No companion starter kit — ship inspectable receipts instead, because the shippable layer is the commodity layer
The question
Verbatim: "Does the FDE proof-point write-up need a companion public artifact (e.g. the Ray-Starter-Kit / 'coo-in-a-box' sanitized portable layer) to satisfy the 'show your work' credibility bar?"
This is open follow-up #3 of [[2026-06-19-phdata-experiment-fde-positioning-proof-point]], which recommended publishing the FDE proof point and then asked whether the piece should link to a packaged, installable version of the harness as the "here is the portable layer" exhibit.
What we already know (from the vault)
- The parent brief raised the question because the web ideal it cited was a public repo. [[2026-06-19-phdata-experiment-fde-positioning-proof-point]] found that 2026 FDE-credibility guidance prescribes "one portfolio project that exhibits the full FDE skill stack on a public repo" plus an unscripted walkthrough. Its own recommendation, though, was a methodology ledger — decisions, rationale, constraints, including the failures. The companion-artifact question is the unresolved tension between those two shapes.
- A later brief already ruled the starter kit out as a routing destination, on the grounds that it does not exist. [[2026-08-02-locked-down-corporate-deployment-playbook]] verified absence on both GitHub and disk and concluded "filing content into an unbuilt kit is filing it nowhere," routing its own output to an SOP instead. It also named the dependency direction: SOP → kit, never the reverse.
- The same brief issued a correction that changes what the write-up can honestly claim. Per [[2026-07-31-phdata-work-agent-comms-surface-decision]], no phData work-agent deployment ever occurred; the port-vs-rebuild ledger is a predicted map, not a measured one. The parent brief's "bridge story — we have already done this for real" claim outruns its evidence on the phData side. This matters here because a companion artifact cannot repair a missing bridge story; it advertises the gap.
- The scoped kit was ~13-18 hours in May, and the sanitization inventory was already the dominant line item. [[02-starter-kit-scope]] maps every file to a risk class:
sync-contactsrated HEAVIEST (35 personal refs),process-newsletterandmorning-prepHEAVY, the two concept docs MEDIUM because their "Why this is in the vault / Mapping against Ray Data Co" framing sections are RDCO-internal by construction. That scope covered 12 skills; the harness now runs ~54 skills plus 13 plugins, so the May estimate is a floor, not an estimate. - The two-layer model says the shippable layer is explicitly the commodity layer. [[2026-05-10-harness-moat-two-layers-portability]] puts ~90% of what makes Ray work in Layer 1 (universal, portable, "teachable in an afternoon," "no time-arbitrage advantage") and ~10% in Layer 2 (hard rules, memory files, vault content — "earned, not portable," and "the 10% that makes it feel like Ray and not generic-Claude-Code"). A sanitized kit is by definition Layer 1 plus placeholders.
- The flagship-artifact gap is real and already named — but it is a concentration problem, not a packaging problem. [[2026-05-05-rdco-vs-naval-get-rich-framework]] grades media leverage C+ and productizing-self C+, and says the fix is to "pick ONE flagship public artifact and orient most output around it," warning explicitly: "Don't disperse."
- A confidentiality gate already exists for exactly this class of publish. [[2026-06-23-phdata-confidentiality-redaction-checklist]] is the reusable pre-flight at the constraint-class level, and
feedback_employer_client_content_boundary(memory) is the standing rule: public and personal facts fine, employer artifacts and unannounced detail never.
Direct observation this run (checks, not citations)
Run 2026-08-16 against the live GitHub org and local disk:
- No starter kit exists. No
ray-starter-kit,coo-in-a-box, orharness-starterrepo underRayDataCo(40 repos listed); no matching directory under~/Projectsor~. This re-confirms the 2026-08-02 finding two weeks later. - RDCO already has four public repos, and all four have zero traction.
ray-skills,ray-plugins,ink, andrdco-whoop-mcpare each at 0 stars, 0 forks, 0 watchers. - Two of the four are visibly stale or stubbed.
