Principles
- Playful first, truthful always. Avatar polish is allowed; morphing is not. Provenance + edit ledgers are first-class.
- Safety by default. No links/media before Story Ch.3 for both; rate limits; report/block everywhere; soft shadowing.
- Own your network. Self-host PDS/AppView (private allowlist); sensitive data in sidecar DB.
- Shippable slices. Each feature merges only when it’s demoable end-to-end (UI→API→analytics).