--- title: "Trust & Standards: Review Gates, Sources, and Human Authority" description: "The governance layer under WhiskerMatch: the one drafting helper and its limits, review gates for organization-owned profiles, provenance for external listings, the append-only audit trail, and what humans exclusively decide." canonical: https://www.whiskermatch.com/trust markdown_url: https://www.whiskermatch.com/trust.md generated_from: "canonical page server-rendered HTML; the HTML page is authoritative" last_modified: 2026-10-04 last_updated: 2026-10-04 publisher: "Veldarium Technology Systems LLC" --- Trust & standards # A person always decides. A first draft of public-profile text can be prepared from sources already on the record. Everything else, status changes, medical and behavior interpretation, applicant decisions, publishing an organization-owned profile, is a human action, by construction. External listings remain source-owned and visibly attributed. Trust is not just a policy page. It is the product behavior: hold, review, source, approve, and record why. [Check if this fits your team](https://www.whiskermatch.com/is-this-for-us) [See how human review stays in control](https://www.whiskermatch.com/demo) The standard, in four lines ## Everything below expands on these. - ### A person decides No placement, applicant or publishing decision is automated. - ### Sources stay attached Every fact keeps who said it, when, and who can see it. - ### Unknown means unknown Gaps stay marked as gaps. Nothing is guessed to look complete. - ### Review before public A named reviewer approves what adopters read. ## Ten behaviors a team can inspect. The product should make its boundaries easier to see than the policy language describing them. 1. 01Human decisions 2. 02Drafting help 3. 03Review gates 4. 04Source trail 5. 05Unknown fields 6. 06Public profile safety 7. 07Applicant fairness 8. 08Reviewed & dated 9. 09Data and privacy 10. 10Proof permission AI can help with public-profile text source-bound first draft only; a person edits and saves People make the decisions staff review profiles, applications, and placement calls Never automated no auto-placement, no auto-rejection, no pay-to-rank Missing stays missing unknown fields are not filled with guesses Named review required Nothing public without review. A real person is attached before publishing External listing truth ## Source records are not partner records. WhiskerMatch keeps the line between its own records and outside listings visible. A sourced animal page is a temporary view of the source organization’s own record, not a claim that the organization uses or has been verified by WhiskerMatch. ### Mode stays visible Fixture records are labeled illustrative. Live-mode provider failure, missing configuration, and empty results have distinct states; none silently turns into demo inventory. ### The source remains authoritative Every accepted external record keeps its provider identity, source organization, source URL, update time, fetch time, and expiry. The provider's page is the place to confirm availability and inquire. ### Staleness fails closed Expired or disappeared records are not presented as currently available. Stable WhiskerMatch URLs explain a source withdrawal or provider outage instead of fabricating a replacement animal. ### Public location is minimized The discovery projection keeps only city, state, rounded coordinates, and explicit uncertainty. Street address, provider email, and provider phone do not cross the public adapter boundary. What WhiskerMatch will never do ## Trust starts with the lines that do not move. Early teams should not have to infer the boundary from a policy page or trust a product demo on faith. These are operating constraints, stated plainly enough to inspect. ### We do not auto-approve adopters. An application can be organized for review. Approval remains a shelter or rescue decision. ### We do not auto-reject people. No model output closes an application or sends a rejection on its own. ### We do not hide AI reasoning from reviewers. Prepared work stays labeled, its source stays visible, and the reviewer can see what needs confirmation. ### We do not pretend every animal is easy to place. Unknowns, edge cases, and changing context are part of the record, not friction to erase from the story. ### We do not turn adoption into a score alone. A score cannot carry policy, lived observation, exceptions, relationships, or professional judgment. ### We do not ask early teams to trust a black box. The pilot begins with inspectable sources, named reviewers, visible holds, and a record of the final action. ### We do not invent proof before real pilots exist. No borrowed logos, implied customers, fabricated metrics, or testimonials written in advance. Anti-black-box boundary ## Special-needs animals never become a machine score. Photos, care notes, medical sources, foster observations, and behavior context may help a reviewer understand the record. None of them gives AI authority over an adopter or placement. - AI does not approve adopters. - AI does not reject adopters. - AI does not make final placement decisions. - AI does not diagnose animals. - Photos are context, not decisions. - Medical and behavior notes require human interpretation. - Reviewers can override or stop prepared work. - Edge cases belong to accountable people. - Special-needs animals are never reduced to a score. - Uncertainty stays visible until a person resolves it. Who does what ## Who prepares. Who decides. What we never automate. Software drafts one thing in the product today: an organization-owned public profile draft from sources already