This page is the consolidated risk catalogue for the DomiDo project: every category of risk that the business and the platform face, the mitigations in place, and the contingency plans behind them. DomiDo is built by Avvyland Limited (UK) and sells universal blocks and fasteners only; every construction shown on the platform is a user-generated design. The catalogue is organised by category, opens with a heatmap that locates each active risk on a single canvas, ends with a probability-by-impact matrix and a ranked list of the top risks, and identifies the trigger points that activate the contingency plans.
The heatmap groups every active risk by category and shades each by current severity — red for high, amber for medium, green for low. High-severity risks are concentrated in three areas: the technical category (AI provider exposure and edge cases in the conversion pipeline), the market category (demand below the base case before the manufacturing trigger), and the team category (key-person concentration on the backend and the chief technology officer). Each risk has a dedicated entry below with its trigger conditions, mitigations, and contingency plan.
Technical risks centre on the pipeline that turns user designs into manufacturable kits, the external AI providers that some of those flows depend on, and the platform's ability to scale and protect itself under load.
| Risk | Description | Mitigation |
|---|---|---|
| Pipeline quality | Voxelisation artefacts or poor block fitting in the dd-mesher pipeline can produce unbuildable kits. | A fixed regression-test corpus, per-stage validation, an explicit assembly-buildability check, conservative defaults, and a manual review path for high-intent designs in beta. |
| AI service reliability and vendor lock-in | Mode B depends on external generation providers. Outages, quality drift, or commercial changes can stop the flow. | A provider-abstraction layer in the backend, multi-provider fallback chains, controlled-beta queues during partial outages, and offline reproducibility for the dd-mesher path. |
| Scalability under load | Spikes in traffic, generation, or processing can exhaust queues, storage, or providers. | Application-level rate limits, queue depth-driven autoscaling, scale-to-zero workers in idle periods, and explicit per-tier budgets for expensive jobs. |
| Data loss or security breach | Loss of customer-uploaded source files, generated artefacts, or account data. | Encrypted private object storage, signed access, daily backups with point-in-time recovery, secret management with no commits, threat modelling, and dependency-vulnerability scanning. |
| Mobile and web performance | Slow first paint, jank in the 3D viewer, or heavy main-thread work hurts conversion. | Code splitting, lazy loading of the 3D viewer, bundle-size budgets, Core Web Vitals tracking, image and texture optimisation, and accessibility checks. |
| Third-party API deprecation | Authentication providers, AI providers, the analytics provider, the payment provider, the translation provider, or the email provider may change or deprecate APIs. | Provider-abstraction layers, contract tests against staging, and minimum twelve-month migration windows for any critical provider. |
| Technical debt from rapid development | Mock-derived screens, deferred refactors, and shortcut patterns accumulate. | Component decomposition over time, a small refactor budget in every milestone, route-level acceptance criteria, and an explicit list of known debt items. |
Intellectual-property risks span the patent strategy on the interlocking mechanism, the design copyright that protects the block geometry, the AI-generated authorship surface, the trademark surface, and the trade-secret protection around the dd-mesher pipeline and the scoring system.
| Risk | Description | Mitigation |
|---|---|---|
| Patent rejection | The patent application for the interlocking mechanism could face prior-art objections, including from cited prior-art families. | Freedom-to-operate analysis before significant capital is deployed, clear novelty arguments, and the option to refine claims during prosecution. |
| Patent infringement claims from others | A third party may claim DomiDo blocks infringe their patent. | Freedom-to-operate analysis, design-around options at the geometry level, registered design protection, and counsel relationships with intellectual-property specialists. |
| Premature disclosure before filing | Public disclosure can invalidate the patent in some jurisdictions. | A documented disclosure policy, careful management of public statements and demonstrations, and filing of the priority application before launch-stage public exposure. |
| Copyright issues with AI-generated designs | Designs generated by AI may carry ambiguous authorship status. | Clear user-and-designer-owns-design terms, a documented licence grant from the user to DomiDo, content-moderation review for similarity to known third-party works, and platform takedown procedures. |
| Trademark conflicts | The DomiDo trademark could face opposition or conflict in some jurisdictions. | UK trademark registered with the UK Intellectual Property Office; international registrations considered as expansion proceeds; clearance checks before each market. |
| Design copying by competitors | A competitor may copy block geometry or platform user experience. | Registered designs, patent protection on the connection mechanism, scale and network-effect advantages on the platform side, and rapid iteration. |
| Trade-secret protection for algorithms | The dd-mesher pipeline, the scoring system, and key heuristics are commercial advantages. | Code stored in a private repository, contributor and contractor non-disclosure agreements, and clear classification of confidential algorithms. |
Market risks are the ones that the operating team can only partially control because they sit at the intersection of customer demand, willingness to pay, and the broader category of AI-to-physical products.
