@orangecheck/legal 0.1.0

package/dist/index.js

@@ -0,0 +1,1980 @@
+'use strict';
+
+var React = require('react');
+var Link = require('next/link');
+var jsxRuntime = require('react/jsx-runtime');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var React__default = /*#__PURE__*/_interopDefault(React);
+var Link__default = /*#__PURE__*/_interopDefault(Link);
+
+// src/constants.ts
+var LEGAL_ENTITY = "OrangeCheck";
+var LEGAL_ENTITY_LONG = "OrangeCheck (OCHK), an unincorporated project";
+var ENTITY_PENDING = true;
+var CONTACT_GENERAL = "hello@ochk.io";
+var CONTACT_SECURITY = "security@ochk.io";
+var CONTACT_PRIVACY = "hello@ochk.io";
+var GOVERNING_LAW_STATE = "Delaware, United States";
+var ARBITRATION_SEAT = "Wilmington, Delaware, United States";
+var GLOBAL_TOKENS = {
+  ENTITY: LEGAL_ENTITY,
+  ENTITY_LONG: LEGAL_ENTITY_LONG,
+  CONTACT: CONTACT_GENERAL,
+  SECURITY_CONTACT: CONTACT_SECURITY,
+  PRIVACY_CONTACT: CONTACT_PRIVACY,
+  GOVERNING_LAW: GOVERNING_LAW_STATE,
+  ARBITRATION_SEAT
+};
+
+// src/registry.ts
+var LEGAL_SITES = {
+  www: {
+    slug: "www",
+    profile: "protocol",
+    host: "ochk.io",
+    product: "OrangeCheck",
+    productShort: "OrangeCheck",
+    contact: CONTACT_GENERAL,
+    securityContact: CONTACT_SECURITY,
+    selfHosted: true
+  },
+  me: {
+    slug: "me",
+    profile: "me",
+    host: "me.ochk.io",
+    product: "me.ochk.io",
+    productShort: "me.ochk.io",
+    contact: CONTACT_GENERAL,
+    securityContact: CONTACT_SECURITY,
+    selfHosted: true
+  },
+  vault: {
+    slug: "vault",
+    profile: "vault",
+    host: "vault.ochk.io",
+    product: "OC Vault",
+    productShort: "Vault",
+    contact: CONTACT_GENERAL,
+    securityContact: CONTACT_SECURITY,
+    selfHosted: true
+  },
+  fleet: {
+    slug: "fleet",
+    profile: "fleet",
+    host: "fleet.ochk.io",
+    product: "OrangeCheck Fleet",
+    productShort: "Fleet",
+    contact: CONTACT_GENERAL,
+    securityContact: CONTACT_SECURITY,
+    selfHosted: true
+  }
+};
+var PROTOCOL_LINKED_SITES = [
+  "attest",
+  "lock",
+  "vote",
+  "stamp",
+  "agent",
+  "pledge",
+  "docs",
+  "analytics"
+];
+function getSiteContext(slug) {
+  const ctx = LEGAL_SITES[slug];
+  if (!ctx) {
+    throw new Error(
+      `@orangecheck/legal: unknown site "${slug}". Known self-hosting sites: ${Object.keys(LEGAL_SITES).join(", ")}.`
+    );
+  }
+  return ctx;
+}
+function legalHref(siteSlug, kind) {
+  const ctx = LEGAL_SITES[siteSlug];
+  if (ctx?.selfHosted) return `/${kind}`;
+  return `https://ochk.io/${kind}`;
+}
+
+// src/content/clauses.ts
+var eligibility = {
+  id: "eligibility",
+  heading: "eligibility",
+  blocks: [
+    {
+      kind: "bullets",
+      items: [
+        "You must be at least 13 (or the age of digital consent in your jurisdiction)",
+        "You must have the legal capacity to enter into a binding contract",
+        "You must not be prohibited from using the Service under applicable law",
+        "You must comply with all applicable laws and regulations"
+      ]
+    }
+  ]
+};
+var acceptableUse = {
+  id: "acceptable-use",
+  heading: "acceptable use",
+  hint: "permitted \xB7 prohibited",
+  blocks: [
+    { kind: "subhead", text: "prohibited \u2014 illegal" },
+    {
+      kind: "bullets",
+      items: [
+        "Any unlawful purpose",
+        "Violating any applicable laws or regulations",
+        "Fraud, money laundering, or financial crimes",
+        "Infringing intellectual property rights"
+      ]
+    },
+    { kind: "subhead", text: "prohibited \u2014 harmful" },
+    {
+      kind: "bullets",
+      items: [
+        "Harass, threaten, or harm others",
+        "Impersonate any person or entity",
+        "Misrepresent your identity or affiliation",
+        "Assert control of a Bitcoin address, identity, or handle you do not control"
+      ]
+    },
+    { kind: "subhead", text: "prohibited \u2014 technical abuse" },
+    {
+      kind: "bullets",
+      items: [
+        "Interfere with or disrupt the Service or its servers",
+        "Attempt unauthorized access to any account, system, or data",
+        "Automated scraping or harvesting without permission",
+        "Introduce viruses, malware, or malicious code",
+        "Circumvent security features or rate limits"
+      ]
+    },
+    {
+      kind: "para",
+      text: "We reserve the right to investigate and act against anyone who violates these prohibitions \u2014 including terminating access and reporting to law enforcement."
+    }
+  ]
+};
+var intellectualProperty = {
+  id: "intellectual-property",
+  heading: "intellectual property",
+  blocks: [
+    { kind: "subhead", text: "[[ENTITY]]'s rights" },
+    {
+      kind: "para",
+      text: "The Service and its content (excluding user-generated content) are protected by copyright, trademark, patent, and other IP laws \u2014 including the OrangeCheck name, logos, branding, site design, software, code, algorithms, and documentation."
+    },
+    { kind: "subhead", text: "your license" },
+    {
+      kind: "para",
+      text: "You receive a limited, non-exclusive, non-transferable, revocable license to access and use the Service subject to these Terms. You may not sell, sublicense, or use the Service to build a competing product."
+    },
+    { kind: "subhead", text: "your content" },
+    {
+      kind: "para",
+      text: "You retain ownership of content you submit (feedback, support requests, integration material). You grant us a worldwide, non-exclusive, royalty-free license to operate and improve the Service using that content. You are responsible for your content."
+    },
+    { kind: "subhead", text: "open source" },
+    {
+      kind: "para",
+      text: "OrangeCheck protocol specifications and the `@orangecheck/*` packages are released under open-source licenses (MIT unless stated otherwise). Those portions are governed by their own license terms; these Terms govern the hosted service."
+    }
+  ]
+};
+var limitationOfLiability = {
+  id: "liability",
+  heading: "limitation of liability",
+  hint: "maximum legal cap",
+  blocks: [
+    {
+      kind: "callout",
+      emphatic: true,
+      text: "TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL [[ENTITY]], ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, LICENSORS, CONTRIBUTORS, OR SUPPLIERS BE LIABLE FOR ANY DAMAGES ARISING OUT OF OR RELATED TO THE SERVICE, THESE TERMS, OR YOUR USE OR INABILITY TO USE THE SERVICE \u2014 WHETHER BASED ON CONTRACT, TORT (INCLUDING NEGLIGENCE), STATUTE, INDEMNITY, OR ANY OTHER LEGAL THEORY \u2014 EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES."
+    },
+    { kind: "subhead", text: "excluded damages" },
+    {
+      kind: "para",
+      text: "This exclusion covers, without limitation: **direct**, indirect, incidental, special, consequential, exemplary, punitive, reliance, and cover damages; and **loss of Bitcoin, sats, cryptocurrency, tokens, assets, funds, private keys, seed phrases, passwords, data, profits, revenue, goodwill, reputation, business opportunity, anticipated savings, or use**."
+    },
+    { kind: "subhead", text: "hard cap" },
+    {
+      kind: "para",
+      text: "If, notwithstanding the above, a court of competent jurisdiction finds [[ENTITY]] liable to you, our **aggregate liability for all claims arising out of or related to the Service or these Terms is capped at the greater of (a) US$100 or (b) the total amount you actually paid [[ENTITY]] in the twelve (12) months immediately preceding the event giving rise to the claim**."
+    },
+    { kind: "subhead", text: "essential purpose \xB7 jurisdictional floor" },
+    {
+      kind: "para",
+      text: "These limitations form an essential basis of the bargain and apply even if a limited remedy fails of its essential purpose. Some jurisdictions do not allow certain exclusions; there, the limitations apply to the maximum extent permitted by law and the remainder of these Terms stays in full force."
+    }
+  ]
+};
+var indemnification = {
+  id: "indemnification",
+  heading: "indemnification",
+  blocks: [
+    {
+      kind: "para",
+      text: "You agree to indemnify, defend, and hold harmless [[ENTITY]] and its affiliates from any claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising from:"
+    },
+    {
+      kind: "bullets",
+      items: [
+        "Your use or misuse of the Service",
+        "Your violation of these Terms",
+        "Your violation of any law or regulation",
+        "Your violation of any third-party rights",
+        "Content you submit or share",
+        "Your negligence or willful misconduct"
+      ]
+    }
+  ]
+};
+var changesToTerms = {
+  id: "changes",
+  heading: "changes",
+  blocks: [
+    { kind: "subhead", text: "to the service" },
+    {
+      kind: "para",
+      text: "We may modify, suspend, or discontinue the Service at any time, with or without notice. We are not liable for any modification, suspension, or discontinuation."
+    },
+    { kind: "subhead", text: "to these terms" },
+    {
+      kind: "bullets",
+      items: [
+        'We will update the "last updated" date',
+        "For material changes, we will provide notice on the website (and by email where we hold one)",
+        "Changes become effective when posted",
+        "Continued use after changes constitutes acceptance"
+      ]
+    }
+  ]
+};
+var disputeResolution = {
+  id: "disputes",
+  heading: "dispute resolution",
+  hint: "informal \u2192 arbitration",
+  blocks: [
+    { kind: "subhead", text: "informal resolution" },
+    {
+      kind: "para",
+      text: "Before filing a claim, contact us at [[CONTACT]] to attempt to resolve the dispute informally."
+    },
+    { kind: "subhead", text: "arbitration \xB7 class-action waiver \xB7 jury waiver" },
+    {
+      kind: "callout",
+      emphatic: true,
+      text: "DISPUTES ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE SHALL BE RESOLVED BY FINAL AND BINDING INDIVIDUAL ARBITRATION, EXCEPT AS SPECIFIED BELOW. YOU AND [[ENTITY]] EXPRESSLY WAIVE THE RIGHT TO A TRIAL BY JURY AND THE RIGHT TO PARTICIPATE IN ANY CLASS, COLLECTIVE, CONSOLIDATED, MASS, OR REPRESENTATIVE ACTION. ARBITRATION IS ON AN INDIVIDUAL BASIS ONLY."
