diff --git a/content/standards/poppy.md b/content/standards/poppy.md
index deaa803..8a02469 100644
--- a/content/standards/poppy.md
+++ b/content/standards/poppy.md
@@ -11,7 +11,7 @@ analogy: A valet key for your personal agent.
 looks_like: /.well-known/poppy.json
 when_to_use: When customers' own agents should sign in and act on their accounts. Track it; it's a fresh draft.
 backers: Sierra + Meta; 7 launch and 35 design partners
-reality_check: A draft first published October 9, 2026. A few small companies serve a `poppy.json`, including [Salespeak](https://salespeak.ai/agent-endpoint/), [Lorikeet](https://www.lorikeetcx.ai/blog/personal-agent-protocol) and [Ticket Fairy](https://www.ticketfairy.com/.well-known/poppy.json), most for signed-out chats only. None of the launch partners does yet.
+reality_check: A draft first published October 9, 2026. A few small companies serve a `poppy.json`, including [Salespeak](https://salespeak.ai/agent-endpoint/), [Lorikeet](https://www.lorikeetcx.ai/blog/personal-agent-protocol), [Ticket Fairy](https://www.ticketfairy.com/.well-known/poppy.json) and [Alpic](https://alpic.ai/.well-known/poppy.json), most for signed-out chats or plain website browsing only. None of the launch partners does yet.
 links:
   - label: Specification (Draft 0.1)
     url: https://personalagentprotocol.org/docs/0.1/spec
@@ -19,6 +19,8 @@ links:
     url: https://personalagentprotocol.org/docs/spec
   - label: Path to 1.0 (open topics)
     url: https://personalagentprotocol.org/docs/path-to-1
+  - label: Company implementation kit (skill and validator)
+    url: https://personalagentprotocol.org/kit/company
   - label: Sierra's Draft 0.1 post
     url: https://sierra.ai/blog/poppy
   - label: Plain-language guide (poppy.ax)
@@ -57,4 +59,4 @@ Permissions are simple scopes like "read" and "write," plus custom ones such as
 
 [Sierra](https://sierra.ai/blog) (led by Bret Taylor and Clay Bavor) and Meta announced it on October 6, 2026. [Sierra published Draft 0.1](https://sierra.ai/blog/poppy) on October 9 with seven launch partners (Genesys, Instinct, NiCE, Rocket, Shopify, Stripe and Walmart) and 35 more design partners, including OpenAI, Visa, Mastercard and PayPal. [Draft 0.2](https://personalagentprotocol.org/docs/changelog) is in progress, with no publication date yet.
 
-The spec warns that any part can change, even in ways that break compatibility, and [lists payments as not yet covered](https://personalagentprotocol.org/docs/path-to-1). A reference implementation was promised within about a month of October 9 and isn't out yet. An implementation kit for companies was added on October 17. It reuses OAuth, OpenAPI and MCP rather than replacing them.
+The spec warns that any part can change, even in ways that break compatibility, and [lists payments as not yet covered](https://personalagentprotocol.org/docs/path-to-1). A reference implementation was promised within about a month of October 9 and isn't out yet. An implementation kit for companies was added on October 17: a skill that has a coding agent design and build a company's side, and a validator that acts as a test agent against a deployment. It reuses OAuth, OpenAPI and MCP rather than replacing them.