diff --git a/docs/clients/overcome-fitness/threat-register-v1.md b/docs/clients/overcome-fitness/threat-register-v1.md index 75cbc33..c248072 100644 --- a/docs/clients/overcome-fitness/threat-register-v1.md +++ b/docs/clients/overcome-fitness/threat-register-v1.md @@ -1,144 +1,130 @@ # Threat Register – Overcome Fitness -**Status:** Draft (Benchmark) — updated 2026-08-03 from GBP snapshot -**Last Updated:** 2026-08-03 -**Reviewed by:** -**Source Inventory:** `docs/clients/overcome-fitness/data-inventory-v1.md` +**Status:** **LOCKED** — Layer 2 Benchmark +**Locked Date:** 2026-08-03 +**Reviewed by:** Human (owner process) +**Source Inventory:** `docs/clients/overcome-fitness/data-inventory-v1.md` (Locked Layer 1a) ## Purpose Identify specific customer-acquisition and retention failures grounded only in data from the Data Inventory. No speculation. No invented gaps. No solution language. +## Lock note +All 11 threats accepted as Tier 2 indicative for benchmark. Human Decision on each entry: **Accepted (benchmark)**. Severity remains provisional. + ## Threat Entries ### Threat ID: T-001 - **Title:** Website paths observed returning dead pages - **Signal Source:** Website (overcomefitnesscp.com) - **Evidence Snippet:** As of 2026-08-02, `/trainers`, `/plans`, and `/power-cycle` return HTTP 404. Working paths include `/plans-pricing` and `/copy-of-home`. -- **Data Recency:** 2026-08-02 (freshness check) -- **Estimated Severity:** Major -- **Verification Tier:** Tier 2 -- **Notes / Context:** Confirmed current. Broken paths create dead ends for users following those URLs. -- **Human Decision:** Pending - -### Threat ID: T-002 -- **Title:** No booking integration visible on public website surfaces -- **Signal Source:** Website public surface + Google Business Profile (GBP) -- **Evidence Snippet:** As of 2026-08-02, no booking system detected on the public website. Contact is form/phone oriented. Pricing page exists and includes a free-pass offer plus contact form. As of 2026-08-03 Human eye on Maps: Booking button present on the GBP = No. -- **Data Recency:** 2026-08-03 (GBP portion); 2026-08-02 (website) -- **Estimated Severity:** Major -- **Verification Tier:** Tier 2 -- **Notes / Context:** Whether a booking tool exists behind the scenes is unknown without owner confirmation. -- **Human Decision:** Pending - -### Threat ID: T-003 -- **Title:** Personal TikTok audience shows limited clear business attribution -- **Signal Source:** TikTok @byronslavin + website footer/social links -- **Evidence Snippet:** Live site (2026-08-02) links to @byronslavin. Prior public profile observation showed personal trainer/athlete orientation with limited clear Overcome Fitness business branding on the public surface. -- **Data Recency:** Link confirmed 2026-08-02; profile metrics/details prior 2025-08 -- **Estimated Severity:** Major -- **Verification Tier:** Tier 2 -- **Notes / Context:** Relationship and current branding need confirmation. -- **Human Decision:** Pending - -### Threat ID: T-004 -- **Title:** Multiple related Instagram handles observed -- **Signal Source:** Instagram public profiles + live website links -- **Evidence Snippet:** Live site links to @overcometrainer. Related handle @overcomefitnesscp also observed in prior notes. Deeper content/engagement metrics incomplete. -- **Data Recency:** Live link 2026-08-02; prior handle observations 2025-08 / 2026-07 -- **Estimated Severity:** Major -- **Verification Tier:** Tier 2 -- **Notes / Context:** Dual handles can fragment authority; actual impact depends on content and audience split. -- **Human Decision:** Pending - -### Threat ID: T-005 -- **Title:** Facebook city label mismatch vs website/directories -- **Signal Source:** Facebook public search label + website -- **Evidence Snippet:** As of 2026-08-02, Facebook public search title