| Risk | Description | Mitigation |
|---|---|---|
| Product-market fit uncertainty | The conversion funnel is benchmarked, not validated. | Phase A non-binding interest reservations test demand before any tooling commitment; Phase A.5 gated pre-orders sharpen the signal before fulfilment; checkpoint discipline on conversion thresholds. |
| Customer willingness to pay a premium | Outdoor block kits sit in a price band shaped by alternatives in timber, concrete, and steel. | Visible value framing (re-usability, zero demolition waste, custom design), modular pricing across kit sizes, and AI design credits as a separate value path. |
| Market timing | The AI-to-physical thesis is still emerging at consumer scale. | A small launch surface, rapid learning loops, and a soft-landing posture that can extend the validation period. |
| Category confusion | Visitors may not know whether DomiDo is a product, a service, or a marketplace. | A single canonical product definition at launch, one normalised commercial object model, and one explicit phase-aware customer contract. |
| Low repeat-purchase rate | Outdoor structures are infrequent purchases. | The reconfigure-and-rebuild story (one kit, many structures), AI design credits as a recurring digital purchase, and a designer marketplace that creates a long-tail of new things to buy. |
| Seasonal demand concentration | Garden and outdoor demand peaks around spring and pre-summer. | Inventory forecasting tied to the seasonal curve, content and acquisition synchronised with the curve, and a parallel indoor or year-round use case where the block system can serve it. |
Manufacturing and supply-chain risks cluster around tooling, single-supplier dependency, raw-material price volatility, and the 3PL relationship that handles every physical kit movement.
| Risk | Description | Mitigation |
|---|---|---|
| Tooling delays | Production tooling can slip and push fulfilment readiness. | Lead-time buffers, manufacturer shortlists, the option of rapid hybrid tooling, and a staged tooling programme that prioritises the highest-confidence SKUs first. |
| Quality issues on the interlock | Dimensional tolerance on the locking faces is critical to the brand. | Tight Acceptable Quality Limit (AQL) on the locking geometry, statistical process control, per-cavity tracking, and an explicit corrective-action loop with the moulder. |
| Manufacturer bankruptcy or capacity issues | Single-source exposure can stop production. | Pre-qualified backup moulders per SKU, documented re-qualification time, and explicit mould-ownership terms in the manufacturing agreement. |
| Raw-material price spikes | Polymer prices are volatile. | Index tracking, contract structures with material price pass-through caps where possible, and pre-approved material substitution paths where the engineering allows. |
| Third-party-logistics service failures | Wrong shipments, slow processing, or peak-season collapse hurt customers. | Quality terms in the contract, weekly accuracy metrics, escalation paths, and an explicit secondary 3PL relationship for failover. |
| Shipping delays and costs | Carrier capacity and pricing fluctuate. | Multi-carrier strategy, regular tendering, dimensional-weight optimisation, and clear customer expectations on delivery windows. |
| Returns-handling complexity | Returns of heavy outdoor kits are expensive to process. | A grade-A, grade-B, grade-C inspection regime; refurbish-and-resell for grade A and grade B; recycle for grade C; clear policy displayed in the buyer flow. |
Financial risks cover the long validation period before product-market fit is proven, the cost of acquisition, the working-capital demand of tooling and inventory, and the payment-provider exposure that ties Phase A.5 and Phase B together.
