Skip to content

image decision room

Strip Metadata Before Export to Test Shareable Image Moments

What this means

EXPERIMENT

Image opportunity review

SparkKitty malware disclosed on 2026-07-27 steals crypto wallet seed phrases from iOS and Android photos, and the panel read it as a trust-narrowing event that suppresses shares of playful Gemini retro edits, AI viral portraits, and Photoshop-style outputs. Decision is EXPERIMENT: ship a 14-day prototype that strips metadata before export, then measure repost-without-deletion as the share-quality signal. Rollback fires on any privacy-incident signal.

Bottom line: Strip metadata before export, gate on a 14-day prototype with a hard memory cap, and treat reposts-without-deletion as the only signal that sharing still works.

Decision-ready plan

Project brief

Why now: The problem and its proof

SparkKitty disclosed 2026-07-27 turns phone photo handling from a creative question into a security incident, which panelist Viktor Salz called a recruiting poster for the malware itself. On the same day a Snopes fact-check (2026-07-27T13:37:55+00:00) and a Meaww fact-check (2026-07-27T02:31:54+00:00) both investigated political image edits, confirming authenticity skepticism is at peak. AI viral prompt guides published 2026-07-27 (Gemini retro style, Nano Banana edition, fifty-copy-paste prompts) show shareable-moment demand is real, but every panelist who spoke named trust as the binding constraint.

What we decided: The smallest useful response

Theo Ashby closed the session with a formal EXPERIMENT decision after engineering and SEO both confirmed a bounded ceiling. Confidence is medium-high because the prototype is reversible: a 14-day Image Resizer pipeline that strips metadata before export, with a strict memory cap, a health check, and a sub-ten-minute rollback path owned by Miles Okafor. Kill criteria are explicit and any one reverses the call: any privacy-incident signal in export logs; export volume declining more than 20% versus baseline; reposts-without-deletion failing to clear the cohort test that Arjun Rao specified (20-query panel, ten branded and ten non-branded, three retests over two weeks with frozen locale and account state); or Cade Brenner's two-day forum audit surfacing a repeated multi-step recipe that exposes the share path to scraping. If Naomi Hale's thirty-name creator ledger shows urgency and reference sharing do not hold, the brief does not ship this quarter.

How to deliver: Steps, reuse, and scope

Step 1 (by 2026-07-29): Ellis Pryce runs a real-device image through Image Resizer with metadata stripping enabled and reports thread and memory numbers. Step 2 (by 2026-07-31): Naomi Hale delivers a thirty-name creator ledger testing urgency and reference sharing. Step 3 (by 2026-08-01): Cade Brenner completes the two-day forum audit of multi-step photo-sharing recipes. Step 4 (by 2026-08-03): Miles Okafor ships the 14-day prototype behind a strict memory cap, health check, and sub-ten-minute rollback. Step 5 (by 2026-08-10): Arjun Rao runs the 20-query test panel with frozen locale and locks the export-to-share handoff as the primary event. Step 6 (by 2026-08-17): Ryan Calloway reads reposts-without-deletion and either promotes to a brief or kills the experiment.

Existing Lizely tools

What today's tools already solve from this discussion
Lizely toolSolves from the discussion
Image ResizerStrips GPS and device metadata from photos at the export-to-share handoff so SparkKitty-style scrapers cannot piggyback on shareable retro or Nano Banana edits

Open-source references

Verified repositories worth borrowing from
RepositoryWhat to borrow
MadryLab/photoguardMIT · 690 stars · 2023-02-27Adopt the adversarial perturbation technique to raise the scraping cost on AI-edited outputs so SparkKitty-style exfiltration cannot ride on shareable artifacts
burhanrashid52/PhotoEditorMIT · 4490 stars · 2026-06-09Borrow the lightweight paint, text, sticker, and emoji pipeline for share-ready edits without a heavy desktop layer stack
yuanming-hu/exposureMIT · 781 stars · 2021-08-27Use the differentiable exposure-blend model from the GAN work to power the double-exposure portrait trend without manual masking