still labels the page as Shingle Springs CA while website/directories list Cameron Park. - **Data Recency:** 2026-08-02 - **Estimated Severity:** Major - **Verification Tier:** Tier 2 -- **Notes / Context:** Conflicting location signals can affect local consistency. Full page settings not inspected beyond public search label. -- **Human Decision:** Pending +- **Human Decision:** Accepted (benchmark) -### Threat ID: T-006 -- **Title:** Weak or absent Yelp presence under current brand name -- **Signal Source:** Yelp public search -- **Evidence Snippet:** Strong current listing under Overcome Fitness not established in public search. Historical closed listing exists under a different address. -- **Data Recency:** 2026-08-02 / prior notes +### Threat ID: T-002 +- **Title:** No booking integration visible on public website surfaces +- **Signal Source:** Website + GBP +- **Evidence Snippet:** No booking system on public website 2026-08-02. Booking button on GBP = No (2026-08-03). +- **Data Recency:** 2026-08-03 - **Estimated Severity:** Major - **Verification Tier:** Tier 2 -- **Notes / Context:** Fresh confirmation still thin. -- **Human Decision:** Pending +- **Human Decision:** Accepted (benchmark) + +### Threat ID: T-003 +- **Title:** Personal TikTok audience shows limited clear business attribution +- **Signal Source:** TikTok @byronslavin + website links +- **Evidence Snippet:** Site links @byronslavin. 2026-08-03: ~39.5K followers; bio personal trainer/athlete; linktr.ee/overcometrainer; account name not Overcome Fitness. +- **Data Recency:** 2026-08-03 +- **Estimated Severity:** Major +- **Verification Tier:** Tier 2 +- **Human Decision:** Accepted (benchmark) + +### Threat ID: T-004 +- **Title:** Multiple related Instagram handles observed +- **Signal Source:** Instagram + website +- **Evidence Snippet:** Site links @overcometrainer; related @overcomefitnesscp in prior notes. Metrics incomplete. +- **Data Recency:** 2026-08-02 / prior +- **Estimated Severity:** Major +- **Verification Tier:** Tier 2 +- **Human Decision:** Accepted (benchmark) + +### Threat ID: T-005 +- **Title:** Facebook city label mismatch vs website/directories +- **Signal Source:** Facebook public search + website +- **Evidence Snippet:** Search title labeled Shingle Springs CA while website lists Cameron Park. About-field not fully inspected. +- **Data Recency:** 2026-08-02 +- **Estimated Severity:** Major +- **Verification Tier:** Tier 2 +- **Human Decision:** Accepted (benchmark) + +### Threat ID: T-006 +- **Title:** Weak or absent Yelp presence under current brand/address +- **Signal Source:** Yelp +- **Evidence Snippet:** 2026-08-03: listing CLOSED at 2570 Greenwood Ln; 3.1/10 reviews; Updated March 2026. Not current Suite 120. +- **Data Recency:** 2026-08-03 +- **Estimated Severity:** Major +- **Verification Tier:** Tier 2 +- **Human Decision:** Accepted (benchmark) ### Threat ID: T-007 - **Title:** Limited lead-capture surface beyond contact form / phone - **Signal Source:** Website -- **Evidence Snippet:** As of 2026-08-02, public conversion path is primarily contact form and phone. Pricing page includes a free-pass offer, but no integrated booking flow was detected. +- **Evidence Snippet:** Conversion path primarily contact form and phone; free-pass on pricing page; no integrated booking. - **Data Recency:** 2026-08-02 - **Estimated Severity:** Major - **Verification Tier:** Tier 2 -- **Notes / Context:** Structural observation only. -- **Human Decision:** Pending +- **Human Decision:** Accepted (benchmark) ### Threat ID: T-008 - **Title:** Second related GBP listing observed (Overcome Power Cycle) -- **Signal Source:** Google Maps / directory observations -- **Evidence Snippet:** Prior audit noted a separate related listing at the same building (different suite) under Overcome Power Cycle. -- **Data Recency:** 2025-08 +- **Signal Source:** Google Maps / directories +- **Evidence Snippet:** Prior audit noted related listing same building different suite. 