01consent
Analytics choices
Optional events, session-only attribution and reviewed experiment exposure.
Growth and operations
Measure narrowly. Operate with receipts.
The public website exposes operating rules, not a performance theatre. Optional measurement is off by default, experiments are dormant, and every job or alert remains owner-bound and evidence-bound.
Six operating doors
Choose the control, not a vanity number.
Each door publishes a boundary and a review path. None exposes private telemetry, internal incident detail or self-approving automation.
02voice
Feedback routing
Six issue classes with no public free-text, identity or file collection.
03experiment
Experiment register
Zero active experiments; owner, hypothesis, guardrails, consent and expiry are mandatory.
04jobs
Operating jobs
Claims, sources, prices, links, index health, moderation and result expiry.
05alerts
Alert contract
Severity, owner, evidence, acknowledgement, suppression reason and resolution receipt.
06experience
Experience choice
Standard public ordering or consented non-sensitive contextual ordering.
Dashboard boundary
Registry status, not live business telemetry.
User counts, conversion, revenue, moderation volume and experiment winners remain private, access-controlled operating data.
Contract validity
Whether the public operating authority decodes and which controls it contains.
Programme state
Whether optional analytics and experiments are off, review-required or explicitly active.
Operational measurements
Counts, rates, internal alerts and investigation evidence require authenticated operational access.