Party portal
App study: where a party with rights in a Business's work, such as a buyer, borrower or claimant, sees its own projection and acts on its turn.
A party with rights in the work: buyer, client, borrower, insured, claimant, principal
The party's projection of a work item or standing account
- Services delivery portals
- services-as-software, buyer side
- who signs in
- which record dominates
- who acts next
- how money moves
- who may settle what
Acceptance under an Outcome Contract; the party relation set and its legal narrowing
- Every party
- Sign-in by one-time link · home · work list · work detail with a stage tracker, the current-stage sentence, request items, the Thread and Files · history · people · data and exit
- Buyer
- Intake form · quote with "Done means" · engagement signing · payment · deliverable viewer · accept, revise, dispute
- Seller of record
- Pipeline of its items by state and ball, settlements per item
- Standing account
- Statements, autopay, payoff quote, hardship intake
- Protected or adverse party
- Status letters, file access within its rights, complaints
- Principal
- Reserved decisions waiting on it, with their clock · the audit trail of acts under its authority
- Party's agent and systems
- none
A party portal is the App where a party with rights in a Business's work signs in to see its own projection of that work. It acts where the ball is its own: at intake, at a question, at acceptance, at a payment or cure window, at a reserved decision.
The founding case is the Customer who bought an outcome: a law firm's client, a bookkeeping practice's customer, an agent-run services firm's buyer. The provider directs the work; the Customer holds the right to accept it.
Other parties sign in with rights but buy no single outcome: a borrower on a standing facility, an insured or an adverse claimant, a carrier that delegated authority, a candidate or an employee. The party's relation is an axis of one type. startupbuilder.dev's word for the signed-in part of a Site is Portal:
A Portal is the signed-in part of a Site where each Customer orders, tracks delivery, accepts work, and pays, seeing only their own records.
"Party portal" is a working name that replaces "service portal". The study describes the work; how an App is defined is open, see What every App needs.
- Customer or partyThe firm, household or person with the relationWorkThe unit of visibility; owns its work, Files and Invoices
- RequesterA Contact at the partyWorkAnswers intake Questions and accepts, unless the Agreement names someone else
- SignerA Contact with authority to bind the firmWorkSigns engagement letters, returns, proposals
- Payer, viewer, party adminContactsWorkPays; reads only; manages the party's people and Mandates
- ProxyFor a person: parent, guardian, trustee, attorney-in-factWorkActs within a scoped, time-bounded grant, often under a representation no Mandate expresses
- Client of recordLegal work, when someone else paysWorkThe only party who consents or directs
- Invited third partyAuditor, lender, co-counselWorkSees one shared item by expiring link
- Party's agentUnder a MandateWorkOrders, answers, uploads; accepts only when the Mandate grants it
- Provider staff and agentsThe BusinessWorkSeen through labels: a named lead, a licensed practitioner named when a reserved act is done, an assistant labelled as AI
- Workflow 1: OnboardingCustomer or party
- A party arrives from checkout, a quote, an agent's order, an invitation, or a relation it never chose, such as a claimant.
- Identity is by one-time link, with conflicts and eligibility checks where regulated.
- Workflow 2: One work item
- Intake asks one Question for a missing input.
- A mid-run Question moves the ball and pauses the provider's clock.
- Delivery seals the evidence bundle and opens the window: accept earns the fee, revise returns to working, dispute holds it, and silence follows the contract.
- Workflow 3: A seller of record
- One seller watches many concurrent Deals, each with its settlement line.
- Workflow 4: A standing account
- The ball returns to the borrower at each statement, payment and cure window; the facility never terminates, and each application on it does.
- Workflow 5: One claim, four parties
- The insured, the claimant, the carrier and the Business each read their own projection of one claim.
- The carrier's reserved decision is a typed wait with a clock.
- Workflow 6: Lateness and disputesCustomer or party
- At 80 percent of the deadline the party is told before the miss.
