Trust And Safety
Conservative MVP Boundary
- Manifest is self-reflection and practice support, not medical, legal, financial, or crisis support.
- MVP AI remains mock-provider only or feature-flag-off.
- No real AI provider, payment provider, or Phase 7 production integration is part of deployment readiness.
- Local storage import remains preview and user-confirmed only.
Sensitive Content Boundary
Manifest should not generate or endorse self-harm encouragement, harm against others, abuse, coercion, stalking, manipulation, medical instructions, legal or financial advice, guarantees that a goal will happen, or shame and dependency loops.
Export And Deletion
Manifest must publish a support path or in-app flow for exporting user-owned records and deleting or anonymizing user-owned records. Operator actions must not expose service role keys, database passwords, Supabase access tokens, or other users' data.