FXFanXora

Governance · The Moat

Competitors publish terms.
FanXora ships a constitution.

FanXora’s governance is its moat: ~177 chapters of operating law, the load-bearing ones enforced by Cedar policy, Postgres constraints, and CI gates. Competitors publish terms of service; FanXora ships a constitution that the systems themselves obey.

Money Plane

Money Plane Constitution — Zero Creator Fee

ch.132

Creators pay 0% FANZ fees forever. Every FANZ charge is added on top of the creator’s price and paid by the consumer. Fees are stored per (platform × transaction-type × processor) in the database — never hardcoded.

Enforcement

Postgres CHECK constraint `zero_creator_fee_law`; CI lint blocks hardcoded fee constants; Cedar `money-plane.cedar`; payment edits require a separate `APPROVE: PAYMENT` scope.

Investor angle — A structural cost advantage versus OnlyFans/Fansly that is enforced at the database layer, not promised in marketing.

Append-Only Financial Ledgers

ch.132 VII

Payment transactions, webhook events, creator earnings, FanzCard, gift-card, subscription and chargeback tables are append-only.

Enforcement

Postgres RULEs block UPDATE/DELETE on all financial tables.

Investor angle — Audit-grade, immutable financial history — diligence-ready and fraud-resistant by design.

Creator Rights

Creator Sovereignty

ch.169

Creators set their own subscription periods (1 day → 12 months, lifetime, or custom) and prices within guardrails. Existing subscribers are grandfathered on price changes. Portable audience, payout SLA, and due-process protections.

Enforcement

Row-level-security table `creator_subscription_tier`; payout SLA telemetry.

Investor angle — Creator retention moat — the platform competes on creator economics, not lock-in.

Trust & Safety

Trust & Safety

ch.162

C2PA content provenance, multi-party consent receipts, and a sub-second kill-switch. CSAM is routed to a preservation escrow under controls.

Enforcement

Provenance signing, consent-receipt store, edge kill-switch.

Investor angle — Regulatory durability — the safety posture that keeps payment processors and app stores onside.

Age Verification & §2257

ch.163

FanzID zero-knowledge age proofs (store-nothing). §2257 records are append-only. Age-gating is driven from database config at the edge.

Enforcement

ZK age proofs; append-only 2257 store; edge age-gate.

Investor angle — Compliance-first adult monetization — the hardest regulatory barrier, already engineered.

Data Privacy & Crypto-Shred

ch.164

GDPR/CCPA erasure reconciled with immutable history via cryptographic shredding (destroy the key, not the record).

Enforcement

Per-subject encryption keys; crypto-shred erasure path.

Investor angle — Squares the circle of "right to be forgotten" vs. append-only audit — a non-trivial engineering moat.

Operations

Zero-Deletion Law

ch.154

No artifact is deleted — the lawful path is ARCHIVE (rename + preserve). Permanent deletion requires a board entry and a single-fire audited code.

Enforcement

Cedar `deletion.cedar` denies destructive commands (rm -r, DROP/TRUNCATE, force-push, etc.); append-only deletion-audit ledger.

Investor angle — Institutional memory and asset preservation — nothing of value is ever silently lost.

Operational Excellence

ch.135

Every fix-class action (deploy, hotfix, restart, schema/secret change) produces a structured postmortem with mandatory ecosystem-wide preventers (≥1 enforcement-layer).

Enforcement

CI postmortem-gate on incident-titled PRs; Cedar `operational-excellence.cedar`; sanitized postmortems published within 60 days.

Investor angle — A learning organization encoded in process — incidents compound into permanent hardening.

Observability, DR & Incident Comms

ch.165–167

Journey-level probes (not just /health), restore-proven WORM backups with chaos testing, and telemetry-driven status with targeted creator notices.

Enforcement

Synthetic journey probes; verified-restore drills; status automation.

Investor angle — Uptime and recoverability are tested, not assumed — reduces operational risk for acquirers.

AI Governance

AI Agent Governance

ch.168

Autonomous agents carry capability tokens, sign Ed25519 receipts, and high-risk actions require a two-agent rule.

Enforcement

Capability-token issuance; signed action receipts; two-agent approval.

Investor angle — Auditable autonomy — the company runs on AI agents safely, a frontier most competitors cannot govern.

Quality & Velocity

One-Touch Law

ch.177

Every unit of autonomous work is engineered right the first time: evidence pre-flight (learn from history) → plan-gate → execute → verify, in one pass. No double work, no patch-on-patch.

Enforcement

Cedar `one-touch.cedar` rework detector (live); append-only ONE-TOUCH-LEDGER; CI one-touch-gate; per-project supervisor + accountability matrix.

Investor angle — Capital efficiency as policy — rework is detected and halted before it burns runway.

Competitor Dominance Law

ch.134

Every major product/architecture decision requires a competitor scan and a measurable verdict (ahead / level / behind) before ratification. 10 tracked axes, all green.

Enforcement

PRs require a `Dominance:` verdict line; going behind requires a waiver with a remediation plan.

Investor angle — Competitive positioning is a gating control on every decision — the company cannot ship itself into irrelevance.

Accessibility & API Versioning

ch.170–171

WCAG 2.2 AA enforced via axe-core CI gate; API versioning with Pact consumer contracts and deprecation telemetry.

Enforcement

axe-core CI gate; Pact contract tests; deprecation telemetry.

Investor angle — Enterprise- and regulator-ready surface area — broadens the addressable market.

Brand Discipline

Non-negotiable naming canon

The rebrand is governed too. These usages are forbidden to protect trademark clarity and lane separation.

FanXera as the parent company
FAN-X without the hyphen
FanX as a replacement for FAN-X
FanXor for luxury
FanXore for technology
FanXus for adult platforms
FanXora for individual consumer apps
"Multiverse" for the adult company
"FAN-X Multiverse" as a legal name
Any alternate spelling not approved in the Brand Bible