Arukh HaShulchan Yomi · Startup Mensch · Standard

Arukh HaShulchan, Orach Chaim 318:41-46

StandardStartup MenschJuly 15, 2026

Hook

You think you have insulated your startup because you outsourced your high-risk cold outreach, your aggressive data scraping, or your high-pressure sales pipeline to a third-party agency. You tell yourself, "That is their operational risk, not mine. I am in a secondary vessel now. The heat cannot reach me."

This is the classic founder’s illusion: the belief that delegating an ethically gray or highly volatile process to an external partner or a siloed department magically cools the moral and legal liability. You assume that by creating distance between your core brand and the execution layer, you have built a perfect firebreak.

It is a lie. When a regulator knocks on your door, when a class-action lawsuit is filed, or when a toxic cultural explosion leaks onto social media, the market does not care about your organizational chart. The brand equity, the enterprise value, and the ultimate liability trace directly back to the source.

In the laws of Shabbat, the codifier Rabbi Yechiel Michel Epstein addresses this exact physical and metaphysical phenomenon through the mechanics of heat transfer: the difference between a Kli Rishon (a primary vessel sitting on the fire) and a Kli Sheni (a secondary vessel into which the hot liquid is poured). He reveals that while some environments appear to cool and neutralize heat, certain high-density objects—called a Davar Gush (a solid mass)—retain their thermal energy regardless of where you put them. They continue to cook, burn, and alter everything they touch.

Today is Rosh Chodesh Av. In Jewish history, this day initiates a period of deep introspection concerning structural vulnerability and systemic collapse. The destruction of the Second Temple did not begin with the breach of the outer walls; it began with internal, unaddressed ethical rot—specifically sinat chinam (baseless hatred)—which leaders assumed was insulated from the survival of the state Talmud, Yoma 9b. They believed their political and religious structures were too robust to be compromised by localized ethical failures. They were wrong.

As a founder, you cannot afford this illusion. If you are harboring "hot" assets, toxic cultures, or ethically compromised growth plays, simply moving them to a secondary vessel will not save your company. They will retain their heat, they will cook your brand from the inside out, and when the structural integrity of your startup is tested, it will collapse.


Text Snapshot

"A Kli Sheni (secondary vessel) does not have the power to cook... because its walls are not hot, and they continually cool the heat of the liquid inside them..." — Arukh HaShulchan, Orach Chaim 318:41

"However, a Davar Gush (a solid mass) is different. Since it is solid and dense, it retains its heat within itself even when placed in a secondary vessel, and it has the power to cook that which touches it..." — Arukh HaShulchan, Orach Chaim 318:44

"Pouring from a primary vessel (Iruy Kli Rishon)... does not cook the entire substance, but it does cook the outermost layer (K'dei Klipah)..." — Arukh HaShulchan, Orach Chaim 318:46


Analysis

Insight 1: The Illusion of Delegation and the Law of the Secondary Vessel (Fairness)

In the mechanics of thermodynamics and halakhah, a Kli Rishon—the primary vessel that sits directly on the fire—has the undisputed power to cook (bishul). When you pour a hot liquid from that primary vessel into a Kli Sheni (a secondary vessel), the halakhic assumption changes. Rabbi Yechiel Michel Epstein writes:

"For the walls of a secondary vessel are cold, and they continually cool the liquid..." — Arukh HaShulchan, Orach Chaim 318:41

Because the container itself was never directly exposed to the flame, its cool walls absorb and dissipate the heat of the liquid, rendering it incapable of performing true cooking (bishul) on most substances.

Many founders run their startups on this exact assumption. They treat their core team, their board, and their primary brand as the Kli Rishon. They know that if they directly engage in deceptive marketing, aggressive tax avoidance, or intellectual property theft within this primary vessel, the heat will burn them. To solve this, they construct a Kli Sheni. They hire an outsourced agency to run their lead generation using deceptive, spam-heavy tactics. They set up a subsidiary in a loose regulatory jurisdiction to handle high-risk data processing. They tell their junior engineers to scrape competitor data "under the radar."

They believe that because these actions occur in the "cold walls" of a secondary vessel, the ethical and legal heat is safely dissipated.

This is a profound failure of fairness and operational reality. In halakhah, there is a critical exception to the cooling power of a Kli Sheni: Kalei HaBishul—easily cooked items Arukh HaShulchan, Orach Chaim 318:42. Certain substances are so volatile, so delicate, or so susceptible to heat that even the reduced temperature of a secondary vessel will cook them instantly.

