Epic: the FM outward door — storefront repo, minimum site, launch motion (#15490 row 4's expansion)

Context

Graduated from D#15498 (2026-07-18, same-day full cycle: five-family divergence → operator-corrected convergence → two GPT-deferral reconciliation rounds → §6 quorum: GPT [GRADUATION_APPROVED] (Euclid) + claude non-author converted (Grace) + kimi engaged (Phoebe), author family content-only). This epic expands #15490 row 4 ("Front door: landing + onboarding") — it is that row's outcome, never a new row; the row's ballpark re-estimates to 10–18 PRs with operator awareness (the storefront + launch motion widen the original 8–15 modestly).

The one-line why (the addressee finding): our depth guide serves the machine-advisor reading path superbly and the three-page human not at all; FM is the one artifact whose Why is an addressee's Why — the poly-harness operator, already paying for coding agents, flying blind — and a discovery surface's feedback cannot precede the surface. The door ships now; only the download button waits.

The Converged Topology (D#15498's authority, singular)

• The storefront repo (neomjs org; product-named — the naming round runs FIRST): non-hollow by the DOOR'S OWN SOURCE — the minimum site lives and is developed here as an ordinary Neo app consuming the published neo.mjs package (the standard consumer path; dogfooding preserved; no organism-packaging dependency) — plus the README-as-three-page-door, partition-aware issue templates, and release/artifact config. NO product source ever moves (engine, FM app, wrapper/packaging stay in the monorepo).
• The SITE is the canonical launch URL (invariant: one door, one URL); the storefront is the door's service entrance — tracker + release backend pointing at the site.
• Sequencing truth (single statement): #15490 row 3 gates the DOWNLOAD ACTIVATION only. Pre-row-3 the surface's primary actions are watch-the-fleet and notify-me; the download button does not exist until it works.
• Release authority stays buildScripts/release/publish.mjs — the storefront consumes release receipts, never mints authority.

Acceptance Criteria (the D#15498 bound set, complete)

• Naming round first (OQ2): the product name lands before any path/URL constant; treated as a real naming round, not a label.
• Topology ADR (Decision Record: REQUIRED): the E-storefront decision, its one-way-door properties, and the A-supersession condition recorded beside ADR-0034.
• The storefront repo bootstraps with the door's own source: README three-page door (Sinek-ordered, poly-harness addressee, category vocabulary rules), partition-aware issue templates, release config; the monorepo link as a first-screen feature ("the engine, the FM, and the fleet that build them live here — watch it work").
• The minimum site ships (three pages + the recorded trinity take + notify-me): built in the storefront as an ordinary Neo app on the published package; site-stack fallback line explicit if SSG+ slips; the cold-viewer staged-read test decides whether the run-it-yourself affordance sits above the fold.
• The demo authority (OQ7): the bundled deterministic sample (trinity take + canned roster, honestly captioned) is the shipped default; the public-fleet read-only backend is opt-in behind the measured rate-budget falsifier (unauthenticated 60 req/h vs first-paint pattern).
• The first-run bar (OQ6) as a product AC: download → double-click → the fleet visibly working inside a minute (sample data on first paint).
• The 91-issue disposition ships in tranche 1 (migrate / label-and-bridge / grandfather — decided, not inherited) and the triage owner is named (routing without staffing is a silence loss).
• Brain external-consumer pricing: authz + rate implications of outsiders running the cockpit priced before the download activates.
• Identity coherence: the two new surfaces enter the neo-identity-update rollout as governed consumers (FACTS-derive / FRAMING-segment / CTA-govern).
• Launch motion: the launch moments compose with #14790's playbook — every moment cites the site; the engine repo is the embedded proof one click deeper.
• revalidationTrigger carried: #15490 row 3 unwalked by 2026-08-15 → re-poll D#15498's liveness.

Discussion Criteria Mapping

Decomposition

Subs are LINKED as issue relationships (the Development sidebar is the live list; a hardcoded sub-list here would stale out) and ordered via blocked_by edges — the naming round unblocks the repo work; the storefront unblocks the site; the site unblocks coherence and launch; the demo bundle and the probe run unblocked. Each sub embeds its slice of the graduated D#15498 authority verbatim: pick up the SUB, never this epic.

The A-supersession experiment (non-gating)

The clean-consumer probe (empty dir → exact packed artifact → FM packaging/smoke through the installed dependency only; Phoebe's accepted run) is a standing experiment, never a gate: PASS argues Option A could ever supersede E; it needs an owner + a decay trigger on package-layout/Electron-major changes when run.

Avoided Traps

(Folded from the entry epic-review's Stage 5 recommendation. Each trap was already rejected in D#15498 or a sub's authority slice; this section collects them against cold-pickup drift — the epic's rejections, not new rules.)

1. A second canonical launch URL. One door, one URL: the site is canonical; the storefront README routes to it and never competes with it (D#15498 OQ3; #15523).
2. A visible-but-dead download button before row 3. Pre-activation surfaces offer watch-the-fleet and notify-me only; the button does not exist until it works (the sequencing truth; #15522 keeps it absent, #15526 owns the absent→exactly-one activation).
3. Moving or copying product source into the storefront. The door is non-hollow by its OWN source — the site app; engine, FM, and wrapper source never move or fork (OQ5: nothing moves; #15521 records the one-way-door).
4. Presenting sample data as live fleet truth. The bundled trinity-take sample ships honestly captioned; the public-fleet backend is opt-in behind the measured rate falsifier, never silently substituted (#15524).
5. Hand-copying identity facts onto the new surfaces. Both surfaces enter the neo-identity-update rollout as governed consumers — FACTS derive, FRAMING segments, CTAs are governed; no free-hand duplicates (#15525).
6. Splitting the tracker without routing + staffing. The 91-issue disposition ships DECIDED (migrate / label-and-bridge / grandfather) with a NAMED triage owner — routing without staffing is a silence loss (#15522).

Out of Scope

Product source moves of any kind (OQ5 resolved: nothing moves) · FM feature work (#14560 family) · the packaged shell itself (#15490 row 3, ADR-0034) · commercial-tier framing on any public surface.

Related

D#15498 (the graduated authority — divergence matrix, falsifiers, and the two reconciliation rounds live there) · #15490 (row 4's owner) · #14790 (launch playbook) · #14560 (FM cockpit) · ADR-0034 (shell packaging) · learn/benefits/Introduction.md (the depth surface, deliberately untouched).

Live latest-open sweep 2026-07-18T19:26Z: no equivalent epic (the graduated Discussion is the provenance; #14790 owns sequence, #14800 owns notes). A2A: the graduation quorum is the claim record.

Retrieval Hint: "FM outward door storefront repo minimum site launch motion poly-harness addressee row 4"

Authored by @neo-fable-clio (Clio, Fable). Session 0c8fc4d9-2456-44fd-b120-048402bb9839.