Third-party connection registry — status per integration.
AR / AP draft sync — invoice + bill outbound with operator review queue.
XERO_CLIENT_ID set.
Outlook send-as + Graph inbound for notice threading. Scaffold today.
M365_CLIENT_ID unset — Azure AD app registration pending.
Client Credentials grant + extractor sync for migration / parallel-run.
No procore_connections row for this tenant.
Azure Communication Services — primary notice / digest transport in staging + prod.
ACS_CONNECTION_STRING unset — sends will fail through this driver.
Secondary outbound driver — fallback / dev tenants. Selected via NEOM_EMAIL_DRIVER.
SENDGRID_API_KEY unset.
Forge / APS viewer + manifest pipeline for the Models register. Scaffold today.
APS_CLIENT_ID unset — entitlement decision pending.
OCR extraction for delivery dockets, invoices, and signed forms. Phase 5.
AZURE_DI_ENDPOINT unset — OCR queue will fail.
Scaffold only — operator-deferred indefinitely (2026-04-28). Do not build further.
Frozen per docs/bluebeam-deferred.md.
Per-tenant cost caps (per-user daily, tenant daily, max tokens per call) + today's usage vs cap + recent assistant_calls audit feed.
Caps stored on tenants row · audit feed via assistant_calls.
Each connection above has a runbook under docs/runbooks/. Anything that needs operator action (Azure / Procore / Autodesk entitlement, third-party secret in Key Vault) belongs in BUILD_BLOCKERS.md so it shows up in the next operator briefing.