Last verified: 28 September 2026

Marketing Claims Disclosure

Auto-projected catalogue of registered marketing claims, evidence references, horizons, and allowed surfaces. Every claim is backed by a locked architectural decision or compliance registry entry.

Generated from lib/registry/marketing-claims-registry.ts · 49 registered claims

Registered marketing claims

Claim keyClaim textKindHorizonSurfacesEvidence
never-record-mouseWe never record mouse movements, keystrokes, or ambient screen activitycapabilityv1.0cloud, digital, ventures

locked-decision · decisions/tier-6-end-user-ux.md#LL.sub14

sovereignty-on-premRun entirely on-premises under your own infrastructure controlsovereigntyv1.0cloud, digital

locked-decision · decisions/tier-6-end-user-ux.md#CC.sub1

sovereignty-air-gappedAir-gapped deployment available, no internet dependency requiredsovereigntyv1.0cloud, digital

locked-decision · decisions/tier-6-end-user-ux.md#CC.sub6

gdpr-alignedGDPR-aligned by design across all coordination and data layerscompliancev1.0cloud, digital, ventures

compliance-registry-entry · gdpr

venture-partnershipVenture partnership programme for ecosystem co-investmentpartnerhorizonventures

partner-agreement · partner-agreements/sovern-ventures-template-v1

expression-customer-successExpression-led customer success with coordination-native outcomesroadmaphorizoncloud, ventures

locked-decision · decisions/tier-7-marketing-docs.md#II.sub5

coordination-substrate-primitivesFull coordination substrate primitives, flows, attestations, mandates, assessmentscapabilityv1.0digital

locked-decision · decisions/tier-7-marketing-docs.md#II.sub5

value-exchange-not-saasValue exchange model: substrate-owned orders, invoices, and ledger, not traditional SaaScompetitivev1.0cloud, digital

locked-decision · decisions/tier-6-end-user-ux.md#BB.sub1

uptime-target99.99% uptime target with substrate-operator-attested SLAquantitativehorizoncloud

published-benchmark · docs/operations/uptime-runbook.md#sla-target

featured-in-pressFeatured in press and industry publicationsreputationhorizondigital, ventures

published-benchmark · docs/marketing/PRESS_MENTIONS.md

business-cap-table-governanceCap-table governance with substrate-attested co-signer enforcement on every issuance, transfer, and dilution eventcapabilityv1.0cloud, digital

locked-decision · lib/modules/core/expressions/native/business/assessment.yml#cap-table-governance

business-compensation-policyCompensation framework with bands by level, equity refresh cadence, and board-approval gates for out-of-band exceptionscapabilityv1.0cloud

locked-decision · lib/modules/core/expressions/native/business/assessment.yml#compensation-policy

business-commercial-terms-policyCommercial-terms floor of 30-day net, SLA tier 2, and standard DPA, deviations require operator and counsel co-approvalcapabilityv1.0cloud, digital

locked-decision · lib/modules/core/expressions/native/business/assessment.yml#commercial-terms-policy

personal-data-sovereignty-floorYour substrate identity records are yours to keep, minimum-necessary operator custody, no third-party processing without an active consent attestation in your ledgercapabilityv1.0digital, cloud

locked-decision · lib/modules/core/expressions/native/personal/assessment.yml#data-sovereignty-floor

personal-consent-history-immutableEvery consent decision lives in an append-only ledger, revocation never deletes the past, only writes the next attestation, so your sovereign history is always replayablecapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/personal/assessment.yml#consent-history-immutable

personal-identity-portability-guaranteeExport your full Personal Expression state, identity attestations, relationships, portfolio, and consent history, as a substrate-canonical bundle replayable into any compatible deploymentcapabilityv1.0digital, cloud

locked-decision · lib/modules/core/expressions/native/personal/assessment.yml#identity-portability-guarantee

government-public-record-defaultActs of state are public-record-by-default, every mandate, enactment, programme decision, and licensure is auditable from the primary source, with exceptions narrowly attested rather than silently classifiedcapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/government/assessment.yml#public-record-default

