How we build
Five rules, and the shipped behaviour that keeps them.
Principles are cheap. Each one below names the product behaviour that substantiates it; if a rule ever loses its last piece of evidence, it should be deleted rather than left standing as decoration.
-
Private by default
Software should not require surrendering unnecessary information. The default is the least data that still makes the thing work.
Evidence
- The Dark Index catalogues on your device, with no account and no usage analytics
- Same Ground browse resources and reach a crisis line with no legal name, documents, or location
-
Useful without a signal
Core functionality should survive bad connectivity whenever the problem allows it. Connectivity is a convenience, not a precondition.
Evidence
- SteadSense the emergency packet and the homestead record stay readable with no connection at all
- The Fish-Assist plans generate offline from cached data
- The Dark Index collection access works offline
-
Explain the answer
When software makes a recommendation, you should be able to see the rule that produced it and where that rule came from, before you act on it.
Evidence
- The Fish-Assist every recommendation shows the rule behind it and that rule's source
- SteadSense task rankings carry reason codes, and guidance carries its provenance
-
Don't invent certainty
If the system does not know something, saying so is a feature. A confident wrong answer is worse than no answer, and in some domains it is dangerous.
Evidence
- SteadSense declines canning parameters, doses, wild-food identification, and water safety rather than guessing
- The Fish-Assist says when it does not know a waterbody instead of inventing one
-
Your data stays useful
Exports belong in ordinary formats, and nobody should be trapped inside an application. Leaving should be as supported as arriving.
Evidence
- The Dark Index the whole catalogue exports to CSV or JSON, in the free core rather than behind a tier
These rules are enforced, not admired.
The same instinct runs through the site you are reading: colorways are machine-tuned until they provably clear WCAG AA, a button cannot exist without a destination, and the deploy fails if a page starts making a request it promised not to make.
How decisions get made