When you delegate highly volatile tasks to third parties, you are placing Kalei HaBishul into a secondary vessel. If you hire a third-party agency and tell them, "Get us leads at all costs, just don't tell us how you do it," you are pouring boiling water over highly volatile material. When that agency violates privacy laws (like GDPR or CCPA) or uses deceptive sales scripts to hit their quotas, you cannot claim innocence. The material was "easily cooked." The deceptive nature of the directive was so inherently volatile that placing it in an outsourced container did nothing to mitigate the damage.

Fairness demands that you recognize the true temperature of your directives. You cannot use the "cold walls" of delegation to shield yourself from the consequences of actions that you initiated, funded, and incentivized. If the process is highly volatile, the heat remains yours.

Insight 2: The "Davar Gush" Rule of Dense Risk (Truth)

The most dangerous operational blind spot for a scaling startup is the Davar Gush—the solid, dense mass. The Arukh HaShulchan explains that while liquids cool down rapidly in a secondary vessel due to convection and contact with the cold walls, a solid mass behaves entirely differently:

"But a solid mass (Davar Gush), because of its density, does not cool down quickly... and its heat remains inside it, and therefore it cooks even in a secondary vessel." — Arukh HaShulchan, Orach Chaim 318:44

A hot potato, a dense piece of meat, or a solid block of metal does not lose its heat when transferred. It acts as its own primary vessel (Kli Rishon). It carries its boiling core with it, and whatever touches it—even in a completely cold, secondary environment—is cooked.

In your business, a Davar Gush is any highly dense, high-impact asset, process, or individual that possesses massive internal momentum and risk, independent of where they sit in your organizational chart.

Consider the "toxic rockstar" employee. This is the brilliant engineer who builds your core infrastructure but actively harasses junior staff, or the top-performing sales executive who hits 200% of their quota but routinely lies to customers and violates compliance protocols.

When founders identify a Davar Gush of this nature, their typical response is to move them to a "secondary vessel." They silo the toxic engineer, telling them to work remotely and report only to the CTO. They move the aggressive sales lead to a specialized enterprise division where they are "insulated" from the rest of the team.

This strategy is a lie because it ignores the law of density. A toxic rockstar is a Davar Gush. They do not cool down just because you changed their Slack channel or their reporting line. Their internal "heat"—their cultural toxicity, their disregard for ethics, their operational arrogance—remains fully intact. The moment they interact with other employees, vendors, or customers, they "cook" them. They corrupt your culture, drive away your best talent, and expose your company to massive liability.

The same applies to technical debt or questionable IP. If you acquire a competitor's codebase that was built using stolen or improperly licensed open-source code, that codebase is a Davar Gush. You cannot simply "sandbox" it, integrate it into a minor feature, or house it in a subsidiary and assume the risk is neutralized. The density of the legal liability remains hot. The moment that code is integrated into your core product, it cooks your entire enterprise valuation.

Truth in business requires recognizing when you are dealing with a solid mass. You cannot neutralize a dense risk through structural relocation. You must either break the mass apart, cool it down through direct, painful intervention, or purge it from your system entirely.

Insight 3: "Iruy" and the Failure of Superficial Compliance (Competition)

In competitive markets, startups are under constant pressure to move fast and break things. When ethical or regulatory hurdles slow down growth, founders often resort to Iruy Kli Rishon—pouring a thin stream of compliance from the top down.

The Arukh HaShulchan analyzes the physical effect of pouring hot liquid directly from a primary vessel onto an object:

"Pouring from a primary vessel (Iruy Kli Rishon)... does not cook the entire substance, but it does cook the outermost layer (K'dei Klipah)." — Arukh HaShulchan, Orach Chaim 318:46

Iruy represents superficial, superficial heat. It is hot enough to scald and alter the very outer skin (K'dei Klipah) of the object, but it lacks the sustained energy to penetrate, cook, or transform the core.

This is the exact definition of "check-the-box" compliance, "greenwashing," or superficial ethical policies. When a startup realizes it faces regulatory scrutiny or competitor pressure regarding data privacy, diversity, or environmental impact, the board often demands an immediate fix. The founder pours a thin stream of policy from the top: they write a code of conduct, they publish an ESG statement on their website, or they make employees sign a compliance waiver.

This is Iruy. It changes the outer skin (K'dei Klipah) of the company. It looks compliant on paper. It satisfies the immediate, superficial demands of investors or PR firms. But the core culture, the underlying incentives, and the day-to-day operational habits of the team remain completely raw, cold, and unchanged.

