Site: add @fix, Cloud, compliance positioning (Session C)

Landing: compliance urgency in hero, @fix convergence certificates
section (L0/L1/L2 cards), Cloud independent witnessing section
(env var, deployment tiers, source-available), explain() in Art. 86
card, test counts updated (~1,400).

Learn: @fix stratified fixpoint section with convergence certificates,
Cloud witnessing section with CloudClient code example.

GetStarted: Cloud setup step in MCP quickstart (FLOWSCRIPT_API_KEY
env var), test counts updated in bottom CTA.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: phillipclapham

web/src/pages/GetStarted.tsx

@@ -130,7 +130,25 @@ export function GetStarted() {
           <code>query_audit</code>, <code>verify_audit</code>, <code>verify_integrity</code>.
         </p>
 
-        <h3>4. Add the CLAUDE.md snippet</h3>
+        <h3>4. (Optional) Stream to FlowScript Cloud</h3>
+        <p>
+          Add one environment variable to stream audit events to{" "}
+          <a href="https://api.flowscript.org" target="_blank" rel="noopener noreferrer">FlowScript Cloud</a>{" "}
+          for independent cryptographic witnessing:
+        </p>
+        <div className="code-block">
+{`"env": {
+  "OPENAI_API_KEY": "your-key",
+  "FLOWSCRIPT_API_KEY": "your-cloud-key"
+}`}
+        </div>
+        <p>
+          Every audit event &mdash; including convergence certificates &mdash; streams automatically.
+          Chain verification and witness attestation happen server-side. Your local audit trail remains
+          the source of truth.
+        </p>
+
+        <h3>5. Add the CLAUDE.md snippet</h3>
         <p>
           This is what turns tools into a workflow. Copy the{" "}
           <a href="https://github.com/phillipclapham/flowscript-agents/blob/main/examples/CLAUDE.md.example" target="_blank" rel="noopener noreferrer">
@@ -139,7 +157,7 @@ export function GetStarted() {
           into your project's CLAUDE.md. It tells your agent <em>when</em> to record decisions, surface tensions before new decisions, and check blockers at session start, automatically, without you asking. Without it, the tools are available but passive. With it, your agent proactively tracks your project's reasoning.
         </p>
 
-        <h3>5. Try it: your first 5 minutes</h3>
+        <h3>6. Try it: your first 5 minutes</h3>
         <p>With the MCP server and CLAUDE.md snippet configured above, start a conversation with your agent:</p>
         <div className="code-block">
 {`"I need to decide between PostgreSQL and MongoDB for our user data.
@@ -402,11 +420,11 @@ with UnifiedMemory("agent-memory.json", embedder=OpenAIEmbeddings(), llm=llm) as
         <div className="gs-links">
           <a href="https://github.com/phillipclapham/flowscript" target="_blank" rel="noopener noreferrer" className="gs-link-card">
             <h3>flowscript-core</h3>
-            <p>TypeScript SDK &mdash; npm package, full API, 731 tests</p>
+            <p>TypeScript SDK &mdash; npm package, full API, 779 tests</p>
           </a>
           <a href="https://github.com/phillipclapham/flowscript-agents" target="_blank" rel="noopener noreferrer" className="gs-link-card">
             <h3>flowscript-agents</h3>
-            <p>Python SDK &mdash; 9 adapters, consolidation, 581 tests</p>
+            <p>Python SDK &mdash; 9 adapters, CloudClient, 586 tests</p>
           </a>
           <Link to="/playground" className="gs-link-card">
             <h3>Playground</h3>

web/src/pages/Landing.css

@@ -42,12 +42,23 @@
   font-size: 19px;
   line-height: 1.6;
   color: var(--text-secondary);
-  margin-bottom: var(--space-xl);
+  margin-bottom: var(--space-md);
   max-width: 640px;
   margin-left: auto;
   margin-right: auto;
 }
 
+.hero-compliance {
+  font-size: 15px;
+  line-height: 1.5;
+  color: var(--color-primary);
+  font-style: italic;
+  margin-bottom: var(--space-xl);
+  max-width: 560px;
+  margin-left: auto;
+  margin-right: auto;
+}
+
 .hero-actions {
   display: flex;
   gap: var(--space-md);

web/src/pages/Landing.tsx

@@ -19,7 +19,11 @@ export function Landing() {
           </h1>
           <p className="hero-subtitle">
             Five typed queries no vector store can answer: <code>why()</code>, <code>tensions()</code>, <code>blocked()</code>, <code>alternatives()</code>, <code>whatIf()</code>.
-            Hash-chained audit trail. Structural compliance. MIT licensed.
+            Hash-chained audit trail. Convergence certificates. Cloud witnessing. MIT licensed.
+          </p>
+          <p className="hero-compliance">
+            EU AI Act enforcement begins August 2026. Audit trails can't be backdated.
+            FlowScript is the compliance engine that makes your agents audit-ready from day one.
           </p>
           <div className="hero-actions">
             <Link to="/get-started" className="btn btn-primary">Get Started</Link>
@@ -267,7 +271,7 @@ mem.query.tensions();{"\n"}
             </div>
             <div className="problem-card">
               <h3>EU AI Act Art. 86</h3>
-              <p>Right to explanation. <code>alternatives()</code> reconstructs what was considered, what was chosen, and the rationale.</p>
+              <p>Right to explanation. <code>explain()</code> generates deterministic compliance documents from <code>why()</code> results &mdash; three audience modes, no LLM in the loop, reproducible.</p>
             </div>
           </div>
           <p className="query-note" style={{ marginTop: '1.5rem' }}>
@@ -289,6 +293,61 @@ mem.query.tensions();{"\n"}
         </div>
       </section>
 
