1# OPERATING RULES — published, not promised
2status: every product labeled (Live / In dev / Consult)
3proof: every claim links to evidence you can open
4privacy: your data stays on your infrastructure
5security: OWASP checks + Sentinel monitoring, always on
6ownership: you hold the repo, the tokens, the keys
- PASSStatus labels match reality this week0.4s
- PASSClaims audited against deliverables0.6s
- PASSDependencies scanned (205-rule library)0.8s
- HOLD1 draft below standard → pulled from release0.5s
- WAITNext weekly audit scheduled—
0 undisclosed issues
what you see is what ships