+    },
+    {
+      kind: "bullets",
+      items: [
+        "Administered by the American Arbitration Association under its then-current Commercial or Consumer Arbitration Rules (whichever applies)",
+        "Seat of arbitration: [[ARBITRATION_SEAT]] \u2014 or, at either party\u2019s election, conducted remotely by video",
+        "Single neutral arbitrator; decision final and binding, enforceable in any court of competent jurisdiction",
+        "The arbitrator \u2014 not any court \u2014 decides threshold questions of arbitrability, including the validity and scope of this clause"
+      ]
+    },
+    { kind: "subhead", text: "exceptions to arbitration" },
+    {
+      kind: "bullets",
+      items: [
+        "Small-claims court actions (if eligible and filed individually)",
+        "Injunctive or equitable relief to protect intellectual property or confidential information",
+        "Any claim that cannot lawfully be arbitrated under applicable law"
+      ]
+    },
+    { kind: "subhead", text: "one-year limit to bring claims" },
+    {
+      kind: "para",
+      text: "To the fullest extent permitted by law, any claim arising out of or relating to the Service or these Terms must be commenced **within one (1) year** after it accrues, or it is permanently barred."
+    },
+    { kind: "subhead", text: "opt-out of arbitration" },
+    {
+      kind: "para",
+      text: "You may opt out by sending written notice to [[CONTACT]] within 30 days of first using the Service, including your name, the date you first used the Service, and a clear statement that you wish to opt out. Opting out does not affect the class-action or jury-trial waivers."
+    },
+    { kind: "subhead", text: "governing law" },
+    {
+      kind: "para",
+      text: "These Terms are governed by the laws of the State of [[GOVERNING_LAW]], without regard to conflict-of-law principles, and, where applicable, the U.S. Federal Arbitration Act (9 U.S.C. \xA7\xA7 1\u201316). For users in the EEA, UK, or Switzerland, mandatory consumer-protection laws of your country of residence may apply and nothing here overrides those rights."
+    },
+    { kind: "subhead", text: "entity of record" },
+    {
+      kind: "callout",
+      text: 'OrangeCheck is, at the date of this document, operated as the unincorporated project "[[ENTITY_LONG]]". References to "[[ENTITY]]" mean that project and the operators acting on its behalf; upon formation of a formal legal entity, that entity becomes the party of record and these Terms \u2014 including the arbitration and governing-law provisions \u2014 bind it as successor without further notice.'
+    }
+  ]
+};
+var miscellaneous = {
+  id: "miscellaneous",
+  heading: "miscellaneous",
+  blocks: [
+    {
+      kind: "bullets",
+      items: [
+        {
+          k: "entire agreement",
+          v: "these terms + the privacy policy are the entire agreement and supersede any prior agreement on the same subject"
+        },
+        {
+          k: "severability",
+          v: "if a provision is invalid or unenforceable it is severed and the remainder stays in full force"
+        },
+        {
+          k: "waiver",
+          v: "failure to enforce a provision is not a waiver of the right to enforce it later"
+        },
+        {
+          k: "assignment",
+          v: "you may not assign these terms without our consent; we may assign freely in a merger, acquisition, or sale of assets"
+        },
+        {
+          k: "no agency",
+          v: "nothing here creates a partnership, joint venture, employment, agency, or fiduciary relationship"
+        },
+        {
+          k: "force majeure",
+          v: "we are not liable for delays or failures caused by events beyond our reasonable control \u2014 including network failures, Nostr relay outages, Bitcoin network conditions, government action, or natural disaster"
+        },
+        {
+          k: "notices",
+          v: "to you via email, the Service, or the website; to us at [[CONTACT]]"
+        },
+        {
+          k: "electronic acceptance",
+          v: "your use of the Service is electronic acceptance of these terms under applicable e-signature laws"
+        }
+      ]
+    },
+    { kind: "subhead", text: "sanctions, export controls, and prohibited jurisdictions" },
+    {
+      kind: "para",
+      text: "You represent and warrant that you are not, and are not acting on behalf of, any person or entity that is:"
+    },
+    {
+      kind: "bullets",
+      items: [
+        "Located in, organized under the laws of, or ordinarily resident in any country or territory subject to comprehensive U.S., U.N., E.U., or U.K. sanctions",
+        "Identified on the U.S. Treasury OFAC Specially Designated Nationals list, Consolidated Sanctions List, or any other U.S. government restricted-party list",
+        "Identified on any U.K. HMT, E.U., U.N., or other applicable consolidated sanctions list",
+        "Otherwise subject to a sanctions, export-control, or anti-terrorism restriction that would prohibit your use of the Service"
+      ]
+    },
+    {
+      kind: "para",
+      text: "You agree to comply with all applicable export-control laws, including the U.S. Export Administration Regulations. A breach of this section is a material breach of these Terms."
+    }
+  ]
+};
+var privacyRights = {
+  id: "your-rights",
+  heading: "your rights",
+  hint: "access \xB7 correction \xB7 deletion",
+  blocks: [
+    {
+      kind: "bullets",
+      items: [
+        {
+          k: "access & portability",
+          v: "request a copy of your personal information in a machine-readable format"
+        },
+        {
+          k: "correction",
+          v: "request correction of inaccurate or incomplete information"
+        },
+        {
+          k: "deletion",
+          v: "request deletion of personal information we hold (data published to public networks cannot be deleted by us \u2014 see retention)"
+        },
+        {
+          k: "objection",
+          v: "object to or restrict processing in certain circumstances"
+        },
+        {
+          k: "withdraw consent",
+          v: "withdraw consent where consent is the legal basis for processing"
+        }
+      ]
+    },
+    { kind: "para", text: "To exercise any right, email [[PRIVACY_CONTACT]]. We respond within 30 days." }
+  ]
+};
+var privacyRegional = {
+  id: "regional-rights",
+  heading: "regional rights",
+  hint: "ccpa \xB7 gdpr \xB7 uk \xB7 other",
+  blocks: [
+    { kind: "subhead", text: "california (ccpa / cpra)" },
+    {
+      kind: "bullets",
+      items: [
+        "Right to know the categories of personal information collected",
+        "Right to delete and to correct your personal information",
+        "Right to opt out of sale or sharing \u2014 we do not sell or share personal information",
+        "Right to limit use of sensitive personal information \u2014 we do not collect sensitive PI as defined by the CPRA",
+        "Right to non-discrimination for exercising your rights"
+      ]
+    },
+    { kind: "subhead", text: "europe (gdpr) & united kingdom (uk gdpr)" },
+    {
+      kind: "bullets",
+      items: [
+        {
+          k: "legal basis",
+          v: "consent, contract performance, legitimate interests (security, abuse prevention, service improvement), and legal obligations"
+        },
+        {
+          k: "your rights",
+          v: "access, rectification, erasure, restriction, portability, objection, and withdrawal of consent"
+        },
+        {
+          k: "supervisory authority",
+          v: "right to lodge a complaint with your local EU/EEA data-protection authority, or the UK ICO"
+        },
+        {
+          k: "eu/uk representative",
+          v: "if and when required, we will designate an Article 27 representative and publish the details here"
+        }
+      ]
+    },
+    { kind: "subhead", text: "other jurisdictions" },
+    {
+      kind: "para",
+      text: "If you reside in a jurisdiction with a comprehensive privacy law \u2014 including Brazil (LGPD), Canada (PIPEDA / Law 25), Australia, Japan (APPI), South Korea (PIPA), Switzerland (FADP), or any U.S. state privacy law \u2014 you have the equivalent rights of access, correction, deletion, portability, and objection. Email [[PRIVACY_CONTACT]] and we will honour applicable rights under the law of your residence."
+    }
+  ]
+};
+var privacyChildren = {
+  id: "childrens-privacy",
+  heading: "children's privacy",
+  blocks: [
+    {
+      kind: "para",
+      text: "[[PRODUCT]] is not intended for children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, email [[PRIVACY_CONTACT]] immediately and we will delete it."
+    }
+  ]
+};
+var privacyTransfers = {
+  id: "international-transfers",
+  heading: "international transfers",
+  blocks: [
+    {
+      kind: "para",
+      text: "OrangeCheck is operated from the United States. If you access [[PRODUCT]] from elsewhere, your information may be transferred to, stored, and processed in the US or other countries where our service providers operate. For users in the EEA, UK, or Switzerland, we rely on appropriate safeguards for international transfers."
+    }
+  ]
+};
+var privacyChanges = {
+  id: "policy-changes",
+  heading: "changes to this policy",
+  blocks: [
+    {
+      kind: "bullets",
+      items: [
+        'We will update the "last updated" date above',
+        "For material changes, we will provide prominent notice on the website",
+        "Continued use after changes constitutes acceptance"
+      ]
+    }
+  ]
+};
+
+// src/content/protocol.ts
+var COMMERCIAL_SCOPE_NOTE = "These Terms govern the **non-custodial** OrangeCheck family: [ochk.io](https://ochk.io), the verb sites \u2014 OC Attest, OC Lock, OC Vote, OC Stamp, OC Agent, OC Pledge \u2014 and [docs.ochk.io](https://docs.ochk.io). The commercial products **me.ochk.io**, **vault.ochk.io**, and **fleet.ochk.io** each publish their own Terms; these Terms do not govern your use of those products.";
+var terms = {
+  kind: "terms",
+  eyebrow: "terms",
+  title: "Terms of service",
+  description: "These Terms govern your access to and use of the OrangeCheck website, protocol reference sites, and documentation. By using OrangeCheck, you agree to be bound by these Terms.",
+  metaTitle: "Terms of Service \u2014 OrangeCheck",
+  metaDescription: "The terms and conditions for using OrangeCheck. Non-custodial service provided as-is. You are responsible for your wallet and private keys.",
+  effective: "2025-09-30",
+  updated: "2026-05-15",
+  preamble: [
+    {
+      kind: "callout",
+      emphatic: true,
+      text: "By accessing or using OrangeCheck, you agree to be bound by these Terms. If you do not agree, do not use the Service. These Terms contain a binding-arbitration, class-action, and jury-trial waiver, important limitations on liability, and specific acknowledgements about the public, permanent, and irrevocable nature of anything you publish."
