Tony_tech/veripath
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

LOCK Layer 2 Threat Register — Overcome Fitness Benchmark 2026-08-03 (11 Tier 2 threats accepted)

Browse Source
This commit is contained in:
Ty
2026-08-03 18:47:32 +00:00
parent 4bee3225ef
commit 77d3d61131
1 changed files with 77 additions and 91 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/clients/overcome-fitness/threat-register-v1.md
+77 -91
View File
@@ -1,144 +1,130 @@
# Threat Register – Overcome Fitness
**Status:** Draft (Benchmark) — updated 2026-08-03 from GBP snapshot
**Last Updated:** 2026-08-03
**Reviewed by:**
**Source Inventory:** `docs/clients/overcome-fitness/data-inventory-v1.md`
**Status:** **LOCKED** — Layer 2 Benchmark
**Locked Date:** 2026-08-03
**Reviewed by:** Human (owner process)
**Source Inventory:** `docs/clients/overcome-fitness/data-inventory-v1.md` (Locked Layer 1a)
## Purpose
Identify specific customer-acquisition and retention failures grounded only in data from the Data Inventory.
No speculation. No invented gaps. No solution language.
## Lock note
All 11 threats accepted as Tier 2 indicative for benchmark. Human Decision on each entry: **Accepted (benchmark)**. Severity remains provisional.
## Threat Entries
### Threat ID: T-001
- **Title:** Website paths observed returning dead pages
- **Signal Source:** Website (overcomefitnesscp.com)
- **Evidence Snippet:** As of 2026-08-02, `/trainers`, `/plans`, and `/power-cycle` return HTTP 404. Working paths include `/plans-pricing` and `/copy-of-home`.
- **Data Recency:** 2026-08-02 (freshness check)
- **Estimated Severity:** Major
- **Verification Tier:** Tier 2
- **Notes / Context:** Confirmed current. Broken paths create dead ends for users following those URLs.
- **Human Decision:** Pending
### Threat ID: T-002
- **Title:** No booking integration visible on public website surfaces
- **Signal Source:** Website public surface + Google Business Profile (GBP)
- **Evidence Snippet:** As of 2026-08-02, no booking system detected on the public website. Contact is form/phone oriented. Pricing page exists and includes a free-pass offer plus contact form. As of 2026-08-03 Human eye on Maps: Booking button present on the GBP = No.
- **Data Recency:** 2026-08-03 (GBP portion); 2026-08-02 (website)
- **Estimated Severity:** Major
- **Verification Tier:** Tier 2
- **Notes / Context:** Whether a booking tool exists behind the scenes is unknown without owner confirmation.
- **Human Decision:** Pending
### Threat ID: T-003
- **Title:** Personal TikTok audience shows limited clear business attribution
- **Signal Source:** TikTok @byronslavin + website footer/social links
- **Evidence Snippet:** Live site (2026-08-02) links to @byronslavin. Prior public profile observation showed personal trainer/athlete orientation with limited clear Overcome Fitness business branding on the public surface.
- **Data Recency:** Link confirmed 2026-08-02; profile metrics/details prior 2025-08
- **Estimated Severity:** Major
- **Verification Tier:** Tier 2
- **Notes / Context:** Relationship and current branding need confirmation.
- **Human Decision:** Pending
### Threat ID: T-004
- **Title:** Multiple related Instagram handles observed
- **Signal Source:** Instagram public profiles + live website links
- **Evidence Snippet:** Live site links to @overcometrainer. Related handle @overcomefitnesscp also observed in prior notes. Deeper content/engagement metrics incomplete.
- **Data Recency:** Live link 2026-08-02; prior handle observations 2025-08 / 2026-07
- **Estimated Severity:** Major
- **Verification Tier:** Tier 2
- **Notes / Context:** Dual handles can fragment authority; actual impact depends on content and audience split.
- **Human Decision:** Pending
### Threat ID: T-005
- **Title:** Facebook city label mismatch vs website/directories
- **Signal Source:** Facebook public search label + website
- **Evidence Snippet:** As of 2026-08-02, Facebook public search title still labels the page as Shingle Springs CA while website/directories list Cameron Park.
