From 534c1ccd86a670a2686dccf33b31b5dd69b2508a Mon Sep 17 00:00:00 2001 From: Paperclip Agent Date: Thu, 29 Oct 2026 06:11:12 +0000 Subject: [PATCH] marketing: prepare the rule-3 strike as a reviewable patch (not applied) The CTO verdict on the /faq entries (FRE-329) traced the false privacy answer to marketing/positioning.md rule 3 and its approved-claims row, and said the rule has to come down in the same change as the /faq withdrawal or the next page restates the claim. This adds the exact patch for that, saved next to the page patch so both go in as one commit when the gates clear. It is not applied: the withdrawal decision is the Chief of Staff's (FRE-326 step 2b), and the replacement copy waits on FRE-333's egress inventory. It also carries the stale "macOS 14+" row, which NOOK-881 retired: the app cannot start below 14.2, and the site has said 14.2+ since 134f41e. Rule 3's new text is corrected against /privacy as it reads today: that page does name the hardware UUID and the device name, and says nothing about crash reporting with PII or the relay. Source issues: FRE-326, FRE-329, FRE-333. Co-Authored-By: Paperclip --- .../positioning-privacy-withdrawal.patch | 40 +++++++++++++++++++ 1 file changed, 40 insertions(+) create mode 100644 marketing/drafts/positioning-privacy-withdrawal.patch diff --git a/marketing/drafts/positioning-privacy-withdrawal.patch b/marketing/drafts/positioning-privacy-withdrawal.patch new file mode 100644 index 0000000..855db72 --- /dev/null +++ b/marketing/drafts/positioning-privacy-withdrawal.patch @@ -0,0 +1,40 @@ +diff --git a/marketing/positioning.md b/marketing/positioning.md +index 1bc4973..26d6b04 100644 +--- a/marketing/positioning.md ++++ b/marketing/positioning.md +@@ -53,13 +53,20 @@ pages, marketing copy, comparison tables, meta descriptions, emails, FAQs, all o + Copy that says "13 agents" or "no data leaves the device" must have a test backing it. + If a claim cannot be pointed at code or a test, it does not go in copy. + +-### 3. Honest privacy scoping ++### 3. No privacy claim until the egress inventory exists (withdrawn 2026-10-29) + +-Telemetry and the trial email **do** leave the device. The defensible claim is: ++The claim that stood here — "No prompt or code content leaves the device" — is **false at HEAD** ++and must not be restated in any copy until it is verified and replaced. It was backed by an ++argument about envelope metadata, which says nothing about what leaves the machine. Three things ++at HEAD contradict it: crash reporting initialises with `sendDefaultPii = true`; the licence call ++sends the hardware UUID and the device name; the phone relay carries sealed prompt and reply ++payloads. `/privacy` names the hardware UUID and the device name and says nothing about crash ++reporting with PII or about the relay. + +-> **No prompt or code content leaves the device.** +- +-Never "no data leaves the device". ++So: write **no** privacy claim at all — not softened, not partial. "Telemetry and the trial email ++do leave the device" is true and insufficient; it is not a substitute. The replacement goes in ++only after FRE-333 lands an egress inventory and `/privacy` text that match what the app does. ++See FRE-326 (the `/faq` withdrawal) and FRE-333 (the inventory). + + ### 4. Sell what works today + +@@ -87,8 +94,7 @@ nothing posts itself. + | Permission gate answered from a card | awaitPolicyTable + bridge directive path (`hook/normalize.go`, `serialize.go`) | + | Fan / thermal / charge control | `helper/` (privileged helper, SMC, no kext) | + | One-time purchase, no subscription | $10 → $15 at 1.0; Stripe checkout | +-| macOS 14+ | 27 source files use the `@Observable` framework | +-| No prompt or code content leaves the device | envelope carries session/event/terminal metadata only (see `docs/agent-interface.md`) | ++| macOS 14.2+ | the CoreAudio overlay symbol the mixer uses only exists from 14.2 (NOOK-881) | + + ## Held claims (not publishable) +