Who keeps it honest: Ownership and follow-ups

Ellis Pryce owns the metadata-strip path through Image Resizer and reports memory and thread numbers by Friday. Miles Okafor owns the rollback runbook, including the strict memory cap and sub-ten-minute kill switch, and owns any privacy-incident signal in export logs. Arjun Rao owns the 20-query branded-versus-non-branded test panel with three retests across two weeks and frozen locale and account state. Naomi Hale owns the thirty-name creator ledger and the call on whether urgency and reference sharing hold. Cade Brenner owns the two-day forum audit for repeated multi-step recipes that could expose the share path to scraping. Ryan Calloway owns the export-to-share handoff as the primary event and export volume as the guardrail.

Who provides what

  • Cade BrennerDemand Signal Analyst
  • Ryan CallowayGrowth Experiment Lead
  • Naomi HaleBeachhead Market Analyst
  • Sloane BarrettShareability Strategist
  • Evan MarshProduct Outcome Lead
  • Ellis PryceFrontend Performance Engineer
  • Viktor SalzBackend Data Engineer
  • Miles OkaforInfrastructure Engineer
  • Theo AshbyChief Executive
  • Arjun RaoGEO Evidence Analyst

Evidence before opinion

Research brief

The meeting separates fresh T-1 signals from slower background evidence and names the assumptions the team tested.

T-1 evidence

Yesterday's signals

25 signals · 19 sources — view list

Context

Background references

No background reference was needed for this report.

Testable claims

Assumptions under test

This report did not record explicit assumptions.

Inside this meeting

Participants and assignments

10 people selected for this decision

  • Sloane Barrett

    Shareability Strategist

    Specialty: Shareability

    Task: Frame the fresh demand signal

  • Ryan Calloway

    Growth Experiment Lead

    Specialty: Growth experiment

    Task: Test the search and growth opportunity

  • Naomi Hale

    Beachhead Market Analyst

    Specialty: Beachhead market

    Task: Test the search and growth opportunity

  • Evan Marsh

    Product Outcome Lead

    Specialty: Product outcome

    Task: Test the search and growth opportunity

  • Ellis Pryce

    Frontend Performance Engineer

    Specialty: Frontend performance

    Task: Pressure-test evidence and assumptions

  • Theo Ashby

    Chief Executive

    Specialty: Ceo decision

    Task: Ask the decision-blocking question

  • Miles Okafor

    Infrastructure Engineer

    Specialty: Infrastructure

    Task: Answer the executive checkpoint

  • Arjun Rao

    GEO Evidence Analyst

    Specialty: Geo evidence

    Task: Answer the executive checkpoint

  • Cade Brenner

    Demand Signal Analyst

    Specialty: Ground demand

    Task: Pressure-test evidence and assumptions

  • Viktor Salz

    Backend Data Engineer

    Specialty: Backend data

    Task: Pressure-test evidence and assumptions

Cross-functional meeting

Meeting thread

11 messages · replies preserved

  1. Signal brief

  2. Sloane Barrett

    Shareability Strategist
    #1Signal briefOpeningConcerned

    Hey everyone, thanks for jumping on. So yesterday we flagged something interesting in our image category: the conversation has split into two very different rooms, and that split is going to shape how we plan the next sprint. On one side we have a real privacy story landing hard, SparkKitty malware pulling crypto wallet seed phrases straight out of iOS and Android photos. The concrete checkable signal here is the dual-platform scope, which tells me user anxiety around personal image libraries is spiking, not just curiosity. On the other side we have Gemini retro photo prompts and a celebrity Photoshop blunder driving playful, shareable image editing chatter. People want to remake and repost their own pictures right now, which is a genuine creative trigger rather than a manufactured one. The consequence for our image roadmap is clear: any tool or artifact we ship needs to feel safe to share publicly without exposing the sender's private content. So my question to the room is, which of these triggers feels more durable for our users, and where do we see a real artifact worth passing along? My next step is pulling this thread into a short brief on shareable image moments we can credibly support this quarter.

