Public-release controls
Operational records are private by default. An administrator must set the record to active and explicitly approve public visibility before a listing or alert is returned by public shortcodes.
Evidence boundary
Do not use WordPress media uploads as an evidence repository. Configure private object storage with controlled access, retention rules, and a documented legal review process.
Subscription and billing hand-off
Add production billing credentials and a verified webhook handler outside this downloadable package. Unverified remote payment events are rejected by default.
Audit and retention
Publication-control changes and private tip intake events are recorded in the FugitiveHQ audit log. Define retention and access requirements with the operating organization.