Haven Playbook — the Friday den

Privacy gradients + arrival flow, exactly as the system runs them today. Updated 2026-07-12 19:30 WEDT (KodiC) ·

Every rung is tagged: 🔒 server-enforced = the system refuses it, no one can slip; 🤲 held by practice = the stewards hold it, the app supports but can't force it. Both are real — the tag just says who's holding the line.

The privacy gradient — what each person can see, ring by ring

🌍

Ring 0 — anyone browsing (logged out). Event card: title, area, flavour chips, host name + honest credential (✦ Steward or 🌱 Musher host), seat chips ("2 seats held for first-timers"). Never the exact address — a home mush shows "Address shared once you're in." 🔒 server-enforced

The private address lives in its own table; there is no client path to it.

🙋

Ring 1 — signed in, requested (pending). Full event contract + host note; the seat gates answer honestly (full · seats held for first-timers · needs orientation). Still no address. 🔒 server-enforced

💛

Ring 2 — approved. The exact address + map pin reveal (server-gated on approved status). Attendee-facing composition line, snack/bring lists. 🔒 server-enforced

🏡

Ring 3 — checked in (inside the container). Who's here is visible to who's here. Care signals — a support wave, a safety flag — go to the host + stewards + care team only, never to the room. A flag about a person is never shown to that person, and the flag's reporter stays anonymous to non-admins. 🔒 server-enforced

🌙

Ring 4 — after. Checkout reflections are private. Attendance is only credited after check-in + a steward-confirmed checkout — no ghost credentials. 🔒 server-enforced

The arrival flow — dock → orient → guided in → soften

🧭

Before Friday: orientation. A first-timer cannot even request a seat without a completed orientation on record (the eight agreements + the 3-question check). 🔒 server-enforced

If someone's stuck at "finish the short mush orientation": Profile → Review the agreements. Their request retries automatically after.

🎟️

Seats: cap 6, two held for first-timers. Every path into a seat — host approve, invite, steward auto-approve, walk-up admit — passes the same gate. Experienced mushers stop at 4; the last two seats only fit newies. A first-timer also needs a second steward on the team. 🔒 server-enforced

⚓

Dock — the Landing Space. Arrivals pause outside: capacity (1–5) → nervous-system triangle → "do you want support?" A wave pings the host + stewards ("👋 Care signals" screen, refreshes live — keep it open while stewarding). 🤲 held by practice

The check-in is server-recorded and required for attendance credit, but the app can't physically stop someone walking to the door — the Threshold steward holds the dock.

🤝

Guided in — never alone. A lone newcomer is always accompanied into the container by a steward. Phones stay outside; jewellery off; arrive at your own pace. 🤲 held by practice

🫠

Soften. Once shepherded in there's nothing left to earn or perform — the container is held. That's what all the structure is for.

🌙

Leaving — checkout. Faces + reflections, then a steward confirms. "Flag a person" lives here — it saves, alerts the care team AND the event's stewards, and shows in the reader. Nothing goes into a black hole. 🔒 server-enforced

Friday steward crib (print this bit in your head)

1️⃣

Host sets the event: capacity 6, first-timer seats 2 (the stepper under Capacity), newcomers welcome. Get a second steward accepted before approving any newie — the system will refuse otherwise.

2️⃣

One steward keeps Profile → 👋 Care signals open during the event — that's where waves and flags land, live.

3️⃣

If an approve fails, the message now tells you the real reason: "the mush is full" · "seats held for first-timers" · "needs a second steward". Believe it — it's the gate speaking, not a bug.

4️⃣

Walk-ups at a private den: there's no public walk-up path here — if someone shows up unplanned, it's the host's invite + the same seat gates (Field orientation is for public venues).

Built-or-paper call: PAPER for Friday (this page) — the enforcement underneath is already live in prod (verified 19:25). Candidate build follow-ups if wanted after the pilot: in-app steward crib card · Landing-Space kiosk mode for the door phone. — KodiC · 2026-07-12 19:30 WEDT