- A Dispute is answered with frozen evidence before a deadline; a missed deadline decides for the party.
- Work item
- intake ("A few details needed")
- working (the step's client label)
- ball with the party ("One thing needed from you")
- delivered ("Ready for your review")
- accepted
- disputed ("Under review")
- refunded
- canceled
- declined
- closed
- Standing account
- current
- payment due
- past due
- in a cure window
- in hardship review
- paid off
- Reserved decision
- pending on the principal with its clock
- decided
- timed out by its declared default
- Question
- open
- reminded
- answered
- closed
- overdue
- withdrawn
- abandoned at the cap
- Deliverable
- delivered as version n
- accepted or revision requested
- superseded
- Dispute
- open with the amount held
- answered with frozen evidence before a deadline
- decided
- one appeal
- closed
- Delegation from the party
- granted with scope
- limits and reserved decisions
- visible
- revoked
The relation axis
| Relation | What differs |
|---|---|
| Buyer of an outcome | Intake, acceptance under an Outcome Contract, silence rules |
| Client who is not the Customer who is not the Tenant | The Client is owed duties, the Customer is invoiced, the reseller owns the experience; the Client File leaves whole |
| Seller of record over many concurrent items | A pipeline projection with settlements, not one Order |
| Standing account on a perpetual object | Statements, autopay, payoff, hardship intake; the ball returns at every payment and cure window |
| Protected party who is not the Customer | An insured owed status letters and file access; content limited to fact objects until a licensed human adopts it |
| Adverse party | A third-party claimant, minimized and never shown the other side's file |
| Principal who delegated authority | Holds reserved decisions mid-lifecycle and audit rights over the Business's work for it |
| Rights-holder in a department's work | A candidate owed adverse-action notices, an employee reading pay stubs, an equity holder exercising a grant |
| Standing service on a cadence | Recurring asks and recurring packs, with the party's people at judgment steps every cycle |
Released packs to holders and governors belong to the disclosure room. A party's own record as a performer belongs to the Worklist.
Actors
| Actor | Side | Work here |
|---|---|---|
| Customer or party | The firm, household or person with the relation | The unit of visibility; owns its work, Files and Invoices |
| Requester | A Contact at the party | Answers intake Questions and accepts, unless the Agreement names someone else |
| Signer | A Contact with authority to bind the firm | Signs engagement letters, returns, proposals |
| Payer, viewer, party admin | Contacts | Pays; reads only; manages the party's people and Mandates |
| Proxy | For a person: parent, guardian, trustee, attorney-in-fact | Acts within a scoped, time-bounded grant, often under a representation no Mandate expresses |
| Client of record | Legal work, when someone else pays | The only party who consents or directs |
| Invited third party | Auditor, lender, co-counsel | Sees one shared item by expiring link |
| Party's agent | Under a Mandate | Orders, answers, uploads; accepts only when the Mandate grants it |
| Provider staff and agents | The Business | Seen through labels: a named lead, a licensed practitioner named when a reserved act is done, an assistant labelled as AI |
Interfaces
| Reader | Screens | Renderings |
|---|---|---|
| Every party | Sign-in by one-time link; home ("what needs me" first); work list; work detail with a stage tracker, the current-stage sentence, request items, the Thread and Files; history; people; data and exit | Email for every message, Question, delivery and invoice, with reply-by-email into the Thread; SMS reminders; PDF; calendar feeds |
| Buyer | Intake form; quote with "Done means"; engagement signing; payment; deliverable viewer; accept, revise, dispute | |
| Seller of record | Pipeline of its items by state and ball, settlements per item | |
| Standing account | Statements, autopay, payoff quote, hardship intake | |
| Protected or adverse party | Status letters, file access within its rights, complaints | Content-free notices where the vertical requires them |
| Principal | Reserved decisions waiting on it, with their clock; the audit trail of acts under its authority | |
| Party's agent and systems | none | The API under the same visibility as the portal; MCP to order, answer, upload, accept; a webhook per work transition; the evidence bundle as data |
"Email is the interface. The portal is the archive." The operator's side of the same records lives in the delivery and dispatch console and the Worklist: view-as, client labels, reminder ladders, and the asks the portal raises.