| Risk | Description | Mitigation |
|---|---|---|
| Runway exhaustion before product-market fit | A loss-making validation period must be funded long enough to learn. | A staged founder-funding plan with explicit drawdown triggers, decision checkpoints on cash and on demand, and a written wind-down plan that is feasible and humane. |
| Higher-than-expected customer acquisition cost | Paid acquisition may be more expensive than the benchmark assumed. | Organic-first acquisition through community and content, paid spend held back until conversion is proven, and weekly review of channel economics. |
| Inventory write-down risk | Stock can age, be damaged, or become obsolete. | Demand-led production batches, modest safety stock, and a refurbishment path that protects value on damaged stock. |
| Working-capital constraints | Pre-paid tooling and inventory consume cash. | Universal blocks (one mould serves every design), staged tooling, and pre-order accumulation that validates demand before tooling capital is committed. |
| Currency fluctuation | European Union manufacturing or international expansion creates currency exposure. | Forward-contract options for material if scale justifies it, sterling-denominated contracts where possible, and a simple foreign-exchange policy at scale. |
| Payment processing issues | A payment provider outage, settlement delay, or chargeback spike disrupts cash. | A single, well-instrumented payment provider with strong customer authentication, idempotent webhook handling, and clear refund and dispute workflows. |
Regulatory and legal risks span product safety, data protection, consumer law, marketplace liability for designer content, multi-jurisdictional tax, and the emerging AI-regulation regime.
| Risk | Description | Mitigation |
|---|---|---|
| Product-safety classification changes | A regulator may reclassify the product. | Adult-outdoor positioning, ongoing classification review with counsel, and explicit blocked uses (toys, structural, electrical, wet-area, child-use). |
| Data-protection enforcement actions | The General Data Protection Regulation (GDPR) and the UK GDPR require careful handling of personal data. | A Data Protection Impact Assessment (DPIA) before launch, minimum-necessary data collection, lawful-basis records, retention policy, breach-notification procedures, and a Data Subject Access Request workflow. |
| Consumer-protection complaints | UK and European Union consumer law set strict expectations on what is sold and how. | Clear product descriptions, accurate delivery windows, fair refunds and cancellations, and the Consumer Rights Act 2015 as the baseline for goods quality. |
| Marketplace liability for designer content | Phase C marketplace introduces user-generated commercial content. | Designer terms, intellectual-property and similarity moderation, takedown workflow, and a designer payout gate that depends on dispute-free delivery. |
| Tax compliance across jurisdictions | VAT, sales tax, and customs vary across markets. | UK-only physical launch, Stripe Tax for digital products where applicable, registered VAT presence at the right thresholds, and counsel review before each market expansion. |
| AI regulation | The European Union AI Act and similar frameworks add obligations. | Provider documentation, transparency notices for AI-assisted features, human oversight for content moderation, and adjustments to provider contracts as the regime crystallises. |
The remaining three categories — team, competitive, and operational — share a common pattern: the risk is usually contained by deliberate operating practice rather than by a structural mitigation, so the catalogue here records the practice that has been adopted.
| Risk | Description | Mitigation |
|---|---|---|
| Key-person dependency | The backend and the chief technology officer (CTO) sit at a small concentration of knowledge. | Documentation, cross-training, code-base readability, key escrow, and a hard prerequisite to raise the backend bus factor before manufacturing begins. |
| Team burnout | A long validation year is demanding. | Realistic backlog, explicit cuts, scope discipline, weekly review of work-in-progress, and a humane operating cadence. |
| Skill gaps | Specific manufacturing, regulatory, and marketplace skills are needed at points across the journey. | Specialist advisors at known points (intellectual-property counsel, manufacturing partner, payment-architecture review), and targeted hires when the bottleneck is clear. |
| Co-founder conflicts | Strategic or operational disagreements can derail execution. | Clear roles, written decision rights, an active operating cadence, and an explicit escalation path. |
| Hiring challenges | The market for senior engineers, designers, and regulatory specialists is competitive. | A clear story, equity that vests, working remotely where appropriate, and a hiring loop that respects candidates' time. |
| Modular-construction competitors adding AI or digital capabilities | An existing modular brand may add AI design tools. | The four-pillar position (AI design, the dd-mesher conversion engine, functional outdoor scale, the designer marketplace) and ongoing investment in the dd-mesher moat. |
| Adult-building-block competitors entering functional or outdoor scale | A mainstream toy or block brand may extend into outdoor scale. | Engineering and manufacturing differences at outdoor scale, dedicated outdoor product positioning, and a brand-and-content investment that owns the AI-to-physical narrative. |
