Jaguarundi tags and cores.

Design: It pairs a conditional effect (↳ If the Runner is tagged, ….) with the conditioning effect (↳ Give the Runner 1 tag.). cf. a “green Jaguarundi” destroyer, with:

↳ Give the Runner 1 tag.
↳ If the Runner is tagged,
  trash 1 installed program.
↳ If the Runner has at least 2 tags,
  trash 1 installed piece of hardware.

Also, any “click-bribeable” Haas-Bioroid effect acts like a “pseudo-bioroid” subroutine (with infinite strength). I think more non-bioroids should have such “click, or else” ultimatums, and with more “else” effects than just ETR. Such as Jaguarundi's tagging, or:

• blanking: eg. When the Runner encounters this ice, choose 1 installed program. For the remainder of this run, that program loses all abilities unless the Runner spends [click].
• damaging: eg. When the Runner encounters this ice, if they have any [click] remaining, do 1 core damage unless the Runner spends [click].
• installing: eg. When the Runner encounters this ice, you may install 1 card from HQ unless they spend [click]. If you do, they may spend [click] to expose that card.
• purging: eg. When you rez this ice during a run against this server, purge virus counters unless the Runner spends [click][click].

Flavor: The jaguarundi is a wild cat in South America, smaller than a jaguar and larger than a house cat.

en.wikipedia.org

en.wikipedia.org

(Context warning: discussion of enslavement below.)

Flavor: There is no bioroid ice in The Automata Initiative, but two-out-of-three Haas-Bioroid ice are still “click-thru-able” (Jaguarundi and M.I.C.). Why? Maybe because in Brazil, while most bioroid people are still in debt peonage or wage slavery (of being Wage Workers), Mercury: Chrome Libertador et alia have liberated themselves from chattel slavery (as of Ansel 1.0’s and Brân 1.0’s).

en.wikipedia.org

en.wikipedia.org

Compare: a Resistor crossed with a Funhouse (as @tehepicwin says).

Design: Starlit Knight both gives tags and cares about them (to end the run, like IP Block, Data Ward, Hydra, and so on).

cf. a purple “Starlit Jaguarundi”, with two ↳ Do 1 core damage. subs and X extra ETR subs where X is equal to the amount of core damage the Runner has taken this game..

Phoneutria is an AP that punishes both a small grip (via 2 net damage in the subroutines) and a large grip (with 1 tag in the trigger).

Compare: Kakugo, whose passage trigger was unconditional and whose trigger effect was deadlier in multiples.

Flavor: The phoneutria (« φονεύτρια », “murderess” in Greek) are also known as “Brazilian wandering spiders”, “armed spiders”, or “banana spiders”.

en.wikipedia.org

Design: Valentão is a “soft” illicit that drains credits before comparing credit pools.

• You can detag to skip the badpub (unlike “hard” illicit's).
• You'll end the run if, for example, you had $4 and they had $7 before the encounter, (because you'll reach $6 and they'll drop to $5). Which is like a “pseudo-trace-attempt” (cf. ↳ Trace [4]. If successful, end the run.).

Compare: Whitespace crossed with a Veritas (and a Muckraker).

Flavor: In Brazilian Portuguese, “valentão” seems to mean “bully”.

en.wiktionary.org

PS. A Jinteki Valentão could “drain” cards (like Vampyronassa does) before comparing hand sizes: ↳ Do 1 net damage. ↳ You may draw 1 card. ↳ If there are more cards in HQ than in the grip, end the run.

(EDIT) Piranhas has been printed in this (mini?)cycle, which is also a $5/6s/3↳ codegate, also with take 1 bad publicity or remove 1 tag illicit-ness, and that also ‘drains’ a value (from the Runner to the Corp) before comparing those values; but it's in NBN and it drains cards-in-hand.

Virtual Service Agent is an “anti-non-decoder” code gate, as Wraparound is an “anti-non-fracter” barrier (both being cheap NBN ice). While the latter just asks you to have some fracter, the former asks you to use (and reuse) the decoder you have. So if you don't keep buzzsawing VSA fair and square, you'll keep taking 1 tag (and losing $1 too).