government-due-process-guaranteeEvery adverse decision carries notice, evidentiary access, response, and appeal as substrate invariants, skipping a step requires an attested emergency exception with mandatory post-hoc reviewcapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/government/assessment.yml#due-process-guarantee

government-jurisdiction-bounded-authorityAuthority is scoped to a declared jurisdiction at the substrate boundary, cross-jurisdictional acts flow through attested mutual-recognition agreements, never via implicit authority extensioncapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/government/assessment.yml#jurisdiction-bounded-authority

community-peer-consent-floorCollective decisions are bound to substrate-attested peer-consent, no founder, moderator, or platform may unilaterally bind the community, while operational moderation stays delegated and boundedcapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/community/assessment.yml#peer-consent-floor

community-membership-roster-transparencyEvery member sees every member, no shadow rosters, no hidden observers, with an optional public-display privacy mode that anonymises beyond the community without dissolving internal transparencycapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/community/assessment.yml#membership-roster-transparency

community-no-extraction-of-collective-valueThe community's decisions, attestation graph, and contributions stay with the community, no operator-side aggregation, monetisation, or recommendation surface without a peer-consent attestation issued by the community itselfcapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/community/assessment.yml#no-extraction-of-collective-value

commons-stewardship-quorum-floorConsequential decisions about the commons are bound to substrate-attested stewardship-quorum consent, no founder, moderator, or host may unilaterally bind the commons, while routine stewardship stays delegated and boundedcapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/commons/assessment.yml#stewardship-quorum-floor

commons-non-enclosure-floorThe commons resource is constitutionally protected against enclosure, no single steward, subset of stewards, external party, or substrate operator may capture, monopolise, or extractively deplete the commons, even by quorum votecapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/commons/assessment.yml#non-enclosure-floor

commons-resource-usage-transparencyEvery steward sees every contribution and every access, no shadow contributions, no hidden observers, with an optional privacy mode that anonymises contributors beyond the commons without dissolving internal transparencycapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/commons/assessment.yml#resource-usage-transparency

place-place-rooted-governance-floorConsequential decisions about the place are bound to substrate-attested consent from those rooted in the place, absentee actors, distant regulators outside their substrate-recognised authority, and extractive developers without place-rooted membership cannot bind the place to consequential decisions, while routine operations stay delegated and boundedcapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/place/assessment.yml#place-rooted-governance-floor

place-boundary-clarity-floorEvery place declares a substrate-attested boundary at formation, coarse named-neighbourhood or precise polygon, and every boundary amendment requires a substrate-attested place-rooted-quorum decision, so a place cannot silently or unilaterally expand, contract, or shift; overlapping places are recognised and audited rather than collapsedcapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/place/assessment.yml#boundary-clarity-floor

place-place-state-transparencyEvery place-rooted member sees the membership roster, the boundary, the decisions, and the attestations, no shadow rosters, no hidden boundary shifts, no undisclosed observers, with an optional privacy mode that anonymises members to non-place-rooted observers without dissolving internal transparencycapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/place/assessment.yml#place-state-transparency

ngo-mission-lock-floorThe mission is substrate-attested at formation and constitutionally binds authority and resources, amendments require a substrate-attested ceremony with declared notice to members and active restricted-fund donors plus a board-attested supermajority, and mission-redirection of restricted-fund resources is prohibited regardless of board consentcapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/ngo/assessment.yml#mission-lock-floor

ngo-non-distribution-floorSurplus cannot be distributed to members, directors, founders, or affiliates as personal benefit, only mission-reinvestment, beneficiary-direct transfer, attested grants to mission-aligned NGOs, or substrate-attested winding-up to similar-mission successors are admissible, with the substrate floor stricter than typical jurisdictional charity-law by designcapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/ngo/assessment.yml#non-distribution-floor

