Leaderboard plan

Public gamification stays private until attribution is real.

Buttondown metadata

Fields to verify before scoring

Future metadata

referral_source

Inactive until the Buttondown referral flow is verified.

Future metadata

reader_token

Inactive until the Buttondown referral flow is verified.

Future metadata

signup_market

Inactive until the Buttondown referral flow is verified.

Future metadata

broad_area

Inactive until the Buttondown referral flow is verified.

Public table shape

Safe fields only

Public fieldRule

Webhook gates

What must be true before rankings move

Rule

Verify Buttondown subscriber create/update payloads.

Rule

Hash or pseudonymise public names by default.

Rule

Exclude unsubscribed or unconfirmed subscribers.

Rule

Manual fraud review before rewards.

Launch sequence

Private ledger before public leaderboard

Rule

Wire metadata fields in Buttondown.

Rule

Test referral capture with internal addresses only.

Rule

Publish static leaderboard shell.

Rule

Fraud checks

Before any prize or sponsor-backed draw

Rule

One confirmed Buttondown subscriber per reward count.

Rule

Manual review for duplicate domains or self-referrals.

Rule

No prize or giveaway wording goes public until terms are approved.

Safety gates: count confirmed subscribers only, hide private emails, review abuse clusters manually, and do not publish prize mechanics before sponsor approval.