martori studio · brand playbook
a circuit breaker for the nervous system, provisioned by clinicians

surge

one curve, ninety seconds, back to regulated. a crisis utility, not a wellness app.

version 4.0july 16, 2026surge-ai.appsanctuaryapp, inc.
01

what surge is

Surge is a circuit breaker for the nervous system, provisioned by clinicians. It is a crisis utility, not a wellness app.

It runs on a single mathematical decay curve. One curve drives everything a person sees, hears, and feels, carrying a dysregulated nervous system back toward a regulated state in as little as ninety seconds, before clinical work begins.

Surge is the studio's B2B clinical product. Providers license it and provision anonymous tokens to patients. It is the clearest proof point in the portfolio for the custom-build practice, because it carries real clinical and billing complexity. Surge stands apart from the two product lines as the studio's clinical instrument.


02

where it sits in the studio

martori studio runs two engines. consulting and custom builds are the primary business. the portfolio of ten products, across the healing-worlds and tools lines, is the second engine: proof of work and a sales asset, not the revenue center. surge stands apart from both lines as the clinical instrument. the practice sells one thing: a free listening, then the sketch, then the $500 build day. the old tier ladder is retired.

products ship on their own readiness. there is no shared launch date.

Surge is the studio's strongest custom-build proof point. A clinical B2B product with a billing-code pathway is the hardest thing on the shelf to build, which makes it the most persuasive thing to show a prospective client.


03

the mechanism

one curve. every visual, every sound, every haptic, from the same decay.

Surge ships three sequences, each derived from the same engine.

instant reset, 30s
a physiological sigh, with an orange-to-indigo hard cut at ten seconds.
orienting anchor, 60s
bilateral grounding, a terracotta-to-sage gradient, an active tap.
coherence ripple, 90s
the original. press and hold, deep forest and ocean.

All three route to an aftermath view and an opt-in handoff to Heron. The engine is offline-resilient, because a crisis never waits on a network.


04

voice and copy

Clinical, and human. Surge speaks with physiological specificity, not the vocabulary of self-care. It describes what the body is doing, plainly.

Never a promise of reimbursement. The RTM pathway is real, but eligibility is the provider's billing team to confirm. Surge never states or implies that a claim will be paid.

The three bans, studio-wide. No em dashes. No exclamation points. No wellness language. This last one is load-bearing for Surge, which is a crisis utility and must never read as a wellness product.


05

visual identity

One typeface. Hanken Grotesk, weights 400 to 800, no exceptions.

Dark-first, on true black. Clay is the accent and the studio signature. A sage green marks the regulated, resting state the curve settles into.

black · ground · #0A0A0A
light · text · #ECEAE4
sage · regulated · #8AA090
clay · accent + studio signature · #B6502E

The mark. the decay-curve logomark, Direction B: a sharp asymmetric peak, a long settle to a single rest dot, and no drawn baseline. the martori gate is the studio mark.


06

crane and heron

Surge carries two companions. Crane works in the moment, inside the decompression view, guiding a sequence in real time. Heron works after, in the aftermath view, helping a person understand what their body just did and build awareness over time.

the first law: nothing in surge is built to increase engagement.

Crane defaults to a 24-hour ephemeral session with a quiet opt-in for local persistence. Anonymous free users never transmit data, which holds the zero-identity-harvesting promise. Presence, not retention.

Check. the july 14 deploy carries crane-inference and no heron endpoint. heron may be client-side, may share crane's route, or may not be built. this book and the roadmap both say heron is live. confirm before the pilot, because the aftermath handoff is half the clinical story and a founding partner will ask.

07

the doctrine

A crisis utility, not a wellness app. This is the line the whole product defends. Every word and every pixel keeps it.

One curve. a single decay drives visual, audio, and haptic together. the engine is the brand.

Two tracks, kept separate. Track one is the clinical tool, which sells at launch on outcomes with no regulatory dependency. Track two is the billable device, which requires FDA device-positioning and clinical and legal review before anyone pitches reimbursement.

B2B only. providers pay and provision. patients enter through an anonymous token. that structure is the privacy promise made concrete.