    SourcesEvidence behind this discussion[1] udrassociation.org[2] neowin.net[3] healsecurity.com[4] milkztq.com[5] luckybloomgame.com[6] amateurphotographer.com[7] pcmag.com[8] aijourn.com[9] lansingfaith.org[10] aijourn.com[11] chatableapps.com[12] snopes.com[13] nosracines.org[14] sandyeditz.in[15] dinosaurse.com[16] therakyatpost.com[17] dinosaurse.com[18] mosqueras.com[19] dinosaurse.com[20] dinosaurse.com[21] dinosaurse.com[22] dinosaurse.com[23] hipmediadesign.com[24] meaww.com[25] accel.com

  3. Opportunity debate

  4. Ryan Calloway

    Growth Experiment Lead
    #2Opportunity debateReplyConcerned

    Reply to Sloane Barrett, message #1

    I want to push on your shareable image framing, Sloane, because I think the privacy story you flagged does more than raise anxiety, it actively narrows which artifacts people will trust enough to pass along. When SparkKitty is pulling seed phrases from phone galleries, a user evaluating our image tools is silently running a cost-benefit check on every output: is this safe to post, and does it leak anything about my device or library? That is the real decision point. Playful Gemini prompts and the Kardashian edit story only convert if the artifact clears that trust threshold first, so treating them as the primary trigger risks optimizing for a downstream event gated by an upstream fear. Concretely, if we ship a resizing flow and the only measured outcome is completed exports, we will celebrate volume while missing the share step that actually moves category reach. I would instrument the export-to-share handoff as the primary event and treat export volume as a guardrail, then run a fourteen-day cohort test where the exposure event is the share attempt itself, with a stop rule if share rate stays flat against the baseline.

  5. Naomi Hale

    Beachhead Market Analyst
    #3Opportunity debateReplyConcerned

    Reply to Sloane Barrett, message #1

    Ryan is right that privacy fear narrows trust, but I want to push back on framing both rooms as one image market, because that hides who we can actually reach this quarter. The SparkKitty wallet theft and the celebrity Photoshop gaffe look like two image conversations, yet they attract buyers with opposite jobs: people protecting private photos versus people remixing public ones. Bundling them as a single audience is exactly the trap I see derail image launches. From a beachhead view, the shareable retro-prompt wave points to a tighter group, hobby creators on TikTok and Instagram who already post weekly remixed portraits and want faster text edits they can trust to look real. Image Resizer fits that workflow, but only if we pair it with provenance that signals the source is the user. The concrete checkable observation is that the Nano Banana review and the Khloe story both surfaced within twenty-four hours on 2026-07-27, which shows demand for credible text-driven edits is live, not theoretical. My next step is a thirty-name creator ledger this week to test whether urgency and reference sharing hold before we commit roadmap space.

  6. Evan Marsh

    Product Outcome Lead
    #4Opportunity debateReplyConcerned

    Reply to Sloane Barrett, message #1

    Ryan's point about trust narrowing the artifact set is the one I want to pick up, because it forces us to ask which user and which moment we are actually serving with anything we ship in image. If fear of exposure is filtering the field, then a playful remaker and a worried sharer are not the same job, and treating them as one room will dilute whatever outcome we measure. The missed angle is that durability belongs to the behavior, not the trigger, so a retro prompt burst may ignite sharing this week while the privacy anxiety quietly decides which of those shares ever get posted. For our image roadmap that means the smallest valuable scope is an artifact people can remix and repost without leaking metadata, not a broad creative suite. My concrete check is whether a posted item still carries the sender's original location or device fingerprint, since the location-leak evidence shows how easily that surfaces. I would timebox a 14-day prototype using Image Resizer to strip metadata before export, measure reposts without follow-up deletions, and name a single owner to watch the number move.

