Internal · Jason · 2026-08-27
You're running an intelligence operation for a one-person company. This is the map of it — the territory Bobby can work, the machine that finds work in it, what's proven, and what is still guesswork.
The whole thesis in one line: Bobby has a credential almost nobody in federal contracting has, and no record at all. Everything we build is either about converting the credential into a record, or about not wasting his time while that happens.
Bobby is an SBA-certified SDVOSB and VOSB — certified 2026-08-20, good through 2029. That gets him into rooms. It does not differentiate him, because everyone in a govcon room is a certified something.
What actually differentiates him is that he is an actively licensed New Jersey mortgage loan originator, NMLS 98689, continuously licensed since 2004. A reviewer of record who holds a real state licence is genuinely hard to source. That is the scarce thing, and it is why every document we produced leads with the licence rather than the certification.
Against that: zero federal past performance. No awards, no CPARS, no reference letters. That single gap governs which lanes are realistic and which are theatre.
Six lanes are addressable. They are not equally open, and the interesting thing is that the two he can act on today are the two nobody was looking at.
Both state portals are now mapped and reachable without a browser. The volume is a useful corrective before anyone gets excited:
| New Jersey (NJSTART) | New York (NYSCR) | |
|---|---|---|
| Open solicitations, statewide | 27 | 859 |
| NAICS 522310 — his primary code | 0 open · 38 ever | n/a |
| NAICS 541611 | 3 open · 66 ever | n/a |
And a structural catch that breaks an assumption we carried all day: neither state portal uses NAICS. NJSTART is NIGP-coded; NYSCR has no NAICS field at all. The radar's federal profiles would silently match nothing in either. A NAICS→NIGP crosswalk for New Jersey and a category map for New York have to be built before either lane is wired — and the zero-open-in-522310 figure says New Jersey is something the radar should watch, not something Bobby should refresh.
The thing worth sitting with: we spent the day building federal-contracting machinery, and the two lanes with no gate on them are NYC — where he is already registered — and plain commercial lender work, which needs no certification whatsoever. His uncle chairs the board of a bank. That is the shortest path to revenue in this entire document, and it does not involve a contracting officer.
Underneath the strategy there is now a working intelligence pipeline. It has three layers.
We mapped every government data source that matters and established, with live calls, which can
be read by plain HTTP and which need a browser. The answer is better than expected: ten are structured feeds, two need HTML parsing, and only one is genuinely blocked. Nothing needs Chrome any more — including the SBA certification registry, whose JSON API we cracked today (POST /_api/v2/search, keyless, 123 fields, no cap).
| Source | What it answers | Access |
|---|---|---|
| USAspending | Who won what, from whom, for how much, expiring when | Feed |
| SAM.gov opportunities | What is open to bid right now | Feed |
| SBA Small Business Search | Who is currently certified — and SAM registration status | Feed |
| SBA HUBZone GeoServer | Whether an address qualifies | Feed |
| FPDS · Census · NY SDVOB · NY/NYC Socrata · Port Authority | Offer counts, tracts, 1,435 NY SDVOB firms, 1.1M NYC notices | Feed |
| NJSTART · NYSCR | NJ and NY State solicitations | Verified headless |
| SAM.gov entity records | Registration detail for firms with no awards and no certs | Blocked |
A daily 7:00 AM scan of SAM.gov against three profiles, pushing to a Cloudflare Worker app. It had been dark since 31 July — a mass cron cleanup, not a failure — and is now running again with the 28-day gap backfilled.
Sources and scans produce candidates. Deciding which are real is the part that still needs a person, and it is the part where the failures happen. See §6.
| Artifact | For | Where |
|---|---|---|
| Capability statement, rewritten | Bobby to hand out | corrected PDF — 1 page |
| Workshop battle card | Bobby, on his phone | ebc-battlecard.pages.dev |
| Rebuilt website | replacing the stale MCA site | ebc-site-es0.pages.dev |
| Accel Solutions dossier + 3 diagrams | the teaming decision | accel-dossier.pages.dev |
| Independent verdict on that dossier | proof it was checked | DOSSIER-VERDICT.md — revise, 0.88 |
| Accel conversation strategy | Bobby, before the meeting | ACCEL-STRATEGY.md |
| Source recon + API catalog | us, and every future agent | GOVCON-*.md + Browser KB |
Verified today against primary sources, with positive controls: his UEI, CAGE, certification dates, NAICS, NJ licence, that the Bronx address is not in a HUBZone, and that his SBA listing renders publicly.
Corrected today: the UEI, CAGE and street number on his own capability statement were all wrong. Anyone who typed them would have concluded he was not registered.
Still open, and each one changes a decision:
Three times today, confident output was wrong. All three were caught, and the pattern is identical every time: an empty or plausible result that nobody checked.
SAM returned nothing for Bobby's UEI. The obvious read was "not registered." The control — a firm with $42M in awards — returned nothing too. The source was auth-gated, not the record missing.
I read $306,941 off a USAspending page. The real figure was $4.96M on that UEI and $14.7M across two. The page defaults to a trailing-twelve-month window. You caught it from the graph.
The dossier claimed Accel's SBA profile listed a roofing NAICS as its only code, and framed it as evidence they don't mind their paperwork. It was false — nine codes, all professional services. Specific, plausible, load-bearing, fabricated. I repeated it to you before checking.
The independent validator caught it. The award sweep queried contract types A/B/C/D and never touched the IDV families, so the largest single award in the portfolio never surfaced. What exposed it was arithmetic: eleven listed awards summed to $11,571,812.62 against a stated lifetime of $14,693,955.46, and the gap matched the missing award to the cent.
The finding got stronger — it also drew exactly one offer, so "11 of 11 single-offer" became 12 of 12.
Three rules came out of this, each earned by an actual failure rather than by theory. All three
now live in the API catalog, both CLAUDE.md files, and the Browser Knowledge Base as
cross-site gotchas:
The validator's root-cause read is worth keeping: three of the seven corrections came from a query or a quote that stopped one step early — and then a firm conclusion written on top of the truncated input. In the worst case the dossier cut a modification quote immediately before the sentence that answered the question, then declared the question unresolvable.
And a second rule the roofing error earned: verify an agent's premises, not just its output. A fluent dossier with one fabricated detail is more dangerous than an obviously thin one, because nothing about it invites a second look. A validation agent now reviews every hard claim before anything reaches Bobby.
The division of labor was settled months ago and it held up today: you build the engine and verify; Bobby works the network. Concretely, the highest-value thing you did today was not strategy — it was catching that a number was wrong.
Bobby moves fast and does not check. His own capability statement carried three errors. His SBA profile has its contact details hidden, so a prime who finds him cannot reach him. He graded federal nursing-home and medical case-management contracts as "BID" — work he cannot perform — because they were flagged SDVOSB at the VA. Left alone he will bid things he can't do, which is the fastest way to lose the lane permanently.
You are the verification layer. That is not a supporting role; it is the thing that keeps this credible.