No product in this portfolio sells another one to a patient. Pull request 85 shipped a Purpose Driven Collection cross-sell and added Vigil to it. The studio retired cross-product funneling when the flywheel was reframed as proof to consulting, and the parent book puts it plainly: the craft carries from one build to the next, a person never does. Nowhere is that rule stricter than here. A person reaches Surge in the worst ninety seconds of their week, holding a token from a clinician who is responsible for them. That is a patient, not an audience. Offering grief software to someone coming out of a panic episode is a guess about their life that nobody has earned the right to make. Where the collection renders decides how serious this is: a marketing page is a doctrine problem, the provider portal is a partner problem, and the patient session is a clinical one. It does not belong in the patient session. And if Track two ever bills RTM, a reimbursed clinical touchpoint carrying a cross-sell stops being a matter of taste.


08

the roadmap

Surge opens to invited practices when it is ready, not on a date. Three homework items gate any reimbursement pitch. Dates are working targets under the gate. The shared september launch is retired.

donein progressnextgate
foundationthrough june · complete

the engine and the backend, built.

  • the somatic engine, decay curve to visual, audio, and haptic, with three sequences.
  • multi-page marketing site and a B2B backend, provider, token, and session schema locked to service-role access.
  • provider portal, admin-invite only. fifteen endpoints live: caseload, sessions, session detail, invites, invite-accept, revoke, team, tokens, signup, settings, stats, analytics, export, generate. deployed surge-ai.app. provider target list and sales materials built.
  • Crane is live. Heron is not in the deploy. this book claims both. confirm heron exists before a partner does. check
clinical and billing homeworkcritical path · in progress

the three items that gate reimbursement.

  • FDA device-positioning decision. gate item
  • RTM code-fit and clinical-framing review. gate item
  • HIPAA and BAA compliance. gate item
  • the portal already generates what RTM wants. analytics, stats, session detail, and export are deployed. the documentation surface for the billable track got built before the positioning question that governs it was answered. that raises the FDA item rather than lowering it. gate item
  • the collection audited for placement. marketing page, portal, or patient session. the answer changes the severity and the fix. gate item
  • founding-partner pilot forming, capped at three to five practices.
launch tracksnext

sell what is clean, hold what is not.

  • Track one sells now on outcomes and differentiation, no regulatory dependency.
  • Track two waits behind the homework, before any reimbursement is discussed.
  • patient-facing app via median.co if the pilot needs it.
the open doorreadiness · not a date
Surge opens to invited practices when all four hold: Track one is clean with no reimbursement promises, the collection is out of the patient session, HIPAA and BAA are in place, and a founding partner is signed. The reimbursement pitch waits behind Track two.
afterpost-launch · expansion
  • the pilot run as a case-study factory.
  • wider Nashville metro, then the expansion rings.
  • the sweep. a scheduled playbook review in the new year.

09

brand rules

  1. one face. hanken grotesk, 400 to 800, everywhere.
  2. clay #b6502e is the accent and the studio signature. the gate is the studio mark.
  3. dark-first, on true black.
  4. no em dashes. no exclamation points. no wellness language.
  5. a crisis utility, not a wellness app. never blur the line.
  6. never promise reimbursement. eligibility is the provider's billing team to confirm.
  7. B2B only, with zero identity harvesting for anonymous users.
  8. no product sells another one to a patient. the craft carries from one build to the next, a person never does.
  9. ship on readiness, not on a date.

10

version history

v4.0july 16, 2026the collection question. reconciled against the live deploy rather than against memory. names the purpose driven collection cross-sell that pull request 85 shipped, and rules it out of the patient session pending an audit of where it renders. records that the portal is fifteen endpoints and that its analytics and export already build the track two paper trail ahead of the fda decision that governs it. flags heron as claimed live and absent from the deploy. corrects the domain to surge-ai.app, finally, and the portfolio to nine. reimbursement discipline unchanged and unchallenged.
v3.1july 10, 2026this refresh. roadmap re-cut to a readiness gate with the three homework items on the critical path. median.co patient-app path noted. no doctrine shift.
v3.0july 1, 2026the july doctrine sweep. the three sequences, Crane and Heron, the Clinical Token model, and the two-track revenue doctrine.
v2.0june 2026the three sequences added, plus the provider GTM and sales plan.
v1.1june 2026the decay-curve logomark system documented in full.
v1.0june 2026the first Surge playbook. dark-first, clay, Hanken, B2B-only.