Trust
Safety
What a prospect is never allowed to do, and where the guards stop.
Prospects may go anywhere, including pricing and checkout. Reaching the wall is the finding. The action that commits is blocked.
Permission first
What it never does
Card fields, anything that passes a card-number check, pay buttons in several languages. A bare "Subscribe" stays clickable.
Scheduler commit buttons are refused. "Book a demo" still opens, because a demo-gated signup is a finding.
Google, GitHub, SSO and work-account buttons. "Continue with email" is allowed.
No deleting data, inviting teammates, publishing, opening support chat or contacting third parties.
- Every session starts in a fresh browser with no saved cards or logins.
- Typing never presses Enter, and the email is always the assigned mailbox.
- A refusal does not end the session: the prospect is told why and routes around it or leaves.
Where the guards stop
The last rule above is a prompt rule, not a mechanical block. A "request a demo" form or a free trial with no card is submitted like any other form.