research: review regulated services and separate client assets from income

apps/docs/scripts/auth-cli.ts

@@ -184,8 +184,8 @@ async function main() {
   const research = await researchResponse.json();
   assert.equal(research.companies.length, 1051);
   assert.equal(research.categories.length, 11);
-  assert.equal(research.evidence.length, 1958);
-  assert.equal(research.observations.length, 251);
+  assert.equal(research.evidence.length, 1991);
+  assert.equal(research.observations.length, 258);
   assert.equal((await request("/api/research/ai-companies", { method: "POST", headers })).status, 405);
   const researchPage = await request("/docs/other-research/ai-company-research/overview", { headers });
   assert.equal(researchPage.status, 200);

apps/docs/tests/research.test.ts

@@ -24,8 +24,8 @@ test("research revisions share the authentication database and preserve replay l
     assert.equal(consumeCode(config, "invalid"), "limited");
     const initial = readResearchSnapshot();
     assert.equal(initial.companies.length, 1051);
-    assert.equal(initial.evidence.length, 1958);
-    assert.equal(initial.observations.length, 251);
+    assert.equal(initial.evidence.length, 1991);
+    assert.equal(initial.observations.length, 258);
     assert.deepEqual(initial.candidateBatches, seed.candidateBatches, "candidate gaps persist in the same database metadata");
     assert.deepEqual(initial.directoryRechecks, seed.directoryRechecks, "follow-up classifications persist without rewriting the discovery audit");
     assert.deepEqual(readResearchSnapshot(), initial, "reopening does not duplicate records");
@@ -64,7 +64,7 @@ test("research validation rejects broken evidence and unsafe source links", () =
 
 test("reviews link explicit companies without turning global or excluded cases into companies", () => {
   const snapshot = structuredClone(seed) as ResearchSnapshot;
-  assert.equal(snapshot.reviews.filter((r) => r.scope === "companies").length, 120);
+  assert.equal(snapshot.reviews.filter((r) => r.scope === "companies").length, 121);
   assert.equal(snapshot.reviews.filter((r) => r.scope === "dataset").length, 12);
   assert.equal(snapshot.reviews.filter((r) => r.scope === "excluded-candidate").length, 44);
   const review = snapshot.reviews.find((r) => r.id === "R4")!;

content/research/ai-companies.sources.json

@@ -1,5 +1,5 @@
 {
-  "version": "2026-10-31-industry-3",
+  "version": "2026-10-31-industry-4",
   "scopeConfirmedAt": "2026-10-30",
   "acceptance": "以确认的公开来源清单为边界，逐条核对并标明缺项。",
   "provenance": "S01—S12恢复自已提交用户的《AI公司研究_来源与分类模板》来源清单；S13—S16单列后续已使用的补充证据渠道，不将使用次数当作全量覆盖。",
@@ -15,7 +15,7 @@
       ],
       "initialAccess": "官网目录可访问",
       "boundary": "已读取八个2025—2026批次镜像候选池1428条，再核YC官方页面；不声称覆盖全部YC历年或未公开公司。",
-      "nextCheck": "原新增目录33条深化并保留来源；本快照基础项461条主营人工复核。原C07累计70项已读主营与相关发布：45保留、25按交付迁移，尚余114项规则初分。保险/地产经纪、招聘和样本物流与软件分开，PARES双模式待合同核，Prism月费/成功费与旧启动费分期；患者减免、客户报价/项目、基金、索赔和旧雇主成果不作公司收入。本快照C05仍89项规则初分，继续纳入后续结果；其他非人工资料、主体、财务、技术及非YC来源覆盖仍缺。",
+      "nextCheck": "原新增目录33条深化并保留来源；本快照基础项486条主营人工复核。原C07累计95项已读主营与相关发布：65保留、30按交付迁移，尚余89项规则初分。Origin数据许可、Vector法律/平台主体、Moritz事项费、Perfectly招聘服务及医疗保险双线分别待合同核；客户AUM/交易/节省和旧雇主税款/并购/ARR排除营收。本快照C05仍89项规则初分，后续结果另纳入。主体、付费、财务、技术以及全部公开来源覆盖缺项继续保留。",
       "limitation": "批次不等于成立年；不代表全部公司"
     },
     {

content/research/ai-income-analysis.json

@@ -1,5 +1,5 @@
 {
-  "sourceVersion": "2026-10-31-industry-3",
+  "sourceVersion": "2026-10-31-industry-4",
   "asOf": "2026-10-31",
   "metric": "platform-mrr-usd",
   "sampleUnit": "product-or-business",