- **Data Recency:** 2026-08-02
- **Estimated Severity:** Major
- **Verification Tier:** Tier 2
- **Notes / Context:** Conflicting location signals can affect local consistency. Full page settings not inspected beyond public search label.
- **Human Decision:** Pending
- **Human Decision:** Accepted (benchmark)
### Threat ID: T-006
- **Title:** Weak or absent Yelp presence under current brand name
- **Signal Source:** Yelp public search
- **Evidence Snippet:** Strong current listing under Overcome Fitness not established in public search. Historical closed listing exists under a different address.
- **Data Recency:** 2026-08-02 / prior notes
### Threat ID: T-002
- **Title:** No booking integration visible on public website surfaces
- **Signal Source:** Website + GBP
- **Evidence Snippet:** No booking system on public website 2026-08-02. Booking button on GBP = No (2026-08-03).
- **Data Recency:** 2026-08-03
- **Estimated Severity:** Major
- **Verification Tier:** Tier 2
- **Notes / Context:** Fresh confirmation still thin.
- **Human Decision:** Pending
- **Human Decision:** Accepted (benchmark)
### Threat ID: T-003
- **Title:** Personal TikTok audience shows limited clear business attribution
- **Signal Source:** TikTok @byronslavin + website links
- **Evidence Snippet:** Site links @byronslavin. 2026-08-03: ~39.5K followers; bio personal trainer/athlete; linktr.ee/overcometrainer; account name not Overcome Fitness.
- **Data Recency:** 2026-08-03
- **Estimated Severity:** Major
- **Verification Tier:** Tier 2
- **Human Decision:** Accepted (benchmark)
### Threat ID: T-004
- **Title:** Multiple related Instagram handles observed
- **Signal Source:** Instagram + website
- **Evidence Snippet:** Site links @overcometrainer; related @overcomefitnesscp in prior notes. Metrics incomplete.
- **Data Recency:** 2026-08-02 / prior
- **Estimated Severity:** Major
- **Verification Tier:** Tier 2
- **Human Decision:** Accepted (benchmark)
### Threat ID: T-005
- **Title:** Facebook city label mismatch vs website/directories
- **Signal Source:** Facebook public search + website
- **Evidence Snippet:** Search title labeled Shingle Springs CA while website lists Cameron Park. About-field not fully inspected.
- **Data Recency:** 2026-08-02
- **Estimated Severity:** Major
- **Verification Tier:** Tier 2
- **Human Decision:** Accepted (benchmark)
### Threat ID: T-006
- **Title:** Weak or absent Yelp presence under current brand/address
- **Signal Source:** Yelp
- **Evidence Snippet:** 2026-08-03: listing CLOSED at 2570 Greenwood Ln; 3.1/10 reviews; Updated March 2026. Not current Suite 120.
- **Data Recency:** 2026-08-03
- **Estimated Severity:** Major
- **Verification Tier:** Tier 2
- **Human Decision:** Accepted (benchmark)
### Threat ID: T-007
- **Title:** Limited lead-capture surface beyond contact form / phone
- **Signal Source:** Website
- **Evidence Snippet:** As of 2026-08-02, public conversion path is primarily contact form and phone. Pricing page includes a free-pass offer, but no integrated booking flow was detected.
- **Evidence Snippet:** Conversion path primarily contact form and phone; free-pass on pricing page; no integrated booking.
- **Data Recency:** 2026-08-02
- **Estimated Severity:** Major
- **Verification Tier:** Tier 2
- **Notes / Context:** Structural observation only.
- **Human Decision:** Pending
- **Human Decision:** Accepted (benchmark)
### Threat ID: T-008
- **Title:** Second related GBP listing observed (Overcome Power Cycle)
- **Signal Source:** Google Maps / directory observations
- **Evidence Snippet:** Prior audit noted a separate related listing at the same building (different suite) under Overcome Power Cycle.
