Least privilege
Operator roles are separated for read-only review, resource recheck work and QR preparation. High-risk live actions remain denied in the prototype.
Formation gates remain visible instead of being hidden.
This page summarizes what is and is not active for the Franklin pilot.
| Public donations | Closed |
|---|---|
| Sponsor payments | Closed |
| Tax-deductibility claim | Not made |
| Live email outreach | Not authorized; zero sent |
| Website mode | Informational Franklin pilot; financial and referral actions remain closed |
| Live Community Hosts | 0 |
| Live Sponsors | 0 |
| Live donors | 0 |
| Grant submissions | None submitted |
| Second community | Not authorized |
If a service is unavailable
This pilot site is not an emergency service. For existing local assistance, use the source-checked Find help page and verify details directly with the provider.
Operational safeguards for the public pilot
Privacy-minimized resource data
Resource interoperability is designed around public service facts and broad categories, not resident identity or hidden case profiles.
Verified language handling
A preferred language may be recorded locally, but the product does not claim translated service details until a verified translation path exists.
Evidence-backed state changes
Duplicate-safe receipts
Future operational state changes are designed to carry an evidence reference and duplicate-protection key so the same event is not silently counted twice.
Reversals stay visible
Pause, cancellation, failure, revocation and stale states remain explicit rather than being overwritten by a newer status.
Evidence is not authority
A status receipt can document what was observed, but it cannot by itself activate a payment, referral, Host, grant submission or other gated action.
Current state: these lifecycle controls are prepared and tested only; no live external action is enabled.
Resource freshness monitor
24 source-backed routes
The candidate contains 24 Franklin/Williamson access routes supplied through qualified evidence. Main Product controls presentation, not source truth.
0 overdue at build time
As of September 19, 2026, no packaged resource has passed its recheck date. Fourteen still require point-of-use confirmation before relying on dynamic details.
Fail closed when overdue
If a source passes its recheck date without renewed evidence, the product withholds that resource rather than presenting stale information as current.
Redacted lifecycle audit
Prepared lifecycle receipts can be exported into a privacy-safe digest chain for duplicate, replay and state-continuity review. Private references are withheld and the export cannot authorize payments, referrals, Host activation, grant submission or any other live action.
Deployment-ready, live actions still gated
Static public surface
The public pilot is packaged as a static site with no server secrets or payment credentials required to publish the informational pages.
Security and rollback
Production headers, indexing files, health checks, pre-deploy validation and rollback instructions are packaged with the release.
Publishing is not activation
Publishing the informational website does not open donations, Sponsor payments, referrals, outreach, grant submission or any other separately gated action.