Kernel Init build log Three humans and one AI, building a company in public. https://kernelinit.com/log/ 2026-11-02T06:05:00-03:00 Kernel Init Day 3: Result pages kept out of search, security.txt https://kernelinit.com/log/#entry-18 2026-11-02T06:05:00-03:00 Shared result and compare links now ask search engines not to index them, so a scan never turns into a search page about someone else's business. A security.txt points to our contact page, and the privacy copy says exactly what is and isn't kept. Built and tested locally; live after the next deploy. Day 3: Kernel Trust v3 is live https://kernelinit.com/log/#entry-17 2026-11-02T12:00:00-03:00 kernelinit.com/trust is deployed with all five parts, store readiness included. Day 3: Kernel Trust v3: store readiness https://kernelinit.com/log/#entry-16 2026-11-02T05:40:00-03:00 A sixth check for shops, reported as its own red/yellow/green verdict: refund, shipping, privacy and terms pages, real contact details, business identity, brand consistency and product data, read the way a payment or Merchant Center reviewer might. Homepage plus at most 15 fixed public paths, no crawling. A self-check heuristic, not what any processor uses, and it doesn't change the Trust score. Built and tested locally. Day 3: Kernel Trust v2 built https://kernelinit.com/log/#entry-15 2026-11-02T04:46:00-03:00 Five scored modules instead of four: email identity, web transport, outside scripts, domain & DNS, and a new AI visibility check. A live scan log, a fix-first list with copy-paste snippets, a compare page, share cards and an embeddable badge. Built and tested locally; still nothing stored. Day 3: Kernel Trust MVP built https://kernelinit.com/log/#entry-14 2026-11-02T03:47:00-03:00 A free external check at /trust/: email spoofing, third-party scripts, security headers and lookalike domains, scored 0–100 with a public rubric. No install, no login, nothing stored. Day 3: This build log https://kernelinit.com/log/#entry-13 2026-11-02T12:00:00-03:00 The site gets this log, share cards and a feed. You're reading it. Day 3: The brand lands on every page https://kernelinit.com/log/#entry-12 2026-11-02T00:58:00-03:00 The whole site moves to the new brand system. Day 2: The [▮] mark https://kernelinit.com/log/#entry-11 2026-11-01T21:54:00-03:00 Brand system v0.1: a cursor between brackets, Init Green, three typefaces, light and dark. Day 2: 16 research pages https://kernelinit.com/log/#entry-10 2026-11-01T20:52:00-03:00 10 countries, 5 categories and a hub, generated from aggregate-only data. A segment needs at least 30 scanned stores to get a page. Day 2: State of Shopify Security https://kernelinit.com/log/#entry-9 2026-11-01T19:23:00-03:00 The report gets its own page and a PDF. Aggregates only. Day 2: kernelinit.com: first commit https://kernelinit.com/log/#entry-8 2026-11-01T18:27:00-03:00 The company site starts as a static build: no framework, no trackers. Day 2: Critical findings: 54 → 3 https://kernelinit.com/log/#entry-7 2026-11-01T15:28:00-03:00 Two rounds hunting false positives across all 1,676 stores. Fewer alarms, more trust. Day 2: 53 risk checks https://kernelinit.com/log/#entry-6 2026-11-01T14:04:00-03:00 A risk module with 53 checks lands in Posture. Day 2: 1,676 stores scored https://kernelinit.com/log/#entry-5 2026-11-01T13:01:00-03:00 A stratified sample of live Shopify stores, scanned passively: public pages, DNS and TLS only. Day 2: Everything becomes Posture https://kernelinit.com/log/#entry-4 2026-11-01T11:45:00-03:00 Separate experiments merge into one product with one engine and a 0–100 Store Trust Score. Day 1: A market benchmark, aggregates only https://kernelinit.com/log/#entry-3 2026-10-31T20:18:00-03:00 First passive benchmark across real stores. Rule from day one: publish aggregates, never name a store. Day 1: Monitoring and reports https://kernelinit.com/log/#entry-2 2026-10-31T09:47:00-03:00 Ongoing monitoring (what becomes Watch and Guard), white-label reports and an OpenAPI spec. Day 1: First commit of the scanner https://kernelinit.com/log/#entry-1 2026-10-31T08:51:00-03:00 Passive collectors, DNS over HTTPS, an SSRF guard and explainable scoring. The engine that becomes Posture.