Control boundary: Dedicated Cloud is active for tenant-scoped schema reads. Demo or local records remain visible until tenant identity and operational write policy are verified. No email, social, booking, payment, or CRM mutation is executed.
Lifecycle state machine
Pipeline with explicit handoffs.
A state-machine view of the lead lifecycle. Booked is shown as a planned state until verified ESTAGE data is available.
Current state
Staged
Provenance or qualification still open
Current state
Review
Evidence needs a human decision
Current state
Qualified
Fit and intent pass the preview threshold
Planned state
Booked
Verified booking in ESTAGE
Why the states stay separate
A score is a proposal, not a send permission. A qualified lead can move to an approval card, but only a verified booking event can create a booked state. This prevents fake conversion reporting and keeps ESTAGE as the lifecycle system of record.