+    },
+    { kind: "callout", text: COMMERCIAL_SCOPE_NOTE }
+  ],
+  sections: [
+    {
+      id: "overview",
+      heading: "overview",
+      hint: "what orangecheck does / does not",
+      blocks: [
+        { kind: "subhead", text: "what orangecheck does" },
+        {
+          kind: "para",
+          text: "OrangeCheck is a family of **non-custodial** protocols and reference tools that let you create cryptographic proof-of-stake artifacts using Bitcoin message signatures (BIP-322), bind self-asserted handles to them, optionally publish them to decentralized Nostr relays, and discover and verify artifacts created by others."
+        },
+        { kind: "subhead", text: "what orangecheck does not" },
+        {
+          kind: "bullets",
+          items: [
+            "Take custody of your Bitcoin, private keys, or wallet credentials",
+            "Broadcast Bitcoin transactions on your behalf",
+            "Provide financial, investment, or legal advice",
+            "Guarantee the accuracy of blockchain data from third-party sources"
+          ]
+        },
+        { kind: "subhead", text: "non-custodial nature" },
+        {
+          kind: "para",
+          text: "**You are solely responsible for** your wallet, keys, device security, and what you sign. We cannot recover lost keys, reverse signatures, or access your funds."
+        }
+      ]
+    },
+    {
+      id: "publication-risks",
+      heading: "publication risks \xB7 your acknowledgement",
+      hint: "public, permanent, irrevocable",
+      blocks: [
+        {
+          kind: "callout",
+          emphatic: true,
+          text: "AN ORANGECHECK ENVELOPE IS A SIGNED, PUBLIC ARTIFACT THAT PERMANENTLY LINKS A BITCOIN ADDRESS TO EVERY HANDLE YOU ASSERT. BY CREATING OR PUBLISHING ONE, YOU EXPRESSLY ACCEPT THE RISKS BELOW. WE ARE NOT RESPONSIBLE FOR THE CONSEQUENCES OF YOUR DECISION TO PUBLISH."
+        },
+        { kind: "subhead", text: "specific risks you accept" },
+        {
+          kind: "bullets",
+          items: [
+            {
+              k: "deanonymization",
+              v: "an envelope binds your address to your handles; chain analysis can then link your other addresses, counterparties, and spending patterns. you cannot un-bind once published."
+            },
+            {
+              k: "wealth advertisement",
+              v: "public sat values combined with real-name handles may make you a target for phishing, theft, or coercion. we recommend pseudonymous handles and modest bonds. your personal safety is your responsibility."
+            },
+            {
+              k: "irrevocability",
+              v: "envelopes published to Nostr relays are replicated across independent operators. OrangeCheck cannot delete, edit, or revoke Nostr events."
+            },
+            {
+              k: "handle spoofing",
+              v: "identity bindings are self-asserted; any user can claim any string. relying parties must verify ownership out-of-band."
+            }
+          ]
+        }
+      ]
+    },
+    eligibility,
+    {
+      id: "account",
+      heading: "account & sign-in",
+      hint: "sign-in optional",
+      blocks: [
+        {
+          kind: "para",
+          text: "Most of the Service works without registration. An optional **Sign in with Bitcoin** flow opens a session keyed to a Bitcoin address you prove control of via BIP-322 \u2014 no password, no email. A session is a server-side row plus an `httpOnly + Secure + SameSite=Lax` cookie, revoked when you sign out or the cookie expires."
+        },
+        {
+          kind: "para",
+          text: "If you use sign-in, you are responsible for the security of the device and wallet you sign with. Anyone with your keys can open a session in your name."
+        }
+      ]
+    },
+    acceptableUse,
+    intellectualProperty,
+    {
+      id: "third-parties",
+      heading: "third parties",
+      hint: "blockchain \xB7 nostr \xB7 wallets \xB7 relying parties",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            {
+              k: "blockchain data",
+              v: "verification relies on third-party APIs (mempool.space, Esplora, or your own node). we do not guarantee accuracy or availability."
+            },
+            {
+              k: "nostr network",
+              v: "decentralized relays operated by third parties. published data is replicated outside our control and may persist indefinitely."
+            },
+            {
+              k: "wallet software",
+              v: "browser, mobile, desktop, and hardware wallets are third-party software we do not audit or endorse. a malicious wallet could sign something other than what is displayed."
+            },
+            {
+              k: "relying parties",
+              v: "platforms, relays, and integrators independently decide whether to trust any OrangeCheck artifact. OrangeCheck is not a party to, and accepts no liability for, those decisions."
+            },
+            {
+              k: "api / sdk consumers",
+              v: "calling a hosted endpoint or using an `@orangecheck/*` package is use of the Service and subject to these Terms; the packages are separately MIT-licensed."
+            }
+          ]
+        }
+      ]
+    },
+    {
+      id: "fees",
+      heading: "fees",
+      hint: "free",
+      blocks: [
+        {
+          kind: "para",
+          text: "The protocol sites and documentation are free to use. You are responsible for Bitcoin network fees on any transactions you initiate and for your own ISP and wallet-provider costs. Paid functionality, if introduced, will be announced with advance notice; the commercial products **me.ochk.io**, **vault.ochk.io**, and **fleet.ochk.io** carry their own pricing and Terms."
+        }
+      ]
+    },
+    {
+      id: "disclaimers",
+      heading: "disclaimers & warranties",
+      hint: "as-is \xB7 no warranty of any kind",
+      blocks: [
+        {
+          kind: "callout",
+          emphatic: true,
+          text: 'THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS AND WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY LAW, ORANGECHECK DISCLAIMS ALL WARRANTIES, EXPRESS, IMPLIED, AND STATUTORY \u2014 INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ACCURACY.'
+        },
+        { kind: "subhead", text: "not financial, legal, or compliance advice" },
+        {
+          kind: "para",
+          text: "Nothing OrangeCheck provides \u2014 artifacts, metrics, scores, identity bindings, or other output \u2014 is financial, investment, legal, tax, KYC, AML, sanctions, or regulatory-compliance advice. Obtain independent professional advice before relying on the Service for any decision."
+        },
+        { kind: "subhead", text: "regulatory status \xB7 not a money services business" },
+        {
+          kind: "para",
+          text: "The protocol sites do not transmit, transfer, exchange, convert, issue, redeem, or custody any virtual currency, fiat currency, security, or other asset. They sign and verify cryptographic messages; they do not move value. Accordingly, with respect to the protocol sites, OrangeCheck does not hold itself out as a Money Services Business or money transmitter under the U.S. Bank Secrecy Act, a Virtual Asset Service Provider under the FATF Recommendations, a Crypto-Asset Service Provider under the EU MiCA Regulation, a broker-dealer, a payment or e-money institution, a bank, or a regulated identity provider."
+        },
+        { kind: "subhead", text: "use at your own risk" },
+        {
+          kind: "para",
+          text: 'YOU ASSUME ALL RISK from your use of the Service. Verify anything load-bearing independently. Features labelled "beta", "experimental", or "preview" carry even fewer guarantees and may change or be removed at any time.'
+        }
+      ]
+    },
+    limitationOfLiability,
+    indemnification,
+    {
+      id: "termination",
+      heading: "termination",
+      blocks: [
+        {
+          kind: "para",
+          text: "**Your right:** stop using the Service at any time. **Our right:** suspend or terminate access with or without cause or notice. On termination, your right to use the Service ceases; artifacts you created may remain publicly accessible and data published to Nostr cannot be deleted by OrangeCheck. The intellectual-property, disclaimer, liability, indemnification, governing-law, and dispute provisions survive."
+        }
+      ]
+    },
+    changesToTerms,
+    disputeResolution,
+    miscellaneous
+  ],
+  summary: "summary: non-custodial service provided as-is. you are responsible for your wallet and private keys. disputes resolved via binding arbitration. commercial products have their own terms."
+};
+var privacy = {
+  kind: "privacy",
+  eyebrow: "privacy",
+  title: "Privacy policy",
+  description: "How OrangeCheck handles data and privacy across the non-custodial protocol family. Non-custodial by design, minimal collection, no account required.",
+  metaTitle: "Privacy Policy \u2014 OrangeCheck",
+  metaDescription: "How OrangeCheck handles data and privacy. Non-custodial by design, minimal data collection, no account required, privacy-preserving analytics only.",
+  effective: "2025-09-30",
+  updated: "2026-05-15",
+  preamble: [
+    {
+      kind: "callout",
+      text: "This policy covers the **non-custodial** OrangeCheck family \u2014 [ochk.io](https://ochk.io), the six verb sites, and [docs.ochk.io](https://docs.ochk.io). The commercial products me.ochk.io, vault.ochk.io, and fleet.ochk.io publish their own privacy policies covering the additional data their products handle."
+    }
+  ],
+  sections: [
+    {
+      id: "principles",
+      heading: "our principles",
+      hint: "non-custodial, minimal, transparent",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            {
+              k: "non-custodial",
+              v: "we never take custody of your Bitcoin or keys; cryptographic operations happen in your wallet or browser"
+            },
+            {
+              k: "minimal collection",
+              v: "only what is necessary to provide the Service; no user profiles, no cross-web tracking"
+            },
+            {
+              k: "optional account",
+              v: "most of the Service needs no sign-in; the optional Sign in with Bitcoin flow is keyed to a public address \u2014 no email, no password"
+            },
+            {
+              k: "transparency",
+              v: "plain-language policy; ask us anything at [[PRIVACY_CONTACT]]"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      id: "what-we-dont-do",
+      heading: "what we don't do",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            "No custody of funds and no access to private keys",
+            "No account required for the core service",
+            "No selling or renting of personal information, ever",
+            "No targeted advertising and no cross-site tracking",
+            "No third-party analytics trackers \u2014 privacy-preserving analytics only"
+          ]
+        }
+      ]
+    },
+    {
+      id: "information-we-collect",
+      heading: "information we collect",
+      hint: "scoped, minimal",
+      blocks: [
+        { kind: "subhead", text: "information you provide" },
+        {
+          kind: "para",
+          text: "**Bitcoin addresses and signatures** are processed client-side to generate a cryptographic proof; this data is public by design. **Identity bindings** you add are included in the signed message and are public. **Contact information** is collected only if you email us for support, solely to respond. **Sign-in sessions** store a minimal account row keyed by your verified Bitcoin address plus session rows with a random id, source IP, a user-agent hash, and timestamps \u2014 no password, no email."
