No public mutation.
There are no submissions, uploads, accounts, payments, messages or analytics events.
SITE INTEGRITY / PUBLIC INDEX
A quiet newsroom should have a quiet data footprint.
This public index is static and deliberately unable to accept personal data. Its prepared browser policy is restrictive by default, while deployment-dependent claims remain visibly gated.
CURRENT PUBLIC POSTURE
Small surface. Explicit limits.
These statements describe the reviewed build. Host-level behavior must be verified again before any public deployment claim is made.
No third-party runtime.
Scripts, styles and fonts must come from this build. Social embeds are not loaded.
Framing and powerful features are closed.
The build’s host policy denies camera, microphone, location, payments and cross-origin framing.
No provider request from this site.
The endpoint is blank and the seed-only Worker contains no provider adapter or scheduled handler.
ACTIVATION MATRIX
Nothing becomes live by implication.
A configured credential, endpoint or deployment does not automatically grant editorial, privacy or platform approval.
SurfaceCurrent stateRequired before activation
Newsroom APIUnboundSame-origin deployment and source review
GDELT / BlueskyAdapters absentSeparate reviewed implementation, terms ownership and human publication queue
Reddit / XAdapters absentOfficial access plus deletion, rate, cost and display controls
Admin / storageAbsentAccess design, least privilege, retention and audit trail
SECURITY LIMIT
A checked build is not a checked host.
The repository prepares response headers and a static browser policy, but a production host can add request logs, retention and subprocessors. Those facts are unknown until a host is chosen and verified.
This page is transparency about the current surface, not a penetration-test result, vulnerability-free guarantee or certification.