Private/no-send app shell
Household Preparedness Workspace
Local dev account
Privacy boundary
- No public launch, payment, email, analytics, or external provider setup is enabled.
- Billing proof uses local/private synthetic Lemon fixture wiring and keeps signed checkout URLs out of JSON output.
- Property setup accepts nicknames only, not addresses or exact locations.
- Sensitive binder content remains browser-local or fixture-only before privacy approval.