feat(iamfim): real per-agent license checkout, bundled CATO certs, drop tugboat joke

Closes the gap found earlier this session: every page promised a $20/agent/
year license but no Stripe Price for it existed anywhere in the codebase —
every wired checkout route actually sold a CATO certification. Operator
supplied the real recurring Price ID (price_1TjPZAArbZieQL7T5Uia7OOG).

- New src/app/api/iamfim/license-checkout/route.ts: creates a real Stripe
  subscription Checkout Session (mode: 'subscription', quantity = agent
  count) against that Price. Amount charged is computed by Stripe from the
  Price object, never trusted from client input — mirrors the existing
  cato-checkout route's auth/customer pattern.
- New LicenseCalculator component on /iamfim: agent-count input, live
  itemized total, bundled CATO certifications (1 per 10 licenses — matches
  the ballpark of the old per-tier grid removed earlier, as a flat rate
  rather than named tiers, per operator: "throw in cato certifications to
  the tiers as well... there only license is sold"). Recomputed
  server-side too, never trusted from the client.
- Crossing $100K swaps the self-serve Stripe button for a "Talk to us —
  wire or invoice, prepaid" mailto CTA (operator: "over 100k talk to us...
  an org that buys over 100k gets all the tiers below" — the licenses +
  bundled certs above are still included; "wires? sure... prepaid then
  work begins" — same prepaid-then-delivery model as the $100K Readiness
  Investigation box already on the page).
- New src/app/iamfim/license/success/page.tsx (mirrors /iamfim/cato/success
  minus the CATO-specific workflow-binding logic, which doesn't apply here).
- Fixed a regressed link: ProspectCATOPanel's "Certify a CATO — $1,995"
  button pointed at generic /pricing (git history shows it used to point at
  /fim-iam/prospect?workflows=N before a label/price change swapped the
  href without updating the destination) — now points at /iamfim/cato,
  the actual $1,995 checkout.
- Removed the last two internal /pricing links on /iamfim ("Lock in a
  per-agent license" in the lighthouse box, now #checkout) per operator:
  "confirm we do not link to /pricing anymore." One remains on
  iamfim-landing ("See per-agent & fleet pricing") — flagged to operator
  rather than touched, since that page is explicitly frozen this session.
- Cut the T.J. Hooper/tugboat metaphor from the signal-lead box per
  operator: "tugboats is a bad insiders joke not a checkout strategy" —
  kept the free npx proof, dropped the insider-joke framing around it.

Verification: typecheck clean on all 3 files, all 4 routes (iamfim-landing/
iamfim/pricing/iamfim license success) return 200 on the dev server, the
LicenseCalculator confirmed present in the rendered HTML, no tugboat
references remain, single #checkout id preserved.

NOT PUSHED — this touches live payment infrastructure (a real Stripe
subscription Price) for the first time this session; holding for explicit
confirmation before it goes live, per the same caution applied to every
other payments-adjacent decision this session.

Originating-Terminal: 🎤 Terminal Voice
Relevant-Rooms: 🎤 Terminal Voice, 🔨 iTerm2 Builder, 🎭 Alacritty Performer
Story: Direct implementation of a rapid sequence of operator corrections
(regressed link, no /pricing links, tugboat joke, real license checkout,
bundled certs, $100K wire path, itemization) — each verified against git
history or the actual rendered page rather than assumed, consistent with
this session's established discipline after the earlier "we totally broke
everything" false alarm.
Persona-Intent: A buyer who wants to self-serve below $100K should reach an
actual Stripe checkout, not a mailto; a buyer crossing $100K should reach a
human conversation about wire/invoice terms, not a card form sized wrong
for the amount.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011ryPUP7tcUDxctwtxFdfXz

commit 6ddf15974 — 144×144 lattice triptych (on-chip)

◎ the ingest chose C1,A1 — Operations·Grid × Strategy·Law — acting on B,C3 — Tactics × Operations·Flow (grip 0.766) · the walk starts at the ACTOR's row · 5 file(s)

⏱ ingest 1160.5ms (corpus→lattice) · definer walk 2121ms (row→transpose→row, ballistic XOR per hop) · total 3552ms
ingest here = commit-scoped SENSING only (this commit's message + changed files → lit anchors) — deep seed authoring lives in the reef-self-loop, off the commit path

rows = ACTOR (lens) · cols = PATIENT (object) · diagonal = self-reference; ◎ at actor-row × patient-col — every panel, same orientation. Heat above the diagonal = actors ranking ShortLex-earlier than their patients (the walk follows definers uphill in rank).
The 12 canonical lanes (rows top→bottom, cols left→right): A·Strategy · B·Tactics · C·Operations · A1·Law · A2·Goal · A3·Fund · B1·Speed · B2·Deal · B3·Signal · C1·Grid · C2·Loop · C3·Flow

PAIR LATTICE (the map we normally see)

PRE-WALK SENSE · INTENT grid — the snapshot, no point of view

the no-point-of-view snapshot — what the sensor lit before any walk; the leaf walk below is what bridges the two grids

