534c1ccd86
The CTO verdict on the /faq entries (FRE-329) traced the false privacy answer
to marketing/positioning.md rule 3 and its approved-claims row, and said the
rule has to come down in the same change as the /faq withdrawal or the next
page restates the claim.
This adds the exact patch for that, saved next to the page patch so both go in
as one commit when the gates clear. It is not applied: the withdrawal decision
is the Chief of Staff's (FRE-326 step 2b), and the replacement copy waits on
FRE-333's egress inventory.
It also carries the stale "macOS 14+" row, which NOOK-881 retired: the app
cannot start below 14.2, and the site has said 14.2+ since 134f41e. Rule 3's
new text is corrected against /privacy as it reads today: that page does name
the hardware UUID and the device name, and says nothing about crash reporting
with PII or the relay.
Source issues: FRE-326, FRE-329, FRE-333.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
41 lines
2.3 KiB
Diff
41 lines
2.3 KiB
Diff
diff --git a/marketing/positioning.md b/marketing/positioning.md
|
|
index 1bc4973..26d6b04 100644
|
|
--- a/marketing/positioning.md
|
|
+++ b/marketing/positioning.md
|
|
@@ -53,13 +53,20 @@ pages, marketing copy, comparison tables, meta descriptions, emails, FAQs, all o
|
|
Copy that says "13 agents" or "no data leaves the device" must have a test backing it.
|
|
If a claim cannot be pointed at code or a test, it does not go in copy.
|
|
|
|
-### 3. Honest privacy scoping
|
|
+### 3. No privacy claim until the egress inventory exists (withdrawn 2026-10-29)
|
|
|
|
-Telemetry and the trial email **do** leave the device. The defensible claim is:
|
|
+The claim that stood here — "No prompt or code content leaves the device" — is **false at HEAD**
|
|
+and must not be restated in any copy until it is verified and replaced. It was backed by an
|
|
+argument about envelope metadata, which says nothing about what leaves the machine. Three things
|
|
+at HEAD contradict it: crash reporting initialises with `sendDefaultPii = true`; the licence call
|
|
+sends the hardware UUID and the device name; the phone relay carries sealed prompt and reply
|
|
+payloads. `/privacy` names the hardware UUID and the device name and says nothing about crash
|
|
+reporting with PII or about the relay.
|
|
|
|
-> **No prompt or code content leaves the device.**
|
|
-
|
|
-Never "no data leaves the device".
|
|
+So: write **no** privacy claim at all — not softened, not partial. "Telemetry and the trial email
|
|
+do leave the device" is true and insufficient; it is not a substitute. The replacement goes in
|
|
+only after FRE-333 lands an egress inventory and `/privacy` text that match what the app does.
|
|
+See FRE-326 (the `/faq` withdrawal) and FRE-333 (the inventory).
|
|
|
|
### 4. Sell what works today
|
|
|
|
@@ -87,8 +94,7 @@ nothing posts itself.
|
|
| Permission gate answered from a card | awaitPolicyTable + bridge directive path (`hook/normalize.go`, `serialize.go`) |
|
|
| Fan / thermal / charge control | `helper/` (privileged helper, SMC, no kext) |
|
|
| One-time purchase, no subscription | $10 → $15 at 1.0; Stripe checkout |
|
|
-| macOS 14+ | 27 source files use the `@Observable` framework |
|
|
-| No prompt or code content leaves the device | envelope carries session/event/terminal metadata only (see `docs/agent-interface.md`) |
|
|
+| macOS 14.2+ | the CoreAudio overlay symbol the mixer uses only exists from 14.2 (NOOK-881) |
|
|
|
|
## Held claims (not publishable)
|
|
|