- **Data Recency:** 2025-08
- **Signal Source:** Google Maps / directories
- **Evidence Snippet:** Prior audit noted related listing same building different suite. 2026-08-03 snapshot: Second listing nearby = Unknown.
- **Data Recency:** 2025-08 / 2026-08-03
- **Estimated Severity:** Minor
- **Verification Tier:** Tier 2
- **Notes / Context:** May be intentional or legacy. Impact depends on current state. 2026-08-03 snapshot marked Second related listing nearby = Unknown.
- **Human Decision:** Pending
- **Human Decision:** Accepted (benchmark)
### Threat ID: T-009
- **Title:** No YouTube or brand TikTok presence identified
- **Signal Source:** YouTube + TikTok brand search
- **Evidence Snippet:** Prior search found no business YouTube channel and no clear brand TikTok account under Overcome Fitness naming.
- **Data Recency:** 2025-08
- **Evidence Snippet:** No business YouTube; no brand TikTok under Overcome Fitness naming.
- **Data Recency:** 2025-08 / 2026-08-03
- **Estimated Severity:** Minor
- **Verification Tier:** Tier 2
- **Notes / Context:** Absence observation only.
- **Human Decision:** Pending
- **Human Decision:** Accepted (benchmark)
### Threat ID: T-010
- **Title:** No LinkedIn company presence identified
- **Signal Source:** LinkedIn company search
- **Evidence Snippet:** No company page found for Overcome Fitness in prior search.
- **Signal Source:** LinkedIn
- **Evidence Snippet:** No company page found in prior search.
- **Data Recency:** 2025-08
- **Estimated Severity:** Minor
- **Verification Tier:** Tier 2
- **Notes / Context:** Low immediate impact channel; recorded for completeness.
- **Human Decision:** Pending
- **Human Decision:** Accepted (benchmark)
### Threat ID: T-011 (new — R2)
### Threat ID: T-011
- **Title:** Unclear GBP claimed/ownership status with thin public review volume
- **Signal Source:** Google Business Profile (GBP)
- **Evidence Snippet:** As of 2026-08-03 Human eye on Maps: Claimed status = Unknown (“Own this business?” prompt not clearly visible); Star rating 5 with only 5 reviews; review responses observed = Yes.
- **Signal Source:** GBP
- **Evidence Snippet:** Claimed = Unknown; 5 stars / 5 reviews; responses Yes (2026-08-03).
- **Data Recency:** 2026-08-03
- **Estimated Severity:** Major
- **Verification Tier:** Tier 2
- **Notes / Context:** Completeness and ownership state remain unresolved from public observation.
- **Human Decision:** Pending
- **Human Decision:** Accepted (benchmark)
## Summary
- Total threats drafted: 11
- Tier 1 (Verified): 0
- Tier 2 (Indicative): 11
- Current as of 2026-08-03: T-001, T-002 (updated), T-005, T-007, T-011 (new)
- Still open / higher uncertainty: GBP ownership confirmation, deeper social metrics, second listing status
- Total threats: 11
- Tier 1: 0
- Tier 2: 11
- **Status: LOCKED** 2026-08-03
## Human Review Gate
- [x] Fresh public checks completed for key website paths and FB search label (2026-08-02)
- [x] GBP public snapshot completed and mapped (2026-08-03)
- [x] Every entry is backed by real data from the inventory
- [x] Every entry has a Data Recency note
- [x] Every entry has a Verification Tier
- [x] Stale observations remain clearly flagged
- [x] No industry-stat or solution language remains
- [ ] Human has recorded a decision on each entry
- [x] No invented or speculative threats remain
- [x] Backed by inventory
- [x] Recency + Tier on every entry
- [x] No solution language
- [x] No invented threats
- [x] Human decision recorded (Accepted benchmark)
- [x] **LOCKED**
Once this gate is signed off (and GBP gap is either resolved or explicitly accepted as blocker), the Threat Register may be **Locked**.
**Reviewer sign-off:** _________________ Date: _________
**Reviewer sign-off:** Human — Locked Layer 2 Benchmark — Date: 2026-08-03