on the record. Every other surface below is human-only, by construction, not by restraint. Surface Drafting help Humans own Never automated - Organization-owned public profiles AI Can help prepare a first draft of profile text, strictly from source facts already on the record Human Reviews, edits, and approves before anything publishes Never Never invents a fact not already on the record; never publishes without a human approval - External source discovery AI No AI involvement: provider records are minimized and normalized by deterministic code Human The source organization owns the listing and its adoption process Never Never relabels a source record as WhiskerMatch-reviewed, substitutes fixtures after a live failure, or claims stale availability - Animal status & lifecycle AI No AI involvement: status changes are a human-initiated action only Human Sets and changes every status, from intake through outcome Never Never changes automatically based on model output - Medical & behavior records AI No AI involvement: these are structured entries a staff reviewer records directly Human Authorized staff reviewer enters and interprets medical events, vaccinations, medications, and behavior observations Never Never diagnoses, prescribes, or gives medical or behavioral advice - Applications & adoption decisions AI No AI involvement in the applicant pipeline today Human Adoption coordinator reviews and decides every stage and outcome Never Never auto-rejects, auto-approves, or scores an applicant - Public adoption directory AI No AI involvement: the directory lists an organization's published profiles only Human Only profiles a human has published appear; nothing partial or unreviewed shows publicly Never Never accepts payment to change placement order, there is none to change In practice ## Each boundary is a visible mechanic with a reason it exists. Product behavior, not policy prose. Open any part for the detail. Trust mechanics ### Draft badges, review gates, source trails and unknown states. ### AI drafts profile wording only Visible mechanic Label on an organization-owned profile draft · named reviewer required before save, approval, or publish Prevents Invisible automation making placement calls ### Source trail Visible mechanic Every reviewed field carries where it came from, intake, foster, vet, reviewer, visible on the record Prevents Confident-sounding profile copy with no traceable origin ### Publish gate Visible mechanic Public profile is blocked until required fields are reviewed Prevents Stale or incomplete public records going live ### Named reviewer Visible mechanic Reviewer, timestamp, and credentials recorded on the case Prevents Anonymous changes and unclear ownership ### Missing stays missing Visible mechanic Unknown and needs-review field states are shown, never auto-filled Prevents Invented certainty about an animal ### Change history Visible mechanic Field-level edits keep before/after, who, and when, and a re-review trigger on sensitive fields Prevents Quiet rewrites of medical, behavior, or availability state ### No auto-decisions Visible mechanic No auto-rejection, no auto-placement · humans approve, decline, and publish Prevents Adopters or animals being filtered out by a model ### No pay-to-rank Visible mechanic Ranking has no paid inputs · no partner, sponsor, or advertiser can influence discovery Prevents Money buying which animals or organizations are shown ### Commerce separation Visible mechanic Essentials and partner offers are post-placement only, isolated from the placement surface Prevents Commerce nudging an adopter toward an animal or a shelter See these boundaries in motion in the [interactive product demo](https://www.whiskermatch.com/demo): each event shows what may be drafted and what a person must review. When information changes ### A record is not frozen the moment it is published. Animals change and intake notes get corrected. Change is tracked and visible, not silently overwritten. ### New information arrives A staff member, foster, reviewer, or adopter flags something, a medical update, a corrected age, a behavior change. The flag routes back into the queue with an owner, not into a comment that nobody reads. ### The record is re-reviewed A human reviews the change before it changes the public record. Medical and behavior content has a standing review cycle. Reviewed is dated, so a stale review is visible as stale. ### The change is attributed What changed, who changed it, and when is recorded on the record. A correction is a tracked event, not an invisible edit. The history travels with the animal. ### Uncertainty stays honest If something is no longer known with confidence, the field returns to unknown rather than holding a value that is no longer true. Unknown stays unknown, including after a change. What “reviewed” means ### Review is a process, not a stamp. Tied to an organization-owned record, not an external provider listing or a public content network. ### Who reviews An authorized staff reviewer for medical and behavior entries; the assigned volunteer reviewer or adoption coordinator for a public profile. Each role can only do what it has been granted, not what it claims for itself. ### What gets attached Who made the change, when, and from what source, recorded on the record and in the append-only audit log. ### What triggers re-review A materially relevant foster check-in re-flags a published profile automatically. Staff can flag anything else for a reviewer at any time. ### What it isn't Not a stamp, and not AI output relabeled as human work. An organization-owned public profile cannot publish until a named reviewer clears