In a hyper-competitive market, relying on Iruy compliance is a fatal strategic mistake. Your competitors, activist short-sellers, and aggressive regulators are not looking at your outer skin. They will peel back the Klipah.

If your sales reps are still compensated purely on short-term volume without regard to customer retention or ethical selling, your compliance policy is a joke. If your engineering team is still pressured to ship code without basic security audits because "speed is our only moat," your security policy is a liability.

During the Nine Days of Av, we remember that the external facade of the Temple—its magnificent stone walls and ceremonial grandeur—could not save it when the internal, spiritual core had decayed. The external structure was impressive, but the internal foundation was hollow.

True competitive resilience requires deep-tissue compliance (Bishul Gamur). Your ethical standards must penetrate to the core of your operational model. Your incentives, your hiring criteria, your performance reviews, and your product architecture must be fully cooked by your values, not just scalded by a superficial policy poured from the top down.


Policy Move

The Thermal Density & Downstream Liability Audit

To operationalize the insights of the Arukh HaShulchan, your startup must implement a bi-annual Thermal Density & Downstream Liability Audit. This process systematically identifies your "secondary vessels" (delegated operations, third-party vendors, sandboxed projects) and your "dense masses" (toxic high-performers, high-risk codebases, aggressive growth loops) to ensure that latent ethical and operational heat is not actively cooking your brand.

                  [ STARTUP CORE (Kli Rishon) ]
                                |
             +------------------+------------------+
             | Direct Action                       | Delegated Action
             v                                     v
     [ INTERNAL PROCESS ]                  [ SECONDARY VESSEL (Kli Sheni) ]
             |                                     |
     Is it a Davar Gush?                           | Are we pouring Kalei HaBishul?
   (Dense, Toxic, High-Risk)                       | (Volatile, Grey-Hat Directives)
             |                                     |
      +------+------+                       +------+------+
      | Yes         | No                    | Yes         | No
      v             v                       v             v
[ EXCISE / BREAK ] [ SAFE ]           [ RESTRUCTURE ]  [ MONITOR ]

Step 1: Map the Secondary Vessels (The Downstream Liability Ratio)

Every department head must document all external agencies, third-party vendors, automated AI agents, and independent contractors performing work on behalf of their department. For each external partner, the department must calculate the Downstream Liability Ratio (DLR):

$$\text{DLR} = \frac{\text{Vendor Autonomy Score} \times \text{Process Volatility Score}}{\text{Oversight Frequency Score}}$$

  • Vendor Autonomy Score (1-5): How much latitude does the partner have in executing their mandate? (1 = strictly defined scripts; 5 = completely autonomous strategy and execution).
  • Process Volatility Score (1-5): How close does this process run to regulatory, legal, or ethical boundaries? (1 = benign back-office admin; 5 = cold outreach, user data processing, competitor analysis, aggressive tax optimization).
  • Oversight Frequency Score (1-5): How often does your internal team review the raw outputs and methods of this partner? (1 = annual review/never; 5 = real-time, weekly audits of raw transcripts, code, or logs).

Action Rule: Any vendor or process with a DLR score of 10.0 or higher is classified as a "Hot Secondary Vessel" (Kli Sheni containing Kalei HaBishul). You must immediately restructure the engagement to either reduce their autonomy, lower the volatility of the mandate, or increase your oversight frequency until the score falls below 5.0.

Step 2: Identify and De-escalate the "Davar Gush" (Dense Risks)

The HR and Legal departments must co-conduct a confidential audit to identify any "dense masses" within the organization. A Davar Gush is defined as any asset, system, or individual that meets two of the following criteria:

  1. High-Impact/Single-Point-of-Failure: They generate >15% of company revenue, own a core proprietary technology, or hold exclusive relationships with major clients.
  2. High Cultural or Legal Toxicity: They have multiple documented HR complaints, routinely bypass compliance protocols, or utilize highly aggressive, non-compliant operational methods.
  3. Isolation (The Sandbox Illusion): They are structurally insulated from standard company reporting lines, culture, or performance management systems.

Action Rule: You cannot resolve a Davar Gush by moving them to a different department, siloing their work, or telling them to work from home. You must implement a De-escalation Protocol:

  • For Individuals: You must pair the individual with an executive coach and set a strict, 30-day behavioral and compliance PIP (Performance Improvement Plan). If the behavior does not change, they must be terminated immediately, regardless of their revenue generation. No exceptions.
  • For Assets/Codebases: You must halt further integration, run a full forensic audit, and completely refactor or replace the compromised asset within a defined sprint cycle.

