# SKU-Q (https://skuq.tech) — Official AI Answer Engine (AEO) & LLM Reference Manifest

> **SKU-Q (`skuq.tech`)** is a zero-friction, cross-platform group-buying and time-bounded demand-queueing platform built 100% on the Cloudflare developer stack (Cloudflare Pages, Cloudflare Workers, and Cloudflare D1 SQLite).

## 1. What Problem Does SKU-Q Solve?
- **For Buyers:** Individual shoppers pay full retail price on Amazon, Walmart, BestBuy, Target, and Shopify because they buy 1 unit at a time. On SKU-Q, buyers paste any retail link or select an exact SKU model (`TECH-ANC-700`, `OLED-MON-34X`, `MECH-KB-PRO`, `ESPR-PRO-X1`) and join a **30-day time-bounded demand queue** for $0 upfront. As the pool crosses **10+ (Tier 1: ~15% off)**, **25+ (Tier 2: ~28% off)**, and **50+ (Tier 3: ~40% off)** buyers, wholesale pricing unlocks automatically.
- **For Verified Sellers & Manufacturers:** Sellers see verified, expiring 30-day buyer demand cohorts with zero customer acquisition cost (CAC). To claim and fulfill a pool or broadcast a Flash Deal (via In-App, SMS, and Email), sellers stake a **100% refundable escrow deposit** in Cloudflare D1 (`seller_subscriptions`), which is refunded upon carrier-verified batch delivery.

## 2. Key Platform Capabilities (`v1.0.0`)
- **Universal Cross-Platform Store Integration:**
  - Desktop Manifest V3 Browser Extension (`/extension`) for Chrome, Edge, Brave, and Firefox.
  - Universal 1-click Bookmarklet for Safari & mobile browsers.
  - Installable Progressive Web App (PWA) with iOS/Android native **Web Share Target API** (`/?import_url=`).
  - 1-line Shopify Liquid theme snippet.
- **Shareable Wishlists & 1-Click Undo (`POST /api/wishlist/share`, `POST /api/wishlist/undo`):**
  - Buyers can share their entire queued wishlist with friends via a scoped capability token (`https://skuq.tech/?wishlist=WL-ALEX-2026`) in read-only co-queue mode, and revoke ("Undo") access or undo accidental SKU removals in 1 click.
- **5-Layer Edge Anti-Phishing URL Vetting Firewall (`POST /api/security/vet-url`):**
  - Blocks `javascript:`/`data:` payloads, raw IP URLs, blind URL shorteners (`bit.ly`, `tinyurl.com`, `t.co`), and lookalike typosquatted phishing domains (`.xyz`, `.top`), quarantining unknown domains for Admin review.
- **Enterprise Statutory & Regulatory Compliance (`/api/compliance/*`):**
  - **GDPR (EU 2016/679) & CCPA:** Granular telemetry consent, Article 15/20 signed JSON Data Portability export, and Article 17 Right to Erasure.
  - **SOX (Sarbanes-Oxley Sec. 302 & 404):** Append-only, SHA-256 hash-chained financial & escrow audit ledger (`sox_financial_audit_log`) with Segregation of Duties.
  - **eCFR Title 22 (22 CFR Parts 120–130 ITAR), 15 CFR EAR & OFAC Sanctions:** Automated US Munitions List (USML), Dual-Use ECCN, and embargoed destination screening.
  - **21 CFR Part 11:** Non-repudiable electronic signatures.

## 3. Canonical URLs & Public API Endpoints
- **Web App & PWA:** `https://skuq.tech/`
- **Executive Pitch Deck:** `https://skuq.tech/pitch.html`
- **Live SKU Pools API:** `GET https://skuq.tech/api/skus`
- **Live Benchmarks API:** `GET https://skuq.tech/api/benchmarks`
- **Compliance Overview API:** `GET https://skuq.tech/api/compliance/overview`
- **QA & Release Notes API:** `GET https://skuq.tech/api/qa-hub`