Values are cheap to claim, so every principle below cites its mechanism — the code path that enforces it, not the intention behind it. The prose source lives in the repo as ETHOS.md, mirrored to both products with a parity check of its own.
If the product ever contradicts this page, that's a bug — report it like one.
Oort's database is the single source of truth. The entire Flows site is a generated artifact with a lossless round-trip — never a hand-edited copy.
Enforced by A CI parity check (sync-from-oort.mjs --verify) deep-diffs every flow against the canonical DB and fails loudly on drift: “Oort is canonical.”
Imported content arrives with zero usage. Zero is the receipt that makes every non-zero believable.
Enforced by Imports hard-code honest-zero stats; the homepage demotes “Trending” to “Recently added” rather than rank on zeros; empty states say “honest zero” out loud.
Provenance runs research → flow → run event → ledger.
Enforced by source_url, source_repo, license, and a content hash on every mirrored row — identical content can exist in the library only once, and re-imports update instead of duplicate.
Verify Gates are human self-attestation, not AI self-grading. The AI doesn't get to grade its own work — anywhere.
Enforced by The complete button on every flow step is hard-disabled until a human ticks every check. There is no code path where the model passes its own gate.
Every task on the 188-node build map either has a flow or generates one on demand. Gaps are drawn on the map, never hidden.
Enforced by Coverage is computed honestly (a task counts as covered only when a real flow exists); uncovered tasks render as explicit generate-on-demand tiles.
Provider keys are never pooled, never marked up, never intermediated. A user generating on their own key generates free, because it costs the platform nothing.
Enforced by AES-256-GCM at rest, masked previews only, constant-time comparison, user-key-preferred resolution — and production refuses to boot on the dev encryption fallback.
The library is free forever. We monetize generation, publishing, and guided passage — never access, never inference.
Enforced by No paywall exists in Oort's tier config; subscriptions live only on the Flows workspace; nothing that was ever free has been paywalled.
The same rule the flows enforce on your code binds our business and our copy.
Enforced by Revenue-share marketing is hard-gated on the payout ledger actually existing; pricing counts are computed from live data so the free promise can't silently drift.