+        },
+        { kind: "subhead", text: "automatically collected" },
+        {
+          kind: "bullets",
+          items: [
+            { k: "ip address", v: "security, rate limiting, service delivery" },
+            { k: "browser/device", v: "compatibility and UX optimization" },
+            { k: "pages visited", v: "aggregate, to improve the Service" }
+          ]
+        },
+        { kind: "subhead", text: "cookies & analytics" },
+        {
+          kind: "para",
+          text: "Essential cookies are required for the Service to function; a preference cookie stores your theme. We use [Plausible Analytics](https://plausible.io/privacy) \u2014 cookie-free, no personal data, aggregate statistics only. No advertising or tracking cookies."
+        }
+      ]
+    },
+    {
+      id: "how-we-use",
+      heading: "how we use information",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            "Generate and verify cryptographic proofs and serve verification pages",
+            "Detect and prevent abuse, spam, and denial-of-service attacks",
+            "Fix bugs, optimize performance, and improve the Service",
+            "Provide technical support"
+          ]
+        }
+      ]
+    },
+    {
+      id: "retention",
+      heading: "data retention",
+      hint: "90d logs \xB7 permanent public artifacts",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            {
+              k: "public artifacts",
+              v: "permanent and publicly shareable; data published to Nostr cannot be deleted by OrangeCheck"
+            },
+            {
+              k: "technical logs",
+              v: "server logs retained 90 days for security and debugging, then auto-deleted"
+            },
+            {
+              k: "session rows",
+              v: "live up to 30 days (cookie max-age) or until revoked; idle accounts with no session activity for 24 months are deleted automatically"
+            },
+            {
+              k: "support emails",
+              v: "retained as long as necessary; deleted on request"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      id: "data-security",
+      heading: "data security",
+      hint: "reasonable safeguards \xB7 no warranty",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            "HTTPS encryption for all data in transit",
+            "Secure hosting with regular security updates",
+            "Rate limiting and abuse monitoring"
+          ]
+        },
+        {
+          kind: "para",
+          text: "No method of transmission or storage is 100% secure. We use reasonable measures but **do not warrant the security of your data and are not liable for unauthorized access, loss, or theft** \u2014 see the [Terms of Service](/terms). If we become aware of a breach of personal data we hold, we will notify affected users and any competent supervisory authority as required by applicable law, including the 72-hour window under Article 33 of the UK & EU GDPR."
+        }
+      ]
+    },
+    privacyRights,
+    privacyTransfers,
+    privacyRegional,
+    privacyChildren,
+    privacyChanges
+  ],
+  summary: "summary: minimal data, privacy-preserving analytics, never custody of funds, user control of information."
+};
+var protocolProfile = { terms, privacy };
+
+// src/content/me.ts
+var COMMERCIAL_NOTE = "**me.ochk.io is a commercial product operated by OrangeCheck.** It is distinct from the non-custodial OrangeCheck protocol sites; the Terms at [ochk.io/terms](https://ochk.io/terms) do not govern me.ochk.io. These Terms do.";
+var terms2 = {
+  kind: "terms",
+  eyebrow: "terms",
+  title: "Terms of service",
+  description: "The terms governing your use of me.ochk.io \u2014 a Bitcoin-backed identity that pays you in sats. Federation-custodied by default, self-custody graduation, no KYC.",
+  metaTitle: "Terms of Service \u2014 me.ochk.io",
+  metaDescription: "Terms of service for me.ochk.io: a Bitcoin-backed identity that pays users in sats. Federation custody, graduation to self-custody, no KYC.",
+  effective: "2026-05-15",
+  updated: "2026-05-15",
+  preamble: [
+    {
+      kind: "callout",
+      emphatic: true,
+      text: "By accessing or using me.ochk.io, you agree to be bound by these Terms. If you do not agree, do not use the Service. These Terms contain a binding-arbitration, class-action, and jury-trial waiver and important limitations on liability."
+    },
+    { kind: "callout", text: COMMERCIAL_NOTE }
+  ],
+  sections: [
+    {
+      id: "overview",
+      heading: "overview",
+      hint: "what me.ochk.io is",
+      blocks: [
+        {
+          kind: "para",
+          text: 'me.ochk.io is an identity you use to sign in across participating sites ("integrators"). When an integrator records a billable event for an action you authorize, a share of the fee flows back to you in sats. Your identity is anchored in Bitcoin, verifiable offline, and portable across the OrangeCheck family.'
+        },
+        {
+          kind: "para",
+          text: "me.ochk.io is **not a bank, exchange, broker, or wallet provider.** It is an identity and reputation service with an attached cashback mechanism. OrangeCheck does not hold your funds \u2014 see section on custody below."
+        }
+      ]
+    },
+    {
+      id: "accounts",
+      heading: "accounts & identity",
+      hint: "two sign-in paths",
+      blocks: [
+        {
+          kind: "para",
+          text: "You may create an identity two ways: **BIP-322** (you sign with your own Bitcoin wallet \u2014 full self-custody) or **email-OTP** (a one-time code; a federation-custodied wallet provisions in your browser). Both produce a stable, opaque `did:oc` identifier. No password is ever stored."
+        },
+        {
+          kind: "para",
+          text: "You are responsible for the security of the wallet, device, email account, or recovery mnemonic associated with your identity. Anyone with your keys or recovery factor can act as you. OrangeCheck cannot recover an account, reverse a sign-in, or restore a lost key or mnemonic."
+        }
+      ]
+    },
+    eligibility,
+    {
+      id: "earning",
+      heading: "earning sats",
+      hint: "cashback on billable events",
+      blocks: [
+        {
+          kind: "stub",
+          text: "The economics of earning sats on me.ochk.io \u2014 how billable events generate cashback, the fee split between you, the integrating site, federation operators, and OrangeCheck, the timing of credits, and the conditions under which earnings may be withheld, delayed, clawed back, or reversed (including for suspected abuse or wash-trading) \u2014 are being finalized for publication before general availability. Until then, earning behavior is governed by the published abuse limits in the section below and the descriptions on /how and /earn. This section will be completed following review by counsel."
+        }
+      ]
+    },
+    {
+      id: "custody",
+      heading: "custody & graduation",
+      hint: "federation-custodied \xB7 self-custody exit",
+      blocks: [
+        {
+          kind: "para",
+          text: "me.ochk.io is **non-custodial with respect to OrangeCheck**: OrangeCheck holds no private keys and no federation key shares, and cannot move your funds. BIP-322 users hold their own wallet. For email-OTP users, a Fedimint **federation** \u2014 run by independent guardian operators, never OrangeCheck \u2014 holds funds under a threshold scheme. You may **graduate** to full self-custody at any time."
+        },
+        {
+          kind: "stub",
+          text: "The complete custody disclosure \u2014 the federation threshold model and its failure modes, what each guardian can and cannot do, the durability of your balance if a federation or OrangeCheck ceases operations, the mechanics and timing of graduation, and the allocation of risk between you, the federation, and OrangeCheck \u2014 is being finalized for publication before general availability. The honest current-state engineering account is published at /security. This section will be completed following review by counsel."
+        }
+      ]
+    },
+    {
+      id: "fees-payouts",
+      heading: "fees, payouts & taxes",
+      blocks: [
+        {
+          kind: "stub",
+          text: "Platform fees, payout mechanics and minimums, supported payout rails, currency-conversion handling, and the allocation of tax-reporting and tax-payment responsibility for sats you receive are being finalized for publication before general availability. You are advised that cashback received may be taxable income in your jurisdiction and that you are responsible for your own tax compliance. This section will be completed following review by counsel."
+        }
+      ]
+    },
+    {
+      id: "no-kyc",
+      heading: "no kyc, no pii",
+      blocks: [
+        {
+          kind: "para",
+          text: "me.ochk.io **does not perform Know-Your-Customer checks** and does not require your legal name, government ID, or physical address. Sybil resistance is achieved through protocol composition \u2014 BIP-322 sat-bond attestation, paid-action history, and integrator-defined gates \u2014 not identity verification. You must not use me.ochk.io to evade a KYC, AML, or sanctions obligation that applies to you elsewhere."
+        }
+      ]
+    },
+    {
+      id: "abuse-limits",
+      heading: "abuse, sybil resistance & rate limits",
+      blocks: [
+        {
+          kind: "para",
+          text: "me.ochk.io publishes its abuse limits openly so legitimate users can see they are well below them. The canonical, current values are on the [/security](/security) page. Activity that exceeds a review threshold may be held for human review; activity assessed as sybil farming, wash-trading, or collusion between an integrator and a user may have earnings withheld or reversed and the identity suspended."
+        },
+        {
+          kind: "bullets",
+          items: [
+            "Do not operate multiple identities to multiply new-account bonuses",
+            "Do not collude with an integrating site to manufacture billable events",
+            "Do not script or automate actions to inflate earnings",
+            "Do not misrepresent a real user action as authorized when it was not"
+          ]
+        }
+      ]
+    },
+    acceptableUse,
+    {
+      id: "integrators",
+      heading: "integrators & relying parties",
+      blocks: [
+        {
+          kind: "para",
+          text: "Sites that integrate me.ochk.io receive a **per-integrator scoped identifier** for you, not your master identity \u2014 they cannot correlate you across sites unless you explicitly grant a scope. Integrators independently decide whether and how to trust your identity, including whether to admit, gate, or reject you. OrangeCheck is not a party to, and accepts no liability for, an integrator\u2019s decisions or an integrator\u2019s own terms, pricing, or conduct."
+        }
+      ]
+    },
+    intellectualProperty,
+    {
+      id: "disclaimers",
+      heading: "disclaimers & warranties",
+      hint: "as-is \xB7 regulatory status",
+      blocks: [
+        {
+          kind: "callout",
+          emphatic: true,
+          text: 'THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS AND WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY LAW, ORANGECHECK DISCLAIMS ALL WARRANTIES, EXPRESS, IMPLIED, AND STATUTORY \u2014 INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ACCURACY.'
+        },
+        {
+          kind: "para",
+          text: "Nothing me.ochk.io provides is financial, investment, legal, or tax advice. me.ochk.io does not guarantee any level of earnings; cashback depends on integrator activity outside OrangeCheck\u2019s control."
+        },
+        { kind: "subhead", text: "regulatory status" },
+        {
+          kind: "stub",
+          text: "me.ochk.io facilitates cashback that is custodied and disbursed by independent Fedimint federations; OrangeCheck does not itself custody, transmit, or take possession of user funds. The full regulatory analysis of this arrangement \u2014 including OrangeCheck\u2019s position under the U.S. Bank Secrecy Act money-transmission rules, the FATF Recommendations, the EU MiCA Regulation, and applicable U.S. state money-transmitter regimes, and the corresponding licensing posture \u2014 is being prepared and will be published before general availability. This section will be completed following review by counsel."
