Enforced
High, inside the tested boundary
A script, hook, type contract, or build gate rejects the violating state.
A new musing without registry coverage or a new page-scale violation can fail before merge.
The model is probabilistic. The acceptance criteria do not have to be. The useful system is not the one that promises perfect agent behavior; it is the one that knows which promises are enforced, which are verified, and which remain advice.
Operational system, not enterprise platform.
Maturity: stage 3 of 5, with strong execution controls and a still-developing evaluation layer.
The honest guarantee
Jenn OS is strongest where a rule became machinery. Written mandates still matter, but they do not deserve the same confidence label as a build gate.
Enforced
High, inside the tested boundary
A script, hook, type contract, or build gate rejects the violating state.
A new musing without registry coverage or a new page-scale violation can fail before merge.
Verified
Medium
The workflow requires visible proof, but the obligation can still be skipped, misread, or blocked.
Desktop and mobile screenshots, interaction checks, and public-route verification.
Advisory
Variable
A skill or instruction changes agent behavior probabilistically. It is guidance, not a warranty.
A design reference preference or a reminder to add warmth to a corporate surface.
Executive portfolio review
The system is mature enough to run real work and young enough that several controls remain local, uneven, or dependent on the operator noticing the right signal.
Owns
Repo ownership, stakeholder job, concept units, design-origin ownership, and explicit non-build boundaries.
Proof
AGENTS / CLAUDE entry rules, concept-to-production, repo routing, Codex mainline discipline.
Weak edge
A broad or ambiguous request can still be interpreted differently before a mechanical gate becomes relevant.
Owns
Scoped build logs, people memory, standing indexes, strategic ledgers, and cross-agent handoff language.
Proof
Generated indexes and coverage checks make several memory surfaces inspectable and reproducible.
Weak edge
Some records remain hand-authored, freshness varies, and a remembered rule is not the same as a triggered rule.
Owns
Worktrees, branch namespaces, shared-checkout collision guards, target-repo checks, and closeout states.
Proof
Codex branches from origin/main into its own worktree; hooks and estate sweeps detect stranded or co-owned work.
Weak edge
The topology is sophisticated enough to impose operational cost, and legacy worktree debt still requires judgment.
Owns
Build gates, route audits, visual QA, public verification, generated-data reachability, and shipped/preserved/deferred closeout.
Proof
Tests exist for recurring failures; public work is not complete at local proof.
Weak edge
Coverage is not uniform across every route and integration. Some checks are ratchets over known debt rather than a fully clean baseline.
Owns
Reference-led design, page profiles, typography ratios, gutters, readable measure, long-page organization, and visual proof.
Proof
Five typed page profiles, a rendered Chrome audit at desktop and mobile, and a CI-facing contract gate.
Weak edge
Historical pages were built on several visual systems. The index is complete; the legacy measurement baseline is not the same as full standardization.
Owns
Auth verification, secret boundaries, banned-name checks, redaction paths, permission gates, and sensitive-surface separation.
Proof
Several concrete leak classes have checks and scoped authentication artifacts.
Weak edge
There is no single repository-wide threat model, dependency-risk program, or independently audited security posture.
Owns
Failure ledgers, freshness checks, runtime-collision checks, generated health snapshots, and selected behavioral tests.
Proof
Failures are promoted into tests when they recur; the system distinguishes several false-green states.
Weak edge
There is no unified task benchmark with pass-rate trends, cost/latency budgets, inter-rater review, and controlled comparison across models.
The overall maturity call uses an internal five-stage model, not an external certification: 1 · Ad hoc · 2 · Repeatable · 3 · Operational system · 4 · Measured platform · 5 · Independently assured.
The new design control
A page may choose a different scale. It may not quietly invent a different coordinate system. Each musing now resolves to a typed profile with bounded ratios and an explicit warmth anchor.
Scale equation
title To Body
title font-size / median long-form body font-size
section To Body
median h2 font-size / median long-form body font-size
estimated Measure Ch
paragraph width / (body font-size × 0.52)
outer Gutter Ratio
minimum visible content gutter / viewport width
hero Viewport Share
hero-title bounding height / viewport height
Editorial essay
Sustain a long reading argument with calm hierarchy and a recognizable Jenn voice.
Desktop range
Title 42–80px · body 16–22px · title/body 2.25–4.8×
Locked
readable measure · body-size floor · bounded title/body ratio · clean footer gutter
Is: A reading-first page where prose is the primary interface.
Is not: A poster enlarged until the article becomes secondary.
Interactive atlas
Let a reader move between explanation and a structured model without losing reading scale.
