TurnkeyDoor Constitution — Public

The architecture, citation discipline, and constitutional rigor behind turnkeydoor.com and the TurnkeyDoor MCP server.

This is the public, sanitized mirror of the constitutional record. It contains the moat-visible parts:

• The locked decision record (CONSTITUTION.md)
• The lock memos backing each constitutional decision
• The citation verifier scripts that gate every merge
• The Fair Housing / UPL / counsel-pending guards
• The MCP architecture and tool catalog
• The verified-anchor registry (public-record New Jersey statutes)

It does not contain pricing strategy, AI cost data, model provider mix, vendor commission rates, internal session state, or operational runbooks.

Why this exists

TurnkeyDoor is a Bergen County NJ rental + FSBO platform. We are subject to:

• New Jersey Real Estate License Act (§45:15-1 et seq.)
• New Jersey Law Against Discrimination (NJLAD — 17 protected classes)
• Fair Chance Housing Act (FCHA — §46:8-52 through §46:8-64)
• Truth-in-Renting Act
• Section 8 voucher acceptance (always TRUE — non-negotiable)
• §2C:21-22(b)(2)+(c) — UPL strict liability for paid SaaS
• §230 of the Communications Decency Act (binding NJ authority: Donato v. Moldow, 374 N.J. Super. 475)
• N.J.S.A. 46:8-19 / 46:8-21.1 / 46:8-21.2 / 46:8-25 / 46:8-26 (security deposit)
• N.J.A.C. 5:10-14.4 and 5:28 (heating season)
• §437.16(e) (lead-safe certification)

To stay compliant under those constraints, we built a constitutional engineering pattern:

1. Every product decision is a numbered C-## record with rationale, risk score, and source citations
2. Every legal claim has an anchored citation verified by scripts/verify-citations.ts on every push
3. Every state-aware compliance decision is gated by a per-state UPL posture review (Codex TASK-C model)
4. Counsel-pending anchors throw CounselPendingError → HTTP 412 (C-131) — the system refuses to ship under-reviewed legal claims
5. Three failure modes are constitutionally locked (C-82): partner-broker revenue flow, bespoke lease drafting, marketing overreach — any feature touching these escalates risk before it ships

What's in this repo

• CONSTITUTION.md — the locked decision record
• references/research/_staging/ — lock memos, drift resolutions, per-state UPL postures
• docs/MCP-STRATEGY.md — the AI-distribution moat strategy
• docs/MCP-COMPLETE-SPEC.md — server architecture
• docs/MCP-TOOL-CATALOG.md — tool surface (no cost data)
• src/lib/composer/verified-anchors.ts — public-record statute anchor registry
• scripts/verify-citations.ts — pre-merge citation gate
• scripts/verify-fair-housing.ts — fair-housing language gate
• scripts/verify-mcp-architecture.ts — MCP architectural posture gate
• scripts/verify-conduit-status.ts — §230 conduit-status gate
• scripts/verify-compliance.ts — composer template compliance gate

What's NOT in this repo (and why)

The closed-source side covers:

• AI cost / token economics — competitors should not see our gross margin per MCP call. Marking up AI tokens creates a race to the bottom; we keep it private.
• Pricing strategy memos — tier structures, ARR projections, affiliate commission rates
• Counsel correspondence — attorney-client privileged
• Operational runbooks — bank account setup, API key rotation, DNS setup
• Internal session state — handoff docs, sprint plans, build orders
• Vendor / investor outreach — relationship-confidential

This is the same pattern Anthropic uses: papers about Claude are public; per-call infrastructure cost is not.

Live product

• Public site: turnkeydoor.com
• MCP server: turnkeydoor.com/mcp
• Public registry submission: github.com/modelcontextprotocol/registry

License

Apache License 2.0 — see LICENSE. Apache 2.0 was chosen over MIT for its patent grant clause: contributors granting patent rights to downstream users protects the verifier-pattern from defensive-patent attacks.

Contributing

This is a mirror. The canonical source is private. We accept:

• Issues on architectural questions
• Issues flagging citation errors (the verifier blocks fabrications, but ground-truth corrections are welcome)
• Issues on accessibility / compliance gaps in the documented patterns

We do not accept pull requests against this mirror. Patches against constitutional decisions go through the private repo's C-## lock process.

Status

• Sprint 34 (2026-05-06): Public repo created. Curated mirror.
• Supported region: US-NJ
• Planned regions: US-TX (Codex TASK-C verdict GREEN — scaffolded, data population pending), US-FL (TASK-C verdict YELLOW — feature-flag off pending mitigation)
• Counsel-pending regions: US-NY, US-CA, US-MA (TASK-C verdict RED for all three — Lowenstein Sandler review queued; Codex TASK-D architectural mitigation memos in progress)