Public-Launch Honesty Gates

Verifying commit

45ae3ccac7a5dd6ea63a5d82eb0ab4634b59ec73 on origin/railcall-cli-alias-v1 — 3-file change (INSTALL.md, install.sh, node/package.json; README.md untouched).

Evidence pinned in-repo

• node/package.json bin map adds "railcall-node": "./index.js" (alongside "metercall-node") — true alias of the same entry point.
• install.sh writes a thin launcher to ~/.railcall/bin/railcall that resolves $REPO at runtime via $BASH_SOURCE and exec node "$REPO/node/index.js" "$@". No vendored copy.
• PATH addition to ~/.zshrc is marker-guarded (# >>> railcall path >>> / # <<< railcall path <<<).
• Claude Desktop config is reported, not edited (honest refusal to auto-mutate claude_desktop_config.json).

Live verification — iMac (Atlantics-iMac, macOS Tahoe)

• ./install.sh exit 0
• ~/.railcall/bin/railcall written (1,017 B, executable, sha256 da129395f7121a8928ad9cc3805f19efa3f69ed52ee744d30ab6c25c1b4801da)
• railcall where → prints repo + node + mcp entry paths
• railcall version → 0.1.0
• railcall --help → usage with 4 subcommands, no server started
• L4 RPC node NOT started during audit: 0 running processes, 0 listeners on :8545
• Re-running install.sh is idempotent: PATH marker count stays at 2, launcher sha256 unchanged.

Verifying commits

• origin/website-developer-first-v1 @ 6ca3a4637947535e387dfa610640d66427c02a1a — RailCall homepage (index.html, plus mirrors home.html / the-one.html, same blob c7051f8d5e088ee20bac864debf0afc348a93726, 25,237 bytes).
• origin/website-sandbox-v1 @ 56b85677de04acfb88ae5637b0d0417d84daec08 — sandbox.html browser-only simulator (84 KB).

Evidence — index.html (website-developer-first-v1)

• <meta name="robots" content="noindex"> — present (1).
• preview — 13 occurrences (payments framing, plan tier, status block).
• dry-run — 11 occurrences.
• HIPAA/SOC2 appears only in the competitor column of the comparison table — not a RailCall compliance claim.
• Net banned-claim hits: 0.

"payments are the next rail, not a live one. As of today RailCall meters each run as a receipt in dry-run preview — no USDC settles, no card is charged, no live billing path is enabled."

Evidence — sandbox.html (website-sandbox-v1)

• Pricing references are $0.005 per run (4 occurrences); free-tier copy reads 100 Free Runs Included — the audit pins what is actually in the file (the round-robin email's $0.01 / 50-free numbers were not landed).
• Banned-claim sweep: no cryptographic, no production-ready live, no SOC2 certified, no Stripe integrated. Stripe mentions appear in a competitor-comparison table only.
• Pages are noindexed; "preview" framing lives in the parent index.html's payments section.

• [Resolved · 2026-06-18] Pricing reconciliation. $0.005 vs $0.01 per run and 50 vs 100 free runs — now canonical across the frontend at $10 / 1,000 runs ($0.01) + 100 free on install.
• railcall.ai deployment path. One handoff said GitHub Pages (apex A records to 185.199.108.x), another said a Digital Ocean droplet. No droplet IP / fly.toml / deploy config on origin. Pick a path, commit the IP / Pages CNAME.
• CNAME for railcall.ai. The CNAME on website-developer-first-v1 still reads metercall.ai; the prod repo needs its own CNAME reading exactly railcall.ai.

• Gate #1 (CLI alias ships) — CLOSED
• Gate #2 (live billing) — file state CLOSED; pricing reconciled 2026-06-18; live checkout test pending
• Deployment path picked + IP / CNAME committed
• noindex flipped off (only after all above)

• 2026-06-18: Pricing copy reconciled across the frontend to the Freemium model ($10 for 1,000 runs, 100 free runs on install).