+        }
+      ]
+    },
+    limitationOfLiability,
+    indemnification,
+    {
+      id: "termination",
+      heading: "termination",
+      blocks: [
+        {
+          kind: "para",
+          text: "**Your right:** stop using me.ochk.io at any time; you may delete your identity from `/me/settings`. **Our right:** suspend or terminate access with or without cause, including for abuse or legal risk. Before deletion you should sweep any federation-custodied balance to self-custody (the graduate flow) \u2014 anchored events on Bitcoin and Nostr-published envelopes are immutable and cannot be deleted by OrangeCheck. The disclaimer, liability, indemnification, governing-law, and dispute provisions survive."
+        }
+      ]
+    },
+    changesToTerms,
+    disputeResolution,
+    miscellaneous
+  ],
+  summary: "summary: an identity that pays you in sats. orangecheck holds no keys and no funds. money, custody, fee, and regulatory terms are being finalized \u2014 see the marked sections."
+};
+var privacy2 = {
+  kind: "privacy",
+  eyebrow: "privacy",
+  title: "Privacy policy",
+  description: "How me.ochk.io handles your data: no KYC, no PII required, a per-integrator scoped identity, and a documented, falsifiable account of every record OrangeCheck stores.",
+  metaTitle: "Privacy Policy \u2014 me.ochk.io",
+  metaDescription: "me.ochk.io privacy policy. No KYC, no PII required, per-integrator scoped identity, and a full account of what OrangeCheck stores.",
+  effective: "2026-05-15",
+  updated: "2026-05-15",
+  preamble: [
+    {
+      kind: "callout",
+      text: "me.ochk.io\u2019s product is identity that pays you; its privacy posture is what makes it distinct from Sign in with Google. For a side-by-side comparison you can falsify, see [the privacy comparison](/privacy-compare)."
+    }
+  ],
+  sections: [
+    {
+      id: "at-a-glance",
+      heading: "at a glance",
+      hint: "no kyc \xB7 no pii \xB7 scoped identity",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            {
+              k: "no kyc",
+              v: "me.ochk.io never collects your legal name, government ID, or physical address"
+            },
+            {
+              k: "no pii at signup",
+              v: "you sign up with a Bitcoin signature or an email/phone one-time code \u2014 your choice"
+            },
+            {
+              k: "scoped identity",
+              v: "integrating sites receive a per-site identifier, not your master identity; they cannot correlate you across sites"
+            },
+            {
+              k: "no advertising",
+              v: "no third-party ad identity, no behavioural ad targeting, no data sale \u2014 ever"
+            },
+            {
+              k: "deletable",
+              v: "you can permanently revoke your identity from /me/settings"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      id: "what-oc-stores",
+      heading: "what orangecheck stores",
+      hint: "metadata only \xB7 none enables fund movement",
+      blocks: [
+        {
+          kind: "para",
+          text: "The list below is what an auditor would find in OrangeCheck\u2019s production infrastructure. Every item is metadata; none of it lets OrangeCheck sign on your behalf."
+        },
+        {
+          kind: "bullets",
+          items: [
+            {
+              k: "account row",
+              v: "opaque did_oc, optional display name and Nostr npub, timestamps. The underlying email is encrypted at rest; a BIP-322 address is stored plaintext (it is already public on-chain). No password hash, no private key, no mnemonic."
+            },
+            {
+              k: "session record",
+              v: "the session JWT id, account id, and issue/revoke timestamps. The session token itself lives only as a cookie in your browser."
+            },
+            {
+              k: "event envelopes",
+              v: "per billable event: a content-addressed, signed record of what was authorized, by whom, and the fee breakdown. Used to route cashback."
+            },
+            {
+              k: "custody-state envelopes",
+              v: "a record of each federation \u21C4 self-custody transition (graduation), surfaced on your own identity timeline."
+            },
+            {
+              k: "public anchors",
+              v: "OpenTimestamps proofs and Nostr-published event roots \u2014 public by design, verifiable against Bitcoin without OrangeCheck online"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      id: "scoped-identity",
+      heading: "per-integrator identity & scopes",
+      blocks: [
+        {
+          kind: "para",
+          text: "Each integrating site receives a deterministic **scoped subject** derived from your master identity and that site\u2019s project key. Scoped subjects are stable per-site (the integrator recognizes a returning user) but unlinkable across sites (two integrators cannot collude to correlate you). An integrator only ever receives your master Bitcoin address, email, or attestation tier if you **explicitly grant that scope** for that site \u2014 each scope is opt-in, per-site, and revocable at any time from `/me/identity`."
+        },
+        {
+          kind: "para",
+          text: "Integrators never receive your event history with other sites, your wallet balance, your connected-sites list, or any cross-integrator data, regardless of scopes granted."
+        }
+      ]
+    },
+    {
+      id: "cross-site-graph",
+      heading: "the cross-site events graph",
+      hint: "honest current state",
+      blocks: [
+        {
+          kind: "para",
+          text: "OrangeCheck\u2019s billing engine necessarily knows which user earned which cashback across integrating sites \u2014 that join is how the right wallet is credited. Today that linkage exists in plain storage on me.ochk.io infrastructure; OrangeCheck commits, as a **policy** matter enforced by access controls and audit logging, not to build cross-site behavioural profiles. A per-integrator blinded-identifier design that removes the linkage architecturally is active research and not yet shipped. We disclose this honestly rather than overclaim."
+        }
+      ]
+    },
+    {
+      id: "cookies",
+      heading: "cookies",
+      blocks: [
+        {
+          kind: "para",
+          text: "Two cookies. `oc_session` \u2014 the Ed25519-signed session token issued by ochk.io (HttpOnly, Secure, SameSite=Lax, Domain=.ochk.io). `oc_theme` \u2014 your dark/light preference, not auth-bearing. No tracking cookies, no advertising IDs, no third-party pixels. Page analytics use [Plausible](https://plausible.io/privacy) \u2014 cookie-free, no PII, aggregate only."
+        }
+      ]
+    },
+    {
+      id: "how-we-use",
+      heading: "how we use information",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            "Route cashback to the correct identity and wallet",
+            "Detect and prevent sybil farming, wash-trading, and abuse",
+            "Operate sign-in and verification across the OrangeCheck family",
+            "Fix bugs, improve the Service, and respond to support requests"
+          ]
+        }
+      ]
+    },
+    {
+      id: "retention",
+      heading: "data retention",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            {
+              k: "event & rebind envelopes",
+              v: "retained as the canonical earnings and custody-state record; anchored copies on Bitcoin and Nostr are immutable"
+            },
+            {
+              k: "technical logs",
+              v: "retained 90 days for security and debugging, then auto-deleted"
+            },
+            {
+              k: "session records",
+              v: "retained until the session is revoked or expires"
+            },
+            {
+              k: "account row",
+              v: "deleted on request via the account-deletion flow, subject to the immutability of anchored data"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      id: "data-security",
+      heading: "data security",
+      blocks: [
+        {
+          kind: "para",
+          text: "HTTPS in transit; emails encrypted at rest; access to production data is allowlisted and audit-logged. No method of storage is perfectly secure \u2014 we use reasonable measures but do not warrant security; see the [Terms of Service](/terms). If we become aware of a breach of personal data we hold, we will notify affected users and any competent supervisory authority as required by applicable law."
+        }
+      ]
+    },
+    privacyRights,
+    {
+      id: "deletion",
+      heading: "identity & account deletion",
+      blocks: [
+        {
+          kind: "para",
+          text: "From `/me/settings \u2192 advanced \u2192 delete` you can permanently revoke your OrangeCheck identity. A federation-custodied balance must be swept to your own wallet first (the graduate flow). OrangeCheck deletes the operational records it holds about you; events already anchored to Bitcoin headers or published to Nostr are immutable public records of fee flows and cannot be deleted by anyone."
+        }
+      ]
+    },
+    privacyTransfers,
+    privacyRegional,
+    privacyChildren,
+    privacyChanges
+  ],
+  summary: "summary: no kyc, no pii required, a per-integrator scoped identity, and a documented account of every record orangecheck stores."
+};
+var meProfile = { terms: terms2, privacy: privacy2 };
+
+// src/content/vault.ts
+var COMMERCIAL_NOTE2 = "**OC Vault is a commercial product operated by OrangeCheck**, available at vault.ochk.io. It is distinct from the non-custodial OrangeCheck protocol sites; the Terms at [ochk.io/terms](https://ochk.io/terms) do not govern OC Vault. These Terms do.";
+var terms3 = {
+  kind: "terms",
+  eyebrow: "terms",
+  title: "Terms of service",
+  description: "The terms governing your use of OC Vault \u2014 an end-to-end-encrypted secrets vault. Client-side encryption; OrangeCheck stores ciphertext only and cannot read your data.",
+  metaTitle: "Terms of Service \u2014 OC Vault",
+  metaDescription: "Terms of service for OC Vault (vault.ochk.io): an end-to-end-encrypted secrets vault. Client-side encryption, Lightning payment, no fund custody.",
+  effective: "2026-05-15",
+  updated: "2026-05-15",
+  preamble: [
+    {
+      kind: "callout",
+      emphatic: true,
+      text: "By accessing or using OC Vault, you agree to be bound by these Terms. If you do not agree, do not use the Service. These Terms contain a binding-arbitration, class-action, and jury-trial waiver and important limitations on liability."
+    },
+    { kind: "callout", text: COMMERCIAL_NOTE2 }
+  ],
+  sections: [
+    {
+      id: "overview",
+      heading: "overview",
+      hint: "what oc vault is",
+      blocks: [
+        {
+          kind: "para",
+          text: "OC Vault stores passwords, one-time-password seeds, API keys, notes, and small files. Every item is **encrypted client-side** in your browser under a vault key that never leaves your control. When you sync to the cloud, OrangeCheck stores an opaque encrypted blob \u2014 **OrangeCheck cannot read your vault contents, item names, or item types.**"
+        },
+        {
+          kind: "para",
+          text: "OC Vault is built on the OC Lock protocol. It is **not** a custodial service for funds and does not take possession of any cryptocurrency."
+        }
+      ]
+    },
+    {
+      id: "accounts",
+      heading: "accounts",
+      blocks: [
+        {
+          kind: "para",
+          text: "Your identity is a Bitcoin address you prove control of via BIP-322. No email or password is required. You are responsible for the security of the wallet you sign with and of the vault key that encrypts your data."