+      {/* @fix — Convergence Certificates */}
+      <section className="section">
+        <div className="section-inner">
+          <h2 className="section-title">@fix &mdash; Convergence certificates</h2>
+          <p className="section-lead">
+            When FlowScript resolves contradictions, it doesn't just update the graph. It produces a <strong>convergence certificate</strong> &mdash; a hash-chained attestation proving how the reasoning changed and that the transformation hasn't been tampered with.
+          </p>
+          <div className="problem-grid">
+            <div className="problem-card">
+              <h3>L0 &mdash; Pure Description</h3>
+              <p>No computation. Static knowledge and observations. Always terminates.</p>
+            </div>
+            <div className="problem-card">
+              <h3>L1 &mdash; Bounded Fixpoint</h3>
+              <p>Consistency enforcement, belief propagation. Closed domain, inflationary. Always terminates (Knaster-Tarski).</p>
+            </div>
+            <div className="problem-card">
+              <h3>L2 &mdash; General Fixpoint</h3>
+              <p>Abductive reasoning, hypothesis generation. Turing-complete, bounded. For when you need full computational power.</p>
+            </div>
+          </div>
+          <p className="query-note" style={{ marginTop: '1.5rem' }}>
+            Each certificate records: <code>initial_graph_hash</code> &rarr; <code>delta_sequence</code> &rarr; <code>final_graph_hash</code> &rarr; <code>certificate_hash</code>. An auditor can verify not just what your agent decided, but how it got there.
+          </p>
+        </div>
+      </section>
+
+      {/* FlowScript Cloud */}
+      <section className="section section--alt">
+        <div className="section-inner">
+          <h2 className="section-title">FlowScript Cloud &mdash; Independent witnessing</h2>
+          <p className="section-lead">
+            Local audit trails are tamper-evident but self-attested. <a href="https://api.flowscript.org" target="_blank" rel="noopener noreferrer" style={{ color: 'var(--color-primary)' }}>FlowScript Cloud</a> adds independent third-party witnessing: your SDK streams hash-chained events to the Cloud service, which verifies chain continuity and stores witness attestations.
+          </p>
+          <div className="install-grid">
+            <div className="install-card">
+              <h3>One environment variable</h3>
+              <div className="code-block install-cmd">export FLOWSCRIPT_API_KEY=your-key</div>
+              <p>Every audit event &mdash; including convergence certificates &mdash; streams to api.flowscript.org automatically. Chain verification and witness attestation happen server-side.</p>
+            </div>
+            <div className="install-card">
+              <h3>Three deployment tiers</h3>
+              <p><strong>SaaS</strong> at api.flowscript.org. <strong>Self-hosted Cloudflare</strong> &mdash; deploy to your own account. <strong>Docker on-premise</strong> for regulated industries. One codebase, three deployment models.</p>
+            </div>
+            <div className="install-card">
+              <h3>Source-available</h3>
+              <p>BSL 1.1 licensed. Full source on GitHub. Converts to Apache 2.0 after 4 years. Audit the code that audits your agents.</p>
+              <a href="https://github.com/phillipclapham/flowscript-cloud" target="_blank" rel="noopener noreferrer" className="install-link">
+                View on GitHub &rarr;
+              </a>
+            </div>
+          </div>
+        </div>
+      </section>
+
       {/* What FlowScript Actually Is — Layer 1 (condensed for web) */}
       <section className="section">
         <div className="section-inner">
@@ -314,9 +373,9 @@ mem.query.tensions();{"\n"}
       {/* Bottom CTA */}
       <section className="section cta-section">
         <div className="section-inner" style={{ textAlign: 'center' }}>
-          <h2 className="section-title">Open source. MIT licensed. 1,315 tests.</h2>
+          <h2 className="section-title">Open source. MIT licensed. ~1,400 tests.</h2>
           <p className="section-lead">
-            731 TypeScript + 584 Python. Same audit trail format across both SDKs.
+            779 TypeScript + 586 Python + 68 Cloud. Same audit trail format across all three.
           </p>
           <div className="hero-actions" style={{ justifyContent: 'center' }}>
             <Link to="/get-started" className="btn btn-primary">Get Started</Link>

web/src/pages/Learn.tsx

@@ -385,6 +385,95 @@ mem.query.alternatives(dbQuestion);{"\n"}
         </p>
       </section>
 