| New entrants with deeper pockets | A larger player may launch into the same intersection. | First-mover advantage, the dd-mesher engine as a structural moat, network effects from the designer marketplace, and rapid iteration. |
| AI 3D platforms adding physical fulfilment | A purely digital AI-3D platform may add manufacturing. | The DomiDo block system is a vertically integrated physical-product business with proprietary geometry; fulfilment is not an afterthought. |
| Open-source alternatives to the voxelisation engine | An open-source library may approximate the dd-mesher pipeline. | The geometry-aware optimisation, the manufacturability-aware optimisation, and the integrated bill-of-materials and assembly outputs go beyond a generic voxeliser. |
| Customer-support overload | A demand spike or a bug pattern can overwhelm a small team. | A live operating room on launch days, support workflow with response-time targets, founder-driven triage, and copy fixes for recurring confusion. |
| Defective-product batch | A batch can ship with an unacceptable defect rate. | Per-batch AQL, incoming inspection at the 3PL, traceability that lets the team pull a batch quickly, and a clear customer-facing replacement policy. |
| Negative social-media or public-relations event | A safety question, an environmental question, or a customer dispute may escalate. | Honest, timely responses, an active feedback loop, and an internal pre-cleared messaging playbook. |
| Platform downtime in peak season | An outage during a demand peak is expensive. | Production rehearsals before peak seasons, alert rules with quick recovery actions, and the option to keep the platform in a read-only state if write paths fail. |
Risks are scored on probability and impact. The matrix below shows where each top risk sits, in conceptual terms, with the top-right corner being the highest-priority quadrant.
The matrix collapses the catalogue into a single canvas so that the operating team can see at a glance which risks are both probable and impactful. The top-right concentration — kit demand, backend bus factor, and cash management — drives the weekly review cadence. The ranked list below makes the same picture explicit and adds the secondary risks that sit just below that top-right cluster.
| Rank | Risk | Severity | Reason |
|---|---|---|---|
| 1 | Kit demand fails to materialise. | High | Year-one revenue depends on a benchmarked, not validated, conversion funnel. |
| 2 | Backend and CTO bus factor of one. | High | Knowledge concentration creates a single point of failure for the platform. |
| 3 | Cash management before the year-two ramp. | High | The validation year is loss-making and cash is finite. |
| 4 | Mode A pipeline reliability on real uploads. | Critical | The technical wedge must work for real samples. |
| 5 | Quality and dimensional tolerance on the interlock. | High | The locking face is the brand. |
| 6 | Patent or freedom-to-operate setback. | High | Intellectual property underpins the product moat. |
| 7 | Third-party-logistics or shipping failure. | High | Fulfilment quality is the customer experience. |
| 8 | Regulatory or consumer-protection event. | Medium-High | The platform crosses multiple regulatory boundaries. |
| 9 | Stripe or other provider outage. | Medium | Single-provider dependency on payments. |
| 10 | A defective batch or recall. | Medium-High | A small fraction of a batch can hurt brand confidence. |
Each mitigation has a cost, and the active prioritisation is to spend on the few mitigations that materially change the matrix and to defer mitigations whose risk reduction is small. The clearest examples of high-leverage spend are freedom-to-operate analysis, the moulder backup qualification, the alert and incident workflow, and the backup-and-restore rehearsal. A risk-monitoring dashboard tracks the top risks weekly, with each risk carrying a current status, the most recent material change, the active mitigation in motion, and the trigger value that would escalate the response.
The contingency plans only fire when their specific trigger is hit. Fewer than fifteen interest reservations in launch week despite 250 qualified listing views triggers a pause on feature work, user interviews, and changes to offer, listing quality, or trust copy. A Mode A success rate below seventy percent on real beta uploads triggers a narrowing of supported input, better sample guidance, and consideration of founder-assisted processing for high-intent designs. Cash projected below the working buffer activates the contingency funding tranche, reduces team size, or accelerates cuts. A defect rate above the AQL on a production batch triggers an immediate quarantine, a root-cause analysis with the moulder, and proactive replacement of affected customer orders. A regulator opening a query on classification or safety triggers immediate counsel engagement, restriction of the affected use case in the user interface, and product-copy updates. Across all of these, the broader contingency posture covers pivot strategies if the market does not respond, fallback options for each top risk, insurance coverage that protects against the catastrophic outcomes, and a legal reserve that funds disputes and counsel work without disrupting operations.