HOA estoppel certificates with hard architectural guarantees.
The single-writer Durable Object, the D1 unique constraint, and the R2 object digest form a closed triad that makes duplicate issuance architecturally impossible. That is not a policy setting. It is the architecture.
Virginia · Maryland · District of Columbia
Enforcement architecture
Three enforcement nodes. Zero bypass paths.
Duplicate issuance is architecturally impossible. Each node in the triad enforces its own constraint independently. A bypass of any one node fails at the next.
DO writer ID
Durable Object single-writer
Rejects second issuance
Returns 409 Conflict
D1 constraint key
D1 unique constraint
Rejects post-delivery write
Returns constraint violation
R2 object digest
R2 hash enforcement
Rejects bypass via direct API call
Returns hash mismatch
System design
A closed triad: DO, D1, R2
The Durable Object acts as the single-writer gate. Every certificate request passes through one Cloudflare Durable Object instance, which holds an in-memory lock before issuance. A second request arriving while the first is in flight receives a 409 Conflict response before any record is written.
The D1 database enforces a unique constraint on the certificate identifier. If the Durable Object lock were somehow bypassed, a second write to D1 would fail with a constraint violation. The record cannot be overwritten after initial delivery.
R2 stores the immutable certificate object at a path derived from the cryptographic hash of its contents. A direct API write that bypasses the application layer returns a hash mismatch. The three nodes together make duplicate issuance architecturally impossible, not procedurally difficult.
No policy setting can override this constraint. There is no administrative bypass. The architecture enforces itself at every layer independently.
Document anatomy
The certificate as a legal artifact
The architecture outputs a statutory-compliant estoppel certificate. Each field maps to a specific VA, MD, or DC code requirement. The hash-fingerprint footer closes the document with the same triad that enforced its issuance.
Field annotations
Statement date
VA § 55.1-1965: delivery required within 10 business days of request
Association name
MD § 11B-116: association identity required on face of certificate
Balance at closing
DC § 42-1904.11: itemized dues, fees, and assessments required
Transfer fee
VA § 55.1-1965: fee amount set by association; disclosed on certificate
Hash digest
R2 object path derived from certificate content hash; immutable after issuance
Estoppel Certificate
Virginia / Maryland / DC
Amount due at closing
Certificate digest
a7f3c2d1
DO writer ID
9e4b8a6f
D1 constraint key
3d2c1e9a
R2 object digest
Transfer packages
Acquisition tiers
Each tier is a fixed schedule of deliverables. Prices are denominated in USD. All engagements begin with a mutual NDA.
Core IP Package
Clean Cloudflare Workers repository with D1, R2, Queues, Durable Objects, and the single-writer hard gate that makes duplicate issuance architecturally impossible. Includes Stripe split integration, wrangler configuration, VA/MD/DC state-compliant certificate templates, and 14 technical specification documents with a complete cryptographic audit trail implementation. Transfer-ready. No pilot evidence required.
Core IP Package + Pilot Evidence Layer
Everything in the Core IP Package plus documented results from two completed HOA pilots, title company integration evidence, and a live demo environment. Provides the buyer with operational proof alongside the architecture. This tier is contingent on pilot completion and will be offered once both pilots are recruited and running.
Core IP Package + Exclusive Geographic License
The full Core IP Package with a contractual right-of-first-refusal on all VA/MD/DC regulatory template updates for 12 months post-transfer, plus a geographic exclusivity covenant. Structured for a buyer who wants to prevent a competing acquirer from accessing the same statutory compliance templates for the tri-state corridor.
Template Engine Only
VA/MD/DC state-compliant certificate template engine and state statute compliance documentation, isolated from the full architecture. The entry point for a buyer that already operates its own infrastructure and needs only the statutory compliance layer: field schemas, deadline logic for each jurisdiction, and the state-specific certificate assembly rules.
White-Label Deployment Readiness
Add to any tier above
Buyer-branded configuration of the full platform, Cloudflare account migration support, and 30 days of founder availability for technical Q&A and integration guidance. Add this to any tier above. It caps the founder's time commitment while giving the acquirer a bounded window of direct access to the original architect during their onboarding sprint.
Regulatory context
Statutory deadlines make the hard gate a legal necessity
Virginia, Maryland, and the District of Columbia each impose statutory deadlines on HOA estoppel certificate delivery. An association that fails to meet its deadline faces daily financial penalties that accrue until the certificate is issued. These penalties are the direct consequence of a procedural system that depends on human discipline to produce a time-sensitive legal document.
Virginia Code § 55.1-1965 sets a 10-business-day limit and levies $150 per calendar day for each day the certificate is delayed beyond that window. Maryland Real Property § 11B-116 extends the window to 15 days and requires itemized disclosure of all dues, fees, and assessments. DC Code § 42-1904.11 mirrors Virginia's 10-day requirement and mandates disclosure of all amounts due at closing.
The tri-state corridor creates a compliance obligation that cannot be met by a system that allows a certificate to be issued more than once, or one that relies on manual review to prevent a second issuance. The hard gate eliminates both failure modes. The certificate is issued once, within the statutory window, with every required field populated from the state-specific template engine.
A geographic exclusivity covenant over VA/MD/DC regulatory template updates is available as part of the Core IP Package acquisition. That covenant prevents a competing acquirer from accessing the same statutory compliance layer for the tri-state corridor within the exclusivity period.
Statute citations
VA Code § 55.1-1965
10 business days from request. Penalty: $150 per day after expiration.
MD Code Real Prop. § 11B-116
15 days from request. Itemized disclosure of dues, fees, and assessments required.
DC Code § 42-1904.11
10 business days from request. Certificate must disclose all amounts due at closing.
Request an NDA to begin the documented transfer process.
The NDA request initiates a structured review window. Within 48 hours of execution you receive the full technical specification package: Durable Object architecture documents, D1 schema, R2 object structure, and the 14-document cryptographic audit trail.
After the review window, the transfer is documented in a definitive IP purchase agreement. The founder is available for technical Q&A throughout.
Transfer is structured as a clean asset sale. No employees, no liabilities, no ongoing obligations beyond those stated in the purchase agreement.
Virginia · Maryland · District of Columbia · IP asset sale