ray-skills("Public Claude Code skills from the Ray Data Co operational stack", MIT, 23KB) has not been pushed since 2026-04-15 — four months.ray-pluginsis still described as "minimal working template (rdco-example: /hello command + a skill)" and last pushed 2026-07-11, while the 13 real plugins live in the privatebrigade-houseand have been undistributed since 2026-07-18 (project_rdco_plugin_marketplace, memory). - The leak gate is real and already in use. Implementation notes across the 2026-07-10 symmetric build record the gate as
grep -rnE "rdco-vault|rdco-hq|/Users/[a-z]+|Projects/ray-plugins|phdata-private|brigade-house"run per-plugin, plaingrepnotgit grepperfeedback_git_grep_skips_binary_files(memory). Also on disk:~/Projects/phdata-privateand~/Projects/phdata-sales-process.
What the web says
- Public code is credible because it is readable, not because it is installable. The growth-engine argument is that "code is the most honest form of communication in our industry. You cannot fake competence in a public repository," and that the README functions as the landing page (dev.to, Open Source as a Growth Engine, fetched this run). The mechanism named is inspection by a stranger — which a quoted artifact satisfies as well as a clonable one.
- The same source warns solo founders off the exact thing being proposed. Verbatim: "nothing kills an open source project faster than visible neglect," and "if you cannot respond to issues, review PRs, and ship updates consistently, the project will stagnate and hurt your brand more than help it." It also states that distribution requires "a coordinated 48-hour launch blitz across Hacker News, Reddit, Dev.to, X, and LinkedIn — not passive repository posting" (same source).
- Star counts are a weak signal, and the health signals that matter are all maintenance signals. Stars "don't tell the complete story"; the prioritized metrics are release frequency, response time to issues, contributor diversity, CI/CD and test coverage, and forks/PRs because "active issue reporting and pull request submissions demonstrate genuine usage." High stars with few issues can indicate "inactive or abandoned repositories" (ToolJet, GitHub Stars Guide 2026, fetched this run). Separately, search results reference a 2026 CMU study finding ~6M fake stars across 18,600+ repos with AI/LLM projects the most-manipulated category — not verified against the primary study this run, cited as context only.
- B2B trust runs on competence, consistency, dependability — in that order. Forrester's Business Trust Survey figures cited in Search Engine Journal's 2026 B2B trust-deficit piece put competence at 18.5%, consistency 17.0%, dependability 16.8%. Two of the three top drivers are maintenance properties, not existence properties. (Search-result summary; the underlying Forrester instrument was not fetched.)
- "Show the work" in the buyer-trust literature means published specifics, not shipped software. The named pattern is publishing photos, equipment with model numbers, and video of processes in action — converting skepticism via concrete detail. Buyers also "optimize for defensibility rather than optimal outcomes," which favors peer validation over technical superiority (same SEJ / trust-signals cluster).
- The personal-agent starter-kit category is populated. OpenClaw (open-source autonomous agent, messaging-platform UI), Orkas (MIT, local-first multi-agent desktop), and Avelina (self-hosted Telegram assistant with persistent memory) all exist, alongside continuously-updated awesome-lists (SitePoint 2026 guide, search-result summaries). A sanitized Layer-1 kit enters as one more entrant, not as a category-definer.
Convergences and contradictions
- Convergence: the credibility mechanism is inspection, and inspection does not require a package. The vault's own recommended shape (a ledger with the failures left in) and the web's mechanism ("you cannot fake competence in a public repository," "show the model numbers") are the same claim — a stranger reading concrete, ugly, specific evidence. Neither requires
git clone. The parent brief's assumption that the web ideal is a repo conflates the medium with the mechanism. - Convergence: maintenance is the load-bearing variable, and RDCO's own public surface already fails it. Web says visible neglect kills the signal and that consistency/dependability are top-3 trust drivers. RDCO has a four-month-stale
ray-skillsand a stubray-pluginssitting next to 13 undistributed private plugins. Publishing a fifth artifact makes the neglect more visible, not less — and it does so on the same GitHub org the write-up would link to. - Contradiction the founder should not paper over: RDCO's four-repo N is zero, and that is genuinely ambiguous. Four public repos, zero stars, zero forks, zero watchers is consistent with "shipped artifacts don't drive credibility for a solo operator" and with "artifacts drive credibility but nobody has seen these." The web says distribution is a deliberate launch campaign, and [[2026-05-05-rdco-vs-naval-get-rich-framework]] grades media leverage C+. The honest read is that artifact form has never been the tested variable. A fifth repo does not resolve it either.
