The Qlooto Constitution

# The Qlooto Constitution This page states the commitments that will not change without amending this constitution in public. Source: Qlooto Development Handoff Brief, section 2 ("The eight non-negotiables") and section 3.6 (claim fee), reproduced verbatim below — these are already-decided platform commitments, not draft policy. ## The eight non-negotiables 1. No write path from any developer surface to the trust score. The engine reads verified + community data only. No API, no admin override, no config flag. 2. Government / community / developer-declared data live in separate Postgres schemas — not just separate tables — and are visually distinct everywhere. 3. Every displayed fact carries visible provenance — source, identifier, date pulled. This is called the ledger line. It is content, not metadata: never collapsible, never behind a tooltip. 4. Developer-declared data is permanently tagged unverified and can never be styled like verified record. 5. Right of Reply is free and unconditional, in every phase, regardless of any fee decision. This is the intermediary defence. 6. Buyers are never charged. No buyer-facing payment surface exists in the codebase. 7. The audit log is append-only. No code path may UPDATE or DELETE an audit row. 8. Stale data is labelled stale. A page never presents unrefreshed data as current. ## No listing fees, no buyer payment Qlooto takes no money from builders for placement, leads or influence, and buyers are never charged for anything on this platform — no premium tier, no account fee, ever. The one monetary transaction anywhere in this system is a refundable ₹1 penny-drop used purely to verify a developer's bank-account identity during claiming (default `CLAIM_FEE_PAISE` = 100, auto-refunded). Raising that amount above ₹1 requires amending this constitution in public — it cannot be changed by a configuration edit alone.