# Stage 06: Security, 5 Mandatory Contract Clauses & Built-to-Sell Architecture

> Cap legal liability at 6 months of fees paid, and structure your Stripe & codebase from Day 1 to command a 3.5x–5.0x profit exit multiple.

## M11 — Module 11: The 5 Mandatory Liability-Shield Clauses & Regulatory Redlines

**Core Principle**: Solo operators cannot survive a single lawsuit. Top founders (like Conductor and Cometly) hardcode 5 liability shields into every Terms of Service and B2B SOW.

### Track 1 · B2B Productized Retainer: Hard SOW Scope Lock, 2-Revision Cap & Deemed Acceptance
- Clause 1 (Anti-Scope-Creep SOW): Lock deliverables to the exact fields and workflows listed in Exhibit A, with a maximum of 2 revision rounds; out-of-scope requests require a paid Change Order.
- Clause 2 (5-Day Deemed Acceptance): Client deliverables are automatically deemed accepted 5 business days after delivery unless specific written defects against the SOW are submitted.

### Track 2 · Micro-SaaS & Stateless Pipe: P95 Fair-Use Compute Ceiling & Stateless Data Purge
- Clause 3 (Fair-Use Quota): Any usage exceeding the plan's P95 token/run ceiling automatically pauses or bills via prepaid overage packs.
- Clause 4 (Stateless 24h Auto-Purge): Follow BID-018 Conductor—process files in memory or purge raw uploads within 24 hours so you never hold toxic data liability.

### Track 3 · Regulated & B2B2B Channel: 3-Month Liability Cap & Human-in-the-Loop Disclaimer
- Clause 5 (Hard Liability Cap & AI Disclaimer): Cap total cumulative liability at the fees actually paid in the preceding 1–3 months, and explicitly state that outputs are decision-support drafts requiring Client's final professional sign-off.

### 5 Mandatory Solo-Operator Liability-Cap & Anti-Scope-Creep Clauses
```text
[一人公司 SOW 合同与服务条款必粘贴 5 大护城河条款]
条款 1【赔偿责任绝对封顶 (Limitation of Liability)】：
  • 中文：在法律允许的最大范围内，服务方因本协议项下服务或软件缺陷承担的累计最高赔偿总额，在任何情况下均不超过客户在索赔事件发生前【三（3）个月】内已向服务方实际支付的服务费用总额；服务方不对任何间接损失、预期利润损失或第三方平台封号负责。
  • EN: IN NO EVENT SHALL PROVIDER'S AGGREGATE LIABILITY EXCEED THE TOTAL FEES ACTUALLY PAID BY CLIENT IN THE THREE (3) MONTHS PRECEDING THE CLAIM.

条款 2【AI 生成内容免责与人工终审义务 (AI Output & Human Review)】：
  • 中文：客户知悉本系统底层调用生成式人工智能模型，可能存在事实偏差（幻觉）。服务方交付之初稿仅供内部审核，客户在对外发布、印刷或用于商业决策前负有最终人工核对义务。

条款 3【分阶段里程碑验收与定金不退 (Milestone Acceptance & Non-Refundable Setup)】：
  • 中文：项目按「50% 启动首付 → 30% 系统跑通初验 → 20% 交付上线」分期结算。客户在收到阶段交付物后 5 个工作日内未提出书面异议视为自动验收通过；每一阶段验收通过后，对应已付款项即确认为已消耗工时成本，不予退还。

条款 4【需求变更防蔓延条款 (Scope Creep Protection)】：
  • 中文：本协议交付范围严格以附件《交付清单》所列字段与流程为准；超出清单的新增平台对接或大改版（超过 2 次免费微调），按 ¥800/小时（或 $150/hr）另行签署增补单。

条款 5【数据保留与自动销毁 (Stateless Processing & Auto-Purge)】：
  • 中文：为保障数据安全，本系统不在云端永久留存客户原始业务敏感底表或生物特征图像；原始上传文件于任务完成后 24 小时内（排错日志于 14 天内）自动物理销毁。
```

## M12 — Module 12: Built to Sell — Commanding a 3.5x–5.0x Annual Profit Exit Multiple

**Core Principle**: Why did Conductor get 29 acquisition offers and raise its asking price to $1.25M while Rezi failed to sell even after cutting $8M? Buyers pay 3.5x–5.0x SDE only for clean Stripe accounts, low churn, and founder-independent SOPs.

### Track 1 · B2B Productized Retainer: Productize SOPs into a Sellable System (2.0x–3.5x SDE)
- Replace Yourself with Checklists: Document every client onboarding and QA workflow in Notion + Make.com so delivery takes <5 hrs/week—turning a freelance job into a transferable cashflow asset.

### Track 2 · Micro-SaaS & Stateless Pipe: Command 3.5x–5.0x SDE on Acquire.com (The Conductor Playbook)
- One Product = One Dedicated Stripe Account: Never mix personal consulting and SaaS revenue in the same Stripe account (the mistake that hurt BID-013 Roofclaw).
- Zero Technical Debt: Keep all API keys in `.env`, maintain <4% monthly churn, and ensure a buyer's engineer can deploy the repo in 30 minutes (how BID-018 Conductor attracted 29 offers and raised its price to $1.25M).

### Track 3 · Regulated & B2B2B Channel: Strategic Acquisition by Downstream Agencies (4.0x–6.0x SDE)
- Strategic Exit Premium: Vertical compliance and B2B2B tools with locked-in annual contracts and <2% churn command premium multiples from private equity roll-ups and larger industry agencies.

### Acquire.com / MicroAcquire Exit-Readiness Checklist & SDE Valuation Formula
```text
[一人公司资产化（Built to Sell）6 项月度体检表]
□ 1. 账目纯洁度：该项目是否拥有 100% 独立的 Stripe 子账户与专用收款银行子户，零个人生活开销混入？
□ 2. 收入连续性：过去 6 个月的经常性月收入（MRR / 年框分摊）回撤是否 < 5%？
□ 3. 客户集中度：最大单一客户贡献的收入占比是否 < 20%？（避免大客户一走公司归零）
□ 4. 创始人依赖度：如果我完全断网休假 14 天，现有的飞书/Make 自动化 + 兼职质检手册能否正常完成交付？
□ 5. 获客可迁移性：新客户是来自网站 SEO / `llms.txt` / 可交接的机构渠道，还是 100% 绑定我个人的露脸私聊？
□ 6. 合规干净度：网站底部是否配齐无漏洞的 Privacy Policy、Terms（含赔偿封顶）且历史 Stripe 拒付率 < 0.3%？
```