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK SENSE · REALITY grid — the snapshot, no point of view

the no-point-of-view snapshot, reality side — same sensor law

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK Δ · straight comparison of the two ingested grids (green both · cyan intent-only · amber reality-only) · 7% overlap · ◎ = where the competence pixel sits in the raw overlap

good = green overlap without being a copy — near-100% is self-similarity, not alignment

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

◎ the pixel this commit belongs to

C1,A1 — Operations·Grid × Strategy·Law (actor) acting on B,C3 — Tactics × Operations·Flow (patient) · grip 0.766

actor seed C1,A1 — Power flows where the grid lets it. Choose connections before topologies; the topology is what the connections compose, and a connection added later is a topology silently rewritten. Latency is geography expressed in milliseconds. The grid IS the map of where compute meets storage meets bandwidth; the map is the territory at the scale the request actually traverses. Infrastructure decisions are reversible at ten-times the cost of being right the first time. Buy the irreversibility down before you provision the easy decisions, because the easy decisions ride on the irreversible ones. EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at any moment. Compliance attaches to the artifact the artifact cannot escape — provenance is a regulatory primitive, not a feature. Constraints precede objectives. The cap-table, the license text, the consent envelope — each draws the inviolate line the action must respect, and the line is enforced before the optimization runs. A rule names what the system MAY NOT do. If the agent can do X, then 'forbid X' is not the constraint — it is wishful thinking dressed as policy. Constraints live in the gate, not in the prompt.

patient seed B,C3 — Timing and leverage maneuvers in tactics accelerate the flow rate and delivery throughput of the finish. Flow is the rate at which committed work crosses the finish line. Inventory accumulates upstream; flow is the only thing the customer pays for, and the only thing the operator can measure honestly. Movement is the irreversible delivery of value across the boundary. Anything stationary is cost; anything moving is either revenue, deferred revenue, or the exhaust of revenue not yet realized. Throughput dominates utilization. A ninety-nine-percent utilized system at low throughput pays the same wages as a fifty-percent utilized system at twice the throughput, but the second one ships the customer's order. Flow has a direction. Bidirectional flow is two flows, each measured separately; calling them a single flow hides the chokepoint and the chokepoint is where the leverage lives. Tactics is the choice of which leverage to pull at which beat. Not what we want, but how the want lands on Tuesday: the sequence of irreversible commitments, each made before the next one's information is available. Speed of feedback dominates speed of execution. Tactics that converge fast beat tactics that compute long, because the loop closes around the world's response before the world has moved. The tactical map is a ranked list of moves where each move carries a cost-of-delay. Pick the move whose cost of doing it tomorrow exceeds the cost of doing it imperfectly today. Execution is a sequence of bets made under uncertainty. Tactics is the discipline of betting the right size on the bet whose information value pays for the loss-if-wrong.

INTENT · leaf-walk clouds · BLUE→VIOLET by ply (◎ = the competence pixel: actor∩patient)

good = the clouds concentrate where the commit SAYS it works

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

REALITY · leaf-walk clouds · ORANGE→RED by ply (◎ = the same pixel — the shared perspective)

good = the same clouds as intent — shipped where declared

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

DELTA · graded cloud divergence (green agree · magenta declared-not-done · amber done-not-declared) · 6% agree

good = mostly green; magenta = said-not-done (chase it in the code), amber = done-not-said (chase it in the docs)

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

TOLERANCE · cloud topology (dim green in-shape · hot amber bleed · red orthogonal concentration)

red only matters above the flip — a few amber is normal bleed

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

SHORTLEX-3 PROJECTION (ABC · A1..C3 · the 132 children — candidate, pre-ratchet)

PROJECTED INTENT · the commit’s claims, head→axis_i tail→axis_j (cyan)

the three-length view — good = claims land inside their own zone

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PROJECTED REALITY · same projection law (amber)

same projection law — good = reality occupies the zones intent does

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

STRAIGHT COMPARISON · green both · cyan intent-only · amber reality-only · 4% overlap

good = the zones agree; cross-zone scatter is the drift to read

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

shortlex-3 zone occupancy (lit cells per diagonal square)
INTENT: 0 in the 3×3 ABC corner · 13 in the 9×9 A1..C3 square · 1067 in the 132×132 children square · 273 cross-zone
REALITY: 0 in the 3×3 ABC corner · 2 in the 9×9 A1..C3 square · 1740 in the 132×132 children square · 277 cross-zone
axes: identical 144 ShortLex names both sides (symmetric); weights asymmetric
zone 3 = candidate children, pre-ratchet (repo-derived dumps not yet past the perturbation-probe gate) · intent 37 claims @ θ 0.625 · reality 49 claims @ θ 0.625 · projection 864ms

SHAPE-MATCH σ = 3.59 — the real intent↔reality definer walk vs random-reality (actual 0.1987 vs random 0.107). >0 = the walk distinguishes real alignment from noise; aggregate over independent walks → the divergent series.
σ_drift · forming · separation is forming — the direction is real, the trust is not yet

Most out-of-lane row: C3 · Flow — that lane is drifting most (read the red band in that row).

