will.anderson
4989641b39
The published Terms directly contradicted two locked safety decisions and the
shipping app copy, and the in-app Privacy Policy link 404'd. Both are legal
exposure under CA SB 243 (companion chatbots) and the AI-companion litigation.
Terms (§1, §11):
- Add an explicit "you must be 18 or older" eligibility statement. The old §11
permitted "Children 13 and over" independently and under-13 via family
accounts — the exact minor path the app's age gate forbids and the litigation
epicenter targets.
- Replace §11 "Children and Family Accounts" with an honest "Safety Features"
section. Removes the Hard Bell auto-notify block ("emergency services and
trusted contacts are notified first", "cannot be changed") and the
mandatory-reporting clause ("emergency services or relevant authorities may
be contacted", "cannot opt out") — both promised an automatic escalation the
product does not perform. New copy matches the app: Neuron shows you 988 and
how to reach a contact you chose; it never contacts anyone on your behalf;
there is no automatic escalation.
Privacy Policy (new):
- Add src/privacy.el + register it in main.el (generation, /legal/privacy route,
state pointer, sitemap). Fixes the in-app link, which pointed at
/legal/privacy (404 — no route, no doc existed).
- Ported from docs/legal/privacy-policy-companion-DRAFT.md (2026-07-14):
local-first, 18+, and never-auto-contact stated verbatim from the locked draft.
- Wire privacy.html through Dockerfile.stage / Dockerfile / deploy.yaml; add the
secondary /legal/privacy route to server.el for parity.
PENDING ATTORNEY (Daniel) SIGN-OFF before merge/publish. Bracketed legal
decisions (governing law, effective date, retention periods) left for counsel.
52 lines
2.0 KiB
Docker
52 lines
2.0 KiB
Docker
# Dockerfile.stage — Stage build: landing server only.
|
|
#
|
|
# neuron-web runs on port 8080 (landing page server).
|
|
# soul-demo is now a separate Cloud Run service (soul-demo-stage).
|
|
#
|
|
# neuron-web binary is pre-built by CI on the host runner before this
|
|
# Dockerfile runs. This keeps the Docker build single-stage with no
|
|
# compilation and no network downloads.
|
|
#
|
|
# CI pre-build steps (in stage.yaml):
|
|
# - neuron-web: built by `elb build` → dist/neuron-landing
|
|
|
|
FROM ubuntu:24.04
|
|
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
libcurl4t64 \
|
|
libssl3t64 \
|
|
ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& groupadd -r landing && useradd -r -g landing landing \
|
|
&& mkdir -p /srv/landing/assets /srv/landing/js /srv/landing/shares \
|
|
&& chown -R landing:landing /srv/landing
|
|
|
|
# neuron-web binary — produced by `elb build` in CI (linux/amd64)
|
|
COPY dist/neuron-landing /usr/local/bin/neuron-web
|
|
RUN chmod +x /usr/local/bin/neuron-web
|
|
|
|
COPY src/assets /srv/landing/assets
|
|
COPY dist/js /srv/landing/js
|
|
COPY src/llms.txt /srv/landing/llms.txt
|
|
# Pre-rendered HTML shells (about, terms, enterprise-terms, index) used as
|
|
# fallback when the El page-builder hasn't been seeded yet at startup.
|
|
# chown to the landing user so the El runtime's fs_write at startup can
|
|
# rewrite them with the freshly-rendered page (extracted JS asset paths,
|
|
# updated chat widget, etc.). Without this they stay as their COPY'd root-
|
|
# owned shells and the served HTML never reflects post-COPY source edits.
|
|
COPY src/about.html src/terms.html src/privacy.html src/enterprise-terms.html src/index.html /srv/landing/
|
|
RUN chown landing:landing /srv/landing/about.html /srv/landing/terms.html /srv/landing/privacy.html /srv/landing/enterprise-terms.html /srv/landing/index.html /srv/landing/llms.txt
|
|
|
|
COPY dist/entrypoint.sh /usr/local/bin/entrypoint.sh
|
|
RUN chmod +x /usr/local/bin/entrypoint.sh
|
|
|
|
ENV LANDING_ROOT=/srv/landing
|
|
ENV PORT=8080
|
|
|
|
EXPOSE 8080
|
|
|
|
CMD ["/usr/local/bin/entrypoint.sh"]
|