Records and actions
The central record is the party's projection of a work item (a matter, a claim, a close) or of a standing account. It stays apart from the commercial Order. The Order records what was bought and paid; the work record carries delivery.
| Record | States, with the label the party reads |
|---|---|
| Work item | intake ("A few details needed"), working (the step's client label), ball with the party ("One thing needed from you"), delivered ("Ready for your review"), accepted, disputed ("Under review"), refunded, canceled, declined, closed |
| Standing account | current, payment due, past due, in a cure window, in hardship review, paid off |
| Reserved decision | pending on the principal with its clock, decided, timed out by its declared default |
| Question | open, reminded, answered, closed; overdue, withdrawn, abandoned at the cap |
| Deliverable | delivered as version n, accepted or revision requested, superseded |
| Dispute | open with the amount held, answered with frozen evidence before a deadline, decided, one appeal, closed |
| Delegation from the party | granted with scope, limits and reserved decisions; visible; revoked |
Verbs:
- Buying: accept an Offer or Quote, sign, pay or authorize, submit intake.
- During the work: answer a Question, upload, send a Message, ask for a person, decide a reserved decision.
- At delivery: accept, revise, dispute, request a refund, reorder, cancel.
- Standing account: pay, set autopay, request a payoff, apply for hardship.
- Party admin: invite, grant Mandates and proxies, delegate to the Business, revoke.
- Business: ask, remind, deliver (seals the evidence bundle and opens the acceptance window), refund, answer a Dispute, view as. A licensed Worker attests.
Terms
Terms
| Term | In startupbuilder.dev | Definition, quoted from startupbuilder.dev or the gap |
|---|---|---|
| Party | Party | "A Party is a person or legal entity that can be a side of an Agreement or an Order, or hold rights." The relation axis rests on it. |
| Question | Question | "A Question is what a pending Action asks a Party, a Role, or a Worker before it resumes, kept on the Action with its answer." |
| Order | Order | "An Order is a Customer's commitment to buy one or more Offers once, moving from placed to paid, fulfilled, and closed." It has no accepted state. |
| Outcome Contract | Outcome Contract | "An Outcome Contract is the terms on an Offer that warrant a Service's result: done, acceptance, assurance, remedy, and earnings." |
| Access Level | Access Level | "An Access Level is a named preset of Permissions a Worker holds in a namespace, such as owner or viewer; it is never a Role." A party's own people are not Workers, so they have no access unit. |
| Portal, party portal | open | Portal, developer dashboard and Console are an open vocabulary question. |
| Unit of delivered work, evidence bundle, proxy grant | lack, collide | Matter, close and work item are all in use; startupbuilder.dev's Evidence is a validation record. |
| Representation | lacks | A guardian, trustee or attorney-in-fact holds a basis no Mandate expresses. |
Workflows
- Onboarding. A party arrives from checkout, a quote, an agent's order, an invitation, or a relation it never chose, such as a claimant. Identity is by one-time link, with conflicts and eligibility checks where regulated.
- One work item. Intake asks one Question for a missing input. A mid-run Question moves the ball and pauses the provider's clock. Delivery seals the evidence bundle and opens the window: accept earns the fee, revise returns to working, dispute holds it, and silence follows the contract.
- A seller of record. One seller watches many concurrent Deals, each with its settlement line.
- A standing account. The ball returns to the borrower at each statement, payment and cure window; the facility never terminates, and each application on it does.
- One claim, four parties. The insured, the claimant, the carrier and the Business each read their own projection of one claim. The carrier's reserved decision is a typed wait with a clock.
