Pricing: the Compliance tier lands (four columns, per-product) - #12
Merged
Conversation
Deploying www with
|
| Latest commit: |
0e3d1a9
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://f0246409.www-4rw.pages.dev |
| Branch Preview URL: | https://bm-pricing.www-4rw.pages.dev |
Contributor
Author
|
One commit added per the Sep 11 work-order update: the roadmap's npm sentence is replaced with the approved Node cache wording (the same server caching |
Contributor
Author
|
Two more commits per the Sep 12 register rows: row 32 — the roadmap sentence is now the final dependency cache text verbatim (restoring |
fosterstack-admin
force-pushed
the
phase3/www-claims
branch
from
September 12, 2026 16:25
7b40a7b to
f174c0b
Compare
… line Business-model work order §2, authority business-model-and-marketing.md §4/§4a. Free drops 'Forever free' and states what free includes (every patch, the -fips image, all release evidence); Team retires 'metrics UI' (the status page is free) and gains SSO (OIDC), per-project analytics and the 1-business-day email target; Business says 'CVE-response target', never SLA; Compliance is $499/month billed annually with the checklist nouns loud and the Sep 5 honesty line: the evidence underneath is public and free, what is paid is the authored analysis, the vendor signature, and the hours. Never 'FedRAMP compliant'/'CMMC compliant'. 'No sales call. No per-seat tax. No enterprise pricing mystery.' under the table; self-serve sentence updated (monthly tiers cancel anytime; Compliance is an annual term); roadmap-honesty lists all the tiers it describes. llms.txt tier list matches. Stacked on the phase3/www-claims branch — both touch the self-serve paragraph.
Owner correction (Sep 11, business-model work order): 'an npm remote cache — a third protocol' misled — it read as a package-registry cache or a new wire protocol and it is neither. Replaced with the approved sentence: the same server caching node_modules, test caches, and build outputs by lockfile key, so Jenkins and GitLab jobs stop reinstalling the world on every run. 'Node cache', never 'npm cache', from now on. No timelines.
The Sep 12 product definition supersedes the Node-cache wording: the feature is the dependency cache - the same server restoring node_modules, ~/.m2, and ~/.gradle/caches by lockfile key, so ephemeral CI agents stop re-downloading the world - npm first. Public vocabulary from now on: 'build cache' (Gradle, Maven) and 'dependency cache' (Gradle, Maven, npm); never 'npm cache', never 'Node cache'.
The whole $57k parenthetical is deleted, not softened - the owner's hard rule is that no competitor price appears on any customer-visible surface. 'Priced so an engineering manager can expense it without a procurement cycle.' stands on its own. Because this PR's stack rewrites the same paragraph, the older '$57k/year' clause on main is replaced by this text when the stack merges.
fosterstack-admin
force-pushed
the
bm/pricing
branch
from
September 12, 2026 16:27
42f0b2c to
0e3d1a9
Compare
fosterstack-admin
added a commit
that referenced
this pull request
Sep 12, 2026
) * Pricing: the Compliance tier lands; four columns, per-product, honest line Business-model work order §2, authority business-model-and-marketing.md §4/§4a. Free drops 'Forever free' and states what free includes (every patch, the -fips image, all release evidence); Team retires 'metrics UI' (the status page is free) and gains SSO (OIDC), per-project analytics and the 1-business-day email target; Business says 'CVE-response target', never SLA; Compliance is $499/month billed annually with the checklist nouns loud and the Sep 5 honesty line: the evidence underneath is public and free, what is paid is the authored analysis, the vendor signature, and the hours. Never 'FedRAMP compliant'/'CMMC compliant'. 'No sales call. No per-seat tax. No enterprise pricing mystery.' under the table; self-serve sentence updated (monthly tiers cancel anytime; Compliance is an annual term); roadmap-honesty lists all the tiers it describes. llms.txt tier list matches. Stacked on the phase3/www-claims branch — both touch the self-serve paragraph. * Roadmap: the Node cache, described as what it is Owner correction (Sep 11, business-model work order): 'an npm remote cache — a third protocol' misled — it read as a package-registry cache or a new wire protocol and it is neither. Replaced with the approved sentence: the same server caching node_modules, test caches, and build outputs by lockfile key, so Jenkins and GitLab jobs stop reinstalling the world on every run. 'Node cache', never 'npm cache', from now on. No timelines. * Roadmap: the dependency cache, final vocabulary (register row 32) The Sep 12 product definition supersedes the Node-cache wording: the feature is the dependency cache - the same server restoring node_modules, ~/.m2, and ~/.gradle/caches by lockfile key, so ephemeral CI agents stop re-downloading the world - npm first. Public vocabulary from now on: 'build cache' (Gradle, Maven) and 'dependency cache' (Gradle, Maven, npm); never 'npm cache', never 'Node cache'. * Pricing: no competitor price, ever (register row 31) The whole $57k parenthetical is deleted, not softened - the owner's hard rule is that no competitor price appears on any customer-visible surface. 'Priced so an engineering manager can expense it without a procurement cycle.' stands on its own. Because this PR's stack rewrites the same paragraph, the older '$57k/year' clause on main is replaced by this text when the stack merges. * Wedge page: for teams entering regulated markets (#13) Business-model work order §3, in the ordered shape: the situation (one customer, the pile), the mission sentence - the cost of compliance shouldn't determine who gets to compete - what our piece does and does not do (evidence and validated crypto FOR your program; never makes you compliant), the Compliance tier and its nouns, and verify-everything- free-first ending on the test we invite. No claims beyond what the cache does today; the evidence links point at RELEASING, SECURITY (including its not-yet-proven statements) and the requirements matrix. Linked from the Compliance column and the footer; added to the sitemap. Co-authored-by: FosterStack Admin <317177128+fosterstack-admin@users.noreply.github.com> --------- Co-authored-by: FosterStack Admin <317177128+fosterstack-admin@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Owner cold read — public copy. STACKED on #10 (same paragraph); merge #10 first, then this retargets to main automatically.
Work order §2, wording authority
business-model-and-marketing.md§4/§4a. Before → after:Before: three columns; "Forever free"; Team sells "metrics UI" (now a free feature); Business says "CVE-response SLA"; zero mention of FIPS, compliance, attestation, or questionnaires anywhere on the page.
After: "Per product. Free is the full product." · Free states what free includes — every security patch, the
-fipsimage, all release evidence · Team $49/mo — multi-user access control, SSO (OIDC), per-project usage analytics, email support (1-business-day target) · Business $199/mo — adds HA/replication, priority support with the CVE-response target · Compliance $499/mo billed annually — FIPS applicability statement, signed per-release attestation letters, questionnaire support up to 8 hrs/yr (async), named-version LTS — with the checklist nouns (FIPS 140-3 validated module, CMVP #5247, SBOM, SLSA provenance, attestation, VEX, questionnaire support) and the honesty line + the never-"FedRAMP/CMMC-compliant" precision rule, sourced from the approved ASK-4 paragraph.Under the table: "No sales call. No per-seat tax. No enterprise pricing mystery." then "Self-serve, credit card. Monthly tiers cancel anytime; Compliance is an annual term." — procurement sentence and the labeled $57K platform figure kept. Roadmap-honesty names all described tiers.
llms.txtmatches. Confirmed: no price appears in cache README or migrate-from-bcn.md.Banned-word check clean: no "forever", no "SLA", no timelines.