skills/build-company-operating-system/references/setup-and-controls.md

# Company setup and controls

## Setup register fields

Track: work item, jurisdiction, purpose, owner, status, dependency, evidence required, account/system, cost, renewal date, access owner, professional adviser, risk, next action, and verification date.

Status must be one of:

- `not-assessed`
- `prepared`
- `user-action-required`
- `professional-review`
- `blocked`
- `verified-complete`

## Setup domains

- legal form, formation, ownership, registrations, licenses, beneficial ownership, and governance;
- tax registration, accounting method, invoicing, payroll, expenses, banking, payment processing, insurance;
- domains, DNS, business email, phone, website, analytics, social profiles, brand assets;
- CRM, calendar, support, project management, documentation, file storage, e-signature, automation;
- privacy notices, processing records, retention, vendor agreements, cookies/consent, data-subject handling;
- identity, MFA, roles, secrets manager, endpoint baseline, backup, recovery, logging, monitoring, incident response;
- contracts, proposal terms, customer onboarding, delivery, complaints, refunds, continuity, supplier management;
- employee/contractor onboarding, access changes, offboarding, training, health and safety where relevant.

Never create accounts, accept terms, purchase services, register entities, submit filings, send messages, or activate integrations without explicit authorization and available approved tools.