The answer first. In regulated markets, the binding constraint is not whether you can win — it is whether you are allowed to operate. A single unresolved controlled-goods credential held a CAD 84.5 billion naval pipeline and a CAD 1.4 billion munitions pool at Low attractiveness, despite strong capability fit. The most attractive opportunities in defence, healthcare, and any credential-gated market are often the ones that need no permission at all. The disciplined move is to score “can we win” and “is it worth winning” as two separate questions — and to treat the credential gate as the first filter, before you ever score demand.
The finding: capability is rarely the constraint
Across our defence opportunity screens, the pattern is consistent: companies are rarely limited by what they can do. They are limited by what they are allowed to do.
| Signal | The number |
|---|---|
| Opportunities scored | 15 |
| Rated High on capability fit | 12 of 15 |
| Rated High on attractiveness | 3 of 15 |
| Clustered “winnable but modest” | 8 of 15 |
| Demand held at Low by one credential | CAD 84.5B naval + CAD 1.4B munitions |
Twelve of fifteen opportunities were winnable. Only three were worth winning. The gap between the two is the permission filter — the credential gate that separates winnable from worth-winning.
The framework: the permission filter
The permission filter is the set of credentials, registrations, and clearances a market requires before you can sell into it. In an unregulated market, “can we win” and “is it worth winning” sit close together. In a regulated market, they diverge sharply.
The filter has three layers, and each one can shut the door on its own:
1. The credential. Controlled-goods registration, export controls, data-residency rules. A single unresolved credential held the two largest demand pools at Low attractiveness.
2. The obligation. Industrial-benefit rules create funded, dated demand — but only for suppliers positioned to help primes meet local-content commitments. One foreign prime carried CAD 400M+ in industrial-benefit obligations it must spend locally.
3. The clearance. Security clearances and certification timelines that compress or stretch depending on who is already in the ecosystem.
The trap: chasing the biggest number
The obvious move is to chase the biggest demand pool. In a regulated market, that is often the trap. Chasing a gated opportunity means long qualification cycles with no revenue underneath them.
The three opportunities that cleared the bar — a traceability software layer, a production-architecture blueprint, a paid readiness diagnostic — all shared one property: none required a credential the company did not have. They were sellable today, and they attacked a 970-basis-point margin gap through mix (SaaS gross margins above 60%) rather than volume.
The decision agenda: what to do differently
- Score the two questions separately. “Can we win” and “is it worth winning” are different axes. A full pipeline of winnable-but-modest opportunities looks like progress and is actually dilution.
- Run the permission filter first. Before scoring demand, ask what credential, obligation, or clearance the market requires — and whether you have it.
- Lead with the no-permission work. Productized software and diagnostics that need no credential generate high-margin revenue while the longer qualification cycles run.
What could break this read
- Buying the credential. A company can acquire a controlled-goods holder or partner with a prime and convert a gated opportunity into an accessible one. Re-run the screen when the credential changes.
- The gate opening. If regulation loosens — or a sovereign buyer waives a requirement for a strategic supplier — the “least attractive” pools can flip. The screen is a snapshot, not a verdict.
The checklist
The rule: in a regulated market, the best opportunities are often the ones that need no permission.
Sources
- 15Rock defence opportunity screens — 15 opportunities scored on five factors; 12 of 15 High on capability fit, 3 High on attractiveness, 8 clustered “winnable but modest.”
- Same screens — CAD 84.5B naval pipeline and CAD 1.4B munitions pool held at Low by an unresolved controlled-goods credential; CAD 400M+ industrial-benefit obligations; 400 satellite-per-year target.
- Same screens — 970 bps peer margin gap; SaaS gross-margin target above 60%.
Scores are prioritization tools, not forecasts. Client, product, and named-target identities are withheld.