Tag
51 posts tagged.
A composite founder diary at 82K MRR. When a payment order names one person and numbers another, the receiving bank may pay on the number and need not check the name. The escape the statute gives a non bank originator is deleted by a signature, and the right to chase the stranger follows the loss.
A composite founder diary at 81K MRR. When a software vendor files Chapter 11, rejection is a breach and not a cancellation, so the license survives. But electing to retain rights under Section 365(n) keeps them while expressly excluding specific performance, requires all royalty payments to continue, and waives both setoff and the Section 503(b) claim.
A composite founder diary. I had never touched the 401(k) money, which my administrator offered as comfort. ERISA section 412 requires a fidelity bond of at least 10 percent of funds handled, re-fixed at the beginning of every plan year, and its unlawful acts limb also catches whoever permits an unbonded person to handle funds. My bond had not been re-fixed in two years.
A composite founder diary. A voluntary disclosure agreement is supposed to buy you a wall about three years back. In March 2026 I learned that the wall is built around the business that never charged the tax, and that for the one that charged it and kept it the look-back is extended as far back as necessary.
A composite founder diary. Everyone calls CMMC Level 1 the easy tier because it has fifteen requirements. In September 2026 I found it is the only level in the model where no plan of action is permitted at any time, so a Level 2 contractor reaches award at 0.8 while Level 1 needs every requirement MET.
A composite founder diary. Everyone treats FedRAMP as a property of your product. In September 2026 I found that only the buying agency may decide whether it applies, and that every section of the FedRAMP Authorization Act carries a note repealing itself on 23 December 2027.
A composite founder diary. Everyone says PCI compliance is contractual and not law. In September 2026 I read three state statutes and found Nevada making the current version of a private standard a legal duty, Minnesota deeming me in violation for my processor's act, and Washington inverting both.
A composite founder diary. A payments customer sent an eleven page DORA addendum with a one percent of turnover penalty clause. Four days of reading the regulation showed that no EU regulator could fine us at all, that the size relief is reserved for regulated firms, and that the real cost was free incident support written into the contract.
A composite founder diary. At 74K MRR a letter arrived calling us a video tape service provider, on the strength of a two minute demo clip and an advertising pixel. What I found in 18 U.S.C. 2710: no size exemption, no state of mind tier, a 2,500 dollar floor set in 1988, and a definition of who may sue that three federal appeal courts read two different ways.
A composite founder diary. At 73K MRR we had disclosed every background check and asked permission every time. The violation was a second, unrelated paragraph sitting on the disclosure form, and the size of the bill turned on one word in the liability section.
A composite founder diary. At 72K MRR a stranger opened a UDRP proceeding against the domain our entire product resolves to. It is not a lawsuit, it is a private arbitration incorporated by reference into a registrar checkout I clicked in 2019. The complaint cost them USD 1,500 and every option available to me cost more than that.
A composite founder diary. At 71K MRR a thank-you email from a teacher told me thirty-one children used our general-audience product. That sentence was not a warning. Actual knowledge is what puts a general-audience operator inside the children's privacy rule, and a knowing violation is what prices it at $53,088 a day.