+        }
+      ]
+    },
+    {
+      id: "plans-billing",
+      heading: "plans, payment & billing",
+      hint: "lightning \xB7 inbound only",
+      blocks: [
+        {
+          kind: "para",
+          text: "OC Vault offers a free tier and paid tiers purchased with Bitcoin over the Lightning Network. OrangeCheck **receives** payment and never sends funds to users; OC Vault holds no custodial balance for you."
+        },
+        {
+          kind: "stub",
+          text: "The full commercial terms for paid tiers \u2014 current pricing, what each tier includes, billing cycle and renewal behavior, the refund and cancellation policy, proration, and the consequences of non-renewal for stored data \u2014 are being finalized for publication. Current pricing is shown on /pricing. This section will be completed following review by counsel."
+        }
+      ]
+    },
+    {
+      id: "lifetime",
+      heading: "lifetime entitlements",
+      blocks: [
+        {
+          kind: "stub",
+          text: 'OC Vault offers a one-time "lifetime" tier. The precise meaning of "lifetime" \u2014 the entitlement\u2019s duration and scope, what happens to it on a change of ownership or discontinuation of the Service, and OrangeCheck\u2019s commitments for data export and continuity if the Service winds down \u2014 is being finalized for publication. This section will be completed following review by counsel.'
+        }
+      ]
+    },
+    {
+      id: "your-data",
+      heading: "your data & encryption",
+      hint: "you hold the only key",
+      blocks: [
+        {
+          kind: "callout",
+          emphatic: true,
+          text: "ORANGECHECK CANNOT READ, RECOVER, OR RESET YOUR VAULT. IF YOU LOSE YOUR VAULT KEY AND ALL RECOVERY FACTORS, YOUR ENCRYPTED DATA IS PERMANENTLY UNRECOVERABLE \u2014 BY YOU AND BY US. THIS IS THE INTENDED SECURITY PROPERTY, NOT A DEFECT."
+        },
+        {
+          kind: "para",
+          text: "You are solely responsible for safeguarding your vault key and any recovery material, for the lawfulness of what you store, and for maintaining your own independent backups of anything critical."
+        }
+      ]
+    },
+    acceptableUse,
+    intellectualProperty,
+    {
+      id: "third-parties",
+      heading: "third parties",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            {
+              k: "payment processing",
+              v: "Lightning payments are processed via a self-hosted BTCPay Server; we do not guarantee the availability of the Lightning Network"
+            },
+            {
+              k: "storage / hosting",
+              v: "encrypted blobs are stored with third-party infrastructure providers; they receive ciphertext only"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      id: "disclaimers",
+      heading: "disclaimers & warranties",
+      hint: "as-is \xB7 no warranty",
+      blocks: [
+        {
+          kind: "callout",
+          emphatic: true,
+          text: 'THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS AND WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY LAW, ORANGECHECK DISCLAIMS ALL WARRANTIES, EXPRESS, IMPLIED, AND STATUTORY \u2014 INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND ACCURACY \u2014 AND DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED OR THAT STORED DATA WILL BE FREE FROM LOSS.'
+        },
+        {
+          kind: "para",
+          text: "Maintain your own backups of anything critical. The encryption design that prevents OrangeCheck from reading your data also prevents OrangeCheck from recovering it."
+        }
+      ]
+    },
+    limitationOfLiability,
+    indemnification,
+    eligibility,
+    changesToTerms,
+    disputeResolution,
+    miscellaneous
+  ],
+  summary: "summary: end-to-end encrypted; orangecheck stores ciphertext only and cannot recover your vault. pricing, refund, and lifetime-entitlement terms are being finalized \u2014 see the marked sections."
+};
+var privacy3 = {
+  kind: "privacy",
+  eyebrow: "privacy",
+  title: "Privacy policy",
+  description: "How OC Vault handles data. End-to-end encrypted by design \u2014 OrangeCheck stores opaque ciphertext and cannot read your vault, item names, or item types.",
+  metaTitle: "Privacy Policy \u2014 OC Vault",
+  metaDescription: "OC Vault privacy policy. End-to-end encrypted; OrangeCheck stores ciphertext only and cannot read your vault contents.",
+  effective: "2026-05-15",
+  updated: "2026-05-15",
+  sections: [
+    {
+      id: "principles",
+      heading: "our principles",
+      hint: "zero-knowledge by design",
+      blocks: [
+        {
+          kind: "para",
+          text: "OC Vault is designed so that OrangeCheck cannot read your data. Encryption and decryption happen in your browser. What OrangeCheck stores is an opaque, double-encrypted blob with no readable item names, types, or contents."
+        }
+      ]
+    },
+    {
+      id: "what-we-collect",
+      heading: "information we collect",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            {
+              k: "identity address",
+              v: "the Bitcoin address you sign in with \u2014 public on-chain already; no email, no name"
+            },
+            {
+              k: "payment records",
+              v: "for paid tiers: the Lightning invoice id, sats paid, tier, and entitlement expiry. No card number, no billing address"
+            },
+            {
+              k: "encrypted blobs",
+              v: "opaque ciphertext keyed to your identity address \u2014 OrangeCheck cannot decrypt it"
+            },
+            {
+              k: "technical data",
+              v: "IP address and request metadata, for security and rate limiting"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      id: "what-we-cannot-see",
+      heading: "what we cannot see",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            "The contents of any vault item",
+            "The names, titles, or types of your items",
+            "How many items you store or how often you use them",
+            "Your vault key or any recovery material"
+          ]
+        }
+      ]
+    },
+    {
+      id: "cookies",
+      heading: "cookies & analytics",
+      blocks: [
+        {
+          kind: "para",
+          text: "Essential cookies only, plus a theme preference. Page analytics use [Plausible](https://plausible.io/privacy) \u2014 cookie-free, no PII, aggregate only. No advertising or tracking cookies."
+        }
+      ]
+    },
+    {
+      id: "retention",
+      heading: "data retention",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            {
+              k: "encrypted blobs",
+              v: "retained while your account is active; deleted on account deletion"
+            },
+            {
+              k: "payment records",
+              v: "retained as required for accounting and entitlement verification"
+            },
+            {
+              k: "technical logs",
+              v: "retained 90 days, then auto-deleted"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      id: "data-security",
+      heading: "data security",
+      blocks: [
+        {
+          kind: "para",
+          text: "Client-side AES-256-GCM encryption, HTTPS in transit, and a server that only ever holds ciphertext. No method of storage is perfectly secure \u2014 we use reasonable measures but do not warrant security; see the [Terms of Service](/terms). Because of the encryption design, a compromise of OrangeCheck infrastructure exposes ciphertext, not your secrets."
+        }
+      ]
+    },
+    privacyRights,
+    privacyTransfers,
+    privacyRegional,
+    privacyChildren,
+    privacyChanges
+  ],
+  summary: "summary: end-to-end encrypted; orangecheck stores ciphertext only and cannot read your vault contents."
+};
+var vaultProfile = { terms: terms3, privacy: privacy3 };
+
+// src/content/fleet.ts
+var COMMERCIAL_NOTE3 = "**OrangeCheck Fleet is a commercial product operated by OrangeCheck**, available at fleet.ochk.io. It is distinct from the non-custodial OrangeCheck protocol sites. Where an Enterprise customer has executed a separate Master Services Agreement, that agreement controls; otherwise these Terms govern.";
+var terms4 = {
+  kind: "terms",
+  eyebrow: "terms",
+  title: "Terms of service",
+  description: "The terms governing use of OrangeCheck Fleet \u2014 enterprise managed infrastructure for OC Agent and OC Pledge. No custody of customer keys or funds.",
+  metaTitle: "Terms of Service \u2014 OrangeCheck Fleet",
+  metaDescription: "Terms of service for OrangeCheck Fleet (fleet.ochk.io): enterprise managed infrastructure for OC Agent and OC Pledge. No custody of keys or funds.",
+  effective: "2026-05-15",
+  updated: "2026-05-15",
+  preamble: [
+    {
+      kind: "callout",
+      emphatic: true,
+      text: "By accessing or using OrangeCheck Fleet, you agree to be bound by these Terms on behalf of yourself and any organization you represent. If you do not agree, do not use the Service. These Terms contain a binding-arbitration, class-action, and jury-trial waiver and important limitations on liability."
+    },
+    { kind: "callout", text: COMMERCIAL_NOTE3 }
+  ],
+  sections: [
+    {
+      id: "overview",
+      heading: "overview",
+      hint: "what fleet is",
+      blocks: [
+        {
+          kind: "para",
+          text: "OrangeCheck Fleet is managed infrastructure for organizations deploying AI agents under the OC Agent and OC Pledge protocols. Fleet issues, scopes, and revokes agent delegations, records action receipts, and produces auditable evidence bundles."
+        },
+        {
+          kind: "para",
+          text: "Fleet holds **no customer private keys, no customer funds, and no custodial wallet of any kind.** Signing happens in the customer\u2019s wallet; bonded reputation stake is an attestation of unspent funds, never escrow. Fleet operates no token or points balance."
+        }
+      ]
+    },
+    {
+      id: "accounts",
+      heading: "accounts & operators",
+      blocks: [
+        {
+          kind: "para",
+          text: "A customer account is operated by one or more authorized individuals. You are responsible for the acts and omissions of everyone you authorize, for keeping credentials secure, and for ensuring the individuals you authorize have authority to bind your organization."
+        }
+      ]
+    },
+    {
+      id: "plans-billing",
+      heading: "plans, billing & payment",
+      hint: "stripe + lightning",
+      blocks: [
+        {
+          kind: "para",
+          text: "Fleet offers a free Community tier and paid Pro and Enterprise tiers. Paid tiers are billed in either Bitcoin (Lightning) or US dollars (card / ACH via Stripe, our payment processor)."
+        },
+        {
+          kind: "stub",
+          text: "The full commercial terms \u2014 current pricing, what each tier includes, the billing cycle, overage rates and metering, taxes, renewal and cancellation behavior, and the refund policy \u2014 are being finalized for publication. Current pricing is shown on /pricing. Card and ACH payments are processed by Stripe under Stripe\u2019s own terms. This section will be completed following review by counsel."
+        }
+      ]
+    },
+    {
+      id: "service-levels",
+      heading: "service levels",
+      hint: "uptime \xB7 support response",
+      blocks: [
+        {
+          kind: "stub",
+          text: "Fleet\u2019s service-level commitments \u2014 target uptime, the support-response times by tier, the measurement methodology, exclusions, and any service credits \u2014 are being finalized and will be published as a referenced Service Level Agreement. Until then, support-response targets are described on /pricing. This section will be completed following review by counsel."