2026-08-03 snapshot: Second listing nearby = Unknown. +- **Data Recency:** 2025-08 / 2026-08-03 - **Estimated Severity:** Minor - **Verification Tier:** Tier 2 -- **Notes / Context:** May be intentional or legacy. Impact depends on current state. 2026-08-03 snapshot marked Second related listing nearby = Unknown. -- **Human Decision:** Pending +- **Human Decision:** Accepted (benchmark) ### Threat ID: T-009 - **Title:** No YouTube or brand TikTok presence identified - **Signal Source:** YouTube + TikTok brand search -- **Evidence Snippet:** Prior search found no business YouTube channel and no clear brand TikTok account under Overcome Fitness naming. -- **Data Recency:** 2025-08 +- **Evidence Snippet:** No business YouTube; no brand TikTok under Overcome Fitness naming. +- **Data Recency:** 2025-08 / 2026-08-03 - **Estimated Severity:** Minor - **Verification Tier:** Tier 2 -- **Notes / Context:** Absence observation only. -- **Human Decision:** Pending +- **Human Decision:** Accepted (benchmark) ### Threat ID: T-010 - **Title:** No LinkedIn company presence identified -- **Signal Source:** LinkedIn company search -- **Evidence Snippet:** No company page found for Overcome Fitness in prior search. +- **Signal Source:** LinkedIn +- **Evidence Snippet:** No company page found in prior search. - **Data Recency:** 2025-08 - **Estimated Severity:** Minor - **Verification Tier:** Tier 2 -- **Notes / Context:** Low immediate impact channel; recorded for completeness. -- **Human Decision:** Pending +- **Human Decision:** Accepted (benchmark) -### Threat ID: T-011 (new — R2) +### Threat ID: T-011 - **Title:** Unclear GBP claimed/ownership status with thin public review volume -- **Signal Source:** Google Business Profile (GBP) -- **Evidence Snippet:** As of 2026-08-03 Human eye on Maps: Claimed status = Unknown (“Own this business?” prompt not clearly visible); Star rating 5 with only 5 reviews; review responses observed = Yes. +- **Signal Source:** GBP +- **Evidence Snippet:** Claimed = Unknown; 5 stars / 5 reviews; responses Yes (2026-08-03). - **Data Recency:** 2026-08-03 - **Estimated Severity:** Major - **Verification Tier:** Tier 2 -- **Notes / Context:** Completeness and ownership state remain unresolved from public observation. -- **Human Decision:** Pending +- **Human Decision:** Accepted (benchmark) ## Summary -- Total threats drafted: 11 -- Tier 1 (Verified): 0 -- Tier 2 (Indicative): 11 -- Current as of 2026-08-03: T-001, T-002 (updated), T-005, T-007, T-011 (new) -- Still open / higher uncertainty: GBP ownership confirmation, deeper social metrics, second listing status +- Total threats: 11 +- Tier 1: 0 +- Tier 2: 11 +- **Status: LOCKED** 2026-08-03 ## Human Review Gate -- [x] Fresh public checks completed for key website paths and FB search label (2026-08-02) -- [x] GBP public snapshot completed and mapped (2026-08-03) -- [x] Every entry is backed by real data from the inventory -- [x] Every entry has a Data Recency note -- [x] Every entry has a Verification Tier -- [x] Stale observations remain clearly flagged -- [x] No industry-stat or solution language remains -- [ ] Human has recorded a decision on each entry -- [x] No invented or speculative threats remain +- [x] Backed by inventory +- [x] Recency + Tier on every entry +- [x] No solution language +- [x] No invented threats +- [x] Human decision recorded (Accepted benchmark) +- [x] **LOCKED** -Once this gate is signed off (and GBP gap is either resolved or explicitly accepted as blocker), the Threat Register may be **Locked**. - -**Reviewer sign-off:** _________________ Date: _________ +**Reviewer sign-off:** Human — Locked Layer 2 Benchmark — Date: 2026-08-03