fix(site): match public claims to shipped behavior

NO
6h ago
+16-8

Problem. Launch gate G7 says public copy must match behavior. The site said things the shipped build doesn't do (from the rac-baseline digest):

  • "A thin layer on top of Helium". rac is 180 patches and about 110k patch lines.
  • "never slower than it". No bench is published yet (G11, D60).
  • "It asks before it acts" and "the AI never acts in your browser without your confirmation". The agent's default is auto with the taint rule (D19).
  • The privacy page's "and nothing else" for the AI provider. Link summaries also fetch the linked page, without cookies.

Change. Copy only, in index.astro, privacy.astro, and a comment in LayerStack.astro.

  • Open-source line: "GPL-3.0. Built on Helium, with every change kept in its own patches." The speed line is held. If the bench publishes by day 10, it comes back with the numbers.
  • AI lede: "Once it reads a second site, it asks before it acts."
  • Privacy: the full taint rule (second site, or a link to a new site), "with AI off, no AI appears anywhere", link summaries, and crash reports as planned (off by default, asked for after each crash).

Merge order: after Core's taint rule. The AI lines describe the launch behavior (D19: auto plus the taint rule), not what main does today, where auto still allows cross-site navigation and typing without asking. Merge this only after Core's guard stream lands the taint rule, and with Core's sign-off on the wording. If the rule slips past launch, these lines must be replaced with the rules that actually shipped.

Needs Core sign-off. Every AI line is marked <!-- AI wording needs Core sign-off (G7) --> in the source. Please don't merge until Core has checked them against the taint rule as built.

Not in this PR. Apple-silicon-only download (separate PR), "four weeks" in docs/internals/overview.md (separate docs PR). Onboarding also says the AI "never acts … without your confirmation". That's a patch, so it's for Core and UI.

Verified. pnpm build passes. Headless Chromium (Playwright) shots at 1440 px, light and dark, attached.

Net-diff hunks: 0 (no patches touched).

🤖 Generated with Claude Code (Claude Opus 5.5)

Home AI section, before

Home AI section, after

Open-source section, before

Open-source section, after (dark)

Privacy page, before

Privacy page, after

[!NOTE]
Low Risk
Site copy and comments only; no product code paths, though incorrect merge timing could misstate AI behavior until Core’s taint rule ships.

Overview
Aligns marketing and privacy copy with launch gate G7 so public claims match what ships (and what will ship with the taint rule), without touching browser patches.

The home page AI lede now describes auto on the starting site, then confirmation once a second site is read—replacing the blanket “asks before it acts.” The open-source blurb drops “thin layer” and the “never slower than Helium” line (held for G11 until a benchmark exists), in favor of GPL-3.0 plus patch-based changes on Helium. LayerStack.astro only updates an internal comment about patch order (rac after Helium).

The privacy page expands AI bullets: no AI UI while off, full taint rule (second site or cross-site link), link summaries fetching pages without cookies, and clearer crash-report wording (none today; future opt-in per crash). Inline comments flag Core sign-off on AI strings before merge.

Reviewed by Cursor Bugbot for commit fc0f5f60d6a7ccbc92c51c32fb525130884d3603. Bugbot is set up for automated code reviews on this repo. Configure here.

Summary by cubic

Matches the site's public claims to what the shipped build actually does, replacing wording that overstated rac's size, speed, and AI behavior. Sign-off notes live in Astro comments so they never appear in the rendered HTML.

  • Drops "a thin layer on top of Helium" (rac is 180 patches) and "never slower than it" (no benchmark published yet).
  • Updates the AI lede to the real default: auto with the taint rule — it acts on its own on the site you start it on, then asks before each action once it reads a second site or follows a link to a new one.
  • Privacy page now states the full taint rule, the link-summary behavior, and the planned crash-report flow (off by default, asked after each crash).
  • Holds the speed claim until the benchmark publishes; AI wording needs Core sign-off against the built taint rule.
  • Copy only; no patches touched. pnpm build passes.