- Lateness and disputes. At 80 percent of the deadline the party is told before the miss. A Dispute is answered with frozen evidence before a deadline; a missed deadline decides for the party.
Money by relation: up front, on acceptance, or recurring for a buyer; statements and payoffs for a standing account; none for a protected or adverse party.
Boundaries
- Visibility is party-scoped by default, then narrower by matter, item or relation. One enforcement point serves the portal and the API.
- The portal never shows internal steps, error text, prompts, cost, margins, performer pay, ranking, or another party's records.
- A message to a protected or adverse party can be a reserved act, gated when sent: agent drafts go out only after a licensed human adopts them.
- A delegation to the Business is visible and revocable by the party, and every act shows whose authority it runs under. It is never impersonation.
- A party may declare uniform visibility: one shared view for every member, with depth varying per person, never content.
- A proxy grant has a scope, an expiry and narrowing by law, such as records a minor consents to alone.
- In legal work, only the Client consents or directs.
Agents
| Step | Agent | Human |
|---|---|---|
| Answer routine questions in the Thread, labelled as AI | yes | drafts go to the Worklist first under supervised autonomy |
| Ask intake Questions, chase uploads, validate submissions | yes | |
| Quote inside published Offers | yes | custom scope, discounts, regulated conflicts |
| Message a protected or adverse party | facts only | a licensed human adopts anything more |
| Give legal, tax or medical advice | no | a credentialed Worker, with an Attestation |
| Approve refunds | up to an auto-approve amount | above it |
| Decide disputes | no | a Worker who is not a party |
| Accept on the party's behalf | under a Mandate with the party's own evaluator | otherwise the party |
Hard parts
- The projection. Every internal step needs a client label, a sentence or nothing, and the labels survive a step inserted mid-run.
- Delivered is not accepted. Payment authorizations expire before long work is accepted, so a ledger hold outlasts them. Silence is a contract term.
- Firms, not users. Several Contacts with different authority, a payer who is not the requester, secrecy per matter inside one firm.
- One record, several parties at odds. A claim read by its insured, its claimant and its carrier needs three projections that never leak into each other.
- Terminal work over perpetual subjects. A facility or policy never ends; each application or claim on it does, and re-engagement mints a successor.
- Statutory clocks by relation. An adverse-action notice, a complaint window or a cure period sits under every overlay and is never configurable.
- Email at scale. Reply parsing, a cap of about five reminders, sending domains per Business.
- Recurring Services. Each cycle is its own work item with rate terms and credits on misses.
Day one
An idea-stage founder sells one Service Offer and is the only human, with one assistant agent. Day one holds:
- sign-in by one-time link, and party-scoped data with one Contact;
- one work page: a tracker of three to five labels, one request item, Files, and the Thread with "ask for a person" into the founder's Worklist;
- accept, revise and refund requests going to the founder;
- invoices from Stripe, and email for everything;
- view-as for the founder, visible to the party;
- the API and a webhook with the portal's visibility.
| Trigger | Turns on |
|---|---|
| Repeatable | Contact roles and invitations; intake forms and quotes; reminder ladders; disputes; recurring work; agent Customers under Mandates |
| A standing facility | Statements, autopay, payoff, hardship intake, cure windows |
| Regulated or protected parties | Proxies, per-matter secrecy, adoption gates on messages, licensed-act display, trust accounting |
| Delegated authority | Reserved decisions with clocks, audit rights, revocable operating mandates |
| A department sold as a Service | Candidates, employees and equity holders as rights-holders |
The Startup layer decides when: before Live, a Service Startup is often a concierge, delivering by email with one order page.
Related studies
Prototypes this study needs
Can one lifecycle notation hold concurrent machines, the ball and derived state?
Encode a storefront Order, a booking with its payment, a delivery work item, a Task over its Action and a facility with its applications.
names: work itemHow does each type show a data request truthfully?
One data-request record rendered in Admin and a portal, using only the recorded route for erasure.
names: portal