Never
Anyone can publish a list of things they promise not to do. What follows is the list plus, for each line, the mechanism that makes it checkable — a rule in the schema, an endpoint you can call, a test that fails if we break it.
Never score individual productivity
There is no such metric in the schema. Flipper stores episodes, facts, entities and edges — nothing counts a person's output, because nothing measures it.
Never expand what you can see
A fact is visible only if you can see at least one episode it came from, narrowed further by department groups, with a personal tier nobody but its author can read — including admins. The rule is one predicate, mirrored in SQL and in TypeScript, and a standing test asserts a marketing member cannot retrieve a finance-sourced fact.
How access control works →Never act on your behalf
propose_action returns a draft: the content, its sources, and executed: false. Flipper holds no write credential for Slack, email, GitHub or anything else, keeps no outbound queue, and has no undo window — because it never sent anything. Your agent executes, under its own credentials.
The agent tools →Never lock you in
GET /api/workspaces/:id/export returns your whole workspace as JSON, any time, without asking anyone. Deleting a workspace is a soft delete with a 30-day window, then a real purge.
Never train on your data
Synthesis runs against provider APIs whose terms exclude API content from training. Per-workspace keys (bring your own) are the next phase of work — until they ship, this promise rests on those terms rather than on isolation, and we would rather say so.
Never fake confidence
Retrieval quality is measured against a committed 57-case golden set on every change to the retrieval path, and agents can report back whether what they were given actually worked, which moves a fact's confidence by one bounded step. Confidence is a measurement here, not a decoration.
Never watch you
Everything Flipper has recorded about you is on one page — the facts, the episodes you brought in, the entities that resolve to you, and every access decision made on your identity, including any time an admin viewed the workspace as you. Delete a fact from that page and it leaves agent retrieval with it.
Your own page →Something on this page stops being true? That is a bug, and the same class of bug as a data leak. Tell us at hello@flipperai.in.