Private by default
Citizen identity, contact details, precise location, original evidence, internal notes and security signals are treated as protected information. A public civic summary is a separate reviewed projection.
Purpose-limited location
Location is used for a stated civic purpose. Ambient tracking and background location history are outside the current product design; complaint evidence follows stricter rules than nearby informational features.
Safe authority boundaries
Clients cannot choose official assignments, change government status, join arbitrary realtime rooms or expose private delivery contacts. Sensitive and emergency matters use protected guidance instead of ordinary civic submission.
Honest limitations
Pre-release status, unsupported coverage, missing legal documents and unavailable support destinations must be stated directly. Product ambition is not represented as an existing government guarantee.