Create goal.js

No globals other than g() & secure (no extra args, no abilities to change the process