Authority — self-service if DIFC route
Expected timeline: 4-12 weeks.
Decision 3: Saudi Legal Counsel (this month)
Saudi privacy policy + ToS + DPA review is mandatory before customer-facing launch.
Recommended Firms (by specialization)
| Firm | Strength | Fit |
|---|---|---|
| Al Tamimi & Company | Largest KSA + GCC practice | Best for enterprise contracts + IP |
| Clyde & Co (Riyadh) | Strong in tech + data | Good PDPL expertise |
| Bird & Bird (Riyadh) | International, tech-focused | Good for cross-border |
| Nowfal Law Firm | Saudi boutique, fast | Cost-effective for startups |
Scope to Request
- Review + customize
docs/legal/templates/PRIVACY_POLICY_EN.md - Review + customize
docs/legal/templates/TERMS_OF_SERVICE_EN.md - Review + customize
docs/legal/templates/DPA_EN.md - Review + customize
docs/legal/templates/PRIVACY_POLICY_AR.md - Create Arabic versions of ToS + DPA
- Verify Saudi PDPL compliance (especially cross-border transfers)
- Create IP assignment agreement final version
- One-hour consult on entity structure if not yet decided
Budget: 15-30K SAR for full scope.
Decision 4: Trademark Filing (this month)
Marks to File
- "DEALIX" (Latin)
- "ديلكس" (Arabic)
- Logo (once finalized)
Classes
- 9 (software)
- 42 (SaaS)
- 35 (business services)
Jurisdictions (priority order)
- KSA (SAIP) — 5,000 SAR/class, file this week
- UAE — 5,500 SAR/class, file within 30 days
- Egypt, Jordan, Kuwait — within 90 days
Recommended Agent
Abu-Ghazaleh Intellectual Property (AGIP) — largest MENA IP firm, handles all GCC in one engagement.
Total budget: ~90-120K SAR across all MENA jurisdictions.
Self-Serve Alternative (KSA only)
Founder can file directly at https://qima.saip.gov.sa — save ~2-4K SAR per filing but slower learning curve.
What's Already Automated (no decisions needed)
- ✓ Extraction script ready:
scripts/extract_dealix_repo.sh - ✓ Python deps pinned + pyproject.toml for uv
- ✓ Node deps pinned to pnpm@9.12.0
- ✓ Pre-commit hooks: gitleaks + detect-private-key + ruff
- ✓ Secret scan completed (1 false positive, documented)
- ✓ Rotation log template
- ✓ Legal status tracker
- ✓ Legal templates (IP Assignment, Privacy EN+AR, ToS, DPA)
- ✓ Trademark filing kit with application text
- ✓ Truth registry + claims registry + validator + CI
- ✓ Release readiness gate (blueprint-spec)
- ✓ Architecture brief (40/40) + Release readiness matrix (53/53)
- ✓ Golden path, Saudi workflow, 17 structured schemas, RLS migration, idempotency, OpenTelemetry, durable execution
Total Founder Time to Unblock Full Execution
| Decision | Time required |
|---|---|
| GitHub org name | 5 minutes |
| Entity structure | 2-4 hours research + engagement |
| Counsel engagement | 2-3 meetings + 15-30K SAR |
| Trademark filing | 1-2 hours with agent + 15-30K SAR |
| Total founder time | ~1 week of attention + ~50K SAR initial outlay |
After these decisions, Phase 1 is truly complete and Phase 2 can begin.