Desktop range
Title 48–88px · body 15–21px · title/body 2.5–5.6×
Locked
reading text remains editorial scale · controls stay at least 44px · wide panels do not redefine body scale · mobile has zero overflow
Is: An evidence-led editorial page with one or more explorers, maps, models, or searchable indexes.
Is not: A dashboard whose controls force every heading and paragraph onto a different scale.
Data study
Make comparison, provenance, and analytical structure visible before decoration.
Desktop range
Title 40–72px · body 14–20px · title/body 2.2–4.8×
Locked
source proximity · consistent axes and units · legible labels · signal before explanation
Is: A dense analytical page where tables, charts, or repeated evidence rows carry the argument.
Is not: A tiny dashboard or a wall of equally weighted cards.
Research index
Give a branded research library a memorable entrance, then hand the reader cleanly into comparable records.
Desktop range
Title 48–104px · body 14–20px · title/body 2.4–6.5×
Locked
record pages keep their own readable contract · catalogue path is visible · body-size floor · brand drama ends before evidence density begins
Is: A hub or catalogue where an editorial identity and a navigable evidence collection share the page.
Is not: A license to make record pages tiny, or to turn every database view into a campaign hero.
System explainer
Explain architecture, maturity, controls, and gaps with executive clarity and inspectable detail.
Desktop range
Title 46–76px · body 15–20px · title/body 2.4–4.8×
Locked
claim/proof separation · guarantee labels · maturity boundary · details available in-page
Is: A portfolio or operating-system page that moves from claim to mechanism to proof.
Is not: A self-congratulatory feature inventory or a fake control-room dashboard.
Immersive feature
Create a distinctive first impression while preserving the reader's ability to enter the work.
Desktop range
Title 54–104px · body 17–24px · title/body 2.6–6×
Locked
first-viewport budget · reader-controlled media · readable continuation · reduced-motion path
Is: A visual or sensory feature whose atmosphere is part of the argument.
Is not: Permission for unbounded type, hidden navigation, or a five-screen hero.
The defect that triggered the system
At Chrome 100%, Anatomy of an Ache rendered a 129.6px title while seven peer musings rendered at 60px. The title/body ratio was about 8.1×. The source used a 9vw term, so the site shell's rem-based density rule could not constrain it. The repair reduces the title to the interactive-atlas range and makes the same relationship testable on future pages.
Reference intelligence
References control a particular decision. They are not mood-board permission to copy an entire brand. Corporate gravity always receives one earned human interruption.
Apple · Oura
Borrow: One primary job, material clarity, carefully bounded type, adaptive layouts.
Refuse: Sterility, platform mimicry, or glass effects without semantic purpose.
The Economist · Acquired
Borrow: Strong hierarchy, confident restraint, evidence treated as part of the reading experience.
Refuse: Institutional distance that erases Jenn's point of view.
Graza · One Trick Pony · Moon Rabbit
Borrow: Specific color, appetite, wit, packaging-like objects, and a story that feels owned.
Refuse: Novelty color applied to a page with no narrative reason.
Prada · Parsi architecture · Deccan and Mysore architecture
Borrow: Angular silhouette, repeated geometry, ornament as structure, dark-and-metallic restraint.
Refuse: Luxury as empty black space or culturally flattened pattern sampling.
BlackRock · Square
Borrow: Legibility, grid discipline, credible comparison, direct operational language.
Refuse: A serious surface with no warmth anchor. Add the fire truck, duck, nodes, stems, oranges, or another earned mascot/object.
Professional capability review
Anthropic's coursework can provide an external completion signal. Jenn OS provides much deeper applied evidence. Neither substitutes for standardized evaluation, external users, or an independent security review.
External benchmark
Anthropic Academy
Offers Claude 101, Claude Code in action, Cowork, and other courses with certificates upon completion.
Practice benchmark
Anthropic's skills guide
Emphasizes use cases, trigger tests, workflow completion, API failures, scripted evaluation, composability, and portability. Jenn OS matches much of the architecture; its missing piece is one unified evaluation report.
The next maturity jump
A stable corpus of tasks, expected triggers, quality rubrics, cost, latency, and cross-model trend lines.
Use the new scale snapshot and route profiles to pay down legacy outliers instead of treating the ratchet as the finish line.
Threat modeling, dependency and secret scanning, recovery drills, and at least one independent review.
Short, reproducible before/after cases that show the control, the failure it caught, and the measurable improvement.
Show that another person can operate part of the system without Jenn narrating it live.
Consolidate overlapping instructions and publish a smaller canonical control map with machine-readable ownership.
Receipts
The public story stays readable. The source contracts remain in code, shared skills, build logs, and the tests that can reject a regression.