ONZARIS / TRUST

Visible controls.
Not vague promises.

This page distinguishes controls present in the code, pilot limits and items that still need verification before broader production.

Honest statusUnconnected capabilities remain explicitly marked as such.

OBSERVED CONTROLS

What the product already protects.

Every surface uses the organization context and authorized role.

Sensitive decisions keep an actor, target and timestamp.

The admin space supports TOTP MFA and recovery codes.

Player/parent journeys remain separated and contextualized.

No provider token or external write is enabled implicitly.

Web surfaces are checked across personas and formats.

WHAT STILL NEEDS PROOF

OAuth does not replace a provider contract. A source, authority, reconciliation and manual recovery path must be defined before any write.