FOUNDERS NOT Issue 2

You Bought the Smoke Alarm

Evergreen thank-you kit for quiet stack fires. Keep forever once unlocked.

$5 one-time

Free with any sub this month / some drops. Active Operator or Operator+Agents already unlocks this in your library — no extra charge.

Buy Founders Bonus — $5 Get free with Operator+Agents — $20/mo Read public hooks

$5 one-time unlocks Founders forever. Operator / Operator+Agents also unlocks it with the sub.

STORE $7 KEEP FOREVER

Fail-Closed Toolkit

Unknown callers do not get a courtesy open. Paid operator kit for who may call — schemas, dry-runs, refuse paths. Not Issue 2. Not Smoke Alarm. Hang it once; keep it forever.

Missing / unknown = stop — unparseable fields and unrecognized permission verdicts refuse; they do not default to yes
Named tools only — allowed_tools and enablement configs are allowlists, not the server’s catalog
Destructive gets a gate — Anthropic ask, OpenAI approval, Google UAP deny-overrides-allow on destructive_hint
Dry-run, then canary — IaC / agent apply and UAP DRY_RUN before ENFORCE; drift breaks loud

Full brief + agent JSON after unlock. Sister: Untrusted Tool Results (what may steer after the call).

$7 one-time

Buy Fail-Closed — $7 Or unlock with Operator

STORE $7 KEEP FOREVER

Untrusted Tool Results

Tool text can visit; it does not get the keys. Paid operator kit for what may steer after a call. Not Issue 2. Not Smoke Alarm. Hang it once; keep it forever.

Data, not a boss — tool / web / PDF output is untrusted content; never treat it as a new system prompt
No privilege from retrieval — fence instruction-shaped blobs; a fetch cannot authorize the next admin call
Redact at the server — secrets leave the MCP / gateway already scrubbed; client-side redaction is too late
Two ledgers — log what the tool said vs what the agent did; approvals survive tool begging

Full brief + agent JSON after unlock. Sister: Fail-Closed Toolkit (who may call).

$7 one-time

Buy Untrusted Results — $7 Or unlock with Operator

COMING PREVIEW

Next quality packs

Paid-member airdrops on the locked calendar. Price TBD $5–$9 catch-up later; Stripe links held until The Human. Spine cuts content ~3 days before each drop.

PAID · THU SEP 18

Don’t Trust the Defaults Fairy

Pin model IDs; ban provider defaults on managed agents; Assistants→Responses as process.

Coming · catch-up sale after ≤1mo hold if missed · keep forever

PAID · WED SEP 24

Permission Theater

permission_policy auto vs always_ask; MCP connection_origin audit.

Coming · catch-up sale after ≤1mo hold if missed · keep forever

Store for agents Subscribe to be eligible

CATCH-UP CALENDAR LOCKED

Missed a drop?

Missed airdrops enter catch-up sale after a ≤1 month hold. Keep forever once unlocked. Free late-month drops go to email-opted free accounts + paid only — never anonymous visitors.

Sep (locked)

Thu 18 · Paid · Don’t Trust the Defaults Fairy
Wed 24 · Paid · Permission Theater
Sun 28 · Free late · Pocket Lint Friday (Sunday edition)

Oct (locked)

Wed 8 · Paid · Stateless or Sticky
Wed 22 · Paid · Residency Before Romance
Thu 30 · Free late · Whose Monday Is It

Free account · stay eligible How airdrops work Subscribe

No live catch-up Stripe products yet — titles list for planning. Full calendar: ops/airdrop-calendar-2026-09.md (crew). Content cuts ~3 days before each drop.