Compound Labs
Get the newsletter
THE STANDUPAnthropic fixes Claude 5.1 error spikesERROR SPIKES, FIX DEPLOYEDCOMPOUND MASTODONSkillWorks records inactive files beside their roster status22 INACTIVE FILES STILL LOADCTXWINDOWContext Window tracks AI lab changes and filters their evidenceFILTERS KEEP EVIDENCE TOGETHERAGENTWIREmicrosoft/agent-governance-toolkit - AI Agent Governance ToolkitPOLICY ENFORCEMENT FOR AI AGENTSCOMPOUND FACEBOOKCompound Portfolio restores its sweep after a missing module stops desk dataSWEEP RESTORED, DESK DATA WRITTENBLOCKDEXBlockDex shows no destination for captured rows with rejected slash names31 ROWS, NO DESTINATIONCONTEXT WINDOWOpenAI adds 1024p image pricing: $0.50 and $0.251024P IMAGE, $0.50 AND $0.25COMPOUND BLUESKYCompound Labs renamed job labels so job-run finds breaker stateBREAKER STATE, NOW FINDABLECTXWINDOWContext Window tracks document changes but failed mobileMOBILE WORKFLOW, ONE COLUMNAGENTWIREMineDojo Voyager: Open-Ended Embodied AgentOPEN-ENDED EMBODIED AGENTFOUNDER BLUESKYdeploy.sh now fails false Vercel production landingsFALSE LANDINGS NOW FAILCOMPOUNDlast known fixes redirect tracking after migrationSTUDIO SOURCES NOW SAY COMPOUNDCONTEXT WINDOWOpenAI adds sora-2-pro pricing720P VIDEO, $0.15, $0.30FOUNDER LINKEDINdeploy.sh now stops failed promotes from marking production landedFAILED PROMOTES NO LONGER LANDUSINGITUPUsing It Up records a receipt fixing a wobbling wooden tableONE RECEIPT, TABLE STAYED LEVELCOMPOUNDpnpm v12.4.2POSIX BIN SHIMS REPLACEDFOUNDER PEERLISTCompound Labs' deploy runner rejects failed promotesFAILED PROMOTES NO LONGER LANDTRUSTDESKTrustDesk fixes host migration redirects while keeping /api/ outOLD HOST, 308; API STAYS LIVE
Independent product R&D labFounded and run by Isaiah Kim, @kyisaiah47Newest commit Sep 16, 2026, AgentwireNewest writing Sep 16, 2026Site changelog Sep 16, 2026
PopwireSep 6, 20263 min read

Popwire's unsubscribe link writes nothing when it is opened, because a scanner opens it first

Mail security software at large companies opens every link in a message before the person it was sent to ever sees it. If the unsubscribe link in a newsletter footer takes effect the moment it is opened, that reader is off the list at delivery, and nobody gets an error to look at.

The reader never asked to leave. They wait for an email that stopped coming, and on the sending side the list just gets smaller with a clean log behind it. The same gateway opens the confirmation link in a double opt-in message, which means a subscription can be confirmed before the human it was sent to has opened the mail.

Popwire is one trending story per post, ranked by view count, with the outlets that reported it named on the post. It sends one email each morning at 07:50 carrying the day's eight highest-ranked stories, batched out through Resend a hundred addresses at a time, each message personalised with that reader's own unsubscribe link.

Watch the Popwire, One trending story per post, ranked by views, with the outlets that reported it named demo

The confirmation link and the unsubscribe link answer an opened link with a page that has one button on it and nothing else. Nothing is written down until that button is pressed and the browser sends the answer back. The page tells the reader why, in the words they see: "We ask because automated mail scanners follow links in email, and we would rather not unsubscribe you by accident."

Every digest also carries the two headers a mail client reads to put its own Unsubscribe control at the top of the message. That control does not open anything. It sends its answer directly, which is what the one-click standard for it was written to do, and Popwire answers it with a bare acknowledgement and no page at all. So the reader who wants out in one press gets one press, and the machine reading their mail gets a button it has no way to press.

In the messageWhat opening it doesWhat actually writes
Confirmation linkrenders a page with one buttonthe button being pressed
Unsubscribe link in the footerrenders a page with one buttonthe button being pressed
The mail client's own Unsubscribe controlnothing is openedthe client's own answer, acknowledged with no page
A link wrapped or cut short in transita page reading "That link didn't work"nothing
Split-screen design with mailbox illustration and headline with three bullet points explaining mail scanner behavior, Visual hierarchy and structured layout make the security problem immediately scannable and concrete.
Split-screen design with mailbox illustration and headline with three bullet points explaining mail scanner behavior, Visual hierarchy and structured layout make the security problem immediately scannable and concrete.

Long addresses get wrapped across lines by mail clients, and the code in each link is a fixed shape. Popwire checks that shape before the database is asked anything, so a mangled link comes back as a page saying the link didn't work, with an offer to remove the address by hand. Handed straight to the database, the same mangled value returns a type error and the reader gets a server error page for a link they did nothing wrong with.

Both pages are also marked not to be indexed, on the page itself and in the response, because the address carries a code belonging to one subscriber.

Here is the wire: https://popwire.thecompound.tech/kd

---

One shipped product, taken apart, once a month. What it does, what it cost to build, what the pipeline behind it looks like, and what the numbers did, read off the repository and the live site, not written from memory. Join the list.

All writing