MY-2571 wiring gate ยท 2026-06-25

Buttondown referral data stays private until the public contract is verified.

Do not publish live rankings, prize winners, private emails or sponsor-backed rewards until Buttondown attribution is verified and the editor approves the public launch.

Linear proof: MY-2571 for live leaderboard wiring, linked back to MY-2577.

Open readiness JSONShare routeSubscribe routeLeaderboard placeholder

Captured metadata

These fields are preserved by the static subscribe and share routes before any live ranking exists.

metadata__referral_sourceIncoming subscribe URL ?ref= tokenNever displayed raw; used only to attribute a confirmed subscriber to an inviter.
metadata__reader_tokenBrowser-local share token generated on /share/Can be mapped to an approved display name after opt-in.
metadata__signup_marketStatic hidden fieldMarket filter for Oxfordshire referral dashboards.
tagButtondown embedded form tag website-subscribeOperational filter only; never shown to readers.

Public leaderboard contract

Only redacted display names, broad areas, counts and reward labels can be published.

Public columnRankSort by confirmed referral count after fraud checks.
Public columnDisplay nameInitials, first name plus broad area, or opted-in community name only.
Public columnAreaReader-selected broad area such as Oxford, Abingdon, Didcot, Witney, Bicester or Banbury; no street-level data.
Public columnConfirmed referralsCount confirmed Buttondown subscribers with matching referral_source, excluding reversals and abuse.
Public columnReward tierShow reward label only; prize fulfilment remains manually approved.

Verification gates

Every gate must pass before rankings or reward claims are shown.

OpenGateButtondown subscriber.created or equivalent event is received with metadata fields intact.OpenGateConfirmation state is checked before a referral increments public totals.OpenGateSelf-referrals, duplicate aliases and same-household abuse patterns are excluded before scoring.OpenGateA private attribution table exists separately from the public leaderboard view.OpenGateLeaderboard cache can be rebuilt without exposing raw subscriber records.OpenGateManual kill switch hides public rankings if abuse, privacy or sponsor-risk flags appear.

Launch sequence

Safe order for a later approved live wiring run.

OpenStepKeep /share/ and /subscribe/ static referral capture in place.OpenStepVerify Buttondown stores referral_source, reader_token and signup_market from embedded form submissions.OpenStepBackfill a private referral ledger from confirmed subscribers only.OpenStepGenerate a redacted leaderboard JSON containing publicColumns only.OpenStepReview reward wording and sponsor-backed prize terms manually.OpenStepPublish public rankings only after the editor approves the live leaderboard.

Blocked until verified

Hard lines for privacy, fraud and sponsor separation.

OpenBlockedDo not publish live ranks, prize winners or sponsor-backed rewards.OpenBlockedDo not expose raw emails, Buttondown subscriber IDs, API keys or private attribution tables.OpenBlockedDo not count unconfirmed subscribers, self-referrals or duplicate aliases.OpenBlockedDo not let referral reward sponsors blur into editorial coverage or paid issue sponsorship.