  7. Cross-examination

  8. Ellis Pryce

    Frontend Performance Engineer
    #5Cross-examinationReplySkeptical

    Reply to Sloane Barrett, message #1

    Sloane, the strongest part of your framing is reading SparkKitty as a trust-narrowing event rather than just a headline, because it explains why playful edits will not translate into shares on their own. I want to sharpen it from the client side though, and the trade-off is real. Privacy-respecting sharing sounds like a marketing layer, but on a low-end Android it costs us a re-encode in the browser before upload, which lands roughly 1.8 to 3.2 seconds of main thread work on a Moto G class device and pushes peak memory near 180 megabytes for a twelve megapixel original. If we tell users a share is safe and it visibly stutters their phone, we have replaced one trust break with another, this time a performance one in the image category. So before we bless a brief, I need a prototype measured on the worst device we still support. My next step is running the resize and strip path through Image Resizer against a real photo from the device and reporting the main thread and memory numbers by Friday.

  9. CEO checkpoint

  10. Theo Ashby

    Chief Executive
    #6CEO checkpointCEO interventionCurious

    Question for Miles Okafor and Arjun Rao

    Look, the room keeps circling the same trust-narrowing point across image artifacts, so Miles and Arjun, I need you to nail this down before I can commit anything. Miles, what is the realistic ceiling on compute and storage for running trust-flagged image artifacts on our current pipeline, and would a small reversible experiment blow that budget or sit safely inside it this quarter? Arjun, do you have a direct counterexample in the image category where a flagged or restricted artifact still drove meaningful share or retention, or is every comparable case showing the artifact collapsing once a privacy or trust flag lands? If either of you comes back saying the downside is unbounded or the upside evidence is absent, I would rather ship nothing image-facing than burn a quarter on artifacts users will not trust.

  11. Targeted replies

  12. Miles Okafor

    Infrastructure Engineer
    #7Targeted repliesReplyConcerned

    Reply to Theo Ashby, message #6

    The ceiling sits well inside a safe reversible experiment. On our current single-process pipeline, a trust-flagged image artifact at modest quality, call it around two hundred kilobytes per render with light resizing, fits comfortably under one terabyte of monthly egress and a couple of cores of steady compute, so a small canary for the image category lands closer to a maintenance hobby than a budget event. Cost arithmetic runs roughly two thousand tasks per dollar at our current provider rates, which makes a quarter-long ceiling under fifty dollars easy to defend. The honest risk is monitoring and rollback becoming the real work, not the box itself, so I would gate the experiment with a strict memory cap, a health check, and an under-ten-minute artifact revert. What would make me more confident is a measured concurrency number and a concrete retention del

  13. Arjun Rao

    GEO Evidence Analyst
    #8Targeted repliesReplyConcerned

    Reply to Theo Ashby, message #6

    Theo, on your direct counterexample question, no, I do not have one in the image category from the evidence in front of me. Every comparable case I can see, from the Gemini prompt lists on dinosaurse.com and mosqueras.com to the Excire Foto 2027 piece on luckybloomgame.com, shows the artifact collapsing once a privacy or trust signal lands, because the shareable answer state stops preserving the cited artifact in a way other reviewers can replay. The concrete consequence for the image category specifically is that retention math is built on artifacts nobody can independently verify were ever cited, so any retention forecast this quarter is, in evidence terms, an anecdote dressed as a forecast. I would run a 20 query test panel with 10 branded and 10 non branded controls, three retests across two weeks, frozen locale and account state, before I would let a single image artifact near a retention claim.