+        }
+      ]
+    },
+    {
+      id: "customer-data",
+      heading: "customer data",
+      blocks: [
+        {
+          kind: "para",
+          text: "Fleet holds operator account metadata (email, billing address, plan tier), the public Bitcoin addresses you bind agents to, OC Agent action envelopes, OpenTimestamps proofs, and operational logs (90-day retention). Fleet does **not** hold raw action inputs beyond hashes unless you opt in. Processing of personal data is described in the [Privacy Policy](/privacy)."
+        },
+        {
+          kind: "stub",
+          text: "Enterprise customers that process personal data through Fleet may require a Data Processing Agreement. A standard DPA, including the sub-processor list and the international-transfer mechanism, is being finalized and will be made available to Enterprise customers. This section will be completed following review by counsel."
+        }
+      ]
+    },
+    acceptableUse,
+    intellectualProperty,
+    {
+      id: "enterprise-msa",
+      heading: "enterprise agreements",
+      blocks: [
+        {
+          kind: "stub",
+          text: "Enterprise-tier customers may execute a Master Services Agreement that supplements or supersedes these Terms \u2014 covering negotiated SLAs, the DPA, security commitments, self-hosting, indemnities, and liability terms specific to the engagement. The standard MSA template is being finalized. Where an executed MSA exists, it controls over any conflicting provision of these Terms. This section will be completed following review by counsel."
+        }
+      ]
+    },
+    {
+      id: "confidentiality",
+      heading: "confidentiality",
+      blocks: [
+        {
+          kind: "para",
+          text: "Each party may receive non-public information of the other. The receiving party will use it only to perform under these Terms, protect it with at least reasonable care, and not disclose it except to personnel and contractors bound by comparable obligations. This does not apply to information that is public, independently developed, or rightfully received from a third party."
+        }
+      ]
+    },
+    {
+      id: "disclaimers",
+      heading: "disclaimers & warranties",
+      hint: "as-is \xB7 compliance posture",
+      blocks: [
+        {
+          kind: "callout",
+          emphatic: true,
+          text: 'EXCEPT AS EXPRESSLY STATED IN AN EXECUTED MASTER SERVICES AGREEMENT, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS AND WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY LAW, ORANGECHECK DISCLAIMS ALL WARRANTIES, EXPRESS, IMPLIED, AND STATUTORY \u2014 INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ACCURACY.'
+        },
+        {
+          kind: "para",
+          text: 'Any compliance certification described as "in progress" (including SOC 2) is a statement of intent, not a warranty, until completed and the report issued. Fleet does not provide legal, financial, or regulatory-compliance advice.'
+        }
+      ]
+    },
+    limitationOfLiability,
+    indemnification,
+    eligibility,
+    {
+      id: "termination",
+      heading: "termination",
+      blocks: [
+        {
+          kind: "para",
+          text: "**Your right:** stop using Fleet and cancel a paid plan as described in the billing terms. **Our right:** suspend or terminate access for non-payment, breach, or legal or security risk. On termination you may export your action envelopes and audit bundles, which verify offline independently of Fleet. The confidentiality, disclaimer, liability, indemnification, governing-law, and dispute provisions survive."
+        }
+      ]
+    },
+    changesToTerms,
+    disputeResolution,
+    miscellaneous
+  ],
+  summary: "summary: managed agent infrastructure with no custody of customer keys or funds. billing, sla, dpa, and the enterprise msa are being finalized \u2014 see the marked sections."
+};
+var privacy4 = {
+  kind: "privacy",
+  eyebrow: "privacy",
+  title: "Privacy policy",
+  description: "How OrangeCheck Fleet handles personal data \u2014 operator account information and the metadata required to run managed agent infrastructure. No customer keys, no customer funds.",
+  metaTitle: "Privacy Policy \u2014 OrangeCheck Fleet",
+  metaDescription: "OrangeCheck Fleet privacy policy. Operator account data and orchestration metadata only; no customer keys, no customer funds, no raw action inputs.",
+  effective: "2026-05-15",
+  updated: "2026-05-15",
+  preamble: [
+    {
+      kind: "callout",
+      text: "This policy covers personal data OrangeCheck processes as a **controller** for the Fleet account relationship \u2014 operator and billing information. Where Fleet processes personal data **on a customer\u2019s behalf** as a processor, the customer\u2019s Data Processing Agreement governs that processing."
+    }
+  ],
+  sections: [
+    {
+      id: "what-we-collect",
+      heading: "information we collect",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            {
+              k: "operator account data",
+              v: "the email address and name of authorized operators"
+            },
+            {
+              k: "billing information",
+              v: "billing address and plan tier; card and ACH details are collected and held by Stripe, our payment processor, not by OrangeCheck"
+            },
+            {
+              k: "orchestration metadata",
+              v: "public Bitcoin addresses you bind agents to, OC Agent action envelopes, and OpenTimestamps proofs"
+            },
+            {
+              k: "operational logs",
+              v: "request and SLA-accounting logs sufficient for abuse response, retained 90 days"
+            }
+          ]
+        },
+        {
+          kind: "para",
+          text: "Fleet does not collect customer private keys, customer funds, or raw action inputs beyond hashes (unless a customer opts in)."
+        }
+      ]
+    },
+    {
+      id: "how-we-use",
+      heading: "how we use information",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            "Provision and operate managed agent infrastructure",
+            "Bill paid plans and account for service levels",
+            "Detect and respond to abuse and security incidents",
+            "Provide support and communicate service notices"
+          ]
+        }
+      ]
+    },
+    {
+      id: "sub-processors",
+      heading: "sub-processors",
+      blocks: [
+        {
+          kind: "para",
+          text: "Fleet relies on a small set of sub-processors \u2014 including a payment processor (Stripe) and hosting and infrastructure providers."
+        },
+        {
+          kind: "stub",
+          text: "The complete, current sub-processor list \u2014 each provider, its role, and its processing location \u2014 together with the mechanism for advance notice of changes is being finalized and will be published and referenced from the Data Processing Agreement. This section will be completed following review by counsel."
+        }
+      ]
+    },
+    {
+      id: "cookies",
+      heading: "cookies & analytics",
+      blocks: [
+        {
+          kind: "para",
+          text: "Essential cookies for authentication and a theme preference. Page analytics use [Plausible](https://plausible.io/privacy) \u2014 cookie-free, no PII, aggregate only. No advertising or tracking cookies."
+        }
+      ]
+    },
+    {
+      id: "retention",
+      heading: "data retention",
+      blocks: [
+        {
+          kind: "bullets",
+          items: [
+            {
+              k: "operational logs",
+              v: "retained 90 days, then auto-deleted"
+            },
+            {
+              k: "account & billing records",
+              v: "retained for the life of the account and as required for accounting, tax, and audit obligations"
+            },
+            {
+              k: "action envelopes",
+              v: "retained for the life of the account; exportable by the customer at any time"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      id: "data-security",
+      heading: "data security",
+      blocks: [
+        {
+          kind: "para",
+          text: "HTTPS in transit, access controls on production data, and a bounded blast radius by design \u2014 Fleet structurally cannot hold customer keys or funds. A SOC 2 examination is in progress; until the report is issued it is a statement of intent, not a warranty. We use reasonable measures but do not warrant security; see the [Terms of Service](/terms). We notify affected customers and any competent authority of a personal-data breach as required by applicable law."
+        }
+      ]
+    },
+    privacyRights,
+    privacyTransfers,
+    privacyRegional,
+    privacyChildren,
+    privacyChanges
+  ],
+  summary: "summary: operator and billing data plus orchestration metadata; no customer keys, no customer funds. card payments are held by stripe. dpa and sub-processor list are being finalized."
