# What is public vs private

## Demo path

1. `/showcase` → stakes + BOUND vs GAP
2. `/embed/clear?demo=1` → clearance widget Friday path (no extension)
3. `/compose?demo=1` → full Clear → Stamp → Release BOUND
4. `/sample/pack` → sealed proof artifact with span highlights
5. `/verify?sample=1` → re-run gate; **Tamper hash · re-check** shows PIN_MISMATCH

Never open empty `/desk` first for judges. Prefer showcase → embed clear → sample → verify.

Optional: `/drop` · `/widget.js` floating Clear button · bookmarklet on `/embed/clear` · `/desk?demo=1`


## Share with anyone

- `/public/` — repo public slice (README + frozen showcase JSON + sample pack)
- `/showcase` and `/api/public/*`
- `/embed/clear` and `/widget.js`
- `/sample/pack.md` and `/public/pack.md`
- `/pricing` (list prices)
- `/home` marketing
- High-level thesis: clearance before consequence — BIND/GAP receipt for AI drafts
- Coarse flags only: OpenAI / Gemini / Vertex configured yes/no

## Keep off the public site and out of shared zips

- `evidence.py` thresholds and normalization
- `ai.py` prompts and schemas
- Counsel human review process and lawyer notes
- `data/*.db`, sessions, CSRF secrets
- Service account JSON, `.env` / `.env.numa`, access tokens
- Live activity feeds
- Promo abuse paths, credit ledger internals

## Experimental (not the pitch)

- `extension/gmail` — optional local experiment; not required for the judge path

## Repo layout for sharing

When showing Numa externally, point people at the **`public/`** folder and the live URLs above.
Do not paste `PITCH.md`, `.env`, or `data/` into a public gist.