Participation stays voluntary
A business cannot pull a score, search for a profile, or learn that someone chose not to share.
THE LIMITS ARE PART OF THE DESIGN
Conduct should add recognition without creating a way to punish people.
A portable record of conduct could create value. It could also become coercive, discriminatory, permanent, and punitive. Open Conduct treats those risks as requirements the system must satisfy—not features to add later.
THE SHORTEST VERSION
Six promises the proposal has to keep.
Ordinary service stays ordinary
Price, access, rights, complaints, refunds, accommodations, safety, and service recovery cannot depend on Conduct.
Businesses receive the minimum
A receiving business ordinarily learns only whether a customer qualifies for one approved additional benefit.
People can inspect and challenge
Consumers and workers need understandable correction, review, escalation, and exit paths.
No one controls the full system
Governance, operation, evaluation, correction, appeal, certification, and reporting must remain separated.
Every new use starts unavailable
A context opens only after its necessity, relevance, validity, fairness, privacy, rights, and operation are approved.
BASELINE SERVICE
Conduct may add something. It may not take anything away.
A person's participation, refusal, technical failure, insufficient history, ineligibility, dispute, or lack of a result cannot reduce ordinary access, standard price, complaint handling, refunds, remedies, legal rights, disability accommodations, safety responses, or service recovery.
A business cannot degrade the standard experience and sell its restoration as a reward. Initial benefits must be genuinely additional, modest, nonessential, reversible, and available without taking scarce or meaningful value from other customers.
HUMAN RIGHTS IN THE WORKFLOW
Consumers and workers both need protection.
Consumers can inspect and challenge
People need one understandable path to correct source facts, question eligibility, report bias or manipulation, add context, review a calculation, challenge a company's use, and seek independent escalation for material harm.
The process must not expose an individual worker or force the worker and consumer into an emotional back-and-forth.
Workers answer without pressure
Responses must be private, voluntary when exposure is insufficient, and protected from manager scripts, quotas, performance use, retaliation, and reidentification.
When those protections fail, the affected Net Conduct Score evidence must be paused or invalidated.
PROTECTED ACTIONS
A complaint is not misconduct.
People must remain free to disagree, enforce a right, request an accommodation, seek a refund, report discrimination or safety concerns, protect another person, participate in collective activity, or refuse an unlawful request.
Business outages, cancellations, inaccessible processes, staff errors, disputed charges, emergencies, and other causes outside the customer's control cannot be relabeled as customer conduct.
PROHIBITED USES
Some uses are outside the system by design.
A use does not become acceptable because it is missing from this summary. New contexts remain unavailable until affirmatively approved.
Work and livelihood
Employment, hiring, promotion, pay, scheduling, discipline, worker surveillance, credit, lending, housing, insurance, healthcare, education, or essential services.
Government and enforcement
Government benefits, immigration, taxation, licensing, law enforcement, criminal intelligence, sentencing, probation, border control, or political targeting.
Risk and exclusion
Fraud, safety, security, threat, identity-risk, blacklist, public ranking, searchable profile, dating, social matching, popularity, or moral judgment.
Commercial exploitation
Advertising audiences, data brokerage, unrelated personalization, standard pricing or access, complaint handling, or model training without a separately approved basis.
Protected-trait inference
Inferring health, disability, culture, class, personality, psychological state, or another protected or sensitive characteristic.
WHEN A PROTECTION FAILS
A right without a remedy is only a preference.
A live system would need the power to correct active state, restore an additional benefit, investigate a source or verifier, pause a workflow, invalidate affected evidence, suspend a context, remove certification, notify affected people, publish material findings, and stop a pilot.
The exact service levels, funding, decision rights, and independent providers remain open. They must exist before real scores or benefits create real consequences.
OPEN FOR CHALLENGE
Which protection is incomplete?
The strongest contribution may be a failure the current proposal has not anticipated.
Challenge a protection