Unify GoalOS public site shell, add GoalOS Cloud MVP 0.2, and CI validation & paid-artifact guard

.github/workflows/build-goalos-cloud-mvp-v0-2.yml

@@ -38,6 +38,8 @@ jobs:
           python -m json.tool site/app/goalos-cloud-mvp/openapi.json >/dev/null
           python -m json.tool site/app/goalos-cloud-mvp/schemas/workflow.schema.json >/dev/null
           python -m json.tool site/app/goalos-cloud-mvp/schemas/proof-record.schema.json >/dev/null
+      - name: Validate canonical shell
+        run: python scripts/validate_goalos_site_v2.py
       - name: Run paid artifact guard
         run: python scripts/check_no_paid_artifacts.py
       - name: Upload GitHub Pages artifact

.github/workflows/tests.yml

@@ -31,3 +31,12 @@ jobs:
 
       - name: JavaScript syntax check
         run: node --check site/app.js
+      - name: Run GoalOS Cloud MVP test
+        run: node site/app/goalos-cloud-mvp/tests/enterprise-core.test.mjs
+
+      - name: Run GoalOS public site validation
+        run: python scripts/validate_goalos_site_v2.py
+
+      - name: Run paid artifact guard
+        run: python scripts/check_no_paid_artifacts.py
+

README.md

@@ -100,7 +100,7 @@ python scripts/check_no_paid_artifacts.py
 pytest
 ```
 
-The paid-artifact guard blocks paid buyer ZIPs, paid workshop files, implementation bundles, enterprise delivery kits, and seller assets from the GitHub Pages public site, except explicitly whitelisted public standards/action documentation.
+The paid-artifact guard blocks ZIPs, paid buyer files, paid workshop files, implementation bundles, enterprise delivery kits, seller assets, master packs, commercialization-ready packs, and quick-launch packs from the GitHub Pages public site while allowing public documentation and standards files.
 
 ## Repository foundation
 

docs/GOALOS_PAID_ARTIFACT_POLICY.md

@@ -0,0 +1,44 @@
+# GoalOS Paid Artifact Policy
+
+This repository is the public Proof Gradient / GoalOS foundation. It may publish public pages, public standards, schemas, OpenAPI blueprints, static demo code, documentation, and GitHub Actions.
+
+It must not publish paid buyer files or private delivery materials.
+
+## Public allowed content
+
+Allowed public content includes:
+
+- public Markdown documentation;
+- public HTML website pages;
+- public AEP standards pages, schemas, examples, and conformance notes;
+- JSON schemas, OpenAPI JSON, public manifests, CSS, JavaScript, SVG assets, and static app files;
+- GitHub Actions that validate and deploy the public site;
+- files under `docs/` that are clearly public strategy, policy, proof, or implementation documentation.
+
+## Restricted content
+
+Do not commit or publish:
+
+- paid buyer ZIPs;
+- paid workshop bundles;
+- implementation delivery kits;
+- enterprise pilot delivery bundles;
+- seller asset packs;
+- master packs, quick-launch packs, or commercialization-ready private bundles;
+- private client materials, credentials, keys, access tokens, or secrets.
+
+The public site guard blocks suspicious deploy filenames such as `*.zip`, `*BUYER*`, `*COMPLETE_BUNDLE*`, `*DELIVERY_KIT*`, `*SELLER_ASSETS*`, `*WORKSHOP*`, `*IMPLEMENTATION*`, `*ENTERPRISE_PILOT*`, `*MASTER_PACK*`, `*COMMERCIALIZATION_READY*`, and `*QUICK_LAUNCH*` unless they are public documentation allowed by policy.
+
+## Checkout boundary
+
+All public buy/apply CTAs must point to:
+
+<https://www.quebecartificialintelligence.com/shop>
+
+Paid product delivery belongs outside this public repository and outside GitHub Pages.
+
+## Claim boundary
+
+GoalOS does not modify AI models. It improves workflows around AI through instructions, prompts, memory, scorecards, proof records, evaluations, approvals, versions, monitoring, and rollback.
+
+The public site must not claim guaranteed ROI, income, productivity, compliance certification, safety guarantee, legal advice, financial advice, or autonomous deployment.

docs/GOALOS_RECURSIVE_WORKFLOW_OS.md

@@ -0,0 +1,57 @@
+# GoalOS Recursive Workflow OS
+
+GoalOS is the recursive workflow operating layer for the RSI era.
+
+Public line:
+
+> A model can answer. An agent can act. An institution must prove.
+
+Commercial line:
+
+> ChatGPT gives you answers. GoalOS gives you workflows that get better every time they run.
+
+Enterprise line:
+
+> Enterprise RSI without model self-modification.
+
+## Safe boundary
+
+GoalOS does not modify AI models. It improves the workflow layer around AI:
+
+- workflow instructions;
+- prompts;
+- controlled memory;
+- scorecards;
+- proof records;
+- evaluations;
+- approvals;
+- versions;
+- monitoring;
+- rollback.
+
+## Core loop
+
+Run → Score → Prove → Diagnose → Improve → Approve → Version → Monitor → Re-run.
+
+## Operating layers
+
+1. **Workflow Studio** — define the work, inputs, rules, checks, and owners.
+2. **Execution Engine** — run the workflow against cases.
+3. **Evaluation Engine** — score outputs against public-safe criteria and policy checks.
+4. **Proof Room** — store proof records, evidence, audit events, and public-safe reports.
+5. **Recursive Improvement Engine** — diagnose failures and propose workflow changes.
+6. **Approval Gate** — require human approval and a rollback target before deployment.
+7. **Versioning and Monitoring** — compare versions, deploy approved improvements, preserve rollback, and re-run.
+
+## Commercial ladder
+
+- $49 — GoalOS AI Efficiency Sprint Kit: build one reusable AI workflow.
+- $199 — GoalOS RSI Lite: build one self-improving AI workflow.
+- $997 — GoalOS Proof Room Lite / Department Pack: set up a lightweight department Proof Room.
+- $2,500+ — GoalOS RSI Sprint Workshop: build the first self-improving workflow live.
+- $9,500+ — GoalOS Proof Room Implementation Sprint: department RSI in 30 days.
+- $49,000+ — GoalOS Enterprise RSI Pilot: pilot the Recursive Workflow OS for one enterprise workflow family.
+
+## Public software proof
+
+GoalOS Cloud MVP 0.2 demonstrates the loop as a static browser app at `/proof-gradient/app/goalos-cloud-mvp/`. It requires no API keys and makes no model self-modification claim.