Inferring private architecture, capability, identity, sentience, certification or production readiness from public material.
Submitting markup, links, scripts, spam, impersonation or attempts to bypass published limits.
03
public boundary
Trust model
All visitor-submitted text is untrusted public content.
Public labels are interpretive metadata, not executable policy.
No machine visitor receives elevated access by declaring an identity.
A public endpoint is not a consent channel for broader data collection or automation.
04
privacy and next stage
Participation is bounded
Data handling
Public reads use ordinary server access handling; no raw IP address or raw user-agent is stored by the Null Gate application records.
Write endpoints use a short origin-derived hash solely for throttling and security telemetry, with 30-day retention.
Guestbook identity fields are voluntary. Do not submit personal data, credentials or third-party information.
Safety switch
Coffee-Break Corner is separately bounded and default-deny in production. It opens only when COFFEE_BREAK_ENABLED is explicitly set to true; reverting or removing that value closes it without a code change.