How does the SaSame MCP Factory lifecycle work?
This page explains the operational sequence shared by every Factory entry point.
- Collection
- documentation
- Updated
- 2026-08-01
- min read
- 9
- Version
- v2
The Factory connects entry, blueprint, build, inspection, shipment, observation, repair and reverification through one evidence-backed lifecycle.
Purpose
This page explains the operational sequence shared by every Factory entry point.
Entry points
An item enters the lifecycle through one of 7 creator-stated starting points:
- I have an idea.
- I have a design or spec.
- I have an unfinished build.
- I have a finished MCP.
- I have a live MCP.
- My MCP has a problem.
- I just want monitoring.
Each entry point routes into the same 21-station lifecycle rather than a separate product path. See Getting started for exactly how to connect and start.
Lifecycle states
Every item in the Factory carries exactly one canonical state at a time:
QUEUED -> RUNNING -> WAITING_FOR_CREATOR / WAITING_FOR_OWNER / WAITING_FOR_REVIEW
-> BLOCKED_WITH_REASON -> FAILED_RECOVERABLE -> FAILED_TERMINAL
-> SHIPPED -> OBSERVING -> REPAIR_RECOMMENDED
-> WITHDRAWN | COMPLETED (terminal states)A CI-blocking invariant check rejects four violation classes before they can reach production: an orphaned item with no valid predecessor, a duplicate lifecycle record for the same item, an impossible state transition, and a commercial-fulfillment mismatch — the invariant that a checkout view, a created checkout, a payment event, an entitlement and an actual deployment are four different facts, not one.
The 21 stations, grouped by role
The 21 stations split into five disjoint groups whose union is the exact station registry:
| Group | Stations |
|---|---|
| Front door | Admission |
| Primary creator path | Intake, Blueprint, Build, Inspection, Claim, Shipment, Billing, Distribution, Observation |
| Repair branch | Repair, Reverification, Reshipment |
| Cross-cutting | Orchestrator, Status portal, Notification |
| Explicit action | Market intelligence, AEO, Support, Reverse logistics, Security incident |
What each station actually does:
| Station | Role |
|---|---|
| Admission | Deterministically admit, route for review, or reject unsupported work before intake |
| Intake | Classify the creator's entry point, issue one lifecycle ID |
| Blueprint | Assisted design station; normalizes or produces the blueprint |
| Build | Build-station adapters; the creator owns the implementation |
| Inspection | Preflight, runtime and external-call inspection receipts (see Repair for the 7-layer contract) |
| Claim | Owner claim, product identity, version lineage, shipment manifest |
| Shipment | Produces the shipment manifest |
| Billing | Checkout, billing ledger, entitlement, fulfillment |
| Distribution | Distribution and the SaSame shelf; paid ranking and endorsement are prohibited |
| Status portal | Customer-visible lifecycle status, assisted queues, no lost handoffs |
| Observation | Post-shipment scheduler plus longitudinal intelligence (see Monitoring) |
| Repair | Repair blueprint, creator repair handoff, reshipment (see Repair and reverification) |
| Orchestrator | Durable, idempotent station-job routing, retry, compensation, restart recovery |
| Support | Support, correction, complaint, refund-case and service-recovery lifecycle |
| Reverse logistics | Recall, withdrawal, deprecation, takedown and restoration, with history preserved |
| Market intelligence | Neutral market/product-design input; the creator retains the product decision |
| AEO | Agent-discovery publication and attribution; reach is separated from demand |
| Notification | Tenant-bound notification events, receipts, retry and recovery |
| Security incident | Incident intake, containment, recovery, evidence preservation |
| Reverification | Re-runs inspection on the repaired build |
| Reshipment | A new shipment manifest for the repaired version |
Current automation maturity: every station runs at an assisted level today except Observation and AEO, which are partially automated. Public labels are deliberately honest about this — for example Inspection is publicly labeled "assisted inspection (verification status only, not a safe/good verdict)" and Claim is labeled "assisted ownership claim (control proof, not quality)."
Boundary and limitations
Normal Guided Build is BYO-LLM and deterministic. SaSame does not take custody of creator credentials or automatically modify creator code.
MCP-first status and exports
SaSame does not require a fixed web dashboard for normal Factory use. After a principal is registered, call factory_dashboard_snapshot to obtain one bounded principal-scoped view of membership, slot use, lifecycles, claims, monitoring, findings, notifications, next actions, freshness and receipt references. A user, ChatGPT, Claude, a spreadsheet or a BI client can render that structured response in the format it needs. Call factory_export for a bounded JSON, CSV or Markdown page. Both tools require the principal ID and principal key, never return lifecycle keys or credentials, and cannot read another principal's portfolio. An optional organization filter is accepted only when the caller is an active member. Checkout creation, payment, entitlement and fulfillment remain separate facts, and neither read-only call counts toward the North Star.
Examples
4- 01
A live MCP can enter at observation, produce a reproducible finding, receive a repair blueprint and return for reverification.
- 02
A duplicate scheduled observation run for the same version and time window never creates a second observation record — the orchestrator is idempotent by design.
- 03
A creator asks ChatGPT to turn
factory_dashboard_snapshotinto a table ordered by recent findings without SaSame maintaining a separate charting product. - 04
An operations team calls
factory_exportwithformat: "csv"and imports the bounded, formula-injection-safe result into its own reporting workflow.