From f9800f0324dca96c006ce33c97aed26f3aabeb8c Mon Sep 17 00:00:00 2001 From: Tony Balascio Date: Wed, 5 Aug 2026 19:23:02 +0000 Subject: [PATCH] =?UTF-8?q?threat-register:=20Layer=201a=20website=20updat?= =?UTF-8?q?e=20=E2=80=94=20Mallory=20Carlos=20roster=20gap=20(T-1)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- analysis/threat-register.md | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) diff --git a/analysis/threat-register.md b/analysis/threat-register.md index 283d863..3cdd39e 100644 --- a/analysis/threat-register.md +++ b/analysis/threat-register.md @@ -8,3 +8,35 @@ | — | *Audit pending* | — | — | — | Pending | *Populated during Layer 2 threat diagnosis per the Audit Playbook.* + +--- + +## Layer 1a Website Threat Update — 2026-08-05 + +**Source:** phoenixcameronpark.com (Vite SPA — homepage, /team, /services; full HTML source + JS bundle) +**Method:** Full HTML + JS bundle string scan; rendered DOM inspection (home, team, services) +**Evidence Tier:** Tier 1 (direct observation of live site) + +### Check 1 — Rebranding Residue (LaMae Salon / La Mae) +- **Result: CLEAN — no residue found** +- "LaMae" / "La Mae": 0 occurrences in HTML source, title tags, meta data, footer, or JS bundle +- All branding consistently reads "Phoenix Salon + Spa" + +### Check 2 — Ghost Staff (Amanda) +- **Result: CLEAN — no ghost staff** +- "Amanda" appears 2× in the JS bundle — both are client review author **"Amanda R."** (testimonial data), NOT staff +- /team roster: Ashley Thornhill (Owner + Esthetician), Lola Rogers (Hair Stylist), Grace Grabowski (Hair Stylist), Jennifer Francis (Lash Artist) +- No Amanda on team, bio, or services pages + +### Check 3 — Roster Mapping (Grace, Mallory, Ashley) +- **Grace Grabowski** — PASS: full profile + services (Precision Haircuts, Innovative Color, Seamless Extensions, Balayage & Highlights) + "Book with Grace" +- **Ashley Thornhill** — PASS: full profile + services (Custom Corrective Facials, Microdermabrasion, Chemical Peels, Brazilian & Bikini Waxing) + "Book with Ashley" +- **Mallory Carlos** — **FAIL: NOT on team page.** Only referenced in the "2026 Style Readers' Choice Nominee" blurb (Home + Services). No profile, no services list, no booking path. + +### Findings + +| # | Threat | Category | Severity | Evidence Tier | Status | +|---|--------|----------|----------|---------------|--------| +| T-1 | Mallory Carlos referenced as nominee but has no website profile/booking path — review-to-site conversion gap | Roster Mapping | Medium | Tier 1 | Open | + +*Register appended via Layer 1a website capture (2026-08-05). R1-R6 are GBP rules — not applicable to website scan; website checks follow the qualitative review-data threats (rebranding residue, ghost staff, roster mapping).*