Public surfaces should expose only what a network participant needs to understand provenance and status. Private account and recovery details remain behind authenticated boundaries.
Separation by design
- Handles may be public; recovery email need not be.
- Wallet references can be resolved without exposing credentials.
- Physical readings prove a condition, not a person’s private life.
- Administrative actions require explicit roles and audit trails.
Legibility is not the same as total exposure.