← witness blur

Consent preview — both paths

You see exactly what your witness will see, before you send. Both paths ship; you choose, every single time.

Craftee · Davi feedback actioned (cheers = emoji+words, searchable) · 2026-07-12 21:40 WEDT · now

The surface (the real screen, not a mockup)

This is what they'll see
A stranger will confirm the act — never identify you.
Two strangers
blurred · they confirm the act
Someone I know
they can cheer you on
14:02 → 14:2321 min
They will be asked only this:
"Is this person stretching, for the time shown?"
yesnocan't tell
blur
Blur further whenever you like. It can never go lower — the floor is set on our side, not yours to weaken.
You might want to turn the blur down a touch. At this level it's hard to tell there's even a person there — and images this blurred are more likely to be declined, because a witness can only confirm what they can actually see. Send it this way if you like; we'd just rather say so now than after.
This choice applies to this one submission. There is no setting that remembers it — you'll choose freshly next time.

⭐ The encouragement — energy, not sentences

Davi's correction, and he's right: this was full sentences, which is too much like a message. It's not a message — it's a cheer. So the witness sends emoji and single words: 👀 · proud · 💪 · yes! — energetic, instant, universally positive. They can never type anything that reaches you.

Maya witnessed your practice
pick some below…
Maya can send warmth. She cannot ask you for anything, request to witness you again, or see whether you practised without her.

Her whole keyboard, on her screen: search a feeling → tap what fits. The search only finds; it never sends what she typed.

The search box is the trick that makes "no free text" livable. Without it, a fixed list feels like a cage — she can't find the thing she means. With it, she types proud and gets every proud-shaped way to say it. She still cannot send a single word she wrote herself. The vocabulary is the guardrail: a witness may say I saw you, and I'm glad; a witness may never say where were you.

🛡️ The six guardrails, and where each one lives on the screen

Designee named the risk plainly: an unblurred video of your body, sent to someone who knows you, is exactly what a controlling partner can pressure you into. "User preference" is only real if the preference is free. So the guardrails aren't a policy document — they're built into the surface:

law · visible in the design above
  • 1 · Per-submission only. The orange line under the button says so out loud. There is no "remember my choice" toggle anywhere — a standing setting is a switch that gets flipped once and then pointed at someone forever.
  • 2 · Nobody may ask to witness you. The choosing happens here, on your screen, at send time. There is no invite, no request, no "let me be your witness" — that button is the coercion vector, so it does not exist.
  • 3 · Absence is invisible. Maya is never told she wasn't picked. She cannot learn that you practised and chose strangers.
  • 4 · The blurred path is always one tap away, and never the lesser one. The two paths are the same size, same weight, no "recommended" badge, no downgrade language — anonymous is not the secretive or less-committed choice.
  • 5 · Your path is never disclosed. Not to witnesses, not on a profile, not in a stat or a streak. Nobody can audit which way you went.
  • 6 · The 62% floor still binds the blurred path, server-enforced. Unblurred exists only inside the known path, and only by your own deliberate act, once.

Every one of those exists so the unblurred choice can only ever be offered by you, freely, once, to one person — never requested, expected, tracked, or noticed by its absence.

⚠️ For whoever wires this

The copy is load-bearing — it's a promise the architecture has to earn. On the blurred path the screen says "a sharp copy: one was never made." That is only sayable because of blur-at-capture and destructive (never reversible) blur. If the pipeline ever uploads-then-blurs, that sentence becomes a lie told to a person about their own body — delete it rather than ship it.

On the unblurred path I say the opposite just as plainly: your face will be visible to Maya. No euphemism. If someone is going to send their body to another person, they deserve to read it in words, not infer it from a missing blur.

Send is never disabled above 78%. The interface informs; it does not overrule. Davi granted the right to blur further, and blocking the button would be quietly taking it back.