it; nothing about that review is automatic. External source pages show provenance instead of claiming this review. Data deletion & export ### What we hold, what we don't, and how you get it back. Stated plainly so it can be checked. This is the posture, not a substitute for the written terms of a pilot agreement. ### Pilot requests are received and stored, not just drafted Submitting the pilot form at /pilot sends your answers directly to WhiskerMatch's database, it's not just an email draft prepared in your browser, though a direct mailto: to support@whiskermatch.com remains available if you'd rather use that. ### Deletion requests A deletion request for a pilot request or a provisioned organization's data can be made by email to support@whiskermatch.com and is handled by a person. ### Product data export For organizations in the pilot, structured export of your records is part of the pilot agreement. If you decide not to continue, your data leaves with you. No lock-in is the intended posture. ### No quiet secondary use Organization data is not sold, rented, or fed into a marketing or ad graph. The only AI processing in the product is the labeled organization-profile drafting feature, and only source facts a reviewer entered are sent. External provider listings are not sent to that feature. This is the stated posture for an early, founder-led stage. The binding specifics, retention, export format, deletion timelines, live in the pilot agreement, not in marketing copy. Lines that do not move ## Enforced defaults, stated in public so behavior can be checked. ### Platform-wide standards These apply to every surface of WhiskerMatch. ### No pay-to-rank, ever. No partner, brand, or advertiser can pay to change which animals appear first in an organization's public adoption directory. There is no paid placement anywhere in the product. ### No fabricated animal facts. If a detail isn't confirmed by the shelter's intake or a named reviewer, the field stays unknown. Unknown is a valid state. ### A person always decides. The only drafting help in the product prepares a first draft of public-profile text from sources already on the record. Every placement-level decision, adopt, foster, publish, reject, any status change, stays with a named human who knows the animal. ### The shelter owns its record. Organizations keep authority over how their animals are represented, which fields are public, and where their data goes. The platform doesn't override that authority. ### Medical and behavior notes carry their source. Medical events, vaccinations, medications, and behavior observations are attributed and dated on the record, who added them, when, and from what source. ### No dark patterns. No countdown pressure. No manufactured scarcity. No guilt copy. No default-opt-in tricks. The product treats staff and adopters as adults. ### What WhiskerMatch is not What the platform refuses to become, no matter who asks. - ### Not a veterinary authority. WhiskerMatch does not diagnose, prescribe, or replace the veterinary relationship between a shelter and its clinic. Medical events, vaccinations, medications, and behavior observations are structured entries an authorized staff reviewer attaches to the record, dated and sourced. They are informational, not medical advice, and not a substitute for a professional clinical examination. If an animal is experiencing a medical emergency, contact a veterinarian or emergency clinic immediately. - ### Not a ranking auction. No partner, brand, shelter, or advertiser can pay to change which animals appear first in an organization's public adoption directory. This is a platform-wide constraint, not a line item in a pricing tier. - ### Not a silent data extractor. Organization and applicant records are not sold, rented, or quietly fed into a marketing or ad graph. What an applicant shares with a shelter stays between that applicant and that shelter. - ### Not an autonomous decision-maker. WhiskerMatch does not use AI to make placement decisions, auto-reject applicants, or publish organization records without human review. The one AI-assist feature only prepares a labeled organization-profile draft; humans retain full authority and accountability for every decision that affects an animal's placement. Founder operating promise ## The operating promise. WhiskerMatch is early and is being built carefully. The founder would rather earn trust through useful work than manufacture momentum. The first pilot teams will shape the product, but human review, safety, and transparency will not be traded away to move faster. - Start with one real workflow and the people already carrying it. - Keep sources, unknowns, review, and overrides visible. - Treat pilot feedback as product work, not marketing material. - Reduce preventable busywork without replacing judgment. [Bring one workflow](https://www.whiskermatch.com/contact#bring-one-workflow) Founder-supported pilot ## Bring one workflow and inspect the boundaries together. Start with one workflow, named reviewers, attached sources, and no public change without human approval. [Bring one workflow](https://www.whiskermatch.com/contact#bring-one-workflow) [See the review flow](https://www.whiskermatch.com/demo) --- About WhiskerMatch: WhiskerMatch is workflow software for animal shelters and rescues that keeps one reviewed record per animal across intake, foster care, adoption review and public profiles, with people making every placement and publishing decision. ## Sitemap See the full [WhiskerMatch sitemap](https://www.whiskermatch.com/sitemap.md) for every public page, or [llms.txt](https://www.whiskermatch.com/llms.txt) for a short summary.