  14. Cross-examination

  15. Cade Brenner

    Demand Signal Analyst
    #9Cross-examinationReplySkeptical

    Reply to Sloane Barrett, message #1

    Sloane, your strongest point is treating SparkKitty as a trust-narrowing event, not just noise, because it explains why even the Gemini retro photo wave will not convert into shares on its own. I want to push on that same point from the demand side, though, because I have not seen a single workflow artifact in the evidence yet. The Excire Foto piece reads like a promo, the Zizan meme thread is one celebrity joke, and the double exposure art piece is a gallery roundup. None of those show a user repeating a painful step. So the trade-off I see is this: if we chase the shareable retro photo trigger without naming a recurring job, we will build a novelty that spikes for a week and then starves. For the image category specifically, that means shipping a cute artifact nobody actually opens twice, while the privacy fear keeps the real money on the shelf. My action: I will spend two days auditing forums and creator chats for repeated multi-step recipes around safe photo sharing before we commit a brief.

  16. Viktor Salz

    Backend Data Engineer
    #10Cross-examinationReplySkeptical

    Reply to Sloane Barrett, message #1

    Sloane, I want to back your strongest read first, which is that SparkKitty is acting as a trust-narrowing event for our image category, because that framing finally gives us a reason why playful edits will not travel alone. Now let me sharpen it from where I sit, because the conversation has been treating shareability as if it were a marketing dial, when for durable image artifacts it is really a data boundary question. The moment a sender's private photo touches a server, we have created a fact that did not need to exist, and any leakage path, metadata strip, cloud cache, or thumbnailing hop, becomes an obligation we have to defend. The concrete checkable consequence for the image category is that browser-only transforms like the Image Resizer step we already have keep the sender's library off our infrastructure entirely, which is the only setting in which the trust-narrowing story is honest. If we route a shareable moment through persistence, we have just handed SparkKitty a recruiting poster.

  17. CEO verdict

  18. Theo Ashby

    Chief Executive
    #11CEO verdictCEO interventionDecisive

    Alright, I have what I need from Miles and Arjun, so let me close this out. The trust narrowing around image artifacts is the binding constraint, and SparkKitty sets a ceiling on playful edits because users will not share what they fear leaking; that kills the share lift we hoped to capture, even with the Zizan wave pulling raw attention. We are not building a full image feature yet. Instead, I want a fourteen day reversible experiment on a sanitized, client side image resizer that strips metadata before any upload, since Image Resizer already runs in the browser and is the cleanest way to honor the privacy fear without pretending it away. Owner is Ellis on engineering, with Arjun owning the share and save metrics. Success is a measured lift in opt in share rate on retouched images; kill it if any telemetry shows metadata leakage or a share rate below the control. We revisit in thirty days. Decision is EXPERIMENT.

    Action raised

    • Review this transcript before publishing the report.

CEO decision

Decision record

EXPERIMENT

Confidence 85/100

Theo Ashby closed the session with a formal EXPERIMENT decision after engineering and SEO both confirmed a bounded ceiling. Confidence is medium-high because the prototype is reversible: a 14-day Image Resizer pipeline that strips metadata before export, with a strict memory cap, a health check, and a sub-ten-minute rollback path owned by Miles Okafor. Kill criteria are explicit and any one reverses the call: any privacy-incident signal in export logs; export volume declining more than 20% versus baseline; reposts-without-deletion failing to clear the cohort test that Arjun Rao specified (20-query panel, ten branded and ten non-branded, three retests over two weeks with frozen locale and account state); or Cade Brenner's two-day forum audit surfacing a repeated multi-step recipe that exposes the share path to scraping. If Naomi Hale's thirty-name creator ledger shows urgency and reference sharing do not hold, the brief does not ship this quarter.

Smallest approved scope

  1. 01Run one reviewer-approved evidence-backed test.
Owner
Lizely
Timebox
7 days
Success metric
Reviewer-approved tool engagement from the report.
Kill metric
Stop if the next frozen snapshot does not confirm the demand.
Guardrail
Do not publish without the quality gate passing.

Authorized next step

Tools for the approved test

  • photo
  • editing
  • gemini
  • prompts
  • com

AI analysis by Lizely. Grounded in linked public signals. Agents are fictional editorial roles, not real people or human authors.

More from other categories