Safeguards

Move quickly. Never blur the boundary.

Nomis is designed to automate repetitive work without inventing authority, merging identities, exposing credentials, duplicating ambiguous writes, or mistaking activity for proof.

Hard boundaries

What the system refuses to infer.

Configuration is not authority. A worker heartbeat is not a completed post or article. A generated file is not an approved artifact. A clean QA result is not publication permission.

Authority

Owner scope before effects.

Campaigns, account activation, publishing, and material scope changes remain explicit and attributable.

Enforced
Identity and sources

One lane cannot borrow another.

Accounts, logos, source packets, rights posture, content claims, and format evidence remain lane-specific.

Enforced
Recovery

Ambiguity stops retries.

Provider and publication writes reconcile the original operation. They do not silently submit duplicates.

Enforced

Private by default

The public site explains. It does not operate.

  • No credentialsProvider and social tokens remain encrypted and are never returned to public pages.
  • No draftsUnreleased media, captions, schedules, and campaign evidence remain owner-scoped.
  • No control surfacePause, approval, upload, generation, and publication controls require an authenticated owner session.
  • No unsupported claimsCurrent limitations remain visible until implementation and account-specific evidence change.