Business Adjacent · Flight Log
Not every private thread. The pruned route: what we tried, where we were off course, what we locked, and what a stranger can still touch live.
How to read a card
Lock 7 · Prune 1 · Course 6 · Incident 3 · Principle 12 · Ship 7 · Bet 2
FL-015portfolio
Signal Hundreds of sessions and decisions lived in private corpus while the portfolio only showed a company page.
Wrong turn Publish raw chat or leave learning invisible.
Correction Pruned Flight Log cards derived from decisions, principles, incidents, and deploys — public on businessadjacent.com/work.
FL-011reviewtube
Signal Reliability claims were only as good as the last human hard-refresh.
Wrong turn Trust memory of a private window test.
Correction `npm run proof:reviewtube` — twenty live checks against app.review.tube and the API (CORS, brand, upload strings, guest download path, password pages).
FL-010factory
Signal Large reliability fixes were live while deploys.log still stamped an older clean HEAD.
Wrong turn `--commit-dirty` forever; ship local edits without a commit identity.
Correction Commit the tree; redeploy with `WORKER_COMMIT_SHA` and Pages build from that SHA; registry records match.
FL-009reviewtube
Signal Guest download links appended the password as a query parameter.
Wrong turn Convenience for anchor tags over operational security.
Correction Short-lived HMAC download tickets; metering still happens on the download edge.
FL-008reviewtube
Signal Stream finished encoding while the database still said transcoding — UI polled forever.
Wrong turn Trust webhook delivery as the only state machine.
Correction Self-heal on single-asset GET and board list (capped); cold rewarm on open; re-kick copy when master exists without a stream id.
FL-007reviewtube
Signal Cancel set an aborted flag while multipart PUTs kept flying.
Wrong turn Treat abort as UI state.
Correction Track active XHRs; abort them immediately; never mark a completed master failed if complete won the race.
FL-014reviewtube
Signal Dead controls and factory chrome fail the “would Tesla ship this?” test.
Wrong turn Ship more surface area before every control works.
Correction SpaceX/Tesla craft bar on ReviewTube: every control works, is disabled with reason, or errors. Fidelity pass ongoing.
FL-013multi
Signal Multi-agent chaos without a primary harness and a clear owner produces thrash, not craft.
Wrong turn Treat models as the author and the human as a spectator.
Correction Primary harness contract; human owns product, money, risk, and taste; agents accelerate implementation and red-team.
FL-006reviewtube
Signal Small video upload left the customer UI frozen or stuck at a dead 0%.
Wrong turn Gate upload on IndexedDB; wait forever on Stream webhook; show “Uploading 0%” during setup.
Correction IDB optional; live byte progress via XHR; honest phases; soft-timeout never lies about Ready; Stream self-heal on read paths.
FL-002reviewtube
Signal After Path A charge, the buyer landed in full multi-tool factory chrome — paid for ReviewTube, felt like another platform.
Wrong turn One shared admin shell for every product forever.
Correction P0 product shell on app.review.tube — ReviewTube-only nav, wordmark, dark stage. Factory stays on the internal host.
FL-001multi
Signal Enterprise-grade tools are usually priced like rent on the customer, not like the bill to run them.
Wrong turn Build another SaaS gouge layer and call efficiency a marketing claim.
Correction Charge approximately what it costs to run. Publish usage. Prove efficiency so ordinary operators can afford fort-knox tooling.
FL-012factory
Signal A guard scanner passed every route because it searched a function too large to fail.
Wrong turn Celebrate green without a synthetic should-fail case.
Correction Prove the gate has teeth. Narrow the evidence window to the block that must contain the signal.
FL-004factory
Signal Hand-maintained claims (docs, gate lists, invariants) drift from live code and database as the system grows.
Wrong turn More prose that says what the system is.
Correction `npm run truth` and derived gates — ground truth is live schema + code; fail on the unrecognized.
FL-003factory
Signal Live vendor fallbacks still reached accounts we no longer operate after keys were “removed.”
Wrong turn Keep dormant vendor code “just in case” and trust vault deletion alone.
Correction Delete what we do not run. Empty the wrong env. Prove no live reach. Foundation before outreach.
FL-016factory
Signal Without a searchable transcript corpus, every new session re-derives settled truth.
Wrong turn Rely on chat history of one harness only.
Correction Layer-4 transcript pipeline into tenant-scoped storage; any session can query any session.
FL-017multi
Signal Operators pay a twenty-invoice tax before a single unit ships.
Wrong turn Mirror vendors feature-for-feature forever.
Correction Replace the stack natively, one tool at a time, compose when needed — movement, not feature parity.
FL-005multi
Signal Deploy gates passed structure while live upload still failed on real behavior.
Wrong turn Treat a green CI board as proof the product works.
Correction Live end-to-end is truth. Server-side probes first, then UI. Welcome the re-audit.
Method
Cards are written by hand from real sessions, then validated and synced from the factory repository. Public cards are redacted: no secrets, no customer data, no private chat dumps. The full private corpus stays internal so agents and operators can still search it.
Source of truth: factory docs/flight-log · site data regenerated on sync