ngo-beneficiary-voice-floorThose served by the NGO, or substrate-attested representatives for dispersed or vulnerable populations, have a structured feedback channel that produces auditable governance inputs the board must substantively engage within a declared response window, with annual mission-impact reports surfacing what changed because of beneficiary voicecapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/ngo/assessment.yml#beneficiary-voice-floor

workspace-delegated-authority-floorEvery role grant in a workspace, admin appointment, member admission including AI-agent member admission, viewer admission, delegated-scope expansion, is recorded as a substrate-attested ceremony with no shadow grants and no silent role expansions, and the admin role is reserved for natural-person admins so that administrative acts carry human accountabilitycapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/workspace/assessment.yml#delegated-authority-floor

workspace-access-revocation-due-process-floorEvery access revocation carries a declared appeal window during which the revoked party can contest the decision with substrate-attested response from the admin roster, and revoked parties retain read-access to their own substrate-attested work-product contributions so attribution lineage survives the revocation momentcapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/workspace/assessment.yml#access-revocation-due-process-floor

workspace-work-attribution-integrityEvery work-product carries substrate-attested authorship lineage that names every contributing participant, human members and AI agents alike, with no ghostwriting, no AI-erasure, and no human-erasure, so downstream consumers can verify exactly who did what under what delegationcapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/workspace/assessment.yml#work-attribution-integrity

data-ingest-metadata-gateEvery source admitted into a data space passes through the ingest staging boundary and declares its required metadata, source identity, ingest provenance, and retention class, before it can be committed as a canonical original, so governed data enters the corpus only when its provenance and stewardship classification are declared rather than being silently accumulated as unaccountable hoardcapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/data/assessment.yml#ingest-metadata-gate

data-canonical-immutabilityOnce a source is committed as a canonical original it is never mutated in place, corrections are new versions, removals are governed tombstones, and erasure leaves a permanent auditable marker, so derived meaning like indexes, embeddings, and attested relations always traces back to an immutable source version and consumers can trust that what they query has not silently drifted from what was committedcapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/data/assessment.yml#canonical-immutability

data-relation-provenance-requiredEvery authoritative semantic relation carries substrate-attested provenance and a declared trust level, with imported-from-source highest and AI-suggested relations admissible only as suggestions until a human steward or trusted import attests them, an AI agent may suggest under a validated mandate but never self-attests, so the knowledge graph cannot become confidently wrong through unprovenanced inferencecapabilityv1.0digital

locked-decision · lib/modules/core/expressions/native/data/assessment.yml#relation-provenance-required

regulatory-coordination-no-regulated-action-without-attestationsNo regulated action may execute unless all required attestations for identity, authorisation, and declared prerequisites have been validated by the substrate at the execution gate, so operators cannot act on assumed clearance and regulators retain observable proof that compliance checks preceded every regulated action performed.capabilityv1.0digital

locked-decision · lib/modules/core/expressions/frontier/regulatory-coordination/assessment.yml#no-regulated-action-without-attestations

regulatory-coordination-deadlines-are-structuralTemporal rules including breach-reporting windows and retention periods are enforced structurally by the coordination system rather than tracked manually in calendars, so missed deadlines automatically escalate through the mode ladder and bind authority at the permission layer instead of resting on operator recall or post-hoc audit reconciliation.capabilityv1.0digital

locked-decision · lib/modules/core/expressions/frontier/regulatory-coordination/assessment.yml#deadlines-are-structural

regulatory-coordination-actions-recorded-immutableEvery regulated action produces an immutable record in the audit-evidence ledger at the moment of execution, and those entries cannot be altered after write, giving regulators, assurance providers, and auditors a substrate-attested evidence chain observable continuously rather than assembled retrospectively from operational logs.capabilityv1.0digital

locked-decision · lib/modules/core/expressions/frontier/regulatory-coordination/assessment.yml#actions-recorded-immutable

multi-sovereign-venture-contributions-substrate-recordedAll contributions to a Multi-Sovereign Venture Expression, capital, labour, IP, and coordination, are substrate-recorded with a timestamp, contributor identity, and validator attestation at the moment of recording, so contribution rights cannot be asserted from memory, informal agreement, or undocumented allocation.capabilityv1.0digital