+      {/* @fix — Stratified Fixpoint Computation */}
+      <section className="learn-section">
+        <h2>@fix &mdash; Stratified fixpoint computation</h2>
+        <p>
+          FlowScript includes <code>@fix</code>, a formal fixpoint operator over typed reasoning graphs.
+          When an agent needs to reason iteratively &mdash; resolving contradictions, propagating beliefs,
+          converging on decisions &mdash; <code>@fix</code> provides three computational levels with
+          guaranteed termination properties.
+        </p>
+
+        <div className="tier-list">
+          <div className="tier tier--current">
+            <div className="tier-label">L0</div>
+            <div className="tier-desc">
+              <strong>Pure description</strong> &mdash; no <code>@fix</code>. Static knowledge, observations. Always terminates.
+            </div>
+          </div>
+          <div className="tier tier--developing">
+            <div className="tier-label">L1</div>
+            <div className="tier-desc">
+              <strong>Bounded fixpoint</strong> &mdash; closed domain, inflationary. Always terminates (Knaster-Tarski). Consistency enforcement, belief propagation.
+            </div>
+          </div>
+          <div className="tier tier--proven">
+            <div className="tier-label">L2</div>
+            <div className="tier-desc">
+              <strong>General fixpoint</strong> &mdash; Turing-complete, bounded. Abductive reasoning, hypothesis generation.
+            </div>
+          </div>
+        </div>
+
+        <p>
+          L1 can contain bounded L2 sub-computations &mdash; constraint escalates, never de-escalates.
+          This is a <em>computational metamaterial</em>: tunable constraint radius within a single
+          reasoning structure. The consolidation engine is a degenerate L1 fixpoint (single iteration).
+        </p>
+
+        <h3>Convergence certificates</h3>
+        <p>
+          When consolidation resolves contradictions, FlowScript produces a <strong>convergence
+          certificate</strong> &mdash; a hash-chained attestation: <code>initial_graph_hash</code> &rarr;{" "}
+          <code>delta_sequence</code> &rarr; <code>final_graph_hash</code> &rarr; <code>certificate_hash</code>.
+          This is concrete Article 86 compliance infrastructure. An auditor can verify not just <em>what</em>{" "}
+          your agent decided, but <em>how it got there</em> &mdash; and prove the record hasn't been altered.
+        </p>
+        <p>
+          Every other agent memory system treats contradiction resolution as a black box. FlowScript
+          makes the resolution process itself auditable.
+        </p>
+        <p>
+          Formal grounding: Datalog stratification (Abiteboul-Hull-Vianu 1995), Knaster-Tarski
+          fixed-point theory, and OWL's three-layer decidability model (Baader et al. 2003). Full spec:{" "}
+          <a href="https://github.com/phillipclapham/flowscript/blob/main/spec/fixpoint_spec.md" target="_blank" rel="noopener noreferrer">
+            fixpoint_spec.md
+          </a>.
+        </p>
+      </section>
+
+      {/* FlowScript Cloud */}
+      <section className="learn-section">
+        <h2>FlowScript Cloud &mdash; Independent witnessing</h2>
+        <p>
+          Local audit trails are tamper-evident but self-attested. <a href="https://api.flowscript.org" target="_blank" rel="noopener noreferrer">FlowScript Cloud</a>{" "}
+          adds independent third-party witnessing: your SDK streams hash-chained events to the Cloud
+          service, which verifies chain continuity and stores witness attestations. A compliance officer
+          can't get this from your own database &mdash; independent verification requires an independent party.
+        </p>
+        <div className="code-block">
+{`# One environment variable. That's it.
+export FLOWSCRIPT_API_KEY=your-key
+
+# In your Python code:
+from flowscript_agents.cloud import CloudClient
+
+cloud = CloudClient()  # reads FLOWSCRIPT_API_KEY from env
+mem = Memory.load_or_create("agent.json", options=MemoryOptions(
+    audit=AuditConfig(on_event=cloud.queue_event)
+))
+# Every audit event streams to api.flowscript.org automatically`}
+        </div>
+        <ul className="audit-features">
+          <li><strong>Chain verification on ingestion:</strong> Cloud verifies hash chain continuity. Breaks trigger immediate alerts.</li>
+          <li><strong>Witness attestations:</strong> Independent proof your chain was intact at time T.</li>
+          <li><strong>Batch buffering:</strong> Events accumulate and flush in batches. Lock-free I/O &mdash; network never blocks your agent.</li>
+          <li><strong>Three deployment tiers:</strong> SaaS at api.flowscript.org, self-hosted Cloudflare, or Docker on-premise. One codebase.</li>
+          <li><strong>Source-available:</strong> BSL 1.1 (converts to Apache 2.0 after 4 years). <a href="https://github.com/phillipclapham/flowscript-cloud" target="_blank" rel="noopener noreferrer">Full source on GitHub</a>.</li>
+        </ul>
+      </section>
+
       {/* FlowScript as Notation */}
       <section className="learn-section">
         <h2>FlowScript as a notation</h2>