Three-colour tolerance (out-of-lane = reality fires where intent is weak, in orthogonal blocks): green=in-lane agreement · amber=a few out-of-lane (tolerated) · red=armed — orthogonal out-of-lane 6% vs tolerance 25%.
1440 green · 909 amber · 0 red · 938 XOR-friction cells.

Both axes = the 144 ShortLex anchors, cell=row⊕col, on the chip. INTENT=docs+rules · REALITY=code · DELTA=friction.

tile dump — what the SimHash matched on the diagonal (inspect the sensor; tap to expand)

A,A The lattice we build today is what next year's underwriter inherits.

intent 97% <div style="margin-top:7px;color:#8b98a5"><b style="color:#66fcf1">actor seed A,A</b> — The lat

reality 73% if (existingCustomers.data.length > 0) {

B,B Tactics is the choice of which leverage to pull at which beat.

intent 70% <div style="margin:9px 0 0"><div style="font-family:ui-monospace,monospace;font-size:10px;lette

reality 70% const existingCustomers = await stripe.customers.list({

C,C Operations is the loop that runs whether anyone watches.

intent 80% chore(commit-page): publish db22e07bc · drift receipt ⬡ delegation direction · from somewhere →

reality 84% updating the destination). $1,995 is the full-cert price, which is what /iamfim/cato

A1,A1 EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at

intent 77% (no distinctive match)

reality 84% (no distinctive match)

A2,A2 The target is the cell coordinate the system MUST occupy by end-of-quarter.

intent 77% <div><code style="color:#fcd34d">A1,A1</code> <span style="color:#7a8693">EU AI Act Article 14

reality 78% // Recurring subscription (billed annually) — one line item at the real

A3,A3 Every dollar builds either the floor (substrate that lifts future bets) or the ceiling (cap on the next round)

intent 72% </div><div style="margin:18px 0;padding:4px 15px 8px;background:#0a0f17;border-left:3px solid #

reality 72% (no distinctive match)

B1,B1 Latency is the price of a missed beat.

intent 73% (no distinctive match)

reality 72% apiVersion: '2025-08-27.basil',

B2,B2 The deal sets the exchange rate between two value substrates.

intent 75% (no distinctive match)

reality 80% const stripe = STRIPE_SECRET_KEY ? new Stripe(STRIPE_SECRET_KEY, {

B3,B3 Signal-to-noise is the inverse cube of bandwidth — narrow the channel, the message arrives; broaden it, recipi

intent 75% <tr><td style="padding:2px 10px 2px 0;color:#5f6b78;white-space:nowrap;vertical-align:top">chai

reality 75% locked at today&apos;s price. Term shrinks going forward for anyone who waits; yours is locked

C1,C1 Power flows where the grid lets it.

intent 75% <div style="margin-left:6px"><span style="color:#fbbf24">reality</span> <span style="color:#5a6

reality 72% includedCertifications,

C2,C2 Each iteration is a hypothesis tested against the ground truth of the world.

intent 77% Verification: typecheck clean on all 3 files, all 4 routes (iamfim-landing/ iamfim/pricing/iamf

reality 77% url: checkoutSession.url,

C3,C3 Flow is the rate at which committed work crosses the finish line.

intent 75% (no distinctive match)

reality 73% onChange={(e) => setCompany(e.target.value)}

commit context — 5 file(s)

feat(iamfim): real per-agent license checkout, bundled CATO certs, drop tugboat joke

Closes the gap found earlier this session: every page promised a $20/agent/
year license but no Stripe Price for it existed anywhere in the codebase —
every wired checkout route actually sold a CATO certification. Operator
supplied the real recurring Price ID (price_1TjPZAArbZieQL7T5Uia7OOG).

- New src/app/api/iamfim/license-checkout/route.ts: creates a real Stripe
  subscription Checkout Session (mode: 'subscription', quantity = agent
  count) against that Price. Amount charged is computed by Stripe from the
  Price object, never trusted from client input — mirrors the existing
  cato-checkout route's auth/customer pattern.
- New LicenseCalculator component on /iamfim: agent-count input, live
  itemized total, bundled CATO certifications (1 per 10 licenses — matches
  the ballpark of the old per-tier grid removed earlier, as a flat rate
  rather than named tiers, per operator: "throw in cato certifications to
  the tiers as well... there only license is sold"). Recomputed
  server-side too, never trusted from the client.
- Crossing $100K swaps the self-serve Stripe button for a "Talk to us —
  w

public/commit/fd0d3f887/index.html
public/commit/fd0d3f887/og.png
src/app/api/iamfim/license-checkout/route.ts
src/app/iamfim/license/success/page.tsx
src/app/iamfim/page.tsx

Produced on the chip by the running pipeline (scripts/pmu/pipeline.mjs → runPipeline → walk + xor), commit-scoped · on-chip per-walk 743.32ns (this commit). Recompute: node scripts/pmu/commit-triptych.mjs --commit 6ddf15974

Commit artifacts (open on a computer — Gmail mobile won't follow file:// links; the inline images above are the phone-viewable form): reef grid · this triptych · the HDL — all three are also attached to this email.