locked-decision · lib/modules/core/expressions/frontier/multi-sovereign-venture/assessment.yml#contributions-must-be-recorded

multi-sovereign-venture-value-rule-boundValue distribution in a Multi-Sovereign Venture Expression follows the venture's declared distribution rules exclusively, with ad-hoc distributions blocked at the substrate layer, so no contributor can unilaterally divert value outside the rules the founding participants agreed and the substrate recorded.capabilityv1.0digital

locked-decision · lib/modules/core/expressions/frontier/multi-sovereign-venture/assessment.yml#value-follows-rules

multi-sovereign-venture-validator-independenceDistribution rights in a Multi-Sovereign Venture Expression are gated by independent validator attestation confirming that contributions meet the validated-outcome threshold, so contribution records alone do not generate distribution rights until a validator the venture authorised has confirmed the outcome.capabilityv1.0digital

locked-decision · lib/modules/core/expressions/frontier/multi-sovereign-venture/assessment.yml#no-value-without-validated-contribution

hybrid-institutional-tripartite-authorityEvery hybrid-institutional action in a Hybrid Institutional Expression traces to a substrate-attested tripartite authority chain spanning all three coordination tiers, public-authority mandate, commercial-operator capacity, and regulator-attested coordination, so no single tier acts unilaterally and the substrate refuses to record acts whose authority chain does not span the three tiers.capabilityv1.0digital

locked-decision · lib/modules/core/expressions/frontier/hybrid-institutional/assessment.yml#tripartite-authority-required

hybrid-institutional-cross-boundary-attestedThe boundary between public-record-default acts and commercially-confidential acts is substrate-attested at every transaction crossing the boundary, with substrate-classified posture metadata recorded BEFORE record access, so cross-boundary records carry their classification as substrate-attested truth rather than operator-side or mandate-holder-side discretion.capabilityv1.0digital

locked-decision · lib/modules/core/expressions/frontier/hybrid-institutional/assessment.yml#cross-boundary-attestation-required

hybrid-institutional-regulator-cross-attestedEvidence flowing across the public/commercial boundary requires regulator cross-attestation linking the public-authority-side record to the commercial-operator-side record, so cross-boundary evidence without independent regulator cross-attestation is substrate-inadmissible for hybrid-institutional governance decisions, mandate review, or escalation ceremonies.capabilityv1.0digital

locked-decision · lib/modules/core/expressions/frontier/hybrid-institutional/assessment.yml#regulator-cross-attested-evidence

vds-directive-consentEvery directive edge in a Venture Directive Expression cohort requires a substrate-attested venture consent record naming the venture-admin signer, the directive policy version in force, and the directive scope, so the operator may direct cohort cadence and milestones without overriding venture sovereignty, and the venture's right to revoke directive authority is substrate-enforced with immediate effect.capabilityv1.0digital

locked-decision · lib/modules/core/expressions/frontier/venture-directive/assessment.yml#directive-consent-required

vds-counterparty-business-osVDS enrollment edges require the enrolled venture party to carry Business Expression as primary or secondary expression, substrate refuses VDS enrollment to counterparties not carrying Business Expression via the counterpartyRequirements primitive at the edge create/activate layer, the first substrate-seeded expression substantively exercising counterpartyRequirements at v1.capabilityv1.0digital

locked-decision · lib/modules/core/expressions/frontier/venture-directive/assessment.yml#counterparty-business-os-required

vds-milestone-attestedEvery milestone approval in a VDS cohort produces a substrate-attested milestone-approved attestation usable as evidence in both the operator's cohort cadence ledger and the venture's own Business Expression audit trail, so cohort progress is substrate-observable across operator and venture coordination contexts without operator-side or venture-side discretion.capabilityv1.0digital

locked-decision · lib/modules/core/expressions/frontier/venture-directive/assessment.yml#milestone-attestation-required