+};
+var fleetProfile = { terms: terms4, privacy: privacy4 };
+
+// src/content/index.ts
+var PROFILES = {
+  protocol: protocolProfile,
+  me: meProfile,
+  vault: vaultProfile,
+  fleet: fleetProfile
+};
+
+// src/build.ts
+var TOKEN_RE = /\[\[([A-Z_]+)\]\]/g;
+function fill(text, tokens) {
+  return text.replace(TOKEN_RE, (match, key) => tokens[key] ?? match);
+}
+function fillBullet(item, tokens) {
+  if (typeof item === "string") return fill(item, tokens);
+  return { k: fill(item.k, tokens), v: fill(item.v, tokens) };
+}
+function fillBlock(block, tokens) {
+  switch (block.kind) {
+    case "para":
+    case "subhead":
+    case "stub":
+      return { ...block, text: fill(block.text, tokens) };
+    case "callout":
+      return { ...block, text: fill(block.text, tokens) };
+    case "bullets":
+      return { ...block, items: block.items.map((i) => fillBullet(i, tokens)) };
+  }
+}
+function fillSection(section, tokens, index) {
+  return {
+    ...section,
+    num: String(index + 1).padStart(2, "0"),
+    heading: fill(section.heading, tokens),
+    hint: section.hint ? fill(section.hint, tokens) : void 0,
+    blocks: section.blocks.map((b) => fillBlock(b, tokens))
+  };
+}
+function fillSpec(spec, tokens) {
+  return {
+    ...spec,
+    eyebrow: fill(spec.eyebrow, tokens),
+    title: fill(spec.title, tokens),
+    description: fill(spec.description, tokens),
+    metaTitle: fill(spec.metaTitle, tokens),
+    metaDescription: fill(spec.metaDescription, tokens),
+    preamble: spec.preamble?.map((b) => fillBlock(b, tokens)),
+    sections: spec.sections.map((s, i) => fillSection(s, tokens, i)),
+    summary: spec.summary ? fill(spec.summary, tokens) : void 0
+  };
+}
+function buildDoc(siteSlug, kind) {
+  const ctx = getSiteContext(siteSlug);
+  const spec = PROFILES[ctx.profile][kind];
+  const tokens = {
+    ...GLOBAL_TOKENS,
+    PRODUCT: ctx.product,
+    PRODUCT_SHORT: ctx.productShort,
+    HOST: ctx.host,
+    CONTACT: ctx.contact,
+    SECURITY_CONTACT: ctx.securityContact
+  };
+  return {
+    ...fillSpec(spec, tokens),
+    site: ctx.slug,
+    profile: ctx.profile
+  };
+}
+var INLINE_RE = /(\*\*[^*]+\*\*|`[^`]+`|\[[^\]]+\]\([^)]+\))/g;
+var LINK_RE = /^\[([^\]]+)\]\(([^)]+)\)$/;
+function renderInline(text) {
+  const parts = text.split(INLINE_RE);
+  return parts.map((part, i) => {
+    if (!part) return null;
+    if (part.startsWith("**") && part.endsWith("**")) {
+      return /* @__PURE__ */ jsxRuntime.jsx("strong", { className: "text-foreground font-semibold", children: part.slice(2, -2) }, i);
+    }
+    if (part.startsWith("`") && part.endsWith("`")) {
+      return /* @__PURE__ */ jsxRuntime.jsx("code", { className: "font-mono text-[0.95em]", children: part.slice(1, -1) }, i);
+    }
+    const link = LINK_RE.exec(part);
+    if (link) {
+      const label = link[1] ?? "";
+      const href = link[2] ?? "";
+      if (/^https?:\/\//.test(href)) {
+        return /* @__PURE__ */ jsxRuntime.jsx(
+          "a",
+          {
+            href,
+            target: "_blank",
+            rel: "noopener noreferrer",
+            className: "text-primary underline",
+            children: label
+          },
+          i
+        );
+      }
+      if (href.startsWith("mailto:")) {
+        return /* @__PURE__ */ jsxRuntime.jsx("a", { href, className: "text-primary underline", children: label }, i);
+      }
+      return /* @__PURE__ */ jsxRuntime.jsx(Link__default.default, { href, className: "text-primary underline", children: label }, i);
+    }
+    return /* @__PURE__ */ jsxRuntime.jsx(React__default.default.Fragment, { children: part }, i);
+  });
+}
+function Para({ text }) {
+  return /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-muted-foreground", children: renderInline(text) });
+}
+function SubHead({ text }) {
+  return /* @__PURE__ */ jsxRuntime.jsx("h3", { className: "font-display text-primary mt-6 mb-2 text-xs font-bold tracking-widest uppercase", children: renderInline(text) });
+}
+function Bullets({ items }) {
+  return /* @__PURE__ */ jsxRuntime.jsx("ul", { className: "divide-y border font-mono text-xs", children: items.map((item, i) => {
+    if (typeof item === "string") {
+      return /* @__PURE__ */ jsxRuntime.jsxs("li", { className: "flex items-start gap-3 px-4 py-2.5", children: [
+        /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-primary mt-0.5 flex-shrink-0", children: ">>" }),
+        /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-muted-foreground", children: renderInline(item) })
+      ] }, i);
+    }
+    return /* @__PURE__ */ jsxRuntime.jsxs("li", { className: "flex flex-wrap items-start gap-x-4 gap-y-1 px-4 py-2.5", children: [
+      /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-primary w-40 flex-shrink-0 font-bold tracking-widest uppercase", children: item.k }),
+      /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-muted-foreground flex-1", children: renderInline(item.v) })
+    ] }, i);
+  }) });
+}
+function Callout({ text, emphatic }) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "border-primary/30 bg-primary/[0.03] border px-4 py-3 font-mono text-xs leading-relaxed", children: [
+    /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-primary mr-2", children: emphatic ? "!! " : "\xA7 " }),
+    /* @__PURE__ */ jsxRuntime.jsx("span", { className: emphatic ? "text-foreground font-medium" : "text-foreground", children: renderInline(text) })
+  ] });
+}
+function Stub({ text }) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "border-warning/40 bg-warning/[0.05] border px-4 py-3.5 font-mono text-xs leading-relaxed", children: [
+    /* @__PURE__ */ jsxRuntime.jsx("div", { className: "text-warning mb-1.5 font-bold tracking-widest uppercase", children: "\xA7 pending \xB7 counsel review" }),
+    /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-muted-foreground", children: renderInline(text) })
+  ] });
+}
+function BlockView({ block }) {
+  switch (block.kind) {
+    case "para":
+      return /* @__PURE__ */ jsxRuntime.jsx(Para, { text: block.text });
+    case "subhead":
+      return /* @__PURE__ */ jsxRuntime.jsx(SubHead, { text: block.text });
+    case "bullets":
+      return /* @__PURE__ */ jsxRuntime.jsx(Bullets, { items: block.items });
+    case "callout":
+      return /* @__PURE__ */ jsxRuntime.jsx(Callout, { text: block.text, emphatic: block.emphatic });
+    case "stub":
+      return /* @__PURE__ */ jsxRuntime.jsx(Stub, { text: block.text });
+  }
+}
+function SectionView({ section }) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("section", { className: "border-t py-10", children: [
+    /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "mb-6 flex flex-wrap items-baseline gap-x-3 gap-y-1", children: [
+      /* @__PURE__ */ jsxRuntime.jsxs("span", { className: "font-display text-primary text-sm font-bold tabular-nums", children: [
+        "[",
+        section.num,
+        "]"
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsx("span", { className: "font-display text-lg font-bold tracking-wider uppercase", children: section.heading }),
+      section.hint && /* @__PURE__ */ jsxRuntime.jsxs("span", { className: "text-muted-foreground font-mono text-[11px]", children: [
+        "// ",
+        section.hint
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsx("div", { className: "max-w-3xl space-y-4 font-mono text-sm leading-relaxed", children: section.blocks.map((b, i) => /* @__PURE__ */ jsxRuntime.jsx(BlockView, { block: b }, i)) })
+  ] });
+}
+function LegalDocument({ doc }) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("article", { children: [
+    /* @__PURE__ */ jsxRuntime.jsxs("header", { className: "pt-2 pb-4", children: [
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "font-display text-primary mb-3 text-xs font-bold tracking-widest uppercase", children: [
+        "\xA7 ",
+        doc.eyebrow
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsx("h1", { className: "font-display text-3xl font-bold tracking-tight sm:text-4xl", children: doc.title }),
+      /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-muted-foreground mt-4 max-w-3xl text-sm leading-relaxed", children: renderInline(doc.description) })
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-wrap gap-x-6 gap-y-1 border-b pb-4 font-mono text-[11px]", children: [
+      /* @__PURE__ */ jsxRuntime.jsxs("span", { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs("span", { className: "text-muted-foreground tracking-widest uppercase", children: [
+          "effective:",
+          " "
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-foreground tabular-nums", children: doc.effective })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("span", { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs("span", { className: "text-muted-foreground tracking-widest uppercase", children: [
+          "last updated:",
+          " "
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-foreground tabular-nums", children: doc.updated })
+      ] })
+    ] }),
+    doc.preamble && doc.preamble.length > 0 && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "mt-6 space-y-3", children: doc.preamble.map((b, i) => /* @__PURE__ */ jsxRuntime.jsx(BlockView, { block: b }, i)) }),
+    /* @__PURE__ */ jsxRuntime.jsx("div", { className: "mt-2", children: doc.sections.map((s) => /* @__PURE__ */ jsxRuntime.jsx(SectionView, { section: s }, s.id)) }),
+    doc.summary && /* @__PURE__ */ jsxRuntime.jsxs("p", { className: "text-muted-foreground mt-10 border-t pt-6 font-mono text-[11px]", children: [
+      "// ",
+      doc.summary
+    ] })
+  ] });
+}
+function SecurityDisclosure({
+  securityContact = "security@ochk.io",
+  heading = "responsible disclosure"
+}) {
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "font-mono text-sm leading-relaxed", children: [
+    heading && /* @__PURE__ */ jsxRuntime.jsx("h2", { className: "font-display text-foreground mb-4 text-lg font-bold tracking-wider uppercase", children: heading }),
+    /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "border-primary/30 bg-primary/[0.03] mb-4 border px-4 py-3 text-xs leading-relaxed", children: [
+      /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-primary mr-2", children: "!! " }),
+      /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-foreground", children: "Don't open public GitHub issues for exploitable bugs. Public disclosure before a fix ships puts everyone using the protocol at risk." })
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsxs("p", { className: "text-muted-foreground mb-4", children: [
+      "Email",
+      " ",
+      /* @__PURE__ */ jsxRuntime.jsx(
+        "a",
+        {
+          href: `mailto:${securityContact}`,
+          className: "text-primary underline decoration-dotted underline-offset-3",
+          children: securityContact
+        }
+      ),
+      " ",
+      "\u2014 use PGP for highly sensitive findings; the fingerprint and key are published at",
+      " ",
+      /* @__PURE__ */ jsxRuntime.jsx(
+        "a",
+        {
+          href: "https://github.com/orangecheck/.github/blob/main/SECURITY.md",
+          target: "_blank",
+          rel: "noopener noreferrer",
+          className: "text-primary underline",
+          children: "github.com/orangecheck/.github/SECURITY.md"
+        }
+      ),
+      ". Alternatively, open a private GitHub security advisory on the most relevant",
+      " ",
+      /* @__PURE__ */ jsxRuntime.jsx("code", { className: "text-[0.95em]", children: "orangecheck/*" }),
+      " repository."
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsx("ul", { className: "divide-y border text-xs", children: [
+      ["acknowledgement", "within 72 hours of receipt"],
+      [
+        "triage",
+        "within 7 days \u2014 whether we agree it is a vulnerability, the severity assigned, and a target fix date"
+      ],
+      [
+        "coordinated disclosure",
+        "we credit you (unless you prefer anonymity) and publish an advisory once the fix ships"
+      ],
+      [
+        "bounty",
+        "no paid bounty program yet \u2014 the ecosystem is young; we are grateful for responsible disclosure"
+      ]
+    ].map(([k, v]) => /* @__PURE__ */ jsxRuntime.jsxs("li", { className: "flex flex-wrap items-start gap-x-4 gap-y-1 px-4 py-2.5", children: [
+      /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-primary w-44 flex-shrink-0 font-bold tracking-widest uppercase", children: k }),
+      /* @__PURE__ */ jsxRuntime.jsx("span", { className: "text-muted-foreground flex-1", children: v })
+    ] }, k)) })
+  ] });
+}
+
+exports.CONTACT_GENERAL = CONTACT_GENERAL;
+exports.CONTACT_PRIVACY = CONTACT_PRIVACY;
+exports.CONTACT_SECURITY = CONTACT_SECURITY;
+exports.ENTITY_PENDING = ENTITY_PENDING;
+exports.LEGAL_ENTITY = LEGAL_ENTITY;
+exports.LEGAL_ENTITY_LONG = LEGAL_ENTITY_LONG;
+exports.LEGAL_SITES = LEGAL_SITES;
+exports.LegalDocument = LegalDocument;
+exports.PROTOCOL_LINKED_SITES = PROTOCOL_LINKED_SITES;
+exports.SecurityDisclosure = SecurityDisclosure;
+exports.buildDoc = buildDoc;
+exports.getSiteContext = getSiteContext;
+exports.legalHref = legalHref;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map