Standard · 04
Protection by design
Capture, abuse, and governance drift are anticipated in the architecture — not patched after the damage.
Why this matters
Every institution drifts. The question is whether the drift is visible early enough to challenge.
Reports, appeals, and moderation actions live in a permanent public log. There is no quiet delete.
Founder vetoes, emergency powers, and exceptions are surfaced as banners — not buried in a config file.
How GROUNDWORK implements it
Public moderation log
Every moderation action and its rationale is permanently recorded.
Governance drift badge
Initiatives whose practice has drifted from their declared rules are flagged on the card and on the profile.
Appeals path
Any verdict is appealable to a separate reviewer pool, with both the original and the appeal verdict published.