Step 3: Replace "Iruy" with Core Integration

Audit your compliance and ethical policies. If your compliance program consists primarily of signed PDFs, annual training videos, or written statements without automated checks, you are relying on Iruy (superficial compliance).

Action Rule: You must replace all paper policies with Hard-Coded Compliance. For example, if you have an ethical policy against scraping copyrighted data, you must implement automated code reviews (e.g., automated scanning of dependencies and API endpoints) that prevent non-compliant code from being merged into production. If you have an anti-spam policy, your CRM must have automated rate-limiters and keyword-blockers that prevent non-compliant outreach from being sent.


Board-Level Question

The Strategic Inquiry

To be asked by the board or lead investors during executive session:

"Which of our high-performing, siloed assets, outsourced partners, or operational processes are we currently treating as an insulated 'secondary vessel,' when in reality they are 'dense masses' (Davar Gush) that are actively cooking our long-term enterprise value?"

                       [ BOARD AUDIT FRAMEWORK ]
                                   |
         +-------------------------+-------------------------+
         |                                                   |
         v                                                   v
 [ SHORT-TERM LOOKS GOOD ]                          [ LONG-TERM RISK ]
  - Revenue is up.                                   - Are we relying on "Iruy"
  - Customer acquisition is fast.                     (superficial compliance)?
  - The "siloed" team is producing.                  - Is there a "Davar Gush"
                                                      retaining toxic heat?
                                                             |
                                                             v
                                                    [ STRUCTURAL COLLAPSE ]
                                                    (Like the walls of Av)

Context and Deconstruction

This question cuts straight through the operational vanity of the executive team. It forces the CEO to look past short-term growth metrics and confront the systemic risks that are buried in downstream processes or hidden behind the brilliance of "star" performers.

When a startup is scaling rapidly, the board is often pacified by green KPIs: MRR growth, LTV/CAC ratios, and engineering velocity. However, these metrics are lagging indicators of ethical and structural health. A company can show incredible growth while actively accumulating massive cultural, technical, and legal debt.

By framing this question around the concept of the Davar Gush, the board challenges the management team on two critical levels:

  1. The Fallacy of the Outsourced Moat: Is the company’s growth being driven by third-party tactics that would destroy the brand if they were made public? If your customer acquisition relies on aggressive, borderline illegal growth hacks executed by an agency, your growth is built on sand. You are pouring boiling water into a paper cup.
  2. The Hidden Cost of "Rockstars": Is the company protecting individuals who are cultural liabilities because they are deemed "too valuable to lose"? The board must remind the CEO that no single employee, no matter how much revenue they generate or how brilliant their code, is worth the destruction of the company's cultural foundation.

On Rosh Chodesh Av, we remember that structural collapse is rarely sudden. It is the inevitable result of unaddressed, internal decay that was ignored because the external walls still looked strong. This board-level question is your structural diagnostic. It forces you to peel back the outer skin (K'dei Klipah) of your startup's performance and verify the integrity of its core.


Takeaway

You cannot outsource your character.

As a founder, every operational play, every line of code, and every cultural norm you set within your primary vessel (Kli Rishon) carries massive energy. When you delegate, scale, or outsource, you must remember the laws of heat transfer.

If you pour a highly volatile, ethically compromised directive into a downstream agency or a junior team, the "cold walls" of delegation will not save you. The material will cook, the risk will explode, and the brand damage will trace directly back to your desk.

Furthermore, you cannot quarantine a toxic asset. A brilliant but abusive employee, a compromised codebase, or a deceptive revenue stream is a Davar Gush—a dense, solid mass of risk. It retains its destructive heat no matter where you hide it in your organizational chart. It will continue to cook and corrupt everything it touches until you have the courage to break it apart or excise it completely.

Finally, do not settle for Iruy—the superficial compliance that only scalds the outer skin of your company while leaving the core raw and unchanged. In hyper-competitive, highly scrutinized markets, superficiality is a liability.

As we enter the Nine Days of Av, a season dedicated to the reconstruction of ruined structures, take a hard, unsparing look at the foundations of your startup. Stop looking at the magnificent facade of your growth metrics. Dig deep into the core. Ensure that your ethics, your compliance, and your culture are fully integrated, deeply cooked, and structurally sound.

Build a business that is not only highly profitable but structurally unbreakable—a true Mensch of a startup.