- Contradiction inside the parent brief itself: the piece it wants to write and the artifact it wants to attach point in opposite directions. The write-up's differentiated content is Layer 2 — the specific failures, the accumulated rules, the corrections. The kit is Layer 1 by definition, because Layer 2 is what sanitization strips. The value and the shippability are inversely correlated.
Synthesis for RDCO
Recommendation: NO companion starter kit. Ship the write-up with an inspectable-receipts appendix instead. Confidence: HIGH on rejecting the kit; MEDIUM-HIGH on the receipts substitute being sufficient.
The central argument is the inverse correlation, and it is not a cost argument. Sanitization is not a tax you pay to ship the good thing — sanitization is the removal of the good thing. [[2026-05-10-harness-moat-two-layers-portability]] already did this accounting: Layer 1 is ~90% of the mechanism and is, by its own words, "teachable in an afternoon" with "no time-arbitrage advantage"; Layer 2 is the ~10% that makes it Ray. A sanitized kit ships Layer 1 with [[OPERATOR]] placeholders where Layer 2 used to be, into a category that now contains OpenClaw, Orkas, Avelina and monthly-updated awesome-lists. So the kit is simultaneously the most expensive artifact RDCO could build and the least differentiated one it could publish. The write-up is the opposite: it is about Layer 2 — this rule exists because of this failure, this correction was logged on this date, this ledger row is predicted not observed — which is uncopyable, cheap to produce, and publishable as narrative even though it is not publishable as code. The proof point does not need the kit because the kit does not contain the proof.
What actually satisfies "show your work" here is receipts, not a runtime. The web mechanism is a stranger inspecting concrete specifics and concluding competence can't be faked. That is satisfied by embedding four to six hand-picked artifacts verbatim inside the piece: one real SKILL.md with its ugly conditionals intact, one real feedback_*.md memory file with the date and the failure that produced it, the actual cron table, a screenshot of a real morning brief, the leak-gate grep command with its real output, and the one-line correction where a critic caught the founder's own agent over-claiming. That is stronger evidence than a placeholder-filled template, because a template is by construction the version with the specifics removed — the exact opposite of "publish the model numbers." It also costs roughly an afternoon rather than 13-18+ hours, adds zero installable surface, carries zero maintenance obligation, and has a narrower confidentiality footprint: hand-picked quoting is selective, a repo push is bulk export from a machine that also carries ~/Projects/phdata-private and ~/Projects/phdata-sales-process. Per feedback_employer_client_content_boundary and [[2026-06-23-phdata-confidentiality-redaction-checklist]], every receipt still passes the constraint-class gate and the existing plain-grep leak scan with an independent fresh-eyes pass, per feedback_git_grep_skips_binary_files.
The maintenance argument independently kills the kit even if the leak risk were zero. Two of the top three B2B trust drivers are consistency and dependability, and the open-source guidance is blunt that a stagnant project hurts the brand more than it helps. RDCO would be publishing a starter kit onto an org where ray-skills has been untouched since April and ray-plugins still advertises itself as a /hello-command example while the 13 real plugins stay private. A reader who follows the write-up's link lands on that. The write-up's core claim is "I run this system every day"; the surrounding evidence would read "and I abandoned the last two things I published." Before any new public artifact, the cheaper and more credible move is to fix the two that already exist — refresh ray-skills to current, or archive it with an honest banner, and either distribute brigade-house to ray-plugins or re-describe the public repo as the example it actually is.
One correction the write-up needs more than it needs a companion. [[2026-08-02-locked-down-corporate-deployment-playbook]] established that the phData second deployment never happened, which means the parent brief's bridge story is currently borrowed against an event that did not occur. A companion artifact cannot fix that and would draw attention to it. The fix is a re-anchor: the measured, months-long, receipt-bearing deployment RDCO actually has is the customer-zero system itself — an always-on agent the founder has run for himself continuously, with a dated audit trail of failures and the rules they produced. That is his to publish, it clears the employer boundary cleanly (it is personal, not phData work), and it makes the "show your work" pressure evaporate, because under that framing the receipts are the work. The phData-side portability ledger can still appear, correctly labelled predicted, as a forward-looking section rather than as the load-bearing claim.
Calibration, stated plainly. Two of the pillars above are reasoning, not measurement. First, nobody in this vault knows what the market wants from a solo founder in this niche; the four-repo zero-traction result is real data but it is under-determined between "artifacts don't matter" and "nobody saw them," and I have not resolved that. Second, the "receipts read as credibly as a repo" claim is a mechanism argument from published trust-signal guidance, not an A/B result — it is the more defensible bet given the cost asymmetry (an afternoon versus 13-18+ hours plus indefinite maintenance plus leak exposure), but it is a bet. What I am HIGH-confidence on is narrower and better supported: building coo-in-a-box as a prerequisite for publishing the write-up is wrong, because it converts a two-week publish into a multi-week build, strips the differentiated layer in the process, adds a maintenance liability to an org already carrying two neglected ones, and gates a positioning artifact on an engineering project that three prior briefs have each declined to start.
Next actions (build tasks, not research): (1) re-anchor the write-up on the customer-zero system and demote the phData ledger to a predicted-labelled section; (2) assemble the 4-6 verbatim receipts and run them through the redaction checklist plus the plain-grep leak gate with a fresh-eyes verifier; (3) decide ray-skills — refresh or archive-with-banner — before the write-up ships, and resolve the ray-plugins description drift; (4) pick the single publish surface per [[2026-05-05-rdco-vs-naval-get-rich-framework]]'s "don't disperse" rule rather than fanning it across three.
Why this is in the vault
This closes open follow-up #3 of [[2026-06-19-phdata-experiment-fde-positioning-proof-point]] with a NO, which unblocks the write-up: the proof point can ship on its own timeline instead of waiting behind a never-started ~13-18h repo build, and the answer removes coo-in-a-box from the FDE-positioning critical path for the third time in three months. It also supplies a fact the publish decision depends on and that no prior brief checked — RDCO's four existing public repos sit at 0 stars / 0 forks / 0 watchers with ray-skills four months stale — which converts "should we ship a companion repo" into the prior question of whether the two already-shipped public surfaces should be fixed or retired before anything new links to that org.
Open follow-ups
- Is artifact form or distribution the binding constraint on RDCO's public credibility? Four public repos at zero traction cannot distinguish "shipped artifacts don't move the needle for a solo operator" from "no launch was ever run." Until this is separated, every artifact-form decision is being made blind. Needs a measurement design, not another artifact.
- Do practitioner write-ups with embedded verbatim receipts convert differently from write-ups linking a clonable repo? The receipts recommendation rests on a mechanism argument. Find comparable cases — practitioners who published harness/system write-ups both ways — and look at what actually followed.
- Does a credibility proof point need an operator other than its author? The customer-zero framing has n=1 by construction. Establish whether the buyer-side trust literature's "peer validation over technical superiority" finding implies a written proof point is discounted until a second, independent person has run the system.
- How saturated is the personal-agent starter-kit category, and on what axis? OpenClaw, Orkas, and Avelina were surfaced from search summaries only. If a Claude-Code-native, vault-backed harness kit is genuinely differentiated on an axis those miss, the calculus changes — but that has to be verified against their actual repos, not against listicles.
Related
- [[2026-06-19-phdata-experiment-fde-positioning-proof-point]] — the parent brief; this closes its open follow-up #3 with a NO
- [[2026-08-02-locked-down-corporate-deployment-playbook]] — established the starter kit does not exist and that the phData deployment never happened; both findings are load-bearing here
- [[2026-05-10-harness-moat-two-layers-portability]] — the two-layer accounting that makes the shippable layer the commodity layer
- [[02-starter-kit-scope]] — the never-built ~13-18h kit scope and its per-file sanitization risk inventory
- [[2026-05-05-rdco-vs-naval-get-rich-framework]] — the flagship-artifact gap and the "pick ONE, don't disperse" rule
- [[2026-06-23-phdata-confidentiality-redaction-checklist]] — the constraint-class gate every receipt must pass
- [[2026-07-31-phdata-work-agent-comms-surface-decision]] — the evidence the second deployment never happened
- [[2026-06-04-harness-patterns-ray-to-phdata-work-agent]] — source of the port-vs-rebuild ledger the write-up would carry as a
predictedsection - [[2026-05-13-fde-asymmetric-edge-rdco-positioning]] — the four asymmetries; asymmetry #3 (public-synthesis voice) is what the receipts approach exploits
- [[2026-06-05-compliant-work-agent-productizable]] — the adjacent brief that first attached the confidentiality gate to this material
feedback_employer_client_content_boundary(memory) — the standing publish gatefeedback_git_grep_skips_binary_files(memory) — why the leak scan must be plaingrepplus an independent passproject_rdco_plugin_marketplace(memory) — the private-dev / generated-public topology and the undistributed drift since 2026-07-18
Sources
Vault (all also linked under Related):
~/rdco-vault/06-reference/research/2026-06-19-phdata-experiment-fde-positioning-proof-point.md~/rdco-vault/06-reference/research/2026-08-02-locked-down-corporate-deployment-playbook.md~/rdco-vault/06-reference/concepts/2026-05-10-harness-moat-two-layers-portability.md~/rdco-vault/01-projects/mammoth-growth/2026-05-13-ai-demo-day/02-starter-kit-scope.md~/rdco-vault/01-projects/positioning/2026-05-05-rdco-vs-naval-get-rich-framework.md~/rdco-vault/06-reference/research/2026-06-23-phdata-confidentiality-redaction-checklist.md~/rdco-vault/06-reference/research/2026-07-31-phdata-work-agent-comms-surface-decision.md~/rdco-vault/08-tooling/symmetric-build-2026-07-10/(leak-gate command, as recorded in the per-plugin implementation notes)~/.claude/projects/-Users-ray/memory/—feedback_employer_client_content_boundary.md,feedback_git_grep_skips_binary_files.md,project_rdco_plugin_marketplace.md
Direct observation this run (checks, not citations):
gh repo list RayDataCo --limit 60— 40 repos; noray-starter-kit/coo-in-a-box/harness-starter. Disk scan of~/Projectsand~likewise empty.gh api repos/RayDataCo/{ray-skills,ray-plugins,ink,rdco-whoop-mcp}— all four at 0 stars / 0 forks / 0 watchers;ray-skillslast pushed 2026-04-15;ray-pluginslast pushed 2026-07-11 and still described as a minimal example marketplace.
Web:
- Open Source as a Growth Engine — dev.to — fetched this run; "code is the most honest form of communication," README-as-landing-page, "nothing kills an open source project faster than visible neglect," the explicit solo-founder warning, and distribution-as-launch-blitz
- GitHub Stars Guide: Evaluating Open Source in 2026 — ToolJet — fetched this run; stars insufficient, maintenance/response-time/release-cadence/forks as the real health signals, high-stars-few-issues as an abandonment tell
- Addressing the B2B Trust Deficit: How To Win Buyers In 2026 — Search Engine Journal — search-result summary; Forrester competence/consistency/dependability ordering
- The Rise of Open-Source Personal AI Agents — SitePoint — search-result summary; OpenClaw / Orkas / Avelina as existing category entrants
Sourcing discipline note: the dev.to and ToolJet pieces were fetched and read this run. The Forrester figures, the CMU fake-stars study, and the OpenClaw/Orkas/Avelina descriptions are from search-result summaries and are cited as corroborating context, not primary-text verification — the CMU study in particular is explicitly